Commits

Breadcrumbs

History for

on20fe22c

User selector

All users

All time

Commit History

Commits on Feb 24, 2022

• Release preparation for version 2.8.2

  

  github-actions[bot]

  committed
  20fe22c

  Copy full SHA for 20fe22c

Commits on Feb 23, 2022

• Merge pull request #8185 from erik-krogh/amdImp

  Show description for e13b2df
  erik-krogh

  authored
  e13b2df

  Copy full SHA for e13b2df

• Merge pull request #8150 from asgerf/js/prep-sharing-api-graph-mad

  Show description for 7d55771
  codeql-ci

  authored
  7d55771

  Copy full SHA for 7d55771

• Merge pull request #8186 from asgerf/js/request-forgery-docs-followup

  Show description for 62ee8fc
  codeql-ci

  authored
  62ee8fc

  Copy full SHA for 62ee8fc

• Merge pull request #8014 from kaeluka/js/functionality-from-untrusted-source

  Show description for a664e02
  

  Stephan Brandauer

  authored
  a664e02

  Copy full SHA for a664e02

• apply docreview feedback

  

  Stephan Brandauer

  committed
  1ed71e1

  Copy full SHA for 1ed71e1

• Merge pull request #8171 from kaeluka/js/update-atm-query-docs-for-nosql-sql-injection

  Show description for 517d696
  

  Stephan Brandauer

  authored
  517d696

  Copy full SHA for 517d696

• JS: Minor fixup in the client-side request forgery qhelp

  asgerf

  committed
  22ba43f

  Copy full SHA for 22ba43f

• recognize modules imported by AMD imports as library inputs

  erik-krogh

  committed
  2032126

  Copy full SHA for 2032126

• Merge pull request #8054 from asgerf/js/split-request-forgery

  Show description for c17d8b1
  

  Stephan Brandauer

  authored
  c17d8b1

  Copy full SHA for c17d8b1

• Merge pull request #8168 from github/esbena/hapi-reflected-xss

  Show description for 58e0d54
  esbena

  authored
  58e0d54

  Copy full SHA for 58e0d54

Commits on Feb 22, 2022

• Merge pull request #8165 from erik-krogh/protoWrite

  Show description for 73f2e89
  erik-krogh

  authored
  73f2e89

  Copy full SHA for 73f2e89

• Merge pull request #8157 from erik-krogh/lodash-clone

  Show description for b6b9306
  erik-krogh

  authored
  b6b9306

  Copy full SHA for b6b9306

• Merge pull request #8143 from erik-krogh/pred-ql-style

  Show description for c487bb7
  erik-krogh

  authored
  c487bb7

  Copy full SHA for c487bb7

• update ATM NosqlInjection and SqlInjection query docs

  

  Stephan Brandauer

  committed
  6a9186c

  Copy full SHA for 6a9186c

• model hapi handler returns as reflected-xss sinks

  esbena

  committed
  2c527f7

  Copy full SHA for 2c527f7

• support more property writes in js/prototype-pollution-utility, and generalize ObjectDefinePropertyAsPropWrite

  erik-krogh

  committed
  517e17d

  Copy full SHA for 517e17d

• Merge pull request #8151 from github/henrymercer/separate-atm-model-pack

  henrymercer

  authored
  4f7604f

  Copy full SHA for 4f7604f

• CWE 830 polish error messages

  

  Stephan Brandauer

  committed
  2278e7f

  Copy full SHA for 2278e7f

• CWE-830 add support for setting attributes via setAttribute method

  

  Stephan Brandauer

  committed
  8233039

  Copy full SHA for 8233039

• CWE 830 test where both branches in a ternary are unsafe

  

  Stephan Brandauer

  committed
  d80cd1a

  Copy full SHA for d80cd1a

• rewrite docs, improve error messages, etc

  

  Stephan Brandauer

  committed
  2934aa1

  Copy full SHA for 2934aa1

• stylistic improvements after review

  

  Stephan Brandauer

  committed
  d2335b6

  Copy full SHA for d2335b6

• polish qhelp for CWE-830 and add test file

  

  Stephan Brandauer

  committed
  9aec443

  Copy full SHA for 9aec443

• remove illegal chars from comments

  

  Stephan Brandauer

  committed
  44d8656

  Copy full SHA for 44d8656

• replace taint tracking by type tracking and merge remaining queries for CWE-830

  

  Stephan Brandauer

  committed
  fd77e27

  Copy full SHA for fd77e27

• improve error message in CWE-830

  

  Stephan Brandauer

  committed
  8cafa6d

  Copy full SHA for 8cafa6d

• always require integrity checking for certain CDNs

  

  Stephan Brandauer

  committed
  780fa97

  Copy full SHA for 780fa97

• rename tests for CW-830 to clarify responsibilities

  

  Stephan Brandauer

  committed
  83764df

  Copy full SHA for 83764df

• JS: query to find dynamic creations of DOM elements that use untrusted sources

  

  Stephan Brandauer

  committed
  8d397fe

  Copy full SHA for 8d397fe

• permit http urls to 127.0.0.1 and others

  

  Stephan Brandauer

  committed
  b35c709

  Copy full SHA for b35c709

• add CWE 830 link to references

  

  Stephan Brandauer

  committed
  dd2b779

  Copy full SHA for dd2b779

• add changenotes for functionality from untrusted source query

  

  Stephan Brandauer

  committed
  b170422

  Copy full SHA for b170422

• JS: Functionality from untrusted sources query (CWE-830)

  

  Stephan Brandauer

  committed
  6722c17

  Copy full SHA for 6722c17

• JS: Factor out more JS-specific code

  asgerf

  committed
  1be47db

  Copy full SHA for 1be47db