Commits

Breadcrumbs

History for

oncodeql-cli/v2.25.2

User selector

All users

All time

Commit History

Commits on Jul 12, 2024

• Added links to eventual location of CUSTOMIZING.md

  aegilops

  committed
  79980a9

  Copy full SHA for 79980a9

• Apply suggestions from code review - docs tweaks of CUSTOMIZING.md

  Show description for 11249e7
  

  aegilops

  and

  felicitymay

  authored
  11249e7

  Copy full SHA for 11249e7

• Merge branch 'aegilops/polyfill-io-compromised-script' of https://github.com/aegilops/codeql into aegilops/polyfill-io-compromised-script

  aegilops

  committed
  61df4d2

  Copy full SHA for 61df4d2

• Created guide on customizing these queries, and referenced it in the query help

  aegilops

  committed
  00d91dc

  Copy full SHA for 00d91dc

• Added a note that SRI can be considered for some dynamic services

  aegilops

  committed
  040f948

  Copy full SHA for 040f948

• Apply suggestions from code review - docs and wording

  Show description for 3f37fe6
  

  aegilops

  and

  felicitymay

  authored
  3f37fe6

  Copy full SHA for 3f37fe6

Commits on Jul 11, 2024

• Moved from `experimental` into default queries

  aegilops

  committed
  d71be8a

  Copy full SHA for d71be8a

Commits on Jul 9, 2024

• Moved new query to 'experimental'

  Show description for 86afd54
  aegilops

  committed
  86afd54

  Copy full SHA for 86afd54

Commits on Jul 1, 2024

• Fixed wrong name for example HTML

  aegilops

  committed
  b4d8c48

  Copy full SHA for b4d8c48

• Added full stop to end of message

  aegilops

  committed
  1744a98

  Copy full SHA for 1744a98

• Fixed ending <p> tags

  aegilops

  committed
  ceda46e

  Copy full SHA for ceda46e

• Added detection for specific Polyfill.io CDN compromise - edited existing library and added new query and tests

  aegilops

  committed
  a1b0703

  Copy full SHA for a1b0703

Commits on Aug 25, 2022

• rename more acronyms

  erik-krogh

  committed
  cc7a9ef

  Copy full SHA for cc7a9ef

Commits on Feb 23, 2022

• apply docreview feedback

  

  Stephan Brandauer

  committed
  1ed71e1

  Copy full SHA for 1ed71e1

Commits on Feb 22, 2022

• CWE 830 polish error messages

  

  Stephan Brandauer

  committed
  2278e7f

  Copy full SHA for 2278e7f

• CWE-830 add support for setting attributes via setAttribute method

  

  Stephan Brandauer

  committed
  8233039

  Copy full SHA for 8233039

• CWE 830 test where both branches in a ternary are unsafe

  

  Stephan Brandauer

  committed
  d80cd1a

  Copy full SHA for d80cd1a

• rewrite docs, improve error messages, etc

  

  Stephan Brandauer

  committed
  2934aa1

  Copy full SHA for 2934aa1

• stylistic improvements after review

  

  Stephan Brandauer

  committed
  d2335b6

  Copy full SHA for d2335b6

• polish qhelp for CWE-830 and add test file

  

  Stephan Brandauer

  committed
  9aec443

  Copy full SHA for 9aec443

• remove illegal chars from comments

  

  Stephan Brandauer

  committed
  44d8656

  Copy full SHA for 44d8656

• replace taint tracking by type tracking and merge remaining queries for CWE-830

  

  Stephan Brandauer

  committed
  fd77e27

  Copy full SHA for fd77e27

• improve error message in CWE-830

  

  Stephan Brandauer

  committed
  8cafa6d

  Copy full SHA for 8cafa6d

• always require integrity checking for certain CDNs

  

  Stephan Brandauer

  committed
  780fa97

  Copy full SHA for 780fa97

• JS: query to find dynamic creations of DOM elements that use untrusted sources

  

  Stephan Brandauer

  committed
  8d397fe

  Copy full SHA for 8d397fe

• permit http urls to 127.0.0.1 and others

  

  Stephan Brandauer

  committed
  b35c709

  Copy full SHA for b35c709

• add CWE 830 link to references

  

  Stephan Brandauer

  committed
  dd2b779

  Copy full SHA for dd2b779

• JS: Functionality from untrusted sources query (CWE-830)

  

  Stephan Brandauer

  committed
  6722c17

  Copy full SHA for 6722c17

Loading