Commits

Breadcrumbs

History for

on25f95d9

User selector

All users

All time

Commit History

Commits on Feb 12, 2019

• JavaScript: Be more conservative about templates in `AmbiguousIdAttribute`.

  Show description for 25f95d9
  

  Max Schaefer

  committed
  25f95d9

  Copy full SHA for 25f95d9

• Merge pull request #910 from xiemaisi/js/regexp-taint

  Show description for c133362
  semmle-qlci

  authored
  c133362

  Copy full SHA for c133362

• Merge pull request #920 from xiemaisi/js/field-as-prop-write

  Show description for ac3f413
  semmle-qlci

  authored
  ac3f413

  Copy full SHA for ac3f413

Commits on Feb 11, 2019

• Merge pull request #915 from asger-semmle/closure-uri-methods

  Show description for 10b0025
  semmle-qlci

  authored
  10b0025

  Copy full SHA for 10b0025

• JavaScript: Restrict `InstanceFieldAsPropWrite` to fields with initializers.

  

  Max Schaefer

  committed
  10ef945

  Copy full SHA for 10ef945

Commits on Feb 8, 2019

• Merge pull request #909 from xiemaisi/js/improve-incomplete-sanitization-alerts

  Show description for 986afa1
  semmle-qlci

  authored
  986afa1

  Copy full SHA for 986afa1

• Merge pull request #908 from xiemaisi/js/enable-ms-queries

  Show description for 232d81a
  semmle-qlci

  authored
  232d81a

  Copy full SHA for 232d81a

• JS: model URI and XHR methods from closure library

  asger-semmle

  committed
  f6e0ccf

  Copy full SHA for f6e0ccf

• JS: shift line numbers in RequestForgery test

  asger-semmle

  committed
  fd2e9f1

  Copy full SHA for fd2e9f1

• Merge pull request #891 from xiemaisi/js/simplify-sensitive-actions

  Show description for 937049e
  semmle-qlci

  authored
  937049e

  Copy full SHA for 937049e

• Merge pull request #900 from esben-semmle/js/defuse-default

  Show description for 7e298cf
  semmle-qlci

  authored
  7e298cf

  Copy full SHA for 7e298cf

• Merge pull request #906 from asger-semmle/q-library

  Show description for a48594a
  semmle-qlci

  authored
  a48594a

  Copy full SHA for a48594a

• JS: make Closure::moduleImport handle member access.

  asger-semmle

  committed
  bfe88e9

  Copy full SHA for bfe88e9

• JavaScript: Track taint through `RegExp.prototype.replace`.

  

  Max Schaefer

  committed
  b314c54

  Copy full SHA for b314c54

• JavaScript: Treat regexp replacements of HTML metacharacters as sanitizers for XSS queries.

  

  Max Schaefer

  committed
  25d06ad

  Copy full SHA for 25d06ad

• JavaScript: Introduce shared library for modelling XSS-relevant concepts.

  Show description for 18c23ec
  

  Max Schaefer

  committed
  18c23ec

  Copy full SHA for 18c23ec

• JavaScript: Improve alert location and message for `IncompleteSanitization`.

  Show description for 3e26bc6
  

  Max Schaefer

  committed
  3e26bc6

  Copy full SHA for 3e26bc6

• JavaScript: Update qhelp example for `CleartextStorage`.

  

  Max Schaefer

  committed
  aebc5bc

  Copy full SHA for aebc5bc

• JavaScript: Add classification of sensitive expressions.

  Show description for 0be81da
  

  Max Schaefer

  committed
  0be81da

  Copy full SHA for 0be81da

• JavaScript: Update expected output for `ExtractSinkSummaries` query.

  

  Max Schaefer

  committed
  6389f32

  Copy full SHA for 6389f32

• JavaScript: Clean up classification of sensitive strings.

  

  Max Schaefer

  committed
  326b93b

  Copy full SHA for 326b93b

Commits on Feb 7, 2019

• TS: fix import of q.d.ts in test case

  asger-semmle

  committed
  c232104

  Copy full SHA for c232104

• JS: add stats for new relations

  asger-semmle

  committed
  6cc30fe

  Copy full SHA for 6cc30fe

• Revert "Merge pull request #897 from Semmle/revert-817-closure-modules"

  Show description for e4b230b
  asger-semmle

  committed
  e4b230b

  Copy full SHA for e4b230b

• JS: move default parameter values to the DefUse graph

  

  Esben Sparre Andreasen

  committed
  5ad8336

  Copy full SHA for 5ad8336

• JS: add test for js/useless-comparison-test

  

  Esben Sparre Andreasen

  committed
  65530c5

  Copy full SHA for 65530c5

• JS: add test for js/trivial-conditional

  

  Esben Sparre Andreasen

  committed
  55fd948

  Copy full SHA for 55fd948

• JS: support default destructuring values in the dataflow graph

  

  Esben Sparre Andreasen

  committed
  f956e57

  Copy full SHA for f956e57

• JS: exclude direct flow from the RHS in a destructuring assignment

  

  Esben Sparre Andreasen

  committed
  687b7f0

  Copy full SHA for 687b7f0

• JS: add defuse+dataflow tests for destructuring and default values

  

  Esben Sparre Andreasen

  committed
  f333419

  Copy full SHA for f333419

• JavaScript: Assign `FileAccessToHttp` and `HttpToFileAccess` a precision.

  Show description for 447a1db
  

  Max Schaefer

  committed
  447a1db

  Copy full SHA for 447a1db

• Merge pull request #880 from esben-semmle/js/better-alert-message-1

  Show description for b4b37b3
  semmle-qlci

  authored
  b4b37b3

  Copy full SHA for b4b37b3

• Merge pull request #828 from esben-semmle/js/vue-support-1

  Show description for 812cba0
  

  Max Schaefer

  authored
  812cba0

  Copy full SHA for 812cba0

Commits on Feb 6, 2019

• Revert "JS: Add support for Closure modules"

  asger-semmle

  authored
  e46e2b2

  Copy full SHA for e46e2b2

• Merge pull request #887 from asger-semmle/jsdoc-accessors

  Show description for b8be66e
  semmle-qlci

  authored
  b8be66e

  Copy full SHA for b8be66e