Commits

Breadcrumbs

History for

onmain

User selector

All users

All time

Commit History

Commits on Mar 13, 2026

• JS: Address PR review comments

  Show description for 821cc0e
  

  asgerf

  and

  Copilot

  committed
  821cc0e

  Copy full SHA for 821cc0e

Commits on Mar 11, 2026

• JS: Add tests in request forgery queries

  asgerf

  committed
  4a001f9

  Copy full SHA for 4a001f9

Commits on Mar 4, 2026

• Update expected test output column numbers

  owen-mc

  committed
  99a4fe4

  Copy full SHA for 99a4fe4

• js: Inline expectation should have space after $

  Show description for 0eccd90
  owen-mc

  committed
  0eccd90

  Copy full SHA for 0eccd90

Commits on Aug 29, 2025

• JS: Update locations in expected files

  asgerf

  committed
  cc8fe10

  Copy full SHA for cc8fe10

Commits on Jun 20, 2025

• Merge pull request #19784 from Napalys/js/express_middleware

  Show description for 3fbe348
  Napalys

  authored
  3fbe348

  Copy full SHA for 3fbe348

Commits on Jun 17, 2025

• JS: enchance middleware taint tracking via local source

  Napalys

  committed
  060b98d

  Copy full SHA for 060b98d

Commits on Jun 16, 2025

• JS: add `_parsedUrl` as remote input source

  Napalys

  committed
  da21a06

  Copy full SHA for da21a06

• JS: add test cases for middleware property assignment tracking

  Napalys

  committed
  67aac7a

  Copy full SHA for 67aac7a

• JS: Removed `encodeURI` from request forgery sanitizer list

  Napalys

  committed
  bdbc49c

  Copy full SHA for bdbc49c

• JS: Add test case with `encodeURI` for request forgery

  Napalys

  committed
  deb715a

  Copy full SHA for deb715a

Commits on May 30, 2025

• JS: Add `URL` from `url` package constructor taint step for request forgery detection

  Napalys

  committed
  b9b62fa

  Copy full SHA for b9b62fa

• JS: Add test case for `RequestForgery` with url wrapped via package `URL`

  Napalys

  committed
  19cc3e3

  Copy full SHA for 19cc3e3

Commits on Apr 23, 2025

• Javascript: Update test files.

  michaelnebel

  committed
  2e0ce44

  Copy full SHA for 2e0ce44

Commits on Apr 11, 2025

• Added `searchParams.get` as potential source for SSRF

  Napalys

  committed
  678eccb

  Copy full SHA for 678eccb

• Added SSRF test case with `searchParams` for `NextRequest`

  Napalys

  committed
  8674b61

  Copy full SHA for 8674b61

• Added support for `NextRequest` `middleware` SSRF.

  Napalys

  committed
  6e09a65

  Copy full SHA for 6e09a65

• Removed legacy `Consistency` check as it is redundant now with inline test expectations.

  Napalys

  committed
  734ad2d

  Copy full SHA for 734ad2d

• Added `middleware` test

  Napalys

  committed
  208487f

  Copy full SHA for 208487f

Commits on Apr 10, 2025

• Enhance Next.js API endpoint handling for compatibility with both Pages and App Router structures.

  Napalys

  committed
  63a3953

  Copy full SHA for 63a3953

• Added test cases with missing alerts for `Request` and `NextRequest`.

  Napalys

  committed
  81cba7f

  Copy full SHA for 81cba7f

Commits on Mar 28, 2025

• JS: Track through spread/rest params in API graphs

  asgerf

  committed
  1ad471c

  Copy full SHA for 1ad471c

Commits on Mar 25, 2025

• Added support for `axios.interceptors.request`.

  Napalys

  committed
  10498bb

  Copy full SHA for 10498bb

• Added test case for `axios.interceptors.request`

  Napalys

  committed
  ea181e4

  Copy full SHA for ea181e4

Commits on Mar 20, 2025

• Added test case with inheretence.

  Napalys

  committed
  056bf4f

  Copy full SHA for 056bf4f

Commits on Mar 19, 2025

• Added data as model for `ApolloServer`.

  Napalys

  committed
  cb18408

  Copy full SHA for cb18408

• Added test case `@apollo/server` with `SSRF`.

  Napalys

  committed
  23fdc35

  Copy full SHA for 23fdc35

Commits on Feb 28, 2025

• raw test output

  asgerf

  committed
  2a194a5

  Copy full SHA for 2a194a5

• JS: Accept Sources/Sink tags

  asgerf

  committed
  64d39da

  Copy full SHA for 64d39da

• JS: Accept to web socket-based SSRF alerts

  asgerf

  committed
  4d7cbe6

  Copy full SHA for 4d7cbe6

• JS: Move two alerts and add query ID

  asgerf

  committed
  764eb98

  Copy full SHA for 764eb98

• JS: Accept an alert

  asgerf

  committed
  9760965

  Copy full SHA for 9760965

• JS: Accept raw test output

  asgerf

  committed
  f5911c9

  Copy full SHA for f5911c9

• JS: Enable post-processing for all .qlref files

  asgerf

  committed
  d0ce53e

  Copy full SHA for d0ce53e

• JS: Update OK-style comments to $-style

  asgerf

  committed
  9be041e

  Copy full SHA for 9be041e