Commits

Breadcrumbs

History for

on330c2c4

User selector

All users

All time

Commit History

Commits on Oct 5, 2021

• Fixes compile errors by moving files

  Show description for 57ef989
  aeisenberg

  committed
  57ef989

  Copy full SHA for 57ef989

• JS: Update CWE tags and severity score of code injection query

  Show description for 3a20ca9
  asgerf

  committed
  3a20ca9

  Copy full SHA for 3a20ca9

• JS: Update score and add CWE-730 to LoopBoundInjection

  Show description for c4e8af9
  asgerf

  committed
  c4e8af9

  Copy full SHA for c4e8af9

• JS: Make TaintedFormatString have same severity as LogInjection

  Show description for 682a711
  asgerf

  committed
  682a711

  Copy full SHA for 682a711

• JS: Lower security-severity of queries with speculative threat model

  Show description for 83ca4ef
  asgerf

  committed
  83ca4ef

  Copy full SHA for 83ca4ef

Commits on Oct 1, 2021

• add cwe 090 (ldap injection) and cwe 943 (Improper Neutralization of Special Elements in Data Query Logic) to SqlInjection.ql

  erik-krogh

  committed
  51b56a9

  Copy full SHA for 51b56a9

• remove ldap examples from experimental folder

  erik-krogh

  committed
  bcf4626

  Copy full SHA for bcf4626

• naively move ldap into the SQL injection query

  erik-krogh

  committed
  2b286a8

  Copy full SHA for 2b286a8

• naive conversion of ldapjs model to API node

  erik-krogh

  committed
  94e2676

  Copy full SHA for 94e2676

Commits on Sep 29, 2021

• Fix `hasLocationInfo` URL reference

  Show description for 987b573
  RasmusWL

  committed
  987b573

  Copy full SHA for 987b573

Commits on Sep 27, 2021

• adding suggestion that removes sanitizer for unknown base urls

  

  luciaromeroML

  committed
  1fc58e5

  Copy full SHA for 1fc58e5

Commits on Sep 17, 2021

• adding comments to some functions

  

  luciaromeroML

  committed
  f348a5c

  Copy full SHA for f348a5c

• simplifying sentence

  

  luciaromeroML

  committed
  25065bc

  Copy full SHA for 25065bc

• format ql code

  

  luciaromeroML

  committed
  0b0ac83

  Copy full SHA for 0b0ac83

• Merge branch 'main' into javascript/ssrf

  valeria-meli

  committed
  054218a

  Copy full SHA for 054218a

Commits on Sep 15, 2021

• Merge pull request #6694 from erik-krogh/owasp-fixes

  Show description for 3f736d3
  erik-krogh

  authored
  3f736d3

  Copy full SHA for 3f736d3

• Merge pull request #6698 from asgerf/js/template-self-assignment

  Show description for 220f2de
  codeql-ci

  authored
  220f2de

  Copy full SHA for 220f2de

• JS: Exclude template files in SelfAssignment

  asgerf

  committed
  b5db404

  Copy full SHA for b5db404

Commits on Sep 14, 2021

• Merge branch 'main' into clipBoard

  erik-krogh

  committed
  3b6c8c5

  Copy full SHA for 3b6c8c5

• add some fitting CWEs to existing queries

  erik-krogh

  committed
  b936a04

  Copy full SHA for b936a04

• use the correct cwe tags

  erik-krogh

  committed
  6d12c4a

  Copy full SHA for 6d12c4a

Commits on Sep 13, 2021

• delete ClipboardXss.ql experimental query

  erik-krogh

  committed
  bac80bf

  Copy full SHA for bac80bf

Commits on Sep 10, 2021

• JS: Detect untrusted inputs in 'discussion' and 'discussion_comment' payloads

  rhysd

  committed
  97ed9ed

  Copy full SHA for 97ed9ed

Commits on Sep 3, 2021

• Packaging: Normalize all qlpack.yml files for all languages

  Show description for 6a47fca
  aeisenberg

  committed
  6a47fca

  Copy full SHA for 6a47fca

Commits on Sep 2, 2021

• ternary operator

  

  Nati Pesaresi

  committed
  629efb8

  Copy full SHA for 629efb8

Commits on Aug 31, 2021

• Merge pull request #6498 from bananabr/main

  Show description for cf9ab83
  codeql-ci

  authored
  cf9ab83

  Copy full SHA for cf9ab83

Commits on Aug 25, 2021

• Remove unncessary results

  Show description for b8ce5a6
  bananabr

  authored
  b8ce5a6

  Copy full SHA for b8ce5a6

• Packaging: Rafactor Javascript core libraries

  Show description for 45d1fa7
  aeisenberg

  committed
  45d1fa7

  Copy full SHA for 45d1fa7

• Update javascript/ql/src/experimental/Security/CWE-079/ClipboardXss.ql

  Show description for cd40de7
  

  bananabr

  and

  asgerf

  authored
  cd40de7

  Copy full SHA for cd40de7

• Merge pull request #6472 from erik-krogh/apiPromise

  Show description for 1daeea5
  codeql-ci

  authored
  1daeea5

  Copy full SHA for 1daeea5

• Merge pull request #6403 from asgerf/js/handlebars-extraction

  Show description for 170a069
  codeql-ci

  authored
  170a069

  Copy full SHA for 170a069

• JS: Autoformatttt

  asgerf

  committed
  87843a3

  Copy full SHA for 87843a3

• add a `getMaybePromisifiedCall` method in API graphs, and use it to model `child_process`

  erik-krogh

  committed
  c664d7c

  Copy full SHA for c664d7c

Commits on Aug 24, 2021

• JS: Fix qldoc

  asgerf

  committed
  8a564cc

  Copy full SHA for 8a564cc

• Update javascript/ql/src/semmle/javascript/frameworks/Templating.qll

  Show description for 8f8a468
  

  asgerf

  and

  erik-krogh

  authored
  8f8a468

  Copy full SHA for 8f8a468