Commits

Breadcrumbs

History for

on388dd87

User selector

All users

All time

Commit History

Commits on Jan 6, 2025

• JS: Restrict AP length in prototype-polluting function

  asgerf

  committed
  0cdda87

  Copy full SHA for 0cdda87

Commits on Dec 19, 2024

• Merge branch 'main' into js/shared-dataflow-merge-main

  asgerf

  committed
  3acd481

  Copy full SHA for 3acd481

Commits on Dec 16, 2024

• JS: Remove reference to deprecated step relation that's empty anyway

  asgerf

  committed
  947b785

  Copy full SHA for 947b785

• JS: Mass rename to node1,state1,node2,state2 naming convention

  asgerf

  committed
  079294e

  Copy full SHA for 079294e

• JS: Migrate PrototypePollutingFunction

  asgerf

  committed
  73af3f3

  Copy full SHA for 73af3f3

• JS: Migrate CorsPermissiveConfiguration

  asgerf

  committed
  ebe596f

  Copy full SHA for ebe596f

• JS: Migrate an experimental CodeInjection query

  asgerf

  committed
  d83ddfa

  Copy full SHA for d83ddfa

• JS: Rename an experimental query

  Show description for a398599
  asgerf

  committed
  a398599

  Copy full SHA for a398599

Commits on Dec 13, 2024

• JS: Follow naming convention in InsecureModuleFlow module

  asgerf

  committed
  4e25036

  Copy full SHA for 4e25036

Commits on Dec 4, 2024

• Post-release preparation for codeql-cli-2.20.0

  

  github-actions[bot]

  committed
  cf71a15

  Copy full SHA for cf71a15

• Release preparation for version 2.20.0

  

  github-actions[bot]

  committed
  96564b7

  Copy full SHA for 96564b7

• Merge branch 'main' into henrymercer/merge-back-rc-3.16

  henrymercer

  committed
  963f084

  Copy full SHA for 963f084

Commits on Dec 3, 2024

• JS: Remove use of SanitizerGuardNode in experimental SSRF query

  Show description for b346198
  asgerf

  committed
  b346198

  Copy full SHA for b346198

• JS: Remove use of MakeLegacyBarrierGuard in experimental SSRF

  asgerf

  committed
  a574ff1

  Copy full SHA for a574ff1

• Remove unsupported features from PoI

  asgerf

  committed
  75ab485

  Copy full SHA for 75ab485

• JS: Update a reference to AdditionalSanitizerGuardNode

  Show description for 04a3a67
  asgerf

  committed
  04a3a67

  Copy full SHA for 04a3a67

• JS: Port experimental DecompressionBombs to ConfigSig

  asgerf

  committed
  834d35b

  Copy full SHA for 834d35b

• JS: Port experimental CorsPermissiveConfiguration to ConfigSig

  Show description for 871bc3b
  asgerf

  committed
  871bc3b

  Copy full SHA for 871bc3b

• JS: Port experimental decodeJwtWithoutVerificationLocalSource

  asgerf

  committed
  f5a6485

  Copy full SHA for f5a6485

• JS: Port experimental jwtDecodeWithoutVerification to ConfigSig

  asgerf

  committed
  72e5226

  Copy full SHA for 72e5226

• JS: Port experimental EnvValueInjection to ConfigSig

  asgerf

  committed
  7e162f5

  Copy full SHA for 7e162f5

• JS: Port experimental EnvValueAndKeyInjection to ConfigSig

  asgerf

  committed
  4f83907

  Copy full SHA for 4f83907

• JS: Port an experimental CodeInjection variant to ConfigSig

  asgerf

  committed
  8887ca1

  Copy full SHA for 8887ca1

Commits on Nov 29, 2024

• JS: follow proper code standards for get predicates

  Show description for 9d4e737
  

  Napalys

  and

  asgerf

  committed
  9d4e737

  Copy full SHA for 9d4e737

• JS: fixed bad alert messages when it came to incomplete sanitization for new RegExp objects

  Napalys

  committed
  3171f38

  Copy full SHA for 3171f38

Commits on Nov 28, 2024

• JS: imcomplete sanization now handles properly maybe global

  Napalys

  committed
  98fd977

  Copy full SHA for 98fd977

• JS: incomplete sanitization now also works with RegExp objects

  Napalys

  committed
  1ae1748

  Copy full SHA for 1ae1748

Commits on Nov 25, 2024

• Update javascript/ql/src/Security/CWE-178/CaseSensitiveMiddlewarePath.ql

  Show description for d6372ae
  

  Napalys

  and

  erik-krogh

  committed
  d6372ae

  Copy full SHA for d6372ae

• JS: previously js/case-sensitive-middleware-path was not taking into consideration unknown flags

  Napalys

  committed
  e38b63e

  Copy full SHA for e38b63e

Commits on Nov 21, 2024

• Revert "Revert "Post-release preparation for codeql-cli-2.19.4""

  alexet

  authored
  c0474c4

  Copy full SHA for c0474c4

• Revert "Post-release preparation for codeql-cli-2.19.4"

  alexet

  authored
  4effe9e

  Copy full SHA for 4effe9e

Commits on Nov 20, 2024

• Merge branch 'main' into js/shared-dataflow-merge-main

  asgerf

  committed
  d52bc97

  Copy full SHA for d52bc97

Commits on Nov 19, 2024

• Post-release preparation for codeql-cli-2.19.4

  

  github-actions[bot]

  committed
  3909df7

  Copy full SHA for 3909df7

• Release preparation for version 2.19.4

  

  github-actions[bot]

  committed
  9783a11

  Copy full SHA for 9783a11

Commits on Nov 15, 2024

• JS: Add: Use of returnless function support for findLast and findLastIndex

  Napalys

  committed
  a28fc8e

  Copy full SHA for a28fc8e