Commits

Breadcrumbs

History for

onfbca06f

User selector

All users

All time

Commit History

Commits on Mar 10, 2021

• JS: Move TaintMetrics.qll into internal folder

  asgerf

  committed
  fbca06f

  Copy full SHA for fbca06f

Commits on Mar 8, 2021

• Merge pull request #5275 from Marcono1234/marcono1234/included-qhelp-files

  Show description for aeb1314
  aschackmull

  authored
  aeb1314

  Copy full SHA for aeb1314

Commits on Mar 5, 2021

• Merge pull request #5262 from max-schaefer/event-handler-receiver-is-dom-element

  Show description for d7b9251
  codeql-ci

  authored
  d7b9251

  Copy full SHA for d7b9251

Commits on Mar 4, 2021

• Use `.inc.qhelp` extension for included help files

  Marcono1234

  committed
  5a8ffa5

  Copy full SHA for 5a8ffa5

• Merge pull request #5183 from erik-krogh/next

  Show description for 15049ca
  codeql-ci

  authored
  15049ca

  Copy full SHA for 15049ca

• Merge branch 'main' into java/merge-5226

  aschackmull

  committed
  45f5228

  Copy full SHA for 45f5228

• Merge pull request #5301 from asgerf/js/ajv-model

  Show description for 342c7ab
  codeql-ci

  authored
  342c7ab

  Copy full SHA for 342c7ab

Commits on Mar 3, 2021

• Merge pull request #5286 from RasmusWL/share-crypto-algorithms

  Show description for c1fd484
  tausbn

  authored
  c1fd484

  Copy full SHA for c1fd484

• Sync .qhelp file renaming to other languages

  Marcono1234

  committed
  b9c0193

  Copy full SHA for b9c0193

• Python/JS: Sync CryptoAlgorithms.qll

  RasmusWL

  committed
  c3175ae

  Copy full SHA for c3175ae

• remove development comment

  erik-krogh

  committed
  b9450c9

  Copy full SHA for b9450c9

Commits on Mar 2, 2021

• refactor FunctionStyleClass to get a better join-order

  erik-krogh

  committed
  95a1edc

  Copy full SHA for 95a1edc

• optimize getACalleeValue

  erik-krogh

  committed
  4d33407

  Copy full SHA for 4d33407

• Update javascript/ql/src/semmle/javascript/security/dataflow/DeepObjectResourceExhaustionCustomizations.qll

  Show description for 919ee38
  

  asgerf

  and

  erik-krogh

  authored
  919ee38

  Copy full SHA for 919ee38

• Apply suggestions from code review

  Show description for 6c884f8
  

  asgerf

  and

  erik-krogh

  authored
  6c884f8

  Copy full SHA for 6c884f8

• JS: Add DeepResourceExhaustion test

  asgerf

  committed
  6e0322d

  Copy full SHA for 6e0322d

• JS: Move RemotePropertyInjection test into subfolder

  asgerf

  committed
  88e5348

  Copy full SHA for 88e5348

• JS: Move Source def into customizations lib

  asgerf

  committed
  5d27cd9

  Copy full SHA for 5d27cd9

• JS: Move ExceptionXss source into Xss.qll

  asgerf

  committed
  d916118

  Copy full SHA for d916118

• use local dataflow instead of type-inference for `mayHaveBooleanValue`

  erik-krogh

  committed
  47f4faa

  Copy full SHA for 47f4faa

• use callgraph instead of type-inference for array taint-steps

  erik-krogh

  committed
  ae56285

  Copy full SHA for ae56285

• use callgraph instead of TypeInference in Testing.qll

  erik-krogh

  committed
  b20ce8b

  Copy full SHA for b20ce8b

• JS: Update expected output for poly ReDoS

  asgerf

  committed
  fd9604c

  Copy full SHA for fd9604c

• JS: Fix missing qldoc

  asgerf

  committed
  31721b5

  Copy full SHA for 31721b5

• JS: Autoformat

  asgerf

  committed
  0bd60c1

  Copy full SHA for 0bd60c1

• JS: Recognize RegExps in JSON schemas

  asgerf

  committed
  12079cd

  Copy full SHA for 12079cd

• JS: Add ajv error as source of ExceptionXss

  asgerf

  committed
  7afa755

  Copy full SHA for 7afa755

• JS: Add query for resource exhaustion from deep object handling

  asgerf

  committed
  24199a5

  Copy full SHA for 24199a5

• JS: Add schema validation as TaintedObject sanitizer

  asgerf

  committed
  b978359

  Copy full SHA for b978359

• only flag React elements in ClientSideUrlRedirect if it's a HTML element, or known link class

  erik-krogh

  committed
  ecccb8a

  Copy full SHA for ecccb8a

• update Next.js xss example such that the attack is viable

  erik-krogh

  committed
  36049f0

  Copy full SHA for 36049f0

• rename and move getAPropertyNameInterpretedAsJavaScriptUrl

  erik-krogh

  committed
  1f02594

  Copy full SHA for 1f02594

• add support for replace in Next.js router

  erik-krogh

  committed
  5b5bace

  Copy full SHA for 5b5bace

• add ClientSideUrlRedirect sink for Next.js routers

  erik-krogh

  committed
  97032f8

  Copy full SHA for 97032f8

• support NextJS API endpoints

  erik-krogh

  committed
  a79c30a

  Copy full SHA for a79c30a