Commits

Breadcrumbs

History for

on9d4e737

User selector

All users

All time

Commit History

Commits on Nov 29, 2024

• JS: follow proper code standards for get predicates

  Show description for 9d4e737
  

  Napalys

  and

  asgerf

  committed
  9d4e737

  Copy full SHA for 9d4e737

• JS: fixed bad alert messages when it came to incomplete sanitization for new RegExp objects

  Napalys

  committed
  3171f38

  Copy full SHA for 3171f38

Commits on Nov 28, 2024

• JS: imcomplete sanization now handles properly maybe global

  Napalys

  committed
  98fd977

  Copy full SHA for 98fd977

• JS: incomplete sanitization now also works with RegExp objects

  Napalys

  committed
  1ae1748

  Copy full SHA for 1ae1748

Commits on Nov 25, 2024

• Update javascript/ql/src/Security/CWE-178/CaseSensitiveMiddlewarePath.ql

  Show description for d6372ae
  

  Napalys

  and

  erik-krogh

  committed
  d6372ae

  Copy full SHA for d6372ae

• JS: previously js/case-sensitive-middleware-path was not taking into consideration unknown flags

  Napalys

  committed
  e38b63e

  Copy full SHA for e38b63e

Commits on Nov 14, 2024

• Merge pull request #17910 from Napalys/napalys/matchAll-support

  Show description for c8c15a0
  Napalys

  authored
  c8c15a0

  Copy full SHA for c8c15a0

Commits on Nov 5, 2024

• fix: add "actions" tag to ActionsArtifactLeak

  Show description for 881fe0b
  mbarbero

  authored
  881fe0b

  Copy full SHA for 881fe0b

• Update javascript/ql/src/Security/CWE-020/MissingRegExpAnchor.ql

  Show description for 5e8b1b0
  

  Napalys

  and

  erik-krogh

  authored
  5e8b1b0

  Copy full SHA for 5e8b1b0

• Added support for matchAll in CWE-020 including new test cases

  Napalys

  committed
  ccee34d

  Copy full SHA for ccee34d

Commits on Sep 6, 2024

• fix: Use YamlScalar for booleans

  

  Alvaro Muñoz

  committed
  5d1da86

  Copy full SHA for 5d1da86

• Fix alert message

  

  Alvaro Muñoz

  committed
  5df3af2

  Copy full SHA for 5df3af2

• [javascript] Query to detect GITHUB_TOKEN leaked in artifacts

  

  Alvaro Muñoz

  committed
  d9e8792

  Copy full SHA for d9e8792

Commits on Aug 15, 2024

• Update JS helmet model structure

  knewbury01

  committed
  e84dda4

  Copy full SHA for e84dda4

Commits on Jul 12, 2024

• Added links to eventual location of CUSTOMIZING.md

  aegilops

  committed
  79980a9

  Copy full SHA for 79980a9

• Apply suggestions from code review - docs tweaks of CUSTOMIZING.md

  Show description for 11249e7
  

  aegilops

  and

  felicitymay

  authored
  11249e7

  Copy full SHA for 11249e7

• Merge branch 'main' into aegilops/polyfill-io-compromised-script

  aegilops

  authored
  c9af53f

  Copy full SHA for c9af53f

• Merge branch 'aegilops/polyfill-io-compromised-script' of https://github.com/aegilops/codeql into aegilops/polyfill-io-compromised-script

  aegilops

  committed
  61df4d2

  Copy full SHA for 61df4d2

• Created guide on customizing these queries, and referenced it in the query help

  aegilops

  committed
  00d91dc

  Copy full SHA for 00d91dc

• Added a note that SRI can be considered for some dynamic services

  aegilops

  committed
  040f948

  Copy full SHA for 040f948

• Apply suggestions from code review - docs and wording

  Show description for 3f37fe6
  

  aegilops

  and

  felicitymay

  authored
  3f37fe6

  Copy full SHA for 3f37fe6

Commits on Jul 11, 2024

• Moved from `experimental` into default queries

  aegilops

  committed
  d71be8a

  Copy full SHA for d71be8a

Commits on Jul 9, 2024

• Moved new query to 'experimental'

  Show description for 86afd54
  aegilops

  committed
  86afd54

  Copy full SHA for 86afd54

Commits on Jul 8, 2024

• Fixed code markup

  aegilops

  committed
  2aff2a7

  Copy full SHA for 2aff2a7

• Fixed missing li closing tag

  aegilops

  committed
  c003f26

  Copy full SHA for c003f26

Commits on Jul 1, 2024

• Fixed wrong name for example HTML

  aegilops

  committed
  b4d8c48

  Copy full SHA for b4d8c48

• Added full stop to end of message

  aegilops

  committed
  1744a98

  Copy full SHA for 1744a98

• Fixed ending <p> tags

  aegilops

  committed
  ceda46e

  Copy full SHA for ceda46e

• Added detection for specific Polyfill.io CDN compromise - edited existing library and added new query and tests

  aegilops

  committed
  a1b0703

  Copy full SHA for a1b0703

• Fixed CWE tags

  aegilops

  committed
  fc6fba8

  Copy full SHA for fc6fba8

• More external references

  aegilops

  committed
  d1d0829

  Copy full SHA for d1d0829

Commits on Jun 19, 2024

• Renamed README to CUSTOMIZING, removed details from qhelp and referenced md doc instead

  aegilops

  committed
  1ecd727

  Copy full SHA for 1ecd727

• Set severity to 7.0, in line with other configuration queries

  aegilops

  committed
  a07639f

  Copy full SHA for a07639f

• Fixed formatting

  aegilops

  committed
  26f1b36

  Copy full SHA for 26f1b36

• Added data extension to set defaults, updated help, added README to explain customization

  aegilops

  committed
  252c9e9

  Copy full SHA for 252c9e9