Commits

Breadcrumbs

History for

on718f6eb

User selector

All users

All time

Commit History

Commits on Jan 22, 2021

• JS: update and prettify examples

  esbena

  committed
  718f6eb

  Copy full SHA for 718f6eb

Commits on Jan 21, 2021

• JS: add qhelp and changenotes for js/server-crash

  esbena

  committed
  9e3cc3b

  Copy full SHA for 9e3cc3b

Commits on Jan 19, 2021

• JS: reformulate js/server-crash. Support promises and shorter paths.

  esbena

  committed
  3015dcd

  Copy full SHA for 3015dcd

Commits on Jan 13, 2021

• Update javascript/ql/src/Security/CWE-730/ServerCrash.ql

  Show description for 12b985b
  

  esbena

  and

  erik-krogh

  authored
  12b985b

  Copy full SHA for 12b985b

Commits on Jan 12, 2021

• JS: reformulate js/server-crash as a path problem

  esbena

  committed
  d591c51

  Copy full SHA for d591c51

Commits on Jan 11, 2021

• JS: reintroduce reverted js/server-crash

  Show description for 2dbd762
  esbena

  committed
  2dbd762

  Copy full SHA for 2dbd762

Commits on Jan 8, 2021

• Merge pull request #4921 from erik-krogh/moreShellSan

  Show description for 807fc94
  codeql-ci

  authored
  807fc94

  Copy full SHA for 807fc94

Commits on Jan 7, 2021

• Update javascript/ql/src/semmle/javascript/security/dataflow/UnsafeShellCommandConstructionCustomizations.qll

  Show description for 6423c32
  

  erik-krogh

  and

  esbena

  authored
  6423c32

  Copy full SHA for 6423c32

• Merge pull request #4823 from erik-krogh/furtherReDoS

  Show description for c193d9f
  codeql-ci

  authored
  c193d9f

  Copy full SHA for c193d9f

• add source code examples to `blocksCharInAccess`

  erik-krogh

  committed
  7eab085

  Copy full SHA for 7eab085

• update docstring for `getAShellChar`

  Show description for 8b03ab0
  

  erik-krogh

  and

  esbena

  committed
  8b03ab0

  Copy full SHA for 8b03ab0

• support sanitizers that sanitize individual chars in js/shell-command-constructed-from-input

  erik-krogh

  committed
  2aa59a3

  Copy full SHA for 2aa59a3

• add comment about regexp detected by js/polynomial-redos

  erik-krogh

  committed
  7e21081

  Copy full SHA for 7e21081

Commits on Jan 6, 2021

• Merge branch 'main' into revertSum

  erik-krogh

  committed
  bfd8d1b

  Copy full SHA for bfd8d1b

• Merge pull request #4862 from erik-krogh/shellSanitizer

  Show description for 9d4cd0a
  codeql-ci

  authored
  9d4cd0a

  Copy full SHA for 9d4cd0a

• add class-field flowstep to js/shell-command-constructed-from-input

  erik-krogh

  committed
  f1cee70

  Copy full SHA for f1cee70

• add comment in isFork about /(a*)*/ regular expressions

  erik-krogh

  committed
  28cffa1

  Copy full SHA for 28cffa1

• reintroduce performance improvement - but sound this time

  erik-krogh

  committed
  c58f67b

  Copy full SHA for c58f67b

• autoformat

  erik-krogh

  committed
  4392f02

  Copy full SHA for 4392f02

• support nested stars in js/ReDoS

  erik-krogh

  committed
  3d98732

  Copy full SHA for 3d98732

• undo unsound optimization in js/ReDoS

  erik-krogh

  committed
  77967c3

  Copy full SHA for 77967c3

Commits on Jan 5, 2021

• Merge pull request #4847 from erik-krogh/afterReDoS

  Show description for a5e28ac
  codeql-ci

  authored
  a5e28ac

  Copy full SHA for a5e28ac

Commits on Jan 4, 2021

• improve precision of intersect

  erik-krogh

  committed
  ce8cc23

  Copy full SHA for ce8cc23

Commits on Dec 22, 2020

• use the full ascii set instead of a few chosen chars

  erik-krogh

  committed
  44571ff

  Copy full SHA for 44571ff

• remove duplicate char

  erik-krogh

  committed
  303408b

  Copy full SHA for 303408b

• changes based on review

  erik-krogh

  committed
  354954c

  Copy full SHA for 354954c

• Merge branch 'main' into shellSanitizer

  erik-krogh

  committed
  530a4ae

  Copy full SHA for 530a4ae

• use strings in isTypeofGard

  erik-krogh

  committed
  f7f8868

  Copy full SHA for f7f8868

• Merge pull request #4868 from erik-krogh/boundShell

  Show description for 2bb9636
  codeql-ci

  authored
  2bb9636

  Copy full SHA for 2bb9636

• Merge pull request #4865 from esbena/js/fix-execa-model

  Show description for 7c6b4d7
  codeql-ci

  authored
  7c6b4d7

  Copy full SHA for 7c6b4d7

• recognize `Object.defineProperty(obj, prop, {get: func})` as a property-write

  erik-krogh

  committed
  b8b5aef

  Copy full SHA for b8b5aef

• recognize bound functions in js/shell-command-constructed-from-input

  erik-krogh

  committed
  6a9089b

  Copy full SHA for 6a9089b

• Merge pull request #4860 from erik-krogh/functionExports

  Show description for e2bba97
  codeql-ci

  authored
  e2bba97

  Copy full SHA for e2bba97

• remove TTUndefined from TypeOfSanitizer in js/shell-command-constructed-from-input

  erik-krogh

  committed
  df95562

  Copy full SHA for df95562

• Merge pull request #4732 from github/esbena-patch-4

  Show description for b35edc9
  codeql-ci

  authored
  b35edc9

  Copy full SHA for b35edc9