Commits

Breadcrumbs

History for

onaa95dd4

User selector

All users

All time

Commit History

Commits on Feb 7, 2022

• fix typo

  Show description for aa95dd4
  

  erik-krogh

  and

  esbena

  authored
  aa95dd4

  Copy full SHA for aa95dd4

• lower the precision of `js/unsafe-code-construction`

  erik-krogh

  committed
  6f28cb9

  Copy full SHA for 6f28cb9

• add change note

  erik-krogh

  committed
  06f9924

  Copy full SHA for 06f9924

• update expected output now that JSON.stringify() is seen as a sanitizer

  erik-krogh

  committed
  896d2ba

  Copy full SHA for 896d2ba

• add values written to the global scope as exports

  erik-krogh

  committed
  d1d4ebb

  Copy full SHA for d1d4ebb

• move .qll files from `src` to `lib`

  erik-krogh

  committed
  91b03f5

  Copy full SHA for 91b03f5

• update qhelp to focus on properly documenting potentially unsafe library functions

  erik-krogh

  committed
  eb133f5

  Copy full SHA for eb133f5

• reuse utility predicate

  erik-krogh

  committed
  a9f7756

  Copy full SHA for a9f7756

• add comment about parameters named "code"

  erik-krogh

  committed
  681179d

  Copy full SHA for 681179d

• ignore sources named "code"

  erik-krogh

  committed
  53315e6

  Copy full SHA for 53315e6

• add missing qldoc

  erik-krogh

  committed
  59cc099

  Copy full SHA for 59cc099

• add qhelp for unsafe-code-construction

  erik-krogh

  committed
  d77c28f

  Copy full SHA for d77c28f

• add test for unsafe-code-construction query

  erik-krogh

  committed
  d790f3c

  Copy full SHA for d790f3c

• add `js/unsafe-code-construction` query

  erik-krogh

  committed
  198a464

  Copy full SHA for 198a464

• add JSON.stringify as a code-injection sanitizer

  erik-krogh

  committed
  955ad8c

  Copy full SHA for 955ad8c

• add code-injection sink for calls to node

  erik-krogh

  committed
  68a5c1f

  Copy full SHA for 68a5c1f

Commits on Feb 4, 2022

• Merge pull request #7828 from Naman-ntc/main

  Show description for ab2d3a7
  erik-krogh

  authored
  ab2d3a7

  Copy full SHA for ab2d3a7

• Merge pull request #7843 from erik-krogh/CVE-2021-23484

  Show description for f00d723
  erik-krogh

  authored
  f00d723

  Copy full SHA for f00d723

• Merge pull request #7785 from github/z80coder/impose-length-restriction

  Show description for 6c3daf4
  Z80coder

  authored
  6c3daf4

  Copy full SHA for 6c3daf4

• Update javascript/ql/experimental/adaptivethreatmodeling/lib/experimental/adaptivethreatmodeling/FunctionBodyFeatures.qll

  Show description for be5e8da
  

  Z80coder

  and

  henrymercer

  authored
  be5e8da

  Copy full SHA for be5e8da

• Update javascript/ql/experimental/adaptivethreatmodeling/lib/experimental/adaptivethreatmodeling/FunctionBodyFeatures.qll

  Show description for e57a0e0
  

  Z80coder

  and

  henrymercer

  authored
  e57a0e0

  Copy full SHA for e57a0e0

• add QL comment; inline a predicate; restore a comment

  Z80coder

  committed
  b38335a

  Copy full SHA for b38335a

• add file sources from `jszip` to `js/zip-slip`

  erik-krogh

  committed
  edcb3ba

  Copy full SHA for edcb3ba

• update expected files

  

  Naman Jain

  committed
  009c957

  Copy full SHA for 009c957

• Update javascript/ql/test/query-tests/Security/CWE-754/UnvalidatedDynamicMethodCallGood3.js

  Show description for 5e1ca31
  

  Naman-ntc

  and

  erik-krogh

  authored
  5e1ca31

  Copy full SHA for 5e1ca31

• Update javascript/ql/test/query-tests/Security/CWE-754/UnvalidatedDynamicMethodCallGood4.js

  Show description for 5121414
  

  Naman-ntc

  and

  erik-krogh

  authored
  5121414

  Copy full SHA for 5121414

• Merge pull request #7817 from github/esbena-patch-7

  Show description for d08c0f7
  esbena

  authored
  d08c0f7

  Copy full SHA for d08c0f7

• Document and format event-stream-orig.js

  Show description for 72b5edc
  esbena

  committed
  72b5edc

  Copy full SHA for 72b5edc

Commits on Feb 3, 2022

• Merge pull request #7801 from github/henrymercer/js-atm-migrate-tests

  Show description for 224d7a7
  henrymercer

  authored
  224d7a7

  Copy full SHA for 224d7a7

• reinstate the AST node limit to minimize change to feature values

  Z80coder

  committed
  dca03d7

  Copy full SHA for dca03d7

• actually count the number of chars

  Z80coder

  committed
  d5ab119

  Copy full SHA for d5ab119

• file renaming and updated expected file

  

  Naman Jain

  committed
  9809d30

  Copy full SHA for 9809d30

• fixed mistake in examples

  

  Naman Jain

  committed
  adc8bf3

  Copy full SHA for adc8bf3

Commits on Feb 2, 2022

• JS: Remove versions from packs we don't intend to publish

  henrymercer

  committed
  a586be9

  Copy full SHA for a586be9

• modified query and added tests

  Naman-ntc

  committed
  aea7054

  Copy full SHA for aea7054