Commits

Breadcrumbs

History for

on72a69cf

User selector

All users

All time

Commit History

Commits on Nov 19, 2024

• Added change notes

  Napalys

  committed
  72a69cf

  Copy full SHA for 72a69cf

Commits on Nov 15, 2024

• JS: Add: Array.protype.findLast as taint step

  Napalys

  committed
  fcb6553

  Copy full SHA for fcb6553

• JS: Fix: Now Array.prototype.with is properly flagged as taint step

  Napalys

  committed
  bed1f25

  Copy full SHA for bed1f25

• JS: Add: change notes

  Napalys

  committed
  631a377

  Copy full SHA for 631a377

Commits on Nov 14, 2024

• Merge branch 'main' into napalys/toSpliced-support

  Napalys

  committed
  6fa3ff3

  Copy full SHA for 6fa3ff3

• Merge pull request #17910 from Napalys/napalys/matchAll-support

  Show description for c8c15a0
  Napalys

  authored
  c8c15a0

  Copy full SHA for c8c15a0

• JS: Fix: now one can determine regex via Array.prototype.toSpliced function call.

  Napalys

  committed
  b333f52

  Copy full SHA for b333f52

Commits on Nov 13, 2024

• JS: Fix: Ensure toSpliced with spread operator is flagged

  Napalys

  committed
  84234d5

  Copy full SHA for 84234d5

• JS: Fix: Ensure toSpliced is flagged by taint tracking in test suite (ed44358143be1ec4b0fb323f767552fd12b933bf)

  Napalys

  committed
  2df3d1b

  Copy full SHA for 2df3d1b

• Added toSpliced as part ArraySliceStep and ArraySpliceStep, fixed tests from 2d9bc43506725685502608a861a90a4e19f849a9

  Napalys

  committed
  df4b596

  Copy full SHA for df4b596

• Added taint step for toSpliced, handles test from a65f80ef76482637904030c43cbb91c35fd4ab5c

  Napalys

  committed
  b4c84d3

  Copy full SHA for b4c84d3

Commits on Nov 12, 2024

• Added change notes

  Napalys

  committed
  5f8ff12

  Copy full SHA for 5f8ff12

• Added test case for Array.prototype.toReversed, which is currently not flagged as a taint sink.

  Napalys

  committed
  7427a24

  Copy full SHA for 7427a24

• Added support for Array.prototype.toSorted function

  Napalys

  committed
  3f0a54c

  Copy full SHA for 3f0a54c

• Merge pull request #17951 from Napalys/napalys/reverse-support

  Show description for 6266dab
  Napalys

  authored
  6266dab

  Copy full SHA for 6266dab

Commits on Nov 11, 2024

• Added change notes

  Napalys

  committed
  00790bf

  Copy full SHA for 00790bf

• Update ArrayInPlaceManipulationTaintStep documentation

  Napalys

  committed
  42f7f73

  Copy full SHA for 42f7f73

• Added change notes

  Napalys

  committed
  ae57c12

  Copy full SHA for ae57c12

• Refactored SortTaintStep to ArrayInPlaceManipulationTaintStep to support both sort and reverse functions. Fixed newly added test case. from 8026a99db756fe7a91d21a4912426d979794c7ca

  Napalys

  committed
  81bc7cd

  Copy full SHA for 81bc7cd

• Moved SortTaintStep to more appropriate home TaintTracking->Arrays

  Napalys

  committed
  f1c6dc1

  Copy full SHA for f1c6dc1

Commits on Nov 8, 2024

• Now catches usage of RegExp. after matchAll usage.

  Napalys

  committed
  70cf1a5

  Copy full SHA for 70cf1a5

Commits on Nov 7, 2024

• Fixed issue where TaintTracking was not catching matchAll vulnerability

  Napalys

  committed
  dbd57e3

  Copy full SHA for dbd57e3

• Fixes false positives from commit 42600c93ffad33fce4975542e11f32d45fd25747

  Napalys

  committed
  514375d

  Copy full SHA for 514375d

• Fixes false positives from commit 445552d3b53ec9592e8e3892cb337d1004b6a432

  Napalys

  committed
  449cee9

  Copy full SHA for 449cee9

Commits on Nov 5, 2024

• Merge branch 'github:main' into napalys/matchAll-support

  Napalys

  authored
  7825a46

  Copy full SHA for 7825a46

• Added support for matchAll in CWE-020 including new test cases

  Napalys

  committed
  ccee34d

  Copy full SHA for ccee34d

Commits on Nov 4, 2024

• Post-release preparation for codeql-cli-2.19.3

  

  github-actions[bot]

  committed
  f107d16

  Copy full SHA for f107d16

• Release preparation for version 2.19.3

  

  github-actions[bot]

  committed
  cc7b724

  Copy full SHA for cc7b724

Commits on Nov 1, 2024

• JS: Convert remaining queries to use ActiveThreatModelSourceAsSource

  RasmusWL

  committed
  dc8e645

  Copy full SHA for dc8e645

• JS: Remove dummy comment

  Show description for 19fae76
  

  RasmusWL

  and

  asgerf

  authored
  19fae76

  Copy full SHA for 19fae76

Commits on Oct 31, 2024

• JS: Model `readline` as a `stdin` threat-model source

  Show description for 61e60de
  RasmusWL

  committed
  61e60de

  Copy full SHA for 61e60de

• JS: Do simple modeling of `process.stdin` as threat-model source

  RasmusWL

  committed
  eca8bf5

  Copy full SHA for eca8bf5

• JS: Model fs.promises.readFile as file source

  Show description for 34b86c3
  RasmusWL

  committed
  34b86c3

  Copy full SHA for 34b86c3

Commits on Oct 29, 2024

• JS: Add initial `file` threat-model support

  Show description for 2b6c27e
  RasmusWL

  committed
  2b6c27e

  Copy full SHA for 2b6c27e

• JS: Add `database` threat-model source modeling

  RasmusWL

  committed
  3656864

  Copy full SHA for 3656864