Commits

Breadcrumbs

History for

on11f35a5

User selector

All users

All time

Commit History

Commits on Jan 21, 2021

• Update javascript/ql/src/semmle/javascript/security/performance/ReDoSUtil.qll

  Show description for 11f35a5
  

  erik-krogh

  and

  esbena

  authored
  11f35a5

  Copy full SHA for 11f35a5

• skip analyzing regular expressions in minified files for ReDoS

  erik-krogh

  committed
  62746bb

  Copy full SHA for 62746bb

• Merge pull request #4996 from esbena/js/nodejs-client-request-event-emitter

  Show description for d0b70d1
  codeql-ci

  authored
  d0b70d1

  Copy full SHA for d0b70d1

• JS: add docstring with source examples

  esbena

  committed
  cb25f2a

  Copy full SHA for cb25f2a

• Merge pull request #4986 from erik-krogh/logInf

  Show description for b83c949
  codeql-ci

  authored
  b83c949

  Copy full SHA for b83c949

• JS: recognize event emitters in nodejs client requests

  esbena

  committed
  1c100bb

  Copy full SHA for 1c100bb

• add change note

  erik-krogh

  committed
  a9a901d

  Copy full SHA for a9a901d

• rename to `AnalyzedCompoundNumericAssignExpr`

  erik-krogh

  committed
  dafec3c

  Copy full SHA for dafec3c

• Merge pull request #4942 from esbena/js/reintroduce-resource-exhaustion

  Show description for 30015ee
  codeql-ci

  authored
  30015ee

  Copy full SHA for 30015ee

• JS: move js/resource-exhaustion to experimental

  esbena

  committed
  b90dd89

  Copy full SHA for b90dd89

Commits on Jan 20, 2021

• add test for top-level closure modules - and simplify

  erik-krogh

  committed
  a44aefa

  Copy full SHA for a44aefa

• fix that type inference assumed every compound-assignment have type number

  erik-krogh

  committed
  2e024c3

  Copy full SHA for 2e024c3

Commits on Jan 19, 2021

• add support for unnamed/default exports in PackageExports.qll

  erik-krogh

  committed
  fbfbe70

  Copy full SHA for fbfbe70

• Merge pull request #4969 from asgerf/js/angular-dom-santizier-from-core

  Show description for bdfb810
  codeql-ci

  authored
  bdfb810

  Copy full SHA for bdfb810

• Merge pull request #4946 from erik-krogh/libRedos

  Show description for 2a8a283
  erik-krogh

  authored
  2a8a283

  Copy full SHA for 2a8a283

Commits on Jan 18, 2021

• remove false positive due to "\n" not being in the `relevant` relation

  erik-krogh

  committed
  01900d7

  Copy full SHA for 01900d7

• Merge pull request #4928 from esbena/js/rewrite-multi-sanitization

  Show description for fc2fe6c
  codeql-ci

  authored
  fc2fe6c

  Copy full SHA for fc2fe6c

• JS: Add test for new sink

  asgerf

  committed
  3db6069

  Copy full SHA for 3db6069

• JS: Shift line numbers in test

  asgerf

  committed
  2752b4b

  Copy full SHA for 2752b4b

• JS: Recognize DomSanitizer from @angular/core

  asgerf

  committed
  ff1d0cc

  Copy full SHA for ff1d0cc

Commits on Jan 15, 2021

• update expected output, and update PackageExports test

  erik-krogh

  committed
  401e516

  Copy full SHA for 401e516

• make getTopmostPackageJSON public again, and update PackageExports test

  erik-krogh

  committed
  26783b6

  Copy full SHA for 26783b6

• limit the number of characters produced by `getAThreewayIntersect`

  erik-krogh

  committed
  1506ac0

  Copy full SHA for 1506ac0

• specialize the `getAValueExportedBy` predicate to only topmost `package.json`s

  erik-krogh

  committed
  0117a0f

  Copy full SHA for 0117a0f

• changes based on review

  Show description for 0c9d46a
  

  erik-krogh

  and

  esbena

  committed
  0c9d46a

  Copy full SHA for 0c9d46a

Commits on Jan 14, 2021

• change-note

  erik-krogh

  committed
  c106b09

  Copy full SHA for c106b09

• improve alert message for js/polynomial-redos

  erik-krogh

  committed
  c5595f4

  Copy full SHA for c5595f4

• select the shortest possible reason

  erik-krogh

  committed
  86e33d9

  Copy full SHA for 86e33d9

• refactor `PolynomialBackTrackingTerm`, to allow getting the pump string and the prefix-message

  erik-krogh

  committed
  03d8aeb

  Copy full SHA for 03d8aeb

• highlight the use of the regular expression, instead of the sink for user input

  erik-krogh

  committed
  a520a51

  Copy full SHA for a520a51

• adjust `description` to not mention user-provided values

  erik-krogh

  committed
  e8ea720

  Copy full SHA for e8ea720

• Merge pull request #4751 from erik-krogh/logInjection

  Show description for 4229f55
  codeql-ci

  authored
  4229f55

  Copy full SHA for 4229f55

Commits on Jan 13, 2021

• changes based on doc review

  erik-krogh

  committed
  c98dacf

  Copy full SHA for c98dacf

• dont sanitize global replacements where the regexp is a char class

  erik-krogh

  committed
  d71adff

  Copy full SHA for d71adff

Commits on Jan 12, 2021

• refactor copy-pasted code into `getAnLibraryInputParameter`

  erik-krogh

  committed
  0a17b04

  Copy full SHA for 0a17b04