Commits

Breadcrumbs

History for

on2a2f6de

User selector

All users

All time

Commit History

Commits on Jun 20, 2023

• fixed text not in a tag

  adrienpessu

  committed
  2a2f6de

  Copy full SHA for 2a2f6de

• Add fixed proposition for NodeJS

  adrienpessu

  committed
  36cb60c

  Copy full SHA for 36cb60c

Commits on Jun 19, 2023

• improv example the help file

  adrienpessu

  committed
  eb28266

  Copy full SHA for eb28266

• Adjust ZipSlip query description according to review suggestions.

  atorralba

  committed
  8f6d2ed

  Copy full SHA for 8f6d2ed

• Apply code review suggestions.

  Show description for 3c4d938
  

  atorralba

  and

  asgerf

  committed
  3c4d938

  Copy full SHA for 3c4d938

Commits on Jun 16, 2023

• Go/Java/JS/Python/Ruby: Update the description and qhelp of the ZipSlip query

  Show description for 3e96fe6
  atorralba

  committed
  3e96fe6

  Copy full SHA for 3e96fe6

Commits on Jun 5, 2023

• fix nits from doc review

  erik-krogh

  committed
  3cb2ec4

  Copy full SHA for 3cb2ec4

Commits on Jun 1, 2023

• changes based on review

  erik-krogh

  committed
  9aeba4f

  Copy full SHA for 9aeba4f

Commits on May 31, 2023

• less duplicated headers in the sql-injection samples

  erik-krogh

  committed
  1e08105

  Copy full SHA for 1e08105

• show how to use mysql.escape in the sql-injection qhelp

  erik-krogh

  committed
  9882078

  Copy full SHA for 9882078

• add an example of using dollar eq

  erik-krogh

  committed
  7d801e0

  Copy full SHA for 7d801e0

• elaborate on both SQL and NoSQL injection in the js/sql-injection qhelp

  erik-krogh

  committed
  e24b45b

  Copy full SHA for e24b45b

• put string/object in the alert-message for sql-injection

  erik-krogh

  committed
  b343dca

  Copy full SHA for b343dca

Commits on May 15, 2023

• add another example of how to fix the prototype pollution issue

  erik-krogh

  committed
  2ebce99

  Copy full SHA for 2ebce99

• fix typo, the variable in the example is called `items`

  erik-krogh

  committed
  7a338c4

  Copy full SHA for 7a338c4

• Merge pull request #12748 from JarLob/yi

  Show description for 20e8ee8
  asgerf

  authored
  20e8ee8

  Copy full SHA for 20e8ee8

Commits on May 12, 2023

• Merge pull request #13152 from github/max-schaefer/unsafe-shell-command-construction-examples-sync

  Show description for 5dfe52a
  max-schaefer

  authored
  5dfe52a

  Copy full SHA for 5dfe52a

• JavaScript: Use synchronous APIs in examples for js/shell-command-constructed-from-input.

  max-schaefer

  authored
  2e7eb50

  Copy full SHA for 2e7eb50

• JavaScript: Use gender-neutral language in qhelp for js/user-controlled-bypass

  max-schaefer

  authored
  a4f6ccf

  Copy full SHA for a4f6ccf

Commits on May 9, 2023

• Update javascript/ql/src/Security/CWE-094/ExpressionInjection.qhelp

  Show description for 5aa7135
  

  JarLob

  and

  asgerf

  authored
  5aa7135

  Copy full SHA for 5aa7135

Commits on May 3, 2023

• JS: Make implicit this receivers explicit

  kaspersv

  committed
  67950c8

  Copy full SHA for 67950c8

Commits on Apr 21, 2023

• Use double curly braces

  JarLob

  committed
  6e9f54e

  Copy full SHA for 6e9f54e

Commits on Apr 17, 2023

• Update InsufficientPasswordHash.qhelp

  Show description for e4ec1ae
  smiddy007

  authored
  e4ec1ae

  Copy full SHA for e4ec1ae

• Rename InsufficientPasswordHash_NodeJS_fixed.js to InsufficientPasswordHash_fixed.js

  smiddy007

  authored
  88d2f65

  Copy full SHA for 88d2f65

• Rename InsufficientPasswordHash_NodeJS.js to InsufficientPasswordHash.js

  smiddy007

  authored
  cbe45f7

  Copy full SHA for cbe45f7

• Delete InsufficientPasswordHash_CryptoJS_fixed

  Show description for 36d7370
  smiddy007

  authored
  36d7370

  Copy full SHA for 36d7370

• Delete InsufficientPasswordHash_CryptoJS.js

  Show description for e65daaa
  smiddy007

  authored
  e65daaa

  Copy full SHA for e65daaa

Commits on Apr 14, 2023

• Move `actions/github-script` out of Actions.qll

  JarLob

  committed
  e9dee3a

  Copy full SHA for e9dee3a

• Extract `where` parts into predicates

  JarLob

  committed
  3724ea1

  Copy full SHA for 3724ea1

• Encapsulate github-script

  JarLob

  committed
  ac1c206

  Copy full SHA for ac1c206

• Encapsulate composite actions

  JarLob

  committed
  d80c541

  Copy full SHA for d80c541

Commits on Apr 13, 2023

• Make predicate name clearer

  JarLob

  committed
  9406576

  Copy full SHA for 9406576

• Use `YamlMapping` for modeling `Env`

  JarLob

  committed
  79218a3

  Copy full SHA for 79218a3

• Rename Env

  JarLob

  committed
  dd52ef8

  Copy full SHA for dd52ef8

Commits on Apr 6, 2023

• Fix warnings

  JarLob

  committed
  7573c61

  Copy full SHA for 7573c61