Commits

Breadcrumbs

History for

on95f994a

User selector

All users

All time

Commit History

Commits on Nov 7, 2022

• Improved Hapi support

  Show description for 8b33e6d
  mbaluda

  authored
  8b33e6d

  Copy full SHA for 8b33e6d

• Merge pull request #11071 from erik-krogh/fixCanon

  Show description for d67235b
  erik-krogh

  authored
  d67235b

  Copy full SHA for d67235b

• Merge branch 'main' into aliasFlow

  erik-krogh

  committed
  fc38bf0

  Copy full SHA for fc38bf0

• treat arrays that gets executed with shell:true as a sink for `js/shell-command-constructed-from-input`

  erik-krogh

  committed
  40032f2

  Copy full SHA for 40032f2

Commits on Nov 5, 2022

• Post-release preparation for codeql-cli-2.11.3

  

  github-actions[bot]

  committed
  fca754b

  Copy full SHA for fca754b

Commits on Nov 4, 2022

• Release preparation for version 2.11.3

  

  github-actions[bot]

  committed
  5083272

  Copy full SHA for 5083272

• Merge pull request #11013 from erik-krogh/sndCmd

  Show description for c82d8cb
  erik-krogh

  authored
  c82d8cb

  Copy full SHA for c82d8cb

• C#: Sync files.

  michaelnebel

  committed
  3c8fb05

  Copy full SHA for 3c8fb05

Commits on Nov 3, 2022

• recognize more re-exported values as exported

  erik-krogh

  committed
  655b4a4

  Copy full SHA for 655b4a4

Commits on Nov 1, 2022

• don't sanitize calls through substring calls that just remove the start

  erik-krogh

  committed
  851d53d

  Copy full SHA for 851d53d

• fix getCanonicalCharClass in NfaUtils

  erik-krogh

  committed
  15416a9

  Copy full SHA for 15416a9

• expand the explanation to include with arguments make the commands vulnerable

  erik-krogh

  committed
  6f3ca40

  Copy full SHA for 6f3ca40

• Merge pull request #10986 from erik-krogh/tsPerf

  Show description for ff2a5e8
  erik-krogh

  authored
  ff2a5e8

  Copy full SHA for ff2a5e8

Commits on Oct 30, 2022

• add second-order-command-injection query

  erik-krogh

  committed
  fc21128

  Copy full SHA for fc21128

Commits on Oct 27, 2022

• Merge pull request #10727 from erik-krogh/js-last-msg

  Show description for bbdda9e
  erik-krogh

  authored
  bbdda9e

  Copy full SHA for bbdda9e

• Merge pull request #10984 from tyage/add-next-js-source

  Show description for cecb498
  erik-krogh

  authored
  cecb498

  Copy full SHA for cecb498

• Refactoring Next.js parameter

  Show description for c22f944
  

  tyage

  and

  erik-krogh

  authored
  c22f944

  Copy full SHA for c22f944

• Update javascript/ql/lib/semmle/javascript/frameworks/Next.qll

  Show description for ac27307
  

  tyage

  and

  erik-krogh

  authored
  ac27307

  Copy full SHA for ac27307

Commits on Oct 26, 2022

• push more context into load/store steps from the exploratory flow-analysis

  erik-krogh

  committed
  21e7e27

  Copy full SHA for 21e7e27

• JS: Do not track returned values out of the enclosing function

  asgerf

  committed
  414bd40

  Copy full SHA for 414bd40

• update comment

  tyage

  committed
  95dca7c

  Copy full SHA for 95dca7c

• add `query` in comment

  tyage

  committed
  09f8ca8

  Copy full SHA for 09f8ca8

• make query parameters in ServerSideProps and next/router

  Show description for 232893a
  tyage

  committed
  232893a

  Copy full SHA for 232893a

Commits on Oct 21, 2022

• Post-release preparation for codeql-cli-2.11.2

  

  github-actions[bot]

  committed
  be76932

  Copy full SHA for be76932

Commits on Oct 20, 2022

• Release preparation for version 2.11.2

  

  github-actions[bot]

  committed
  9a0848b

  Copy full SHA for 9a0848b

Commits on Oct 19, 2022

• Merge branch 'main' into javascript_xss_improvements

  

  Alvaro Muñoz

  authored
  245be44

  Copy full SHA for 245be44

Commits on Oct 13, 2022

• Do not discard XSS sinks when non-content-type headers are local to the sendArgument expression

  

  Alvaro Muñoz

  committed
  41fea77

  Copy full SHA for 41fea77

• spelling: representation

  Show description for 45d1e3f
  jsoref

  committed
  45d1e3f

  Copy full SHA for 45d1e3f

• spelling: predicates

  Show description for 124c554
  jsoref

  committed
  124c554

  Copy full SHA for 124c554

• spelling: heuristic

  Show description for 52a3e3c
  jsoref

  committed
  52a3e3c

  Copy full SHA for 52a3e3c

• spelling: ambiguously

  Show description for 5d94733
  jsoref

  committed
  5d94733

  Copy full SHA for 5d94733

Commits on Oct 12, 2022

• Merge pull request #10799 from jsoref/spelling-nfautils

  Show description for 10aab81
  erik-krogh

  authored
  10aab81

  Copy full SHA for 10aab81

• spelling: representation

  Show description for 09c8a98
  jsoref

  committed
  09c8a98

  Copy full SHA for 09c8a98

• spelling: repeatable

  Show description for bb1ce89
  jsoref

  committed
  bb1ce89

  Copy full SHA for bb1ce89

• spelling: pattern

  Show description for adb8860
  jsoref

  committed
  adb8860

  Copy full SHA for adb8860