Commits

Breadcrumbs

History for

on95f994a

User selector

All users

All time

Commit History

Commits on Nov 1, 2022

• don't sanitize calls through substring calls that just remove the start

  erik-krogh

  committed
  851d53d

  Copy full SHA for 851d53d

• fix getCanonicalCharClass in NfaUtils

  erik-krogh

  committed
  15416a9

  Copy full SHA for 15416a9

• expand the explanation to include with arguments make the commands vulnerable

  erik-krogh

  committed
  6f3ca40

  Copy full SHA for 6f3ca40

• Merge pull request #10986 from erik-krogh/tsPerf

  Show description for ff2a5e8
  erik-krogh

  authored
  ff2a5e8

  Copy full SHA for ff2a5e8

Commits on Oct 30, 2022

• add second-order-command-injection query

  erik-krogh

  committed
  fc21128

  Copy full SHA for fc21128

Commits on Oct 27, 2022

• Merge pull request #10727 from erik-krogh/js-last-msg

  Show description for bbdda9e
  erik-krogh

  authored
  bbdda9e

  Copy full SHA for bbdda9e

• Merge pull request #10984 from tyage/add-next-js-source

  Show description for cecb498
  erik-krogh

  authored
  cecb498

  Copy full SHA for cecb498

• Refactoring Next.js parameter

  Show description for c22f944
  

  tyage

  and

  erik-krogh

  authored
  c22f944

  Copy full SHA for c22f944

• Update javascript/ql/lib/semmle/javascript/frameworks/Next.qll

  Show description for ac27307
  

  tyage

  and

  erik-krogh

  authored
  ac27307

  Copy full SHA for ac27307

Commits on Oct 26, 2022

• push more context into load/store steps from the exploratory flow-analysis

  erik-krogh

  committed
  21e7e27

  Copy full SHA for 21e7e27

• JS: Do not track returned values out of the enclosing function

  asgerf

  committed
  414bd40

  Copy full SHA for 414bd40

• update comment

  tyage

  committed
  95dca7c

  Copy full SHA for 95dca7c

• add `query` in comment

  tyage

  committed
  09f8ca8

  Copy full SHA for 09f8ca8

• make query parameters in ServerSideProps and next/router

  Show description for 232893a
  tyage

  committed
  232893a

  Copy full SHA for 232893a

Commits on Oct 19, 2022

• Merge branch 'main' into javascript_xss_improvements

  

  Alvaro Muñoz

  authored
  245be44

  Copy full SHA for 245be44

Commits on Oct 13, 2022

• Do not discard XSS sinks when non-content-type headers are local to the sendArgument expression

  

  Alvaro Muñoz

  committed
  41fea77

  Copy full SHA for 41fea77

• spelling: representation

  Show description for 45d1e3f
  jsoref

  committed
  45d1e3f

  Copy full SHA for 45d1e3f

• spelling: predicates

  Show description for 124c554
  jsoref

  committed
  124c554

  Copy full SHA for 124c554

• spelling: heuristic

  Show description for 52a3e3c
  jsoref

  committed
  52a3e3c

  Copy full SHA for 52a3e3c

• spelling: ambiguously

  Show description for 5d94733
  jsoref

  committed
  5d94733

  Copy full SHA for 5d94733

Commits on Oct 12, 2022

• Merge pull request #10799 from jsoref/spelling-nfautils

  Show description for 10aab81
  erik-krogh

  authored
  10aab81

  Copy full SHA for 10aab81

• spelling: representation

  Show description for 09c8a98
  jsoref

  committed
  09c8a98

  Copy full SHA for 09c8a98

• spelling: repeatable

  Show description for bb1ce89
  jsoref

  committed
  bb1ce89

  Copy full SHA for bb1ce89

• spelling: pattern

  Show description for adb8860
  jsoref

  committed
  adb8860

  Copy full SHA for adb8860

• spelling: javascript

  Show description for c7ae072
  jsoref

  committed
  c7ae072

  Copy full SHA for c7ae072

• spelling: escape

  Show description for 98b317d
  jsoref

  committed
  98b317d

  Copy full SHA for 98b317d

• spelling: abcdefghijklmnopqrstuvwxyz

  Show description for 370da94
  jsoref

  committed
  370da94

  Copy full SHA for 370da94

• spelling: response

  Show description for 08a7953
  jsoref

  committed
  08a7953

  Copy full SHA for 08a7953

Commits on Oct 11, 2022

• Deprecate previous version

  

  Alvaro Muñoz

  committed
  2ab34c8

  Copy full SHA for 2ab34c8

• Deprecate previous version

  

  Alvaro Muñoz

  committed
  15f6418

  Copy full SHA for 15f6418

• Deprecate previous version

  

  Alvaro Muñoz

  committed
  d5520d9

  Copy full SHA for d5520d9

• Deprecate previous version

  

  Alvaro Muñoz

  committed
  30958f7

  Copy full SHA for 30958f7

• Deprecate previous version

  

  Alvaro Muñoz

  committed
  2a1b2db

  Copy full SHA for 2a1b2db

• Use Pascal convention

  

  Alvaro Muñoz

  committed
  5c412b9

  Copy full SHA for 5c412b9

• Consider other XSS unsafe content-types when reasoning about XSS vulnerabilities

  

  Alvaro Muñoz

  committed
  ad80642

  Copy full SHA for ad80642