Commits

Breadcrumbs

History for

on77e5305

User selector

All users

All time

Commit History

Commits on Nov 15, 2019

• Update javascript/ql/src/Security/CWE-020/IncompleteHostnameRegExp.ql

  Show description for 77e5305
  

  asger-semmle

  and

  max-schaefer

  committed
  77e5305

  Copy full SHA for 77e5305

• JS: Check for [^.]

  asger-semmle

  committed
  4d1f783

  Copy full SHA for 4d1f783

• JS: Disregard capture groups in lookaround assertions

  asger-semmle

  committed
  a7a90b4

  Copy full SHA for a7a90b4

• JS: More qldoc

  asger-semmle

  committed
  2242df9

  Copy full SHA for 2242df9

• Update javascript/ql/src/semmle/javascript/Regexp.qll

  Show description for dc6c15c
  

  asger-semmle

  and

  max-schaefer

  committed
  dc6c15c

  Copy full SHA for dc6c15c

• JS: Docs regarding regexp terms in string literals

  asger-semmle

  committed
  dd9274e

  Copy full SHA for dd9274e

• JS: Simplify charpred of Match

  asger-semmle

  committed
  4680e3a

  Copy full SHA for 4680e3a

• JS: Remove outdated comment

  asger-semmle

  committed
  c01005a

  Copy full SHA for c01005a

• JS: Fix a FP

  asger-semmle

  committed
  153d346

  Copy full SHA for 153d346

• JS: Add missing post-anchor case to MissingRegExpAnchor

  asger-semmle

  committed
  8c5b9b9

  Copy full SHA for 8c5b9b9

• JS: Fix FPs from TLDs without a domain name

  asger-semmle

  committed
  17ad978

  Copy full SHA for 17ad978

• JS: Use type inference to refine regexp string tracking

  asger-semmle

  committed
  20fb771

  Copy full SHA for 20fb771

• JS: Port IncompleteHostnameRegExp

  asger-semmle

  committed
  e45c361

  Copy full SHA for e45c361

• JS: Port unanchored RegExp query but for hostnames only

  asger-semmle

  committed
  9ecab1b

  Copy full SHA for 9ecab1b

• JS: Do not flag semi-anchored regexps in .replace()

  asger-semmle

  committed
  e5f2f9e

  Copy full SHA for e5f2f9e

• JS: Whitelist one more FP case

  asger-semmle

  committed
  3e37950

  Copy full SHA for 3e37950

• JS: Include anchor direction in message

  asger-semmle

  committed
  2b151cd

  Copy full SHA for 2b151cd

• JS: Restrict semi-anchored regex query more

  asger-semmle

  committed
  3e952cf

  Copy full SHA for 3e952cf

• JS: Update semi-anchored regex query

  asger-semmle

  committed
  8bc89ee

  Copy full SHA for 8bc89ee

• JS: Restrict RegExp queries to actual regular expressions

  asger-semmle

  committed
  c21d095

  Copy full SHA for c21d095

• JS: Extend RegExpTerm in ReDoS

  asger-semmle

  committed
  b8711fc

  Copy full SHA for b8711fc

• JS: Deabstractify RegExpTerm classes

  asger-semmle

  committed
  b6c1c17

  Copy full SHA for b6c1c17

• JS: Make ReDoS check string-based regexes

  asger-semmle

  committed
  e0bdc77

  Copy full SHA for e0bdc77

• JS: Update ReDoS query

  asger-semmle

  committed
  97e5da1

  Copy full SHA for 97e5da1

• JS: Update QL API

  asger-semmle

  committed
  57de638

  Copy full SHA for 57de638

• JS: Extract RegExp ASTs from string literals

  asger-semmle

  committed
  0e1246c

  Copy full SHA for 0e1246c

Commits on Nov 14, 2019

• Merge pull request #2310 from max-schaefer/js/insufficient-url-scheme-check

  Show description for 2ea7d14
  esbena

  authored
  2ea7d14

  Copy full SHA for 2ea7d14

• JavaScript: Address review comments.

  

  Max Schaefer

  committed
  3b1e6c3

  Copy full SHA for 3b1e6c3

• JS: add security tests for malicious torrents

  esbena

  committed
  cc76834

  Copy full SHA for cc76834

• JS: add some parsed torrent properties as remote flow sources

  esbena

  committed
  bea59ec

  Copy full SHA for bea59ec

Commits on Nov 13, 2019

• remove duplicate reflectiveCallNode method, and removing redundant getExpr() method

  erik-krogh

  committed
  538690e

  Copy full SHA for 538690e

• Merge pull request #2270 from erik-krogh/reflectiveExpr

  Show description for b11a742
  semmle-qlci

  authored
  b11a742

  Copy full SHA for b11a742

• Update javascript/ql/src/Security/CWE-020/IncompleteUrlSchemeCheck.ql

  Show description for f804d31
  

  max-schaefer

  and

  esbena

  authored
  f804d31

  Copy full SHA for f804d31

• JavaScript: Add query `IncompleteUrlSchemeCheck.ql`.

  

  Max Schaefer

  committed
  ab583b7

  Copy full SHA for ab583b7

Commits on Nov 12, 2019

• Revert "JavaScript: Improve double-escaping query"

  max-schaefer

  authored
  155cea7

  Copy full SHA for 155cea7