Commits

Breadcrumbs

History for

oncodeql-cli/latest

User selector

All users

All time

Commit History

Commits on Mar 20, 2026

• Ruby: Fix join orders following DB stats removal

  hvitved

  committed
  4b36463

  Copy full SHA for 4b36463

Commits on Mar 4, 2026

• Ruby: Inline expectation should have space after $

  Show description for 6001c73
  owen-mc

  committed
  6001c73

  Copy full SHA for 6001c73

Commits on Feb 17, 2026

• Reinstate ql model for `String#shellescape`

  owen-mc

  committed
  eb7f198

  Copy full SHA for eb7f198

• Add MaD barriers for Shellwords.escape and shellescape

  Show description for de5470a
  owen-mc

  committed
  de5470a

  Copy full SHA for de5470a

• Model flow through Shellwords escape and shellescape

  owen-mc

  committed
  b3681f7

  Copy full SHA for b3681f7

• Remove Shellwords sanitizer in ql

  Show description for 6294c3b
  owen-mc

  committed
  6294c3b

  Copy full SHA for 6294c3b

• Reinstate SQLite3 sanitizer in MaD

  owen-mc

  committed
  4aee99f

  Copy full SHA for 4aee99f

• Move SQLite3 flow model to MaD and remove ql sanitizer

  owen-mc

  committed
  5df695b

  Copy full SHA for 5df695b

• Reinstate Mysql2 sanitizer in MaD

  owen-mc

  committed
  d4bb92b

  Copy full SHA for d4bb92b

• Move Mysql2 flow model to MaD and remove ql sanitizer

  owen-mc

  committed
  3e4f42f

  Copy full SHA for 3e4f42f

• Change how sql-injection barriers are accepted

  owen-mc

  committed
  1d7a39a

  Copy full SHA for 1d7a39a

• Accept MaD sanitizers for queries with MaD sinks

  owen-mc

  committed
  3dc465f

  Copy full SHA for 3dc465f

Commits on Jan 26, 2026

• Merge pull request #21051 from hvitved/shared/flow-summary-provenance-filtering

  Show description for b974a84
  hvitved

  authored
  b974a84

  Copy full SHA for b974a84

• Ruby: Adapt to changes in `FlowSummaryImpl`

  hvitved

  committed
  c975ae5

  Copy full SHA for c975ae5

Commits on Jan 22, 2026

• python/javascript/ruby: mark internal predicates

  yoff

  committed
  d05901a

  Copy full SHA for d05901a

• ruby: Add back sanitizer as MaD model

  yoff

  committed
  b08c972

  Copy full SHA for b08c972

• ruby: remove sanitizer to be replaced by MaD model

  yoff

  committed
  15980cb

  Copy full SHA for 15980cb

• python: add machinery for MaD barriers

  Show description for 3dbfb9f
  yoff

  committed
  3dbfb9f

  Copy full SHA for 3dbfb9f

Commits on Jan 7, 2026

• JS: Sync ApiGraphModels.qll

  asgerf

  committed
  869efb8

  Copy full SHA for 869efb8

Commits on Jan 6, 2026

• Ruby: Fix bad join

  Show description for 3583394
  hvitved

  committed
  3583394

  Copy full SHA for 3583394

Commits on Nov 13, 2025

• Sync ApiGraphModels.qll

  asgerf

  committed
  ecfa946

  Copy full SHA for ecfa946

• Sync ApiGraphModelsExtensions.qll

  asgerf

  committed
  16e7dc1

  Copy full SHA for 16e7dc1

Commits on Oct 28, 2025

• Ruby/PolynomialReDoSQuery

  Show description for 6519bd9
  d10c

  committed
  6519bd9

  Copy full SHA for 6519bd9

Commits on Oct 14, 2025

• Fix "be be" typos

  henrymercer

  committed
  9507ec0

  Copy full SHA for 9507ec0

Commits on Sep 25, 2025

• Merge pull request #20427 from felickz/ruby-framework-grape

  Show description for 1a4cfba
  hvitved

  authored
  1a4cfba

  Copy full SHA for 1a4cfba

Commits on Sep 22, 2025

• Refactor Grape method call classes to simplify handling of API instance calls for headers, request, route_param, and cookies

  felickz

  committed
  6e56c54

  Copy full SHA for 6e56c54

• Refactor GrapeHelperMethod constructor to reuse getHelperSelf to traverse dataflow instead of AST

  Show description for 0665c39
  felickz

  committed
  0665c39

  Copy full SHA for 0665c39

• Refactor GrapeHeadersBlockCall and GrapeCookiesBlockCall to simplify method call checks

  felickz

  committed
  ecd0ce6

  Copy full SHA for ecd0ce6

• Refactor RootApi and GrapeApiClass constructors for improved readability; add getHelperSelf method to retrieve self parameter in helpers block.

  felickz

  committed
  b837c56

  Copy full SHA for b837c56

• Adapt all languages to changes in shared library

  paldepind

  committed
  7d6e206

  Copy full SHA for 7d6e206

• Remove redundant exclusion of base Grape::API module from GrapeApiClass

  Show description for 1bf6101
  felickz

  committed
  1bf6101

  Copy full SHA for 1bf6101

• Refactor RootApi class to use getAnImmediateDescendent for clarity

  felickz

  committed
  50bf9ae

  Copy full SHA for 50bf9ae

Commits on Sep 19, 2025

• Refactor Grape framework to be encapsulated properly in Module

  felickz

  committed
  f4bbbc3

  Copy full SHA for f4bbbc3

• Convert from GrapeHelperMethodTaintStep extends AdditionalTaintStep to a simplified GrapeHelperMethodTarget extends AdditionalCallTarget

  felickz

  committed
  89e9ee4

  Copy full SHA for 89e9ee4

Commits on Sep 16, 2025

• Grape - detect params calls inside helper methods

  Show description for c5e3be2
  felickz

  committed
  c5e3be2

  Copy full SHA for c5e3be2