Commits

Breadcrumbs

History for

on330c2c4

User selector

All users

All time

Commit History

Commits on Nov 8, 2021

• Merge pull request #7075 from erik-krogh/cwe297

  Show description for 330c2c4
  erik-krogh

  authored
  330c2c4

  Copy full SHA for 330c2c4

• add cwe-297 to `js/disabling-certificate-validation`

  erik-krogh

  committed
  a2175a3

  Copy full SHA for a2175a3

• add cwe-942 to `js/cors-misconfiguration-for-credentials`

  erik-krogh

  committed
  507c8ad

  Copy full SHA for 507c8ad

Commits on Nov 2, 2021

• add CWE-497 to js/stack-trace-exposure

  erik-krogh

  committed
  9d99ce1

  Copy full SHA for 9d99ce1

• Merge pull request #6781 from erik-krogh/ldap

  Show description for 54fba2d
  erik-krogh

  authored
  54fba2d

  Copy full SHA for 54fba2d

• Merge branch 'main' into ldap

  erik-krogh

  committed
  7a96b8e

  Copy full SHA for 7a96b8e

• add cwe-319 "Cleartext Transmission of Sensitive Information" to js/clear-text-cookie

  erik-krogh

  committed
  41e7dea

  Copy full SHA for 41e7dea

Commits on Oct 29, 2021

• Merge pull request #6855 from erik-krogh/secCookie

  Show description for 6fffdf6
  erik-krogh

  authored
  6fffdf6

  Copy full SHA for 6fffdf6

Commits on Oct 28, 2021

• apply all doc fixes

  Show description for cfc5629
  

  erik-krogh

  and

  hubwriter

  authored
  cfc5629

  Copy full SHA for cfc5629

Commits on Oct 27, 2021

• Merge branch 'main' into ldap

  erik-krogh

  committed
  71cca6d

  Copy full SHA for 71cca6d

Commits on Oct 26, 2021

• fix typos and update docs

  erik-krogh

  committed
  5228196

  Copy full SHA for 5228196

• documentation overhaul on client-exposed-cookie (and restricting it to server-side)

  erik-krogh

  committed
  2cb3d2c

  Copy full SHA for 2cb3d2c

• documentation overhaul for clear-text-cookie

  erik-krogh

  committed
  ab23fff

  Copy full SHA for ab23fff

• only report clear-text cookies for sensitive cookies

  erik-krogh

  committed
  f36accf

  Copy full SHA for f36accf

• combine test files

  erik-krogh

  committed
  53b4337

  Copy full SHA for 53b4337

• delete the experimental query library for cookie queries

  erik-krogh

  committed
  9193984

  Copy full SHA for 9193984

• port experimental cookie models to non-experimental

  erik-krogh

  committed
  6858acc

  Copy full SHA for 6858acc

• use set literal instead of big disjunction of literals

  erik-krogh

  committed
  a3c55c2

  Copy full SHA for a3c55c2

Commits on Oct 14, 2021

• Merge pull request #6869 from MathiasVP/fix-prefix/suffix-equality

  Show description for 47a85bb
  MathiasVP

  authored
  47a85bb

  Copy full SHA for 47a85bb

Commits on Oct 13, 2021

• JS: Replace '.prefix'/'.suffix' with '.matches'.

  MathiasVP

  committed
  f3bb0a6

  Copy full SHA for f3bb0a6

Commits on Oct 7, 2021

• Merge pull request #6815 from asgerf/js/adjust-security-severity-scores

  Show description for a0dd3d9
  codeql-ci

  authored
  a0dd3d9

  Copy full SHA for a0dd3d9

Commits on Oct 5, 2021

• JS: Update CWE tags and severity score of code injection query

  Show description for 3a20ca9
  asgerf

  committed
  3a20ca9

  Copy full SHA for 3a20ca9

• JS: Update score and add CWE-730 to LoopBoundInjection

  Show description for c4e8af9
  asgerf

  committed
  c4e8af9

  Copy full SHA for c4e8af9

• JS: Make TaintedFormatString have same severity as LogInjection

  Show description for 682a711
  asgerf

  committed
  682a711

  Copy full SHA for 682a711

• JS: Lower security-severity of queries with speculative threat model

  Show description for 83ca4ef
  asgerf

  committed
  83ca4ef

  Copy full SHA for 83ca4ef

Commits on Oct 1, 2021

• add cwe 090 (ldap injection) and cwe 943 (Improper Neutralization of Special Elements in Data Query Logic) to SqlInjection.ql

  erik-krogh

  committed
  51b56a9

  Copy full SHA for 51b56a9

Commits on Sep 29, 2021

• Fix `hasLocationInfo` URL reference

  Show description for 987b573
  RasmusWL

  committed
  987b573

  Copy full SHA for 987b573

Commits on Sep 15, 2021

• Merge pull request #6694 from erik-krogh/owasp-fixes

  Show description for 3f736d3
  erik-krogh

  authored
  3f736d3

  Copy full SHA for 3f736d3

Commits on Sep 14, 2021

• add some fitting CWEs to existing queries

  erik-krogh

  committed
  b936a04

  Copy full SHA for b936a04

• use the correct cwe tags

  erik-krogh

  committed
  6d12c4a

  Copy full SHA for 6d12c4a

Commits on Aug 23, 2021

• making it more explicit what character class matching is used for

  erik-krogh

  committed
  5fe6671

  Copy full SHA for 5fe6671

Commits on Aug 18, 2021

• exclude char classes that match everything

  erik-krogh

  authored
  4cc2ac9

  Copy full SHA for 4cc2ac9

Commits on Aug 17, 2021

• restrict char class matches to alpha-numeric chars

  erik-krogh

  committed
  5d4c434

  Copy full SHA for 5d4c434

• support more regular expressions in js/incomplete-multi-character-sanitization

  erik-krogh

  committed
  59f0a41

  Copy full SHA for 59f0a41

Commits on Aug 12, 2021

• JS: Remove use of deprecated API

  asgerf

  committed
  cb0075f

  Copy full SHA for cb0075f