Commits

Breadcrumbs

History for

oncodeql-cli/v2.21.4

User selector

All users

All time

Commit History

Commits on May 13, 2025

• Merge pull request #19391 from asgerf/js/typescript-path-resolution

  Show description for 169ae19
  asgerf

  authored
  169ae19

  Copy full SHA for 169ae19

• Merge pull request #19445 from asgerf/js/summaries-with-fallback

  Show description for aea676d
  asgerf

  authored
  aea676d

  Copy full SHA for aea676d

Commits on May 2, 2025

• Merge pull request #19422 from Napalys/js/shelljs

  Show description for d1e769b
  Napalys

  authored
  d1e769b

  Copy full SHA for d1e769b

• JS: Benign test updates

  asgerf

  committed
  16fc8c3

  Copy full SHA for 16fc8c3

Commits on May 1, 2025

• Refactor process.env handling in CleartextLogging and IndirectCommandInjection modules to use ThreatModelSource

  Napalys

  committed
  d4b5ef6

  Copy full SHA for d4b5ef6

• Added test cases for shelljs.env

  Napalys

  committed
  33d8ffa

  Copy full SHA for 33d8ffa

Commits on Apr 30, 2025

• Added support for `fastify.all`

  Napalys

  committed
  71f1b82

  Copy full SHA for 71f1b82

• Added test case for `fastify.all`

  Napalys

  committed
  6d61766

  Copy full SHA for 6d61766

Commits on Apr 29, 2025

• Merge pull request #19300 from Napalys/js/fastify

  Show description for 6de38b1
  Napalys

  authored
  6de38b1

  Copy full SHA for 6de38b1

• JS: Add package.json files in tests relying on node_modules

  Show description for 70a5ec5
  asgerf

  committed
  70a5ec5

  Copy full SHA for 70a5ec5

Commits on Apr 28, 2025

• Updated modeling of `aws-sdk` with `MaD`

  Napalys

  committed
  73309fb

  Copy full SHA for 73309fb

• Added support for `AWS.Credentials` hardcoded credentials

  Napalys

  committed
  42d5b80

  Copy full SHA for 42d5b80

• Added ability to detect direct write to global `AWS.config`

  Napalys

  committed
  f69037c

  Copy full SHA for f69037c

• Added ability to detect `new AWS.ServiceName` cases with hardcoded credentials

  Napalys

  committed
  05e4677

  Copy full SHA for 05e4677

• Added test cases for individual AWS services, direct modification of global credentials and AWS.Credentials

  Napalys

  committed
  e6450a1

  Copy full SHA for e6450a1

Commits on Apr 23, 2025

• Javascript: Update test files.

  michaelnebel

  committed
  2e0ce44

  Copy full SHA for 2e0ce44

Commits on Apr 22, 2025

• Undo unnecessary name tracking for request, response objects

  Napalys

  committed
  fdfdcc0

  Copy full SHA for fdfdcc0

• JS: Add isMiddlewareSetup() hook to Routing model

  asgerf

  committed
  00661b6

  Copy full SHA for 00661b6

Commits on Apr 15, 2025

• Add user-controlled property tracking and update code injection alerts in Fastify hooks

  Napalys

  committed
  5c3556d

  Copy full SHA for 5c3556d

• Added `addHook` to `RouteSetup` thus now it is recognized now as rouute handler

  Napalys

  committed
  9b194ea

  Copy full SHA for 9b194ea

• Added test cases for `fastify.addHook`

  Napalys

  committed
  c175081

  Copy full SHA for c175081

Commits on Apr 14, 2025

• Merge pull request #19184 from Napalys/js/request_handlers

  Show description for 8631371
  Napalys

  authored
  8631371

  Copy full SHA for 8631371

Commits on Apr 11, 2025

• Merge pull request #19231 from Napalys/js/typed_array

  Show description for 3d7c020
  Napalys

  authored
  3d7c020

  Copy full SHA for 3d7c020

• Added `searchParams.get` as potential source for SSRF

  Napalys

  committed
  678eccb

  Copy full SHA for 678eccb

• Added SSRF test case with `searchParams` for `NextRequest`

  Napalys

  committed
  8674b61

  Copy full SHA for 8674b61

• Added support for `NextRequest` `middleware` SSRF.

  Napalys

  committed
  6e09a65

  Copy full SHA for 6e09a65

• Removed legacy `Consistency` check as it is redundant now with inline test expectations.

  Napalys

  committed
  734ad2d

  Copy full SHA for 734ad2d

• Added `middleware` test

  Napalys

  committed
  208487f

  Copy full SHA for 208487f

Commits on Apr 10, 2025

• Merge pull request #19263 from Napalys/js/make-dir-lib

  Show description for 43bf0be
  Napalys

  authored
  43bf0be

  Copy full SHA for 43bf0be

• Added `NextResponse` to the `ResponseCall` class it models similar near idential behaviour.

  Napalys

  committed
  86b64af

  Copy full SHA for 86b64af

• Added test cases for `NextResponse` and `Response`

  Napalys

  committed
  8acb024

  Copy full SHA for 8acb024

• Enhance Next.js API endpoint handling for compatibility with both Pages and App Router structures.

  Napalys

  committed
  63a3953

  Copy full SHA for 63a3953

• Added test cases with missing alerts for `Request` and `NextRequest`.

  Napalys

  committed
  81cba7f

  Copy full SHA for 81cba7f

• Merge pull request #19200 from asgerf/js/web-response

  Show description for eac14b9
  asgerf

  authored
  eac14b9

  Copy full SHA for eac14b9

• Applied copilot suggestion.

  Napalys

  committed
  171a846

  Copy full SHA for 171a846