Commits

Breadcrumbs

History for

on2a2f6de

User selector

All users

All time

Commit History

Commits on Apr 6, 2023

• Add support for composite actions

  JarLob

  committed
  9c7eecf

  Copy full SHA for 9c7eecf

Commits on Apr 5, 2023

• Improve documentation

  JarLob

  committed
  40635e6

  Copy full SHA for 40635e6

• Improve documentation

  JarLob

  committed
  9fba7d3

  Copy full SHA for 9fba7d3

• Change UI message

  JarLob

  committed
  eef1973

  Copy full SHA for eef1973

• Add simple taint tracking for env variables

  JarLob

  committed
  5c5b9f9

  Copy full SHA for 5c5b9f9

Commits on Apr 3, 2023

• Look for script injections in actions/github-script

  JarLob

  committed
  8ea4182

  Copy full SHA for 8ea4182

• fix formatting

  JarLob

  committed
  ba5747d

  Copy full SHA for ba5747d

• Add more sources, more unit tests, fixes to the GitHub Actions injection query

  JarLob

  committed
  99d634c

  Copy full SHA for 99d634c

• JS: Fix qhelp after file rename

  jketema

  committed
  17bd9c1

  Copy full SHA for 17bd9c1

Commits on Mar 31, 2023

• Merge pull request #12666 from smiddy007/improve-insufficient-pw-hash-query

  Show description for dec1e4d
  asgerf

  authored
  dec1e4d

  Copy full SHA for dec1e4d

Commits on Mar 27, 2023

• Added check to disabling certificate validation query

  ctbellanti

  committed
  6bf94e8

  Copy full SHA for 6bf94e8

• Fixed Conflicts due to recent changes to file

  smiddy007

  committed
  cef6b95

  Copy full SHA for cef6b95

• Added new example files and renamed existing ones

  smiddy007

  authored
  ad527b8

  Copy full SHA for ad527b8

Commits on Mar 22, 2023

• JS: add a missing space in alert message for js/weak-cryptographic-algorithm

  alexrford

  committed
  b000b9b

  Copy full SHA for b000b9b

Commits on Mar 10, 2023

• JavaScript: Autoformat

  aschackmull

  committed
  8d97fe9

  Copy full SHA for 8d97fe9

Commits on Feb 14, 2023

• don't call environment variables for command-line arguments

  erik-krogh

  committed
  393649b

  Copy full SHA for 393649b

• add process.env and process.argv etc. as source for `js/regex-injection`

  erik-krogh

  committed
  3647812

  Copy full SHA for 3647812

Commits on Feb 2, 2023

• Update javascript/ql/src/Security/CWE-312/CleartextLogging.qhelp

  Show description for 231110d
  

  knewbury01

  and

  erik-krogh

  authored
  231110d

  Copy full SHA for 231110d

Commits on Feb 1, 2023

• Update JS CleartextLogging qhelp

  knewbury01

  committed
  dc5eb40

  Copy full SHA for dc5eb40

Commits on Jan 18, 2023

• Updated express-rate-limit example to match implementation examples found on packages README

  mvogelgesang

  committed
  c911984

  Copy full SHA for c911984

Commits on Jan 10, 2023

• JavaScript: Remove omittable exists variables

  atorralba

  committed
  3b6dae4

  Copy full SHA for 3b6dae4

Commits on Jan 4, 2023

• Merge pull request #11582 from erik-krogh/heuristics

  Show description for cedc9c0
  erik-krogh

  authored
  cedc9c0

  Copy full SHA for cedc9c0

Commits on Jan 3, 2023

• Merge branch 'main' into calumgrant/remove-lgtm

  calumgrant

  authored
  ad55706

  Copy full SHA for ad55706

Commits on Dec 20, 2022

• Fix javascript

  jacola

  authored
  97b8126

  Copy full SHA for 97b8126

Commits on Dec 19, 2022

• JavaScript: Remove references to LGTM

  calumgrant

  committed
  4a37c01

  Copy full SHA for 4a37c01

• remove more of the implementation into ConditionalBypassQuery.qll

  erik-krogh

  committed
  66be8cd

  Copy full SHA for 66be8cd

• JS: add heuristic variants of queries that use RemoteFlowSource

  erik-krogh

  committed
  442749b

  Copy full SHA for 442749b

Commits on Dec 18, 2022

• move getACommonTld into a utility module without parameters

  erik-krogh

  committed
  35e8d6a

  Copy full SHA for 35e8d6a

• share {js,rb}/regex/missing-regexp-anchor

  erik-krogh

  committed
  26c5480

  Copy full SHA for 26c5480

Commits on Dec 17, 2022

• move `getACommonTld` to the shared pack

  erik-krogh

  committed
  355499e

  Copy full SHA for 355499e

• put the shared HostnameRegexp code in the shared regex pack

  erik-krogh

  committed
  f67d0bc

  Copy full SHA for f67d0bc

Commits on Dec 14, 2022

• JS: recognize tiny-csrf

  asgerf

  committed
  b63c658

  Copy full SHA for b63c658

• JS: Replace csurf -> lusca.csrf from example and qhelp

  asgerf

  committed
  1624191

  Copy full SHA for 1624191

Commits on Dec 5, 2022

• Merge pull request #11248 from erik-krogh/js-redosMod

  Show description for 6b9cab2
  erik-krogh

  authored
  6b9cab2

  Copy full SHA for 6b9cab2

Commits on Dec 2, 2022

• Update RequestForgeryBad.js

  mattrothenberg

  authored
  95f994a

  Copy full SHA for 95f994a