Commits

Breadcrumbs

History for

oncodeql-cli/v2.19.3

User selector

All users

All time

Commit History

Commits on Nov 1, 2024

• JS: Convert remaining queries to use ActiveThreatModelSourceAsSource

  RasmusWL

  committed
  dc8e645

  Copy full SHA for dc8e645

• JS: Remove dummy comment

  Show description for 19fae76
  

  RasmusWL

  and

  asgerf

  authored
  19fae76

  Copy full SHA for 19fae76

Commits on Oct 31, 2024

• JS: Model `readline` as a `stdin` threat-model source

  Show description for 61e60de
  RasmusWL

  committed
  61e60de

  Copy full SHA for 61e60de

• JS: Do simple modeling of `process.stdin` as threat-model source

  RasmusWL

  committed
  eca8bf5

  Copy full SHA for eca8bf5

• JS: Model fs.promises.readFile as file source

  Show description for 34b86c3
  RasmusWL

  committed
  34b86c3

  Copy full SHA for 34b86c3

Commits on Oct 29, 2024

• JS: Add initial `file` threat-model support

  Show description for 2b6c27e
  RasmusWL

  committed
  2b6c27e

  Copy full SHA for 2b6c27e

• JS: Add `database` threat-model source modeling

  RasmusWL

  committed
  3656864

  Copy full SHA for 3656864

• JS: Minor improvements to threat-model Concepts

  Show description for 84f6b89
  RasmusWL

  committed
  84f6b89

  Copy full SHA for 84f6b89

Commits on Oct 25, 2024

• JS: Model newer `yargs` command-line parsing pattern

  RasmusWL

  committed
  d3ae4c9

  Copy full SHA for d3ae4c9

• JS: Consolidate command-line argument modeling

  Show description for 3448751
  RasmusWL

  committed
  3448751

  Copy full SHA for 3448751

• JS: Add `environment` threat-model source

  RasmusWL

  committed
  412e841

  Copy full SHA for 412e841

• JS: Make (most) queries use ActiveThreatModelSource

  Show description for f733ac1
  RasmusWL

  committed
  f733ac1

  Copy full SHA for f733ac1

• JS: Integrate RemoteFlowSource with ThreatModelSource

  RasmusWL

  committed
  4b1c027

  Copy full SHA for 4b1c027

• JS: Setup basic support for threat-models

  Show description for 17a6d54
  RasmusWL

  committed
  17a6d54

  Copy full SHA for 17a6d54

Commits on Sep 3, 2024

• use my script to delete outdated deprecations

  erik-krogh

  committed
  0fdd06f

  Copy full SHA for 0fdd06f

Commits on Aug 22, 2024

• Merge pull request #17240 from knewbury01/knewbury01/fix-helmetrequiredsetting-model

  Show description for a1688f6
  asgerf

  authored
  a1688f6

  Copy full SHA for a1688f6

• Merge pull request #17212 from mbaluda/main

  Show description for 09aca6b
  asgerf

  authored
  09aca6b

  Copy full SHA for 09aca6b

Commits on Aug 16, 2024

• JS: Move AngularJSTemplateUrlSink to ClientSideUrlRedirection query

  Show description for 9ee7599
  asgerf

  committed
  9ee7599

  Copy full SHA for 9ee7599

• JS: Treat browser message events as client-side sources

  asgerf

  committed
  2d26405

  Copy full SHA for 2d26405

• Update javascript/ql/lib/semmle/javascript/frameworks/helmet/Helmet.qll

  asgerf

  authored
  7dcdad0

  Copy full SHA for 7dcdad0

Commits on Aug 15, 2024

• Add QL docs to helmet model

  knewbury01

  committed
  81787a1

  Copy full SHA for 81787a1

• Update JS helmet model structure

  knewbury01

  committed
  e84dda4

  Copy full SHA for e84dda4

Commits on Aug 13, 2024

• Add support for importing NPM modules in XSJS sources

  mbaluda

  committed
  be0a60a

  Copy full SHA for be0a60a

• Sync shared files

  hvitved

  committed
  0fcfb47

  Copy full SHA for 0fcfb47

Commits on Aug 8, 2024

• Merge pull request #14666 from am0o0/amammad-js-hardcodedJWTKey

  Show description for 41506fb
  erik-krogh

  authored
  41506fb

  Copy full SHA for 41506fb

Commits on Aug 7, 2024

• remove a part of code related to debugging :)

  am0o0

  committed
  b64cb4d

  Copy full SHA for b64cb4d

Commits on Aug 5, 2024

• apply autoformat to `HardcodedCredentialsCustomizations.qll`

  am0o0

  committed
  fce183c

  Copy full SHA for fce183c

Commits on Aug 1, 2024

• apply changes from @erik-krogh

  am0o0

  committed
  354fcbe

  Copy full SHA for 354fcbe

Commits on Jul 12, 2024

• Merge branch 'main' into aegilops/polyfill-io-compromised-script

  aegilops

  authored
  c9af53f

  Copy full SHA for c9af53f

Commits on Jul 9, 2024

• Formatting of QLL

  aegilops

  committed
  0aab2ae

  Copy full SHA for 0aab2ae

• QLDoc

  aegilops

  committed
  dae2aeb

  Copy full SHA for dae2aeb

• Moved new query to 'experimental'

  Show description for 86afd54
  aegilops

  committed
  86afd54

  Copy full SHA for 86afd54

Commits on Jul 8, 2024

• Merge branch 'main' into aegilops/js/insecure-helmet-middleware

  aegilops

  authored
  d896fdf

  Copy full SHA for d896fdf

• Split out "compromised" functionality

  aegilops

  committed
  1fe14e2

  Copy full SHA for 1fe14e2

Commits on Jul 1, 2024

• Added some missing QLDoc

  aegilops

  committed
  73fc6bc

  Copy full SHA for 73fc6bc