Commits

Breadcrumbs

History for

onmain

User selector

All users

All time

Commit History

Commits on Mar 13, 2026

• Change @security-severity for log injection queries from 7.8 to 6.1

  owen-mc

  committed
  056aa34

  Copy full SHA for 056aa34

• Change @security-severity for XSS queries from 6.1 to 7.8

  owen-mc

  committed
  f58a6e5

  Copy full SHA for f58a6e5

Commits on Nov 19, 2025

• Fix small mistake in Ruby query help

  owen-mc

  committed
  7d7af19

  Copy full SHA for 7d7af19

Commits on Nov 11, 2025

• Merge pull request #20671 from github/napalys/adjust_query_severity

  Show description for d122534
  Napalys

  authored
  d122534

  Copy full SHA for d122534

Commits on Oct 28, 2025

• Ruby/WeakFilePermissions

  d10c

  committed
  6ede0a7

  Copy full SHA for 6ede0a7

Commits on Oct 27, 2025

• Merge pull request #20550 from github/smowton/admin/document-rails-5-csrf

  Show description for 2e0e9e0
  smowton

  authored
  2e0e9e0

  Copy full SHA for 2e0e9e0

Commits on Oct 22, 2025

• CWE-020: Lower security-severity for OverlyLargeRange queries to 4.0

  Napalys

  committed
  fa47174

  Copy full SHA for fa47174

Commits on Oct 8, 2025

• Remove hashing example when not covered by query

  owen-mc

  committed
  2f22acd

  Copy full SHA for 2f22acd

• Improve qhelp for broken crypto algo queries

  Show description for 0bcdb91
  owen-mc

  committed
  0bcdb91

  Copy full SHA for 0bcdb91

• Remove erroneous comma

  owen-mc

  committed
  2a1c9d8

  Copy full SHA for 2a1c9d8

• State that ruby broken crypto algo doesn't deal with hashing

  owen-mc

  committed
  90db349

  Copy full SHA for 90db349

Commits on Sep 30, 2025

• Reword

  smowton

  authored
  ff4b97b

  Copy full SHA for ff4b97b

Commits on Sep 29, 2025

• Note issue in related query

  smowton

  authored
  f123935

  Copy full SHA for f123935

• Ruby: Update CSRF protection notes in documentation

  Show description for 18c5cb1
  smowton

  authored
  18c5cb1

  Copy full SHA for 18c5cb1

Commits on May 19, 2025

• Lower the precision of a range of harcoded password queries to remove them from query suites.

  michaelnebel

  committed
  03ecd24

  Copy full SHA for 03ecd24

Commits on Jan 23, 2025

• Ruby: resolve inserted TODOs

  asgerf

  committed
  fcb8cac

  Copy full SHA for fcb8cac

• Ruby: rerun patch query after bugfix

  asgerf

  committed
  1c136e3

  Copy full SHA for 1c136e3

Commits on Jan 17, 2025

• Ruby: mass enable diff-informed data flow

  asgerf

  committed
  4dc632f

  Copy full SHA for 4dc632f

Commits on Dec 11, 2024

• Ruby: use DeduplicatePathGraph in CodeInjection query

  asgerf

  committed
  f9c0ba3

  Copy full SHA for f9c0ba3

Commits on Aug 12, 2024

• Merge branch 'main' into patch-7

  joefarebrother

  authored
  d08713f

  Copy full SHA for d08713f

Commits on Jun 21, 2024

• Align Ruby NonConstantKernelOpen.ql Severity

  Show description for 1728e5d
  JLLeitschuh

  authored
  1728e5d

  Copy full SHA for 1728e5d

Commits on Jun 17, 2024

• Ruby: rb/weak-sensitive-data-hashing qhelp

  alexrford

  committed
  f017821

  Copy full SHA for f017821

• Ruby: minimal port of py/weak-sensitive-data-hashing

  alexrford

  committed
  d4203d9

  Copy full SHA for d4203d9

Commits on May 1, 2024

• Ruby: fix wording in rb/request-without-cert-validation

  hmac

  committed
  c00d0d3

  Copy full SHA for c00d0d3

Commits on Apr 30, 2024

• Merge pull request #16330 from erik-krogh/del-deps-apr-2024

  Show description for 7e83979
  erik-krogh

  authored
  7e83979

  Copy full SHA for 7e83979

Commits on Apr 27, 2024

• Ruby: Add URI.open example to rb/kernel-open qhelp

  hmac

  committed
  8b23f6d

  Copy full SHA for 8b23f6d

Commits on Apr 25, 2024

• delete outdated deprecations

  erik-krogh

  committed
  baa31e1

  Copy full SHA for baa31e1

Commits on Apr 12, 2024

• Merge pull request #15987 from joefarebrother/ruby-mass-reassignment

  Show description for 5cebcad
  joefarebrother

  authored
  5cebcad

  Copy full SHA for 5cebcad

Commits on Apr 11, 2024

• Merge pull request #16111 from erik-krogh/rb-url

  Show description for c00e207
  erik-krogh

  authored
  c00e207

  Copy full SHA for c00e207

Commits on Apr 10, 2024

• don't mention arrays in the qhelp for rb/shell-command-constructed-from-input, because there are no array

  erik-krogh

  committed
  4ae25c2

  Copy full SHA for 4ae25c2

Commits on Apr 8, 2024

• update the url-redirect QHelp

  erik-krogh

  committed
  59c72b6

  Copy full SHA for 59c72b6

Commits on Apr 4, 2024

• Merge pull request #16100 from erik-krogh/fix-js-rb-typo

  Show description for 0cfac60
  erik-krogh

  authored
  0cfac60

  Copy full SHA for 0cfac60

Commits on Apr 3, 2024

• fix unsanitized -> sanitized typo, and don't add a new variable just to remove newlines

  erik-krogh

  committed
  ec32bdc

  Copy full SHA for ec32bdc

Commits on Apr 2, 2024

• fix language specifier typo in qhelp for rb/multi-char-san

  erik-krogh

  committed
  572d3ba

  Copy full SHA for 572d3ba

Commits on Mar 25, 2024

• Address review comments - Fix docs typo and add a reference

  joefarebrother

  committed
  fb19288

  Copy full SHA for fb19288