Commits

Breadcrumbs

History for

on95f994a

User selector

All users

All time

Commit History

Commits on Aug 17, 2022

• Rename IncompleteMultiCharacterSanitization[Query]

  hmac

  committed
  f1a546c

  Copy full SHA for f1a546c

• JS: Share more code with Ruby

  hmac

  committed
  e48158b

  Copy full SHA for e48158b

• Share IncompleteMultiCharacterSanitization JS/Ruby

  Show description for b7d9bf4
  hmac

  committed
  b7d9bf4

  Copy full SHA for b7d9bf4

Commits on Jun 23, 2022

• rename ReDoSUtil to NfaUtils, and rename the "performance" folder to "regexp"

  erik-krogh

  committed
  13482fc

  Copy full SHA for 13482fc

Commits on May 24, 2022

• fix misspellings in predicate names

  erik-krogh

  committed
  d1ad08e

  Copy full SHA for d1ad08e

Commits on Mar 11, 2022

• patch upper-case acronyms to be PascalCase

  erik-krogh

  committed
  69353bb

  Copy full SHA for 69353bb

Commits on Jan 26, 2022

• add CWE-184 to incomplete-scheme-check and bad-tag-filter

  erik-krogh

  committed
  e75dc21

  Copy full SHA for e75dc21

Commits on Jan 24, 2022

• add CWE-80 to queries that detect bad HTML sanitizers

  erik-krogh

  committed
  ab1bc68

  Copy full SHA for ab1bc68

Commits on Dec 13, 2021

• JS/Py/Ruby: Add more CWEs to bad-tag-filter queries

  Show description for 1e45fa9
  RasmusWL

  committed
  1e45fa9

  Copy full SHA for 1e45fa9

Commits on Nov 24, 2021

• Merge branch 'main' into explicit-this

  erik-krogh

  committed
  08ce03c

  Copy full SHA for 08ce03c

Commits on Nov 1, 2021

• add explicit this to all member calls

  erik-krogh

  committed
  db40cca

  Copy full SHA for db40cca

Commits on Oct 26, 2021

• Merge branch 'main' of github.com:github/codeql into htmlReg

  erik-krogh

  committed
  44afa34

  Copy full SHA for 44afa34

• use set literal instead of big disjunction of literals

  erik-krogh

  committed
  a3c55c2

  Copy full SHA for a3c55c2

Commits on Oct 4, 2021

• apply suggestions from asgerf

  erik-krogh

  committed
  8d6cac7

  Copy full SHA for 8d6cac7

Commits on Sep 28, 2021

• update qhelp

  erik-krogh

  committed
  aafae24

  Copy full SHA for aafae24

Commits on Sep 21, 2021

• add a bad-tag-filter query for Python and JavaScript

  erik-krogh

  committed
  99ed4a1

  Copy full SHA for 99ed4a1

Commits on Aug 23, 2021

• making it more explicit what character class matching is used for

  erik-krogh

  committed
  5fe6671

  Copy full SHA for 5fe6671

Commits on Aug 18, 2021

• exclude char classes that match everything

  erik-krogh

  authored
  4cc2ac9

  Copy full SHA for 4cc2ac9

Commits on Aug 17, 2021

• restrict char class matches to alpha-numeric chars

  erik-krogh

  committed
  5d4c434

  Copy full SHA for 5d4c434

• support more regular expressions in js/incomplete-multi-character-sanitization

  erik-krogh

  committed
  59f0a41

  Copy full SHA for 59f0a41

Commits on Aug 12, 2021

• JS: Migrate to *Query.qll convention

  asgerf

  committed
  f6da030

  Copy full SHA for f6da030

Commits on Jun 15, 2021

• Update security-severity scores

  calumgrant

  committed
  771e686

  Copy full SHA for 771e686

Commits on Jun 10, 2021

• Add security-severity metadata

  calumgrant

  committed
  a594afb

  Copy full SHA for a594afb

Commits on Jan 12, 2021

• JS: only select non-nullable terms in the broken sanitizer

  esbena

  committed
  8476879

  Copy full SHA for 8476879

• JS: address review feedback

  esbena

  committed
  40cfbab

  Copy full SHA for 40cfbab

Commits on Jan 11, 2021

• JS: rewrite js/incomplete-multi-character-sanitization

  esbena

  committed
  580a24e

  Copy full SHA for 580a24e

Commits on Nov 30, 2020

• Autoformat.

  aschackmull

  committed
  8f2094f

  Copy full SHA for 8f2094f

Commits on Sep 25, 2020

• JS: tag consistency: replace cwe-20 with cwe-020

  esbena

  committed
  ba0a2e1

  Copy full SHA for ba0a2e1

Commits on Sep 21, 2020

• add support for String.prototype.replaceAll

  erik-krogh

  committed
  b090153

  Copy full SHA for b090153

Commits on Aug 26, 2020

• Apply suggestions from code review

  Show description for d27442e
  

  esbena

  and

  felicitymay

  authored
  d27442e

  Copy full SHA for d27442e

• JS: make sanitization a "common" technique rather than "important"

  esbena

  committed
  8930586

  Copy full SHA for 8930586

Commits on Aug 5, 2020

• rename JsonSerializeCall to JsonStringifyCall

  erik-krogh

  committed
  cc5ef4d

  Copy full SHA for cc5ef4d

• introduce model for JSON.stringify and similar libraries

  erik-krogh

  committed
  5a3f67a

  Copy full SHA for 5a3f67a

Commits on Jun 30, 2020

• Update UnsafeHtmlExpansion-transformed.html

  esbena

  authored
  80981ec

  Copy full SHA for 80981ec

Commits on Jun 22, 2020

• JS: polish js/incomplete-html-attribute-sanitization

  esbena

  committed
  3be094e

  Copy full SHA for 3be094e