Commits

Breadcrumbs

History for

on8d87f55

User selector

All users

All time

Commit History

Commits on Nov 14, 2018

• JavaScript: Add `import DataFlow::PathGraph`.

  

  Max Schaefer

  committed
  8d87f55

  Copy full SHA for 8d87f55

• JavaScript: Make all taint-based security queries have `@kind path-problem`.

  

  Max Schaefer

  committed
  60a1357

  Copy full SHA for 60a1357

• JavaScript: Refactor security queries for uniformity.

  

  Max Schaefer

  committed
  65bcf0f

  Copy full SHA for 65bcf0f

• JavaScript: Refactor `HostHeaderPoisoningInEmailGeneration` query.

  

  Max Schaefer

  committed
  9b4ae9e

  Copy full SHA for 9b4ae9e

• JavaScript: Remove a few unnecessary imports.

  

  Max Schaefer

  committed
  c51cd50

  Copy full SHA for c51cd50

Commits on Nov 8, 2018

• Merge pull request #407 from asger-semmle/email-xss

  Show description for 3c49bc6
  semmle-qlci

  authored
  3c49bc6

  Copy full SHA for 3c49bc6

Commits on Nov 7, 2018

• JS: add email HTML body as XSS sink

  asger-semmle

  committed
  e0d5557

  Copy full SHA for e0d5557

• JavaScript: Fix mixed tabs/spaces in qhelp.

  

  Max Schaefer

  committed
  5ffe45a

  Copy full SHA for 5ffe45a

Commits on Oct 22, 2018

• Merge pull request #305 from asger-semmle/json-taint-kind

  Show description for 7702b58
  

  Max Schaefer

  authored
  7702b58

  Copy full SHA for 7702b58

Commits on Oct 16, 2018

• JS: avoid flagging early returns in js/user-controlled-bypass

  

  Esben Sparre Andreasen

  committed
  ffbbb80

  Copy full SHA for ffbbb80

Commits on Oct 10, 2018

• JS: make NosqlInjection use object taint

  asger-semmle

  committed
  d72d734

  Copy full SHA for d72d734

• JS: change "remote request" to "network request"

  

  Esben Sparre Andreasen

  committed
  358b6c3

  Copy full SHA for 358b6c3

• JS: address more review comments

  

  Esben Sparre Andreasen

  committed
  e93545d

  Copy full SHA for e93545d

• JS: polish HttpToFileAccess.ql

  

  Esben Sparre Andreasen

  committed
  b00aa36

  Copy full SHA for b00aa36

• JS: polish FileAccessToHttp.ql

  

  Esben Sparre Andreasen

  committed
  d261915

  Copy full SHA for d261915

Commits on Oct 8, 2018

• Merge pull request #227 from xiemaisi/js/taint-kinds

  Show description for d2af4ab
  asger-semmle

  authored
  d2af4ab

  Copy full SHA for d2af4ab

Commits on Oct 4, 2018

• Merge pull request #132 from denislevin/denisl/js/HttpToFileAccessTest

  Show description for 98254e8
  semmle-qlci

  authored
  98254e8

  Copy full SHA for 98254e8

Commits on Oct 3, 2018

• JavaScript: Rename a predicate in `CommandInjection.qll`.

  

  Max Schaefer

  committed
  4e4ef52

  Copy full SHA for 4e4ef52

Commits on Oct 2, 2018

• Merge branch 'master' into denisl/js/HttpToFileAccessTest

  denislevin

  authored
  e147e69

  Copy full SHA for e147e69

• fix JS example based on LGTM.com alerts

  Show description for c4eb6f0
  sj

  committed
  c4eb6f0

  Copy full SHA for c4eb6f0

Commits on Oct 1, 2018

• Merge branch 'master'

  

  Denis Levin

  committed
  9c487bc

  Copy full SHA for 9c487bc

• JS: address doc review

  asger-semmle

  committed
  d005d71

  Copy full SHA for d005d71

Commits on Sep 27, 2018

• JS: Factor RequestHeaderAccess into separate class

  asger-semmle

  committed
  e4c8653

  Copy full SHA for e4c8653

• JS: add qhelp

  asger-semmle

  committed
  c879654

  Copy full SHA for c879654

• JS: Add HostHeaderPoisoningInEmailGeneration query

  asger-semmle

  committed
  46336a5

  Copy full SHA for 46336a5

Commits on Sep 21, 2018

• Squished changes for HttpToFileAccess commint

  

  Denis Levin

  committed
  8152cef

  Copy full SHA for 8152cef

• JS: review comments

  asger-semmle

  committed
  4797924

  Copy full SHA for 4797924

• JS: recognize CSRF middleware from lusca package

  asger-semmle

  committed
  5f467d2

  Copy full SHA for 5f467d2

Commits on Sep 19, 2018

• Merge pull request #195 from esben-semmle/js/reflected-xss-through-filenames

  Show description for 89f2dbf
  semmle-qlci

  authored
  89f2dbf

  Copy full SHA for 89f2dbf

Commits on Sep 17, 2018

• JS: address doc review comments

  

  Esben Sparre Andreasen

  committed
  bb48421

  Copy full SHA for bb48421

Commits on Sep 14, 2018

• JS: add query: js/stored-xss

  

  Esben Sparre Andreasen

  committed
  33f98dd

  Copy full SHA for 33f98dd

• JS: lower @precision of js/remote-property-injection

  

  Esben Sparre Andreasen

  committed
  81aeda6

  Copy full SHA for 81aeda6

Commits on Sep 9, 2018

• JS: reduce declared precision of js/request-forgery

  

  Esben Sparre Andreasen

  committed
  aaf1ac7

  Copy full SHA for aaf1ac7

Commits on Sep 5, 2018

• JS: address doc review comments

  

  Esben Sparre Andreasen

  committed
  6e1846b

  Copy full SHA for 6e1846b

• JS: address review comments

  

  Esben Sparre Andreasen

  committed
  89887e7

  Copy full SHA for 89887e7