Commits

Breadcrumbs

History for

on50ad8a4

User selector

All users

All time

Commit History

Commits on Feb 20, 2019

• update link in vue.qll

  

  james

  committed
  50ad8a4

  Copy full SHA for 50ad8a4

• Merge pull request #933 from xiemaisi/js/createContextualFragment

  Show description for f5e419e
  semmle-qlci

  authored
  f5e419e

  Copy full SHA for f5e419e

Commits on Feb 13, 2019

• Merge pull request #932 from asger-semmle/cookbook-prepare

  Show description for 92a6e7e
  semmle-qlci

  authored
  92a6e7e

  Copy full SHA for 92a6e7e

• Merge pull request #921 from asger-semmle/class-node-absval

  Show description for 5b2df06
  

  Max Schaefer

  authored
  5b2df06

  Copy full SHA for 5b2df06

• Merge pull request #927 from xiemaisi/js/ambiguous-id-attr-templates

  Show description for c422ade
  semmle-qlci

  authored
  c422ade

  Copy full SHA for c422ade

Commits on Feb 12, 2019

• JavaScript: Add `Range.prototype.createContextualFragment` as an XSS sink.

  

  Max Schaefer

  committed
  2fce626

  Copy full SHA for 2fce626

• JavaScript: Drop precision of `AmbiguousIdAttribute` to 'high'.

  

  Max Schaefer

  committed
  41eb1ff

  Copy full SHA for 41eb1ff

• JavaScript: Be more conservative about templates in `AmbiguousIdAttribute`.

  Show description for 25f95d9
  

  Max Schaefer

  committed
  25f95d9

  Copy full SHA for 25f95d9

• Javascript: Autoformat qlls

  aschackmull

  committed
  15a6044

  Copy full SHA for 15a6044

• JS: Add DataFlow::Node.getAFunctionValue

  asger-semmle

  committed
  3290c17

  Copy full SHA for 3290c17

• JS: add DataFlow::Node.getIntValue()

  asger-semmle

  committed
  2fd1ee6

  Copy full SHA for 2fd1ee6

• JS: add DataFlow::Node.getStringValue()

  asger-semmle

  committed
  0fd9d15

  Copy full SHA for 0fd9d15

• Javascript: Autoformat qls

  aschackmull

  committed
  1182fca

  Copy full SHA for 1182fca

• Merge pull request #910 from xiemaisi/js/regexp-taint

  Show description for c133362
  semmle-qlci

  authored
  c133362

  Copy full SHA for c133362

• Merge pull request #920 from xiemaisi/js/field-as-prop-write

  Show description for ac3f413
  semmle-qlci

  authored
  ac3f413

  Copy full SHA for ac3f413

Commits on Feb 11, 2019

• Merge pull request #915 from asger-semmle/closure-uri-methods

  Show description for 10b0025
  semmle-qlci

  authored
  10b0025

  Copy full SHA for 10b0025

• JavaScript: Restrict `InstanceFieldAsPropWrite` to fields with initializers.

  

  Max Schaefer

  committed
  10ef945

  Copy full SHA for 10ef945

Commits on Feb 8, 2019

• Merge pull request #909 from xiemaisi/js/improve-incomplete-sanitization-alerts

  Show description for 986afa1
  semmle-qlci

  authored
  986afa1

  Copy full SHA for 986afa1

• Merge pull request #908 from xiemaisi/js/enable-ms-queries

  Show description for 232d81a
  semmle-qlci

  authored
  232d81a

  Copy full SHA for 232d81a

• JS: use type inference to back up function-style classes

  asger-semmle

  committed
  74a9c4b

  Copy full SHA for 74a9c4b

• JS: model URI and XHR methods from closure library

  asger-semmle

  committed
  f6e0ccf

  Copy full SHA for f6e0ccf

• Merge pull request #891 from xiemaisi/js/simplify-sensitive-actions

  Show description for 937049e
  semmle-qlci

  authored
  937049e

  Copy full SHA for 937049e

• Merge pull request #900 from esben-semmle/js/defuse-default

  Show description for 7e298cf
  semmle-qlci

  authored
  7e298cf

  Copy full SHA for 7e298cf

• JS: make Closure::moduleImport handle member access.

  asger-semmle

  committed
  bfe88e9

  Copy full SHA for bfe88e9

• JavaScript: Track taint through `RegExp.prototype.replace`.

  

  Max Schaefer

  committed
  b314c54

  Copy full SHA for b314c54

• JavaScript: Treat regexp replacements of HTML metacharacters as sanitizers for XSS queries.

  

  Max Schaefer

  committed
  25d06ad

  Copy full SHA for 25d06ad

• JavaScript: Introduce shared library for modelling XSS-relevant concepts.

  Show description for 18c23ec
  

  Max Schaefer

  committed
  18c23ec

  Copy full SHA for 18c23ec

• JavaScript: Improve alert location and message for `IncompleteSanitization`.

  Show description for 3e26bc6
  

  Max Schaefer

  committed
  3e26bc6

  Copy full SHA for 3e26bc6

• JavaScript: Update qhelp example for `CleartextStorage`.

  

  Max Schaefer

  committed
  aebc5bc

  Copy full SHA for aebc5bc

• JavaScript: Add classification of sensitive expressions.

  Show description for 0be81da
  

  Max Schaefer

  committed
  0be81da

  Copy full SHA for 0be81da

• JavaScript: Clean up classification of sensitive strings.

  

  Max Schaefer

  committed
  326b93b

  Copy full SHA for 326b93b

Commits on Feb 7, 2019

• JS: add stats for new relations

  asger-semmle

  committed
  6cc30fe

  Copy full SHA for 6cc30fe

• Revert "Merge pull request #897 from Semmle/revert-817-closure-modules"

  Show description for e4b230b
  asger-semmle

  committed
  e4b230b

  Copy full SHA for e4b230b

• JS: move default parameter values to the DefUse graph

  

  Esben Sparre Andreasen

  committed
  5ad8336

  Copy full SHA for 5ad8336

• JS: support default destructuring values in the dataflow graph

  

  Esben Sparre Andreasen

  committed
  f956e57

  Copy full SHA for f956e57