Commits

Breadcrumbs

History for

on83ca4ef

User selector

All users

All time

Commit History

Commits on Oct 5, 2021

• JS: Lower security-severity of queries with speculative threat model

  Show description for 83ca4ef
  asgerf

  committed
  83ca4ef

  Copy full SHA for 83ca4ef

Commits on Sep 15, 2021

• fix dbsheme upgrade from TypeScript 4.4 PR

  erik-krogh

  committed
  5c73fed

  Copy full SHA for 5c73fed

• Merge pull request #6694 from erik-krogh/owasp-fixes

  Show description for 3f736d3
  erik-krogh

  authored
  3f736d3

  Copy full SHA for 3f736d3

• Merge pull request #6587 from erik-krogh/ts44

  Show description for b228398
  codeql-ci

  authored
  b228398

  Copy full SHA for b228398

• add static_initializer as a stmt_parent

  erik-krogh

  committed
  cf149bd

  Copy full SHA for cf149bd

• add @static_initializer in the stats file

  erik-krogh

  committed
  0b83d03

  Copy full SHA for 0b83d03

• Merge pull request #6698 from asgerf/js/template-self-assignment

  Show description for 220f2de
  codeql-ci

  authored
  220f2de

  Copy full SHA for 220f2de

• JS: Exclude template files in SelfAssignment

  asgerf

  committed
  b5db404

  Copy full SHA for b5db404

Commits on Sep 14, 2021

• add upgrade script

  erik-krogh

  committed
  5a77857

  Copy full SHA for 5a77857

• add JS support for static initializers

  erik-krogh

  committed
  fdbf5f7

  Copy full SHA for fdbf5f7

• add qldoc to StaticInitializer::getBody

  erik-krogh

  committed
  48b763c

  Copy full SHA for 48b763c

• refactor StaticInitializer into it's own class

  erik-krogh

  committed
  e3ed6c2

  Copy full SHA for e3ed6c2

• add getter for static initializer blocks

  erik-krogh

  committed
  ffd51e7

  Copy full SHA for ffd51e7

• add support for static initializer blocks in TypeScript

  erik-krogh

  committed
  9585481

  Copy full SHA for 9585481

• add tests for TypeScript 4.4 types

  erik-krogh

  committed
  59f15eb

  Copy full SHA for 59f15eb

• Merge branch 'main' into clipBoard

  erik-krogh

  committed
  3b6c8c5

  Copy full SHA for 3b6c8c5

• Merge pull request #6695 from erik-krogh/js-add-cwes

  Show description for 136d043
  codeql-ci

  authored
  136d043

  Copy full SHA for 136d043

• add some fitting CWEs to existing queries

  erik-krogh

  committed
  b936a04

  Copy full SHA for b936a04

• use the correct cwe tags

  erik-krogh

  committed
  6d12c4a

  Copy full SHA for 6d12c4a

• JavaScript: Drop redundant columns from `files` and `folders` relations

  hvitved

  committed
  63e28c5

  Copy full SHA for 63e28c5

Commits on Sep 13, 2021

• add test

  erik-krogh

  committed
  8569d26

  Copy full SHA for 8569d26

• add clipboard data as a RemoteFlowSource

  erik-krogh

  committed
  8e98dce

  Copy full SHA for 8e98dce

• recognize types of the form "HTML%Element" as dom values

  erik-krogh

  committed
  3983ace

  Copy full SHA for 3983ace

• delete ClipboardXss.ql experimental query

  erik-krogh

  committed
  bac80bf

  Copy full SHA for bac80bf

• adjust regexp libraries to how unpaired surrogate are parsed now

  

  erik-krogh

  authored and

  smowton

  committed
  05cc6bc

  Copy full SHA for 05cc6bc

• Acknowledge new FPs due to the extractor using U+FFFD for unpaired surrogates

  Show description for f24d7c4
  smowton

  committed
  f24d7c4

  Copy full SHA for f24d7c4

• Add test for Javascript literal with an unpaired surrogate character

  smowton

  committed
  487ebdf

  Copy full SHA for 487ebdf

Commits on Sep 10, 2021

• Merge pull request #5888 from erik-krogh/casting

  Show description for e8fc3c8
  codeql-ci

  authored
  e8fc3c8

  Copy full SHA for e8fc3c8

• Merge pull request #6652 from asgerf/js/type-tracking-through-callback

  Show description for 27f2d41
  codeql-ci

  authored
  27f2d41

  Copy full SHA for 27f2d41

• use the new `instanceof` syntax for `NodeJSClientRequest`

  erik-krogh

  committed
  a756ffa

  Copy full SHA for a756ffa

• JS: Detect untrusted inputs in 'discussion' and 'discussion_comment' payloads

  rhysd

  committed
  97ed9ed

  Copy full SHA for 97ed9ed

Commits on Sep 8, 2021

• Merge pull request #6549 from erik-krogh/moreDom

  Show description for cd26d97
  codeql-ci

  authored
  cd26d97

  Copy full SHA for cd26d97

• JS: Support transitive callback-passing

  asgerf

  committed
  db1de18

  Copy full SHA for db1de18

• JS: Rename FlowSteps::callback -> exploratoryCallbackStep

  asgerf

  committed
  ceaf2b3

  Copy full SHA for ceaf2b3

• JS: Add type-tracking steps through callback args

  asgerf

  committed
  7c94dd9

  Copy full SHA for 7c94dd9