Commits

Breadcrumbs

History for

oncodeql-cli/v2.19.3

User selector

All users

All time

Commit History

Commits on Sep 3, 2024

• use my script to delete outdated deprecations

  erik-krogh

  committed
  0fdd06f

  Copy full SHA for 0fdd06f

Commits on Jul 25, 2024

• Merge pull request #16781 from alexrford/rb/weak-sensitive-data-hashing

  Show description for 9fb657c
  alexrford

  authored
  9fb657c

  Copy full SHA for 9fb657c

Commits on Jun 18, 2024

• Ruby: remove unused import

  alexrford

  committed
  d79a253

  Copy full SHA for d79a253

• Ruby: fix some SensitiveDataSource definitions

  alexrford

  committed
  81ec686

  Copy full SHA for 81ec686

• Ruby: Move SensitiveDataSource logic into a private module

  alexrford

  committed
  f217de9

  Copy full SHA for f217de9

• Ruby: Add SensitiveDataSource abstract class

  alexrford

  committed
  6a46fb5

  Copy full SHA for 6a46fb5

Commits on Jun 17, 2024

• Use a combined regex for performance

  joefarebrother

  committed
  eee7f5a

  Copy full SHA for eee7f5a

• Ruby: minimal port of py/weak-sensitive-data-hashing

  alexrford

  committed
  d4203d9

  Copy full SHA for d4203d9

Commits on Jun 12, 2024

• Factor out nameIndicatesRelevantSensitiveData

  joefarebrother

  committed
  90d6f2e

  Copy full SHA for 90d6f2e

• Ruby: Remove two Cartesian products

  

  hvitved

  authored and

  joefarebrother

  committed
  605fe54

  Copy full SHA for 605fe54

• Allow implicit read steps on sinks

  joefarebrother

  committed
  b0c03f6

  Copy full SHA for b0c03f6

• Use additional sensitive data heuristics in CleartextSources

  joefarebrother

  committed
  8b51ee8

  Copy full SHA for 8b51ee8

Commits on May 9, 2024

• Fix typos in sensitive data regex

  joefarebrother

  committed
  9aff22c

  Copy full SHA for 9aff22c

Commits on May 8, 2024

• Add private category to sensitive data heuristics

  joefarebrother

  committed
  5f4bc41

  Copy full SHA for 5f4bc41

Commits on Apr 24, 2024

• Ruby: do fewer regexp matches in SensitiveActions

  nickrolfe

  committed
  8f2e51f

  Copy full SHA for 8f2e51f

Commits on Apr 23, 2024

• JS: do fewer regexp matches in SensitiveActions

  nickrolfe

  committed
  003d208

  Copy full SHA for 003d208

Commits on Apr 13, 2024

• Tiny docs fix

  Show description for 5125468
  samgiz

  authored
  5125468

  Copy full SHA for 5125468

Commits on Apr 12, 2024

• Merge pull request #15987 from joefarebrother/ruby-mass-reassignment

  Show description for 5cebcad
  joefarebrother

  authored
  5cebcad

  Copy full SHA for 5cebcad

• Ruby: Add alert provenance plumbing.

  aschackmull

  committed
  6991f54

  Copy full SHA for 6991f54

Commits on Apr 11, 2024

• Use cfg nodes

  joefarebrother

  committed
  06d7b3c

  Copy full SHA for 06d7b3c

• Merge pull request #16111 from erik-krogh/rb-url

  Show description for c00e207
  erik-krogh

  authored
  c00e207

  Copy full SHA for c00e207

• Use not exists

  joefarebrother

  committed
  ec973ac

  Copy full SHA for ec973ac

Commits on Apr 10, 2024

• Add flow steps and sanitizers for `permit` calls

  joefarebrother

  committed
  0a3d73d

  Copy full SHA for 0a3d73d

• Review suggestions - rename sink class and add barrier out

  joefarebrother

  committed
  976ca48

  Copy full SHA for 976ca48

Commits on Apr 9, 2024

• Ruby: Remove two redundant `allowImplicitRead` predicates

  hvitved

  committed
  e6984aa

  Copy full SHA for e6984aa

Commits on Apr 8, 2024

• add tests for the fixes in the qhelp, and fix an FP that appeared

  erik-krogh

  committed
  642a134

  Copy full SHA for 642a134

Commits on Apr 3, 2024

• Ruby: Reduce alerts produced by `MassAssignment.ql`

  hvitved

  committed
  c2d771b

  Copy full SHA for c2d771b

Commits on Mar 22, 2024

• add qldoc for `ReflectedXssSanitizers`

  erik-krogh

  committed
  051120e

  Copy full SHA for 051120e

• add calls to `.html_safe?` as a shared XSS sanitizer

  erik-krogh

  committed
  c60cec3

  Copy full SHA for c60cec3

• Add missing .s to qldoc

  joefarebrother

  committed
  592acb9

  Copy full SHA for 592acb9

• Reorganise into Custimizations file + add some more sinks on ActiveRecord methods

  joefarebrother

  committed
  507a610

  Copy full SHA for 507a610

• Add mass assignment query

  joefarebrother

  committed
  0f45a53

  Copy full SHA for 0f45a53

Commits on Mar 20, 2024

• use the sanitizers from ReflectedXSS in unsafe-html-construction

  erik-krogh

  committed
  db3bf0e

  Copy full SHA for db3bf0e

Commits on Mar 12, 2024

• Ruby: Lower access path limit to 1 for `OrmTracking`

  hvitved

  committed
  695e728

  Copy full SHA for 695e728

Commits on Mar 7, 2024

• Ruby: Exclude calls with arguments from `OrmFieldAsSource`

  hvitved

  committed
  85782ff

  Copy full SHA for 85782ff