Commits

Breadcrumbs

History for

on3850f87

User selector

All users

All time

Commit History

Commits on Jan 25, 2019

• Make qhelp for 'Incomplete URL substring sanitization' consistent across languages.

  markshannon

  committed
  3850f87

  Copy full SHA for 3850f87

Commits on Jan 11, 2019

• Merge pull request #750 from aschackmull/javascript/autoformat

  Show description for 04c1502
  semmle-qlci

  authored
  04c1502

  Copy full SHA for 04c1502

• Javascript: Autoformat.

  aschackmull

  committed
  e58094c

  Copy full SHA for e58094c

Commits on Jan 9, 2019

• JavaScript: Autoformat new libraries.

  

  Max Schaefer

  committed
  3d44f0c

  Copy full SHA for 3d44f0c

• JavaScript: Make configuration IDs explicit in the API.

  

  Max Schaefer

  committed
  e960bd9

  Copy full SHA for e960bd9

• JavaScript: Add support for annotation comments specifying additional sources and sinks.

  

  Max Schaefer

  committed
  1325709

  Copy full SHA for 1325709

• JavaScript: Allow summary details to be omitted.

  Show description for bdf29d0
  

  Max Schaefer

  committed
  bdf29d0

  Copy full SHA for bdf29d0

• JavaScript: Import flow summaries through external predicates.

  

  Max Schaefer

  committed
  7c87c43

  Copy full SHA for 7c87c43

• JavaScript: Import flow summaries from CSV data.

  

  Max Schaefer

  committed
  90ad8e3

  Copy full SHA for 90ad8e3

• JavaScript: Add flow summary extraction queries.

  

  Max Schaefer

  committed
  f4fed36

  Copy full SHA for f4fed36

Commits on Jan 7, 2019

• JavaScript: Autoformat all QL files.

  

  Max Schaefer

  committed
  31bb39a

  Copy full SHA for 31bb39a

Commits on Jan 4, 2019

• Merge remote-tracking branch 'upstream/next' into qlucie/master

  

  Max Schaefer

  committed
  b4f400f

  Copy full SHA for b4f400f

Commits on Jan 2, 2019

• JavaScript: Fix performance regression in `IncorrectSuffixCheck`.

  

  Max Schaefer

  committed
  a9844b2

  Copy full SHA for a9844b2

Commits on Dec 17, 2018

• Merge remote-tracking branch 'upstream/master' into mergeback-20181217

  jbj

  committed
  5ac5aa0

  Copy full SHA for 5ac5aa0

• JS: use `.lastIndexOf` in js/incomplete-url-substring-sanitization

  

  Esben Sparre Andreasen

  committed
  4a631b4

  Copy full SHA for 4a631b4

• Merge pull request #631 from esben-semmle/js/bad-url-regexing

  Show description for 7adf1d9
  asger-semmle

  authored
  7adf1d9

  Copy full SHA for 7adf1d9

Commits on Dec 14, 2018

• JS: fix <p></p> issue

  

  Esben Sparre Andreasen

  authored
  487b8c5

  Copy full SHA for 487b8c5

• JS: address doc review comments

  

  Esben Sparre Andreasen

  committed
  bb3e3a5

  Copy full SHA for bb3e3a5

Commits on Dec 13, 2018

• Merge master into next.

  adityasharad

  committed
  f71e5ac

  Copy full SHA for f71e5ac

Commits on Dec 12, 2018

• Merge master into next.

  Show description for f92456f
  adityasharad

  committed
  f92456f

  Copy full SHA for f92456f

Commits on Dec 11, 2018

• JS: generalize js/incomplete-sanitization to handle ConstantString

  

  Esben Sparre Andreasen

  committed
  a1d92bf

  Copy full SHA for a1d92bf

• JS: address review comments

  

  Esben Sparre Andreasen

  committed
  1bc73ab

  Copy full SHA for 1bc73ab

Commits on Dec 10, 2018

• JS: rename query

  Show description for ab519d4
  

  Esben Sparre Andreasen

  committed
  ab519d4

  Copy full SHA for ab519d4

• JS: introduce near-empty RegularExpressions.qll

  

  Esben Sparre Andreasen

  committed
  7c6e28d

  Copy full SHA for 7c6e28d

• JS: address non-semantic review comments

  

  Esben Sparre Andreasen

  committed
  994fe1b

  Copy full SHA for 994fe1b

• JS: sharpen js/incomplete-url-regexp by not matching `.*` or `.+`

  

  Esben Sparre Andreasen

  committed
  d4e4bc6

  Copy full SHA for d4e4bc6

• JS: add query js/incomplete-url-regexp

  

  Esben Sparre Andreasen

  committed
  52ca696

  Copy full SHA for 52ca696

Commits on Dec 6, 2018

• Merge pull request #623 from esben-semmle/js/incomplete-url-sanitization

  Show description for 9e73ed7
  semmle-qlci

  authored
  9e73ed7

  Copy full SHA for 9e73ed7

• JS: recognize HTTP URLs in js/incomplete-url-sanitization

  

  Esben Sparre Andreasen

  committed
  4f53411

  Copy full SHA for 4f53411

• JS: add query js/incomplete-url-substring-sanitization

  

  Esben Sparre Andreasen

  committed
  229eea0

  Copy full SHA for 229eea0

• Merge pull request #628 from xiemaisi/js/setUnsafeHTML

  Show description for 3397533
  semmle-qlci

  authored
  3397533

  Copy full SHA for 3397533

• JavaScript: Teach Xss query about WinJS HTML injection functions.

  

  Max Schaefer

  committed
  ef347b3

  Copy full SHA for ef347b3

Commits on Dec 5, 2018

• JavaScript: Address review comments.

  

  Max Schaefer

  committed
  a1f210d

  Copy full SHA for a1f210d

• JavaScript: Add query help for `FileAccessToHttp` query.

  

  Max Schaefer

  committed
  22502e7

  Copy full SHA for 22502e7

• JavaScript: Add query help for `HttpToFileAccess` query.

  

  Max Schaefer

  committed
  92c1e65

  Copy full SHA for 92c1e65