Commits

Breadcrumbs

History for

onb282543

User selector

All users

All time

Commit History

Commits on May 10, 2023

• Update javascript/ql/lib/semmle/javascript/security/dataflow/IndirectCommandInjectionCustomizations.qll

  Show description for b282543
  

  asgerf

  and

  erik-krogh

  authored
  b282543

  Copy full SHA for b282543

Commits on May 3, 2023

• JS: Restrict getInput to indirect command injection query

  asgerf

  committed
  1a99563

  Copy full SHA for 1a99563

• JS: List safe environment variables in IndirectCommandInjection

  asgerf

  committed
  b9ad417

  Copy full SHA for b9ad417

• JS: Clarify the difference between context and input sources

  asgerf

  committed
  4c6711d

  Copy full SHA for 4c6711d

• JS: Move change note to right location

  asgerf

  committed
  bdcda7f

  Copy full SHA for bdcda7f

Commits on May 1, 2023

• JS: Add qldoc

  asgerf

  committed
  5eaaa7e

  Copy full SHA for 5eaaa7e

• JS: Add sources from actions/core

  asgerf

  committed
  08785a4

  Copy full SHA for 08785a4

• JS: Add tests

  asgerf

  committed
  cb95dbf

  Copy full SHA for cb95dbf

• JS: Model actions/exec

  asgerf

  committed
  0497e60

  Copy full SHA for 0497e60

• JS: Port new sources based on comment from JarLob

  asgerf

  committed
  cb9b01c

  Copy full SHA for cb9b01c

• JS: Port Actions sources based on PR from R3x

  asgerf

  committed
  3d208c0

  Copy full SHA for 3d208c0

Commits on Apr 14, 2023

• Merge pull request #12802 from erik-krogh/history-xss

  Show description for cece307
  erik-krogh

  authored
  cece307

  Copy full SHA for cece307

Commits on Apr 13, 2023

• Bump all qlpacks major versions

  alexet

  committed
  c6a4828

  Copy full SHA for c6a4828

• Merge pull request #12816 from github/rc/3.9

  Show description for 8c46bfd
  alexrford

  authored
  8c46bfd

  Copy full SHA for 8c46bfd

Commits on Apr 12, 2023

• Merge pull request #12799 from erik-krogh/oneColumn

  Show description for cfb273a
  erik-krogh

  authored
  cfb273a

  Copy full SHA for cfb273a

• Merge pull request #12792 from asgerf/js/redux-model-perf

  Show description for b819f55
  asgerf

  authored
  b819f55

  Copy full SHA for b819f55

• update expected output of diagnostics test

  erik-krogh

  committed
  d3cc1d6

  Copy full SHA for d3cc1d6

• add browser history as XSS sink

  erik-krogh

  committed
  b195762

  Copy full SHA for b195762

• Merge pull request #12787 from tyage/add-router-sink

  Show description for 8cb54b7
  erik-krogh

  authored
  8cb54b7

  Copy full SHA for 8cb54b7

Commits on Apr 11, 2023

• JS: Expand QLDoc

  asgerf

  committed
  aef0fa3

  Copy full SHA for aef0fa3

• JS: Add getForwardingFunction() to API graphs

  asgerf

  committed
  2c65a49

  Copy full SHA for 2c65a49

• JS: Restrict useSelector steps to local callbacks

  asgerf

  committed
  4ce03d4

  Copy full SHA for 4ce03d4

• JS: Add test for selector nodes with multiple access paths

  asgerf

  committed
  3cc9313

  Copy full SHA for 3cc9313

Commits on Apr 8, 2023

• Add change note

  tyage

  committed
  40d4758

  Copy full SHA for 40d4758

• Add replace method test

  tyage

  committed
  320cb99

  Copy full SHA for 320cb99

• Remove unnecessary whiteline

  tyage

  committed
  668e1ac

  Copy full SHA for 668e1ac

• Add Next.js router push as XSS sink

  tyage

  committed
  7f9b855

  Copy full SHA for 7f9b855

Commits on Apr 4, 2023

• Post-release preparation for codeql-cli-2.12.6

  

  github-actions[bot]

  committed
  ac426b1

  Copy full SHA for ac426b1

• JS: Change note

  asgerf

  committed
  5cc7380

  Copy full SHA for 5cc7380

Commits on Apr 3, 2023

• Merge pull request #12729 from asgerf/js/crypto-modernize

  Show description for 53de9ae
  asgerf

  authored
  53de9ae

  Copy full SHA for 53de9ae

• JS: Fix qhelp after file rename

  jketema

  committed
  17bd9c1

  Copy full SHA for 17bd9c1

Commits on Mar 31, 2023

• Merge pull request #12686 from erik-krogh/backtick-parse-error

  Show description for 1e1a692
  erik-krogh

  authored
  1e1a692

  Copy full SHA for 1e1a692

• JS: Modernize crypto libraries

  asgerf

  committed
  64cf27a

  Copy full SHA for 64cf27a

• JS: Simplfy with set literal

  asgerf

  committed
  40530ae

  Copy full SHA for 40530ae

• JS: Use API graphs in CryptoJS

  asgerf

  committed
  4a06b81

  Copy full SHA for 4a06b81