Commits

Breadcrumbs

History for

on816d796

User selector

All users

All time

Commit History

Commits on Feb 16, 2022

• ignore deliberately hardcoded password strings

  esbena

  committed
  816d796

  Copy full SHA for 816d796

• add additional tests

  esbena

  committed
  78744a0

  Copy full SHA for 78744a0

• change example passwords in test

  esbena

  committed
  e67c09f

  Copy full SHA for e67c09f

Commits on Feb 10, 2022

• Merge pull request #7591 from asgerf/js/mysql-sinks

  Show description for 9ebbd9e
  codeql-ci

  authored
  9ebbd9e

  Copy full SHA for 9ebbd9e

• Merge pull request #5841 from erik-krogh/libCode

  Show description for 1a91a79
  codeql-ci

  authored
  1a91a79

  Copy full SHA for 1a91a79

• Merge pull request #7911 from kaeluka/javascript/add-getFlowLabel-to-PathNode

  Show description for a73cdf3
  

  Stephan Brandauer

  authored
  a73cdf3

  Copy full SHA for a73cdf3

Commits on Feb 9, 2022

• Move explanation of example above sample code

  ethanpalm

  authored
  2f7f9d9

  Copy full SHA for 2f7f9d9

• add a getFlowLabel method to the PathNode class

  

  Stephan Brandauer

  committed
  3e88d46

  Copy full SHA for 3e88d46

• Merge branch 'main' into post-release-prep/codeql-cli-2.8.0

  hvitved

  authored
  9440a45

  Copy full SHA for 9440a45

Commits on Feb 8, 2022

• Merge pull request #7876 from erik-krogh/zipRelative

  Show description for 4bbb7ad
  erik-krogh

  authored
  4bbb7ad

  Copy full SHA for 4bbb7ad

• add explicit this

  erik-krogh

  committed
  28ba78c

  Copy full SHA for 28ba78c

• rename `maybeGetJoinArg` `maybeGetPathSuffix`

  erik-krogh

  committed
  d73b2ef

  Copy full SHA for d73b2ef

Commits on Feb 7, 2022

• fix performance issue by inlining a simpler version of `getASourceProp`

  erik-krogh

  committed
  cc3f9bf

  Copy full SHA for cc3f9bf

• fix typo

  Show description for aa95dd4
  

  erik-krogh

  and

  esbena

  authored
  aa95dd4

  Copy full SHA for aa95dd4

• update locations of expected output

  erik-krogh

  committed
  b59c791

  Copy full SHA for b59c791

• recognize more startswith sanitizers for path-injection queries

  erik-krogh

  committed
  ca5f91e

  Copy full SHA for ca5f91e

• lower the precision of `js/unsafe-code-construction`

  erik-krogh

  committed
  6f28cb9

  Copy full SHA for 6f28cb9

• add change note

  erik-krogh

  committed
  06f9924

  Copy full SHA for 06f9924

• update expected output now that JSON.stringify() is seen as a sanitizer

  erik-krogh

  committed
  896d2ba

  Copy full SHA for 896d2ba

• add values written to the global scope as exports

  erik-krogh

  committed
  d1d4ebb

  Copy full SHA for d1d4ebb

• move .qll files from `src` to `lib`

  erik-krogh

  committed
  91b03f5

  Copy full SHA for 91b03f5

• update qhelp to focus on properly documenting potentially unsafe library functions

  erik-krogh

  committed
  eb133f5

  Copy full SHA for eb133f5

• reuse utility predicate

  erik-krogh

  committed
  a9f7756

  Copy full SHA for a9f7756

• add comment about parameters named "code"

  erik-krogh

  committed
  681179d

  Copy full SHA for 681179d

• ignore sources named "code"

  erik-krogh

  committed
  53315e6

  Copy full SHA for 53315e6

• add missing qldoc

  erik-krogh

  committed
  59cc099

  Copy full SHA for 59cc099

• add qhelp for unsafe-code-construction

  erik-krogh

  committed
  d77c28f

  Copy full SHA for d77c28f

• add test for unsafe-code-construction query

  erik-krogh

  committed
  d790f3c

  Copy full SHA for d790f3c

• add `js/unsafe-code-construction` query

  erik-krogh

  committed
  198a464

  Copy full SHA for 198a464

• add JSON.stringify as a code-injection sanitizer

  erik-krogh

  committed
  955ad8c

  Copy full SHA for 955ad8c

• add code-injection sink for calls to node

  erik-krogh

  committed
  68a5c1f

  Copy full SHA for 68a5c1f

• recognize a nodejs re-exports in a loop

  erik-krogh

  committed
  0584a6a

  Copy full SHA for 0584a6a

Commits on Feb 6, 2022

• Post-release preparation for codeql-cli-2.8.0

  

  github-actions[bot]

  committed
  b4ab86c

  Copy full SHA for b4ab86c

Commits on Feb 4, 2022

• Merge pull request #7828 from Naman-ntc/main

  Show description for ab2d3a7
  erik-krogh

  authored
  ab2d3a7

  Copy full SHA for ab2d3a7

• Merge pull request #7843 from erik-krogh/CVE-2021-23484

  Show description for f00d723
  erik-krogh

  authored
  f00d723

  Copy full SHA for f00d723