Commits

Breadcrumbs

History for

on89613db

User selector

All users

All time

Commit History

Commits on Apr 24, 2020

• JS: add query for incomplete HTML attribute sanitization

  esbena

  committed
  89613db

  Copy full SHA for 89613db

• Merge pull request #3322 from felicitymay/merge-124-master

  Show description for d98e956
  jbj

  authored
  d98e956

  Copy full SHA for d98e956

Commits on Apr 23, 2020

• Merge pull request #3332 from erik-krogh/JGrowl

  Show description for 36b2838
  semmle-qlci

  authored
  36b2838

  Copy full SHA for 36b2838

• Merge pull request #3099 from esbena/js/introduce-poi-utility

  Show description for 801ce89
  semmle-qlci

  authored
  801ce89

  Copy full SHA for 801ce89

• add $.jGrowl as an XSS sink

  erik-krogh

  committed
  90652ee

  Copy full SHA for 90652ee

• Merge pull request #3191 from erik-krogh/XssDom

  Show description for da32926
  semmle-qlci

  authored
  da32926

  Copy full SHA for da32926

• Update javascript/ql/src/experimental/poi/PoI.qll

  Show description for a66b4b5
  

  esbena

  and

  erik-krogh

  authored
  a66b4b5

  Copy full SHA for a66b4b5

• Apply suggestions from code review

  Show description for 161c05d
  

  esbena

  and

  erik-krogh

  authored
  161c05d

  Copy full SHA for 161c05d

Commits on Apr 22, 2020

• use getABoundCallbackParameter in SocketIO

  erik-krogh

  committed
  957e407

  Copy full SHA for 957e407

• Merge branch 'rc/1.24' into merge-124-master

  Show description for 89bf35c
  felicitymay

  committed
  89bf35c

  Copy full SHA for 89bf35c

• JS: address review feedback

  esbena

  committed
  a0e6562

  Copy full SHA for a0e6562

• JS: address non-semantic review feedback

  esbena

  committed
  2186ca7

  Copy full SHA for 2186ca7

• JS: make the default `PoIConfiguration/enabled` inclusive

  

  Esben Sparre Andreasen

  authored and

  esbena

  committed
  27e5fce

  Copy full SHA for 27e5fce

• JS: remove the standard PoI configurations

  

  Esben Sparre Andreasen

  authored and

  esbena

  committed
  3b45bcd

  Copy full SHA for 3b45bcd

• JS: address PoI review comments

  

  Esben Sparre Andreasen

  authored and

  esbena

  committed
  dd6378f

  Copy full SHA for dd6378f

• JS: improve PoI::alertQuery docstring

  esbena

  committed
  b2ca3d2

  Copy full SHA for b2ca3d2

• JS: autoformat

  esbena

  committed
  c407cc0

  Copy full SHA for c407cc0

• JS: add experimental PoI module

  esbena

  committed
  e4ea089

  Copy full SHA for e4ea089

• JS: refactor ClassifyFiles.qll from ClassifyFiles.ql

  esbena

  committed
  ec73c97

  Copy full SHA for ec73c97

• reuse existing SanitizerGuard from UnsafeJQueryPlugin

  erik-krogh

  committed
  ac26741

  Copy full SHA for ac26741

• reuse existing logic in DomBasedXss

  erik-krogh

  committed
  0a29d13

  Copy full SHA for 0a29d13

• update links in xss-through-dom qhelp

  erik-krogh

  committed
  7bfea94

  Copy full SHA for 7bfea94

• Merge remote-tracking branch 'upstream/master' into XssDom

  erik-krogh

  committed
  8811455

  Copy full SHA for 8811455

• user controlled -> user-controlled

  erik-krogh

  committed
  76503d3

  Copy full SHA for 76503d3

• Update javascript/ql/src/Security/CWE-079/XssThroughDom.qhelp

  Show description for 947e982
  

  erik-krogh

  and

  mchammer01

  authored
  947e982

  Copy full SHA for 947e982

Commits on Apr 21, 2020

• Merge pull request #3169 from erik-krogh/Maps

  Show description for 2fb711e
  semmle-qlci

  authored
  2fb711e

  Copy full SHA for 2fb711e

• revert back to having 2 separate cases in JQuery::MethodCall

  erik-krogh

  committed
  59b94b3

  Copy full SHA for 59b94b3

• JS: Autoformat

  asgerf

  committed
  997b449

  Copy full SHA for 997b449

• Merge pull request #3299 from asger-semmle/js/flows-to-redundant-check

  Show description for 2ecef33
  semmle-qlci

  authored
  2ecef33

  Copy full SHA for 2ecef33

• Merge pull request #3297 from asger-semmle/js/isambient-refactor

  Show description for 80c20cb
  semmle-qlci

  authored
  80c20cb

  Copy full SHA for 80c20cb

Commits on Apr 20, 2020

• JS: Use SendCallback/ReceiveCallback in getAck

  asgerf

  committed
  d497890

  Copy full SHA for d497890

• JS: Autoformat

  asgerf

  committed
  ca60e82

  Copy full SHA for ca60e82

• update qhelp

  erik-krogh

  committed
  9fc29ee

  Copy full SHA for 9fc29ee

• add more attributes potentially vulnerable to xss-through-dom

  erik-krogh

  committed
  73b0aa4

  Copy full SHA for 73b0aa4

• merge two cases of jQuery method calls

  erik-krogh

  committed
  12f4ce8

  Copy full SHA for 12f4ce8