Commits

Breadcrumbs

History for

on70331c0

User selector

All users

All time

Commit History

Commits on Apr 27, 2023

• JS: Decouple chaining from ExplicitResponseSource

  asgerf

  committed
  70331c0

  Copy full SHA for 70331c0

• JS: Track express route handlers into arrays

  asgerf

  committed
  96e415a

  Copy full SHA for 96e415a

Commits on Apr 18, 2023

• Merge pull request #12847 from github/post-release-prep/codeql-cli-2.13.0

  Show description for 924ce25
  alexrford

  authored
  924ce25

  Copy full SHA for 924ce25

• Merge pull request #12780 from aibaars/shared-yaml-lib

  Show description for e5d89b9
  aibaars

  authored
  e5d89b9

  Copy full SHA for e5d89b9

• Merge pull request #12843 from kaspersv/kaspersv/prevent-bad-js-join-order

  Show description for 9d34d09
  kaspersv

  authored
  9d34d09

  Copy full SHA for 9d34d09

Commits on Apr 17, 2023

• Post-release preparation for codeql-cli-2.13.0

  

  github-actions[bot]

  committed
  648f0e1

  Copy full SHA for 648f0e1

• Prevent JS join order regression

  kaspersv

  committed
  ad82433

  Copy full SHA for ad82433

• Add change note

  aibaars

  committed
  34d3040

  Copy full SHA for 34d3040

• JS: Fix the ExtendCall restriction

  asgerf

  committed
  13b1e97

  Copy full SHA for 13b1e97

• JS: revert path sanitizers in proto pollution query

  asgerf

  committed
  2f4a181

  Copy full SHA for 2f4a181

• JS: Move 'this' sanitizer to customizations

  asgerf

  committed
  b728f71

  Copy full SHA for b728f71

• JS: Undo sanitization of path.normalize()

  asgerf

  committed
  c250ba7

  Copy full SHA for c250ba7

• JS: Fix observed FPs in UnsafeJQueryPlugin

  asgerf

  committed
  0d598c4

  Copy full SHA for 0d598c4

• JS: Restrict ExtendCall flow in proto pollution query

  asgerf

  committed
  b321151

  Copy full SHA for b321151

• JS: Drive-by fix to newly gained FPs

  asgerf

  committed
  efb582b

  Copy full SHA for efb582b

• JS: Add implied receiver steps

  asgerf

  committed
  869c6d2

  Copy full SHA for 869c6d2

• JS: Change Extend steps to PreCallGraphStep

  asgerf

  committed
  74dbc71

  Copy full SHA for 74dbc71

Commits on Apr 14, 2023

• Release preparation for version 2.13.0

  

  github-actions[bot]

  committed
  075d063

  Copy full SHA for 075d063

• Merge pull request #12802 from erik-krogh/history-xss

  Show description for cece307
  erik-krogh

  authored
  cece307

  Copy full SHA for cece307

Commits on Apr 13, 2023

• Bump all qlpacks major versions

  alexet

  committed
  c6a4828

  Copy full SHA for c6a4828

• Merge pull request #12816 from github/rc/3.9

  Show description for 8c46bfd
  alexrford

  authored
  8c46bfd

  Copy full SHA for 8c46bfd

• Apply suggestions from code review

  Show description for ead8108
  

  aibaars

  and

  erik-krogh

  committed
  ead8108

  Copy full SHA for ead8108

Commits on Apr 12, 2023

• Merge pull request #12792 from asgerf/js/redux-model-perf

  Show description for b819f55
  asgerf

  authored
  b819f55

  Copy full SHA for b819f55

• add browser history as XSS sink

  erik-krogh

  committed
  b195762

  Copy full SHA for b195762

Commits on Apr 11, 2023

• Js/Yaml: add getFile() predicate

  aibaars

  committed
  83cd55c

  Copy full SHA for 83cd55c

• forward toString() etc. predicates from YamlNode to Locatable

  erik-krogh

  committed
  3c4bd5b

  Copy full SHA for 3c4bd5b

• improve the ESLint model to avoid overriding Yaml classes

  erik-krogh

  committed
  b5e9048

  Copy full SHA for b5e9048

• JS: Expand QLDoc

  asgerf

  committed
  aef0fa3

  Copy full SHA for aef0fa3

• JS: Add getForwardingFunction() to API graphs

  asgerf

  committed
  2c65a49

  Copy full SHA for 2c65a49

• JS: Restrict useSelector steps to local callbacks

  asgerf

  committed
  4ce03d4

  Copy full SHA for 4ce03d4

• JS: Add test for selector nodes with multiple access paths

  asgerf

  committed
  3cc9313

  Copy full SHA for 3cc9313

Commits on Apr 8, 2023

• Add change note

  tyage

  committed
  40d4758

  Copy full SHA for 40d4758

• Add Next.js router push as XSS sink

  tyage

  committed
  7f9b855

  Copy full SHA for 7f9b855

Commits on Apr 6, 2023

• JS: use shared YAML library

  aibaars

  committed
  4fca4b6

  Copy full SHA for 4fca4b6

Commits on Apr 4, 2023

• Post-release preparation for codeql-cli-2.12.6

  

  github-actions[bot]

  committed
  ac426b1

  Copy full SHA for ac426b1