Commits

Breadcrumbs

History for

on97edfc5

User selector

All users

All time

Commit History

Commits on Feb 25, 2019

• JS: address review comments

  

  Esben Sparre Andreasen

  committed
  97edfc5

  Copy full SHA for 97edfc5

• JS: fixup visibility of DataFlow::HtmlAttributeNode

  

  Esben Sparre Andreasen

  committed
  80a716f

  Copy full SHA for 80a716f

• JS: add XSS vector for Vue's v-html

  

  Esben Sparre Andreasen

  committed
  4ce7ec1

  Copy full SHA for 4ce7ec1

• JS: introduce DataFlow::HtmlAttributeNode

  

  Esben Sparre Andreasen

  committed
  4c5e48f

  Copy full SHA for 4c5e48f

• JS: introduce Vue Template Element

  

  Esben Sparre Andreasen

  committed
  da1ffcf

  Copy full SHA for da1ffcf

• JS: introduce Vue::InstanceHeapStep

  

  Esben Sparre Andreasen

  committed
  9f4f945

  Copy full SHA for 9f4f945

• Merge pull request #934 from asger-semmle/module-import

  Show description for 014d4b9
  semmle-qlci

  authored
  014d4b9

  Copy full SHA for 014d4b9

Commits on Feb 24, 2019

• JavaScript: Back out parsing of qualified XML identifiers.

  Show description for d4dbe3b
  

  Max Schaefer

  committed
  d4dbe3b

  Copy full SHA for d4dbe3b

• JavaScript: Add QL library support for E4X.

  

  Max Schaefer

  committed
  be67d51

  Copy full SHA for be67d51

• JavaScript: Add parser support for E4X.

  

  Max Schaefer

  committed
  f3ea810

  Copy full SHA for f3ea810

Commits on Feb 22, 2019

• Merge pull request #957 from esben-semmle/js/another-autobinder-model

  Show description for db9ac72
  

  Max Schaefer

  authored
  db9ac72

  Copy full SHA for db9ac72

• Merge pull request #958 from esben-semmle/js/improve-tainted-path

  Show description for 12ed2ca
  

  Max Schaefer

  authored
  12ed2ca

  Copy full SHA for 12ed2ca

Commits on Feb 21, 2019

• JS: add taint steps for fs.realpath and fs.realpathSync

  

  Esben Sparre Andreasen

  committed
  305a249

  Copy full SHA for 305a249

• JS: model one more 'autobind' for js/unbound-event-handler-receiver

  

  Esben Sparre Andreasen

  committed
  27cae0c

  Copy full SHA for 27cae0c

Commits on Feb 20, 2019

• update link in vue.qll

  

  james

  committed
  50ad8a4

  Copy full SHA for 50ad8a4

• Merge pull request #933 from xiemaisi/js/createContextualFragment

  Show description for f5e419e
  semmle-qlci

  authored
  f5e419e

  Copy full SHA for f5e419e

Commits on Feb 13, 2019

• Merge pull request #929 from asger-semmle/typescript-no-expansion

  Show description for 26525fc
  semmle-qlci

  authored
  26525fc

  Copy full SHA for 26525fc

• Merge pull request #932 from asger-semmle/cookbook-prepare

  Show description for 92a6e7e
  semmle-qlci

  authored
  92a6e7e

  Copy full SHA for 92a6e7e

• JS: generalize to include default imports

  asger-semmle

  committed
  dfe3f25

  Copy full SHA for dfe3f25

• Merge pull request #921 from asger-semmle/class-node-absval

  Show description for 5b2df06
  

  Max Schaefer

  authored
  5b2df06

  Copy full SHA for 5b2df06

• Merge pull request #927 from xiemaisi/js/ambiguous-id-attr-templates

  Show description for c422ade
  semmle-qlci

  authored
  c422ade

  Copy full SHA for c422ade

Commits on Feb 12, 2019

• JS: remove unused predicate

  asger-semmle

  committed
  d532815

  Copy full SHA for d532815

• JS: make moduleImport() work for named imports

  asger-semmle

  committed
  be10f24

  Copy full SHA for be10f24

• JavaScript: Add `Range.prototype.createContextualFragment` as an XSS sink.

  

  Max Schaefer

  committed
  2fce626

  Copy full SHA for 2fce626

• JavaScript: Drop precision of `AmbiguousIdAttribute` to 'high'.

  

  Max Schaefer

  committed
  41eb1ff

  Copy full SHA for 41eb1ff

• JavaScript: Be more conservative about templates in `AmbiguousIdAttribute`.

  Show description for 25f95d9
  

  Max Schaefer

  committed
  25f95d9

  Copy full SHA for 25f95d9

• Javascript: Autoformat qlls

  aschackmull

  committed
  15a6044

  Copy full SHA for 15a6044

• JS: Add DataFlow::Node.getAFunctionValue

  asger-semmle

  committed
  3290c17

  Copy full SHA for 3290c17

• JS: add DataFlow::Node.getIntValue()

  asger-semmle

  committed
  2fd1ee6

  Copy full SHA for 2fd1ee6

• JS: add DataFlow::Node.getStringValue()

  asger-semmle

  committed
  0fd9d15

  Copy full SHA for 0fd9d15

• Javascript: Autoformat qls

  aschackmull

  committed
  1182fca

  Copy full SHA for 1182fca

• Merge pull request #910 from xiemaisi/js/regexp-taint

  Show description for c133362
  semmle-qlci

  authored
  c133362

  Copy full SHA for c133362

• TS: update test expectations

  asger-semmle

  committed
  0444fa3

  Copy full SHA for 0444fa3

• Merge pull request #920 from xiemaisi/js/field-as-prop-write

  Show description for ac3f413
  semmle-qlci

  authored
  ac3f413

  Copy full SHA for ac3f413

Commits on Feb 11, 2019

• Merge pull request #915 from asger-semmle/closure-uri-methods

  Show description for 10b0025
  semmle-qlci

  authored
  10b0025

  Copy full SHA for 10b0025