Commits

Breadcrumbs

History for

onaea365c

User selector

All users

All time

Commit History

Commits on Jan 28, 2020

• adjust API naming

  erik-krogh

  committed
  aea365c

  Copy full SHA for aea365c

Commits on Jan 21, 2020

• add support for creating a promise with another resolved promise, e.g: Promise.resolve(otherPromise)

  erik-krogh

  committed
  8370699

  Copy full SHA for 8370699

• copy data from both callbacks in Promise data-flow

  erik-krogh

  committed
  8679132

  Copy full SHA for 8679132

• add data-flow steps for when Promise handlers return other promises

  erik-krogh

  committed
  fe0b6a8

  Copy full SHA for fe0b6a8

• add data-flow steps for resolved promises using pseudo-properties

  erik-krogh

  committed
  d8b25ef

  Copy full SHA for d8b25ef

Commits on Jan 20, 2020

• a bit of self-review and an auto-format

  erik-krogh

  committed
  5c6134d

  Copy full SHA for 5c6134d

• add flowsTo to the use of isAdditionalLoadStep

  erik-krogh

  committed
  ad813ef

  Copy full SHA for ad813ef

• Merge remote-tracking branch 'upstream/master' into ExceptionalPromise

  erik-krogh

  committed
  b3b132c

  Copy full SHA for b3b132c

Commits on Jan 17, 2020

• outlining a predicate to give hints about join ordering

  erik-krogh

  committed
  a25c5d7

  Copy full SHA for a25c5d7

• copyPropertyStep works interprocedurally

  erik-krogh

  committed
  6ad62e3

  Copy full SHA for 6ad62e3

Commits on Jan 16, 2020

• only use .getALocalSource in copyPropertyStep

  erik-krogh

  committed
  06e898f

  Copy full SHA for 06e898f

• add pragma to fix performance (same issue as in #2512)

  erik-krogh

  committed
  9998059

  Copy full SHA for 9998059

• Merge pull request #2617 from asger-semmle/prototype-pollution-utility

  Show description for 4efc418
  semmle-qlci

  authored
  4efc418

  Copy full SHA for 4efc418

• Update javascript/ql/src/Security/CWE-400/PrototypePollutionUtility.qhelp

  Show description for 7a1d068
  

  asgerf

  and

  mchammer01

  authored
  7a1d068

  Copy full SHA for 7a1d068

• Merge pull request #2505 from erik-krogh/EventEmitter

  Show description for 8128d23
  semmle-qlci

  authored
  8128d23

  Copy full SHA for 8128d23

Commits on Jan 15, 2020

• no longer need for .getALocalSource() in custom load/store

  erik-krogh

  committed
  a76ab39

  Copy full SHA for a76ab39

• don't use pseudo-properties for resolved promise data-flow

  erik-krogh

  committed
  e08fc08

  Copy full SHA for e08fc08

• support interprocedural flow with custom load/store steps

  erik-krogh

  committed
  830100d

  Copy full SHA for 830100d

• JS: ignore useless-expr in first stmt in try block

  asgerf

  committed
  6d93063

  Copy full SHA for 6d93063

Commits on Jan 14, 2020

• custom load/store steps to implement promise flow

  erik-krogh

  committed
  d09bce5

  Copy full SHA for d09bce5

• Merge pull request #2624 from asger-semmle/js-duplicate-alert-strict-mode

  Show description for 3c4749b
  semmle-qlci

  authored
  3c4749b

  Copy full SHA for 3c4749b

• JS: Add change note and fix cwe tags

  asgerf

  committed
  2245882

  Copy full SHA for 2245882

• JS: Address review comments

  asgerf

  committed
  d76859b

  Copy full SHA for d76859b

• JS: Add sanitizer for "in" exprs

  

  asger-semmle

  authored and

  asgerf

  committed
  9bd3c4a

  Copy full SHA for 9bd3c4a

• JS: Guard against more FPs

  

  asger-semmle

  authored and

  asgerf

  committed
  bd9405a

  Copy full SHA for bd9405a

• JS: More sanitizers

  

  asger-semmle

  authored and

  asgerf

  committed
  738123d

  Copy full SHA for 738123d

• JS: Support Reflect.ownKeys

  

  asger-semmle

  authored and

  asgerf

  committed
  f7543ae

  Copy full SHA for f7543ae

• JS: Support enumeration through Object.entries

  

  asger-semmle

  authored and

  asgerf

  committed
  8af2333

  Copy full SHA for 8af2333

• JS: Do not require flow from key -> rhs

  

  asger-semmle

  authored and

  asgerf

  committed
  ac2f0a8

  Copy full SHA for ac2f0a8

• JS: Add another test and more barriers

  

  asger-semmle

  authored and

  asgerf

  committed
  96bf9db

  Copy full SHA for 96bf9db

• JS: Fix FPs from Object.create(null)

  

  asger-semmle

  authored and

  asgerf

  committed
  bc78710

  Copy full SHA for bc78710

• JS: Add PrototypePollutionUtility query

  

  asger-semmle

  authored and

  asgerf

  committed
  654f145

  Copy full SHA for 654f145

• JS: Build access paths for array accesses

  

  asger-semmle

  authored and

  asgerf

  committed
  52cec25

  Copy full SHA for 52cec25

Commits on Jan 13, 2020

• JS: Ignore strict-mode-call-stack-introspection for expr stmts

  asgerf

  committed
  73e60a7

  Copy full SHA for 73e60a7

Commits on Jan 10, 2020

• make the default registration/dispatch extend DataFlow::InvokeNode

  erik-krogh

  committed
  1619a98

  Copy full SHA for 1619a98