Commits

Breadcrumbs

History for

on8863296

User selector

All users

All time

Commit History

Commits on Aug 14, 2018

• JavaScript: Teach `globalVarRef` about top-level `this` and the `global` npm package.

  

  Max Schaefer

  committed
  8863296

  Copy full SHA for 8863296

Commits on Aug 13, 2018

• JavaScript: add taint step from return value of 'map' callback

  asger-semmle

  committed
  66dcd7d

  Copy full SHA for 66dcd7d

• JavaScript: add taint step through 'join'

  asger-semmle

  committed
  0c124d2

  Copy full SHA for 0c124d2

• Merge pull request #46 from asger-semmle/html-sanitizers

  Show description for c0fe0a1
  semmle-qlci

  authored
  c0fe0a1

  Copy full SHA for c0fe0a1

• Merge pull request #48 from xiemaisi/js/webview-sinks

  Show description for 3d0748c
  semmle-qlci

  authored
  3d0748c

  Copy full SHA for 3d0748c

Commits on Aug 10, 2018

• JavaScript: Add `WebView`-related taint sinks for `CodeInjection`, `DomBasedXss` and `ServerSideUrlRedirect`.

  

  Max Schaefer

  committed
  199990f

  Copy full SHA for 199990f

• JavaScript: Add basic modelling of React Native `WebView`s.

  

  Max Schaefer

  committed
  3ce82af

  Copy full SHA for 3ce82af

• Merge pull request #42 from tibbes/qhelp/fix-links

  Show description for 945413a
  semmle-qlci

  authored
  945413a

  Copy full SHA for 945413a

• Merge pull request #43 from xiemaisi/js/odasa-7275

  Show description for 2478c6e
  semmle-qlci

  authored
  2478c6e

  Copy full SHA for 2478c6e

• JavaScript: add doc comment

  asger-semmle

  committed
  1add8b0

  Copy full SHA for 1add8b0

• JavaScript: Add library for HTML sanitizers

  asger-semmle

  committed
  2b5684d

  Copy full SHA for 2b5684d

• C++, JS: fix broken links in query help

  tibbes

  committed
  98e866e

  Copy full SHA for 98e866e

Commits on Aug 9, 2018

• Make NodeJSLib use moduleMember for ES6-compatibility

  asger-semmle

  committed
  b00938e

  Copy full SHA for b00938e

• Merge pull request #31 from esben-semmle/js/fewer-alerts-for-incomplete-object-initialization

  Show description for e32dc08
  

  Max Schaefer

  authored
  e32dc08

  Copy full SHA for e32dc08

• JavaScript: Teach `IncompleteSanitization` to recognize incomplete URL {en,de}coding.

  

  Max Schaefer

  committed
  41da997

  Copy full SHA for 41da997

• Merge pull request #35 from esben-semmle/js/classify-application-insight

  Show description for badb167
  

  Max Schaefer

  authored
  badb167

  Copy full SHA for badb167

Commits on Aug 8, 2018

• Merge pull request #32 from asger-semmle/export-import-flow

  Show description for 0de9eed
  

  Max Schaefer

  authored
  0de9eed

  Copy full SHA for 0de9eed

• JS: classify the ApplicationInsights library instance

  

  Esben Sparre Andreasen

  committed
  2589cf7

  Copy full SHA for 2589cf7

• Merge pull request #29 from esben-semmle/js/fixup-angularjs-filter-argument-index

  Show description for 355302e
  

  Max Schaefer

  authored
  355302e

  Copy full SHA for 355302e

• Merge pull request #28 from esben-semmle/js/whitelist-empty-functions

  Show description for 854dc0c
  

  Max Schaefer

  authored
  854dc0c

  Copy full SHA for 854dc0c

• TypeScript: bugfixes for import-assign statement

  asger-semmle

  committed
  94bac12

  Copy full SHA for 94bac12

• JS: restrict alert location to a single line

  

  Esben Sparre Andreasen

  committed
  8ee943f

  Copy full SHA for 8ee943f

• JS: change alert location for js/incomplete-object-initialization

  

  Esben Sparre Andreasen

  committed
  e1947f0

  Copy full SHA for e1947f0

• JS: permit some calls with spurious arguments to empty functions

  

  Esben Sparre Andreasen

  committed
  4e98ce2

  Copy full SHA for 4e98ce2

• Merge pull request #21 from esben-semmle/js/urilibraries-members

  Show description for 1a5585c
  

  Max Schaefer

  authored
  1a5585c

  Copy full SHA for 1a5585c

• JS: fix an off-by-one error in the AngularJS expression AST

  

  Esben Sparre Andreasen

  committed
  343b922

  Copy full SHA for 343b922

Commits on Aug 7, 2018

• Merge pull request #17 from xiemaisi/js/rename-unused-var

  Show description for 4d97570
  semmle-qlci

  authored
  4d97570

  Copy full SHA for 4d97570

• JS: refactor UriLibraries.qll models to use `DataFlow::moduleMember`

  

  Esben Sparre Andreasen

  committed
  3b00b9b

  Copy full SHA for 3b00b9b

• Merge pull request #20 from esben-semmle/js/more-auth-calls-and-rate-limiters

  Show description for 6533ddf
  semmle-qlci

  authored
  6533ddf

  Copy full SHA for 6533ddf

Commits on Aug 6, 2018

• JS: support "express-rate-limit" non-constructor calls

  

  Esben Sparre Andreasen

  committed
  f7ab29a

  Copy full SHA for f7ab29a

• JS: add "verify" as an `Authorization` call word

  

  Esben Sparre Andreasen

  committed
  c6cfca3

  Copy full SHA for c6cfca3

• JavaScript: Generalize description of `js/unused-local-variable`.

  Show description for 06f4374
  

  Max Schaefer

  committed
  06f4374

  Copy full SHA for 06f4374

• JavaScript: Lift call graph library to data flow graph.

  

  Max Schaefer

  committed
  9ba3d80

  Copy full SHA for 9ba3d80

Commits on Aug 3, 2018

• JavaScript: Add model of JSON parsers

  asger-semmle

  committed
  156b94e

  Copy full SHA for 156b94e

Commits on Aug 2, 2018

• QL code and tests for C#/C++/JavaScript.

  pavgust

  committed
  b55526a

  Copy full SHA for b55526a

Loading