Commits

Breadcrumbs

History for

onb0fc958

User selector

All users

All time

Commit History

Commits on Mar 14, 2022

• add some API-nodes to js/disabling-certificate-validation

  erik-krogh

  committed
  195ce9c

  Copy full SHA for 195ce9c

• Merge pull request #8398 from github/post-release-prep/codeql-cli-2.8.3

  Show description for 6a74e76
  aibaars

  authored
  6a74e76

  Copy full SHA for 6a74e76

• Merge branch 'main' into depMore

  erik-krogh

  authored
  7d6700a

  Copy full SHA for 7d6700a

• add pointers to the qldoc of deprecated predicates

  erik-krogh

  committed
  5476008

  Copy full SHA for 5476008

Commits on Mar 13, 2022

• deprecate DefiningIdentifier, it was not used in any query

  erik-krogh

  committed
  4fc85a7

  Copy full SHA for 4fc85a7

• use some Sanitizer classes that were unused in the query code

  erik-krogh

  committed
  9cf0a94

  Copy full SHA for 9cf0a94

Commits on Mar 11, 2022

• patch upper-case acronyms to be PascalCase

  erik-krogh

  committed
  69353bb

  Copy full SHA for 69353bb

• Post-release preparation for codeql-cli-2.8.3

  

  github-actions[bot]

  committed
  3a5ebbb

  Copy full SHA for 3a5ebbb

Commits on Mar 10, 2022

• Release preparation for version 2.8.3

  

  github-actions[bot]

  committed
  6b194bc

  Copy full SHA for 6b194bc

Commits on Mar 8, 2022

• Merge pull request #7598 from erik-krogh/fieldOnlyUsedInCharPred

  Show description for 4734f19
  erik-krogh

  authored
  4734f19

  Copy full SHA for 4734f19

Commits on Mar 1, 2022

• Post-release preparation for codeql-cli-2.8.2

  

  github-actions[bot]

  committed
  980f822

  Copy full SHA for 980f822

Commits on Feb 24, 2022

• Release preparation for version 2.8.2

  

  github-actions[bot]

  committed
  20fe22c

  Copy full SHA for 20fe22c

Commits on Feb 23, 2022

• Merge pull request #8186 from asgerf/js/request-forgery-docs-followup

  Show description for 62ee8fc
  codeql-ci

  authored
  62ee8fc

  Copy full SHA for 62ee8fc

• Merge pull request #8014 from kaeluka/js/functionality-from-untrusted-source

  Show description for a664e02
  

  Stephan Brandauer

  authored
  a664e02

  Copy full SHA for a664e02

• apply docreview feedback

  

  Stephan Brandauer

  committed
  1ed71e1

  Copy full SHA for 1ed71e1

• JS: Minor fixup in the client-side request forgery qhelp

  asgerf

  committed
  22ba43f

  Copy full SHA for 22ba43f

• Merge pull request #8054 from asgerf/js/split-request-forgery

  Show description for c17d8b1
  

  Stephan Brandauer

  authored
  c17d8b1

  Copy full SHA for c17d8b1

Commits on Feb 22, 2022

• Merge pull request #8165 from erik-krogh/protoWrite

  Show description for 73f2e89
  erik-krogh

  authored
  73f2e89

  Copy full SHA for 73f2e89

• support more property writes in js/prototype-pollution-utility, and generalize ObjectDefinePropertyAsPropWrite

  erik-krogh

  committed
  517e17d

  Copy full SHA for 517e17d

• CWE 830 polish error messages

  

  Stephan Brandauer

  committed
  2278e7f

  Copy full SHA for 2278e7f

• CWE-830 add support for setting attributes via setAttribute method

  

  Stephan Brandauer

  committed
  8233039

  Copy full SHA for 8233039

• CWE 830 test where both branches in a ternary are unsafe

  

  Stephan Brandauer

  committed
  d80cd1a

  Copy full SHA for d80cd1a

• rewrite docs, improve error messages, etc

  

  Stephan Brandauer

  committed
  2934aa1

  Copy full SHA for 2934aa1

• stylistic improvements after review

  

  Stephan Brandauer

  committed
  d2335b6

  Copy full SHA for d2335b6

• polish qhelp for CWE-830 and add test file

  

  Stephan Brandauer

  committed
  9aec443

  Copy full SHA for 9aec443

• remove illegal chars from comments

  

  Stephan Brandauer

  committed
  44d8656

  Copy full SHA for 44d8656

• replace taint tracking by type tracking and merge remaining queries for CWE-830

  

  Stephan Brandauer

  committed
  fd77e27

  Copy full SHA for fd77e27

• improve error message in CWE-830

  

  Stephan Brandauer

  committed
  8cafa6d

  Copy full SHA for 8cafa6d

• always require integrity checking for certain CDNs

  

  Stephan Brandauer

  committed
  780fa97

  Copy full SHA for 780fa97

• JS: query to find dynamic creations of DOM elements that use untrusted sources

  

  Stephan Brandauer

  committed
  8d397fe

  Copy full SHA for 8d397fe

• permit http urls to 127.0.0.1 and others

  

  Stephan Brandauer

  committed
  b35c709

  Copy full SHA for b35c709

• add CWE 830 link to references

  

  Stephan Brandauer

  committed
  dd2b779

  Copy full SHA for dd2b779

• add changenotes for functionality from untrusted source query

  

  Stephan Brandauer

  committed
  b170422

  Copy full SHA for b170422

• JS: Functionality from untrusted sources query (CWE-830)

  

  Stephan Brandauer

  committed
  6722c17

  Copy full SHA for 6722c17

Commits on Feb 21, 2022

• fix some instances of ql/pred-doc-style for JS

  erik-krogh

  committed
  1407b49

  Copy full SHA for 1407b49