Commits

Breadcrumbs

History for

on24199a5

User selector

All users

All time

Commit History

Commits on Mar 2, 2021

• JS: Add query for resource exhaustion from deep object handling

  asgerf

  committed
  24199a5

  Copy full SHA for 24199a5

Commits on Jan 22, 2021

• Merge pull request #4951 from esbena/js/reintroduce-server-crash

  Show description for 527c415
  codeql-ci

  authored
  527c415

  Copy full SHA for 527c415

• Update javascript/ql/src/Security/CWE-730/examples/server-crash.GOOD-B.js

  Show description for 3f3962f
  

  esbena

  and

  erik-krogh

  authored
  3f3962f

  Copy full SHA for 3f3962f

• JS: update and prettify examples

  esbena

  committed
  718f6eb

  Copy full SHA for 718f6eb

Commits on Jan 21, 2021

• JS: add qhelp and changenotes for js/server-crash

  esbena

  committed
  9e3cc3b

  Copy full SHA for 9e3cc3b

Commits on Jan 19, 2021

• JS: reformulate js/server-crash. Support promises and shorter paths.

  esbena

  committed
  3015dcd

  Copy full SHA for 3015dcd

Commits on Jan 18, 2021

• Merge pull request #4928 from esbena/js/rewrite-multi-sanitization

  Show description for fc2fe6c
  codeql-ci

  authored
  fc2fe6c

  Copy full SHA for fc2fe6c

Commits on Jan 14, 2021

• Merge pull request #4751 from erik-krogh/logInjection

  Show description for 4229f55
  codeql-ci

  authored
  4229f55

  Copy full SHA for 4229f55

Commits on Jan 13, 2021

• Update javascript/ql/src/Security/CWE-730/ServerCrash.ql

  Show description for 12b985b
  

  esbena

  and

  erik-krogh

  authored
  12b985b

  Copy full SHA for 12b985b

• changes based on doc review

  erik-krogh

  committed
  c98dacf

  Copy full SHA for c98dacf

Commits on Jan 12, 2021

• JS: reformulate js/server-crash as a path problem

  esbena

  committed
  d591c51

  Copy full SHA for d591c51

• JS: only select non-nullable terms in the broken sanitizer

  esbena

  committed
  8476879

  Copy full SHA for 8476879

• JS: address review feedback

  esbena

  committed
  40cfbab

  Copy full SHA for 40cfbab

Commits on Jan 11, 2021

• JS: reintroduce reverted js/server-crash

  Show description for 2dbd762
  esbena

  committed
  2dbd762

  Copy full SHA for 2dbd762

• JS: rewrite js/incomplete-multi-character-sanitization

  esbena

  committed
  580a24e

  Copy full SHA for 580a24e

Commits on Dec 22, 2020

• use strings in isTypeofGard

  erik-krogh

  committed
  f7f8868

  Copy full SHA for f7f8868

• introduce and use TaintTracking::isTypeofGuard

  erik-krogh

  committed
  6eb88b9

  Copy full SHA for 6eb88b9

Commits on Dec 11, 2020

• Merge pull request #4778 from asgerf/js/more-prototype-pollution

  Show description for 9ff6d68
  codeql-ci

  authored
  9ff6d68

  Copy full SHA for 9ff6d68

Commits on Dec 9, 2020

• Apply suggestions from code review

  Show description for ed729a1
  

  asgerf

  and

  mchammer01

  authored
  ed729a1

  Copy full SHA for ed729a1

• JS: Address doc review

  asgerf

  committed
  fd293d0

  Copy full SHA for fd293d0

Commits on Dec 7, 2020

• Merge pull request #4762 from asgerf/js/template-sinks-in-code-injection

  Show description for 8129d0c
  codeql-ci

  authored
  8129d0c

  Copy full SHA for 8129d0c

• JS: Deny -> block

  asgerf

  committed
  f96c425

  Copy full SHA for f96c425

• JS: Autoformat

  asgerf

  committed
  355cfaa

  Copy full SHA for 355cfaa

• JS: Add type confusion sink for prototype pollution checks

  asgerf

  committed
  f132b4a

  Copy full SHA for f132b4a

• JS: Update to use more inclusive language

  asgerf

  committed
  479dcf5

  Copy full SHA for 479dcf5

• JS: Update CWE tags

  asgerf

  committed
  ca38a1c

  Copy full SHA for ca38a1c

• JS: Move all prototype pollution queries to CWE-915

  asgerf

  committed
  25161ed

  Copy full SHA for 25161ed

• JS: Move and rename other prototype pollution queries

  asgerf

  committed
  877b4b0

  Copy full SHA for 877b4b0

• JS: Add PrototypePollutingAssignment

  asgerf

  committed
  972c4d6

  Copy full SHA for 972c4d6

Commits on Dec 4, 2020

• JS: Address review comments

  asgerf

  committed
  f0516dd

  Copy full SHA for f0516dd

Commits on Dec 3, 2020

• Merge pull request #4753 from max-schaefer/js/more-nosql-query-args

  Show description for edbbc84
  codeql-ci

  authored
  edbbc84

  Copy full SHA for edbbc84

Commits on Dec 2, 2020

• JS: Autoformat

  asgerf

  committed
  412939d

  Copy full SHA for 412939d

Commits on Dec 1, 2020

• JS: Delete old query and update qhelp

  asgerf

  committed
  5561e8f

  Copy full SHA for 5561e8f

• JS: Adjust alert message for template sinks

  asgerf

  committed
  1459d91

  Copy full SHA for 1459d91

• move logInjection out of experimental

  erik-krogh

  committed
  6f29a87

  Copy full SHA for 6f29a87