Commits

Breadcrumbs

History for

on9d4e737

User selector

All users

All time

Commit History

Commits on Mar 16, 2022

• Merge remote-tracking branch 'upstream/main' into incomplete-hostname

  aibaars

  committed
  ab93b37

  Copy full SHA for ab93b37

Commits on Mar 11, 2022

• Address comments

  aibaars

  committed
  cf4b834

  Copy full SHA for cf4b834

• patch upper-case acronyms to be PascalCase

  erik-krogh

  committed
  69353bb

  Copy full SHA for 69353bb

Commits on Mar 9, 2022

• JS/Ruby: share implementation of IncompleteUrlSubstringSanitization query

  aibaars

  committed
  747c7f6

  Copy full SHA for 747c7f6

Commits on Mar 8, 2022

• Merge pull request #7598 from erik-krogh/fieldOnlyUsedInCharPred

  Show description for 4734f19
  erik-krogh

  authored
  4734f19

  Copy full SHA for 4734f19

Commits on Mar 7, 2022

• Js/Ruby: Share IncompleteHostnameRegExp.ql

  aibaars

  committed
  98f56f4

  Copy full SHA for 98f56f4

• Ruby: IncompleteHostnameRegExp.ql

  aibaars

  committed
  9e8930c

  Copy full SHA for 9e8930c

Commits on Jan 26, 2022

• add CWE-184 to incomplete-scheme-check and bad-tag-filter

  erik-krogh

  committed
  e75dc21

  Copy full SHA for e75dc21

Commits on Jan 20, 2022

• JS: fix ql/field-only-used-in-charpred within JavaScript

  erik-krogh

  committed
  b8f1fb3

  Copy full SHA for b8f1fb3

Commits on Nov 1, 2021

• add explicit this to all member calls

  erik-krogh

  committed
  db40cca

  Copy full SHA for db40cca

Commits on Sep 29, 2021

• Fix `hasLocationInfo` URL reference

  Show description for 987b573
  RasmusWL

  committed
  987b573

  Copy full SHA for 987b573

Commits on Aug 12, 2021

• JS: Migrate to *Query.qll convention

  asgerf

  committed
  f6da030

  Copy full SHA for f6da030

Commits on Jun 15, 2021

• Update security-severity scores

  calumgrant

  committed
  771e686

  Copy full SHA for 771e686

Commits on Jun 10, 2021

• Add security-severity metadata

  calumgrant

  committed
  a594afb

  Copy full SHA for a594afb

Commits on Nov 30, 2020

• Autoformat.

  aschackmull

  committed
  8f2094f

  Copy full SHA for 8f2094f

Commits on Nov 20, 2020

• JS: followed -> followed by

  asgerf

  committed
  16429c8

  Copy full SHA for 16429c8

Commits on Nov 19, 2020

• JS: Add UntrustedDataToExternalApi query

  asgerf

  committed
  f737f34

  Copy full SHA for f737f34

Commits on Sep 25, 2020

• JS: tag consistency: replace cwe-20 with cwe-020

  esbena

  committed
  ba0a2e1

  Copy full SHA for ba0a2e1

Commits on Sep 21, 2020

• add support for String.prototype.replaceAll

  erik-krogh

  committed
  b090153

  Copy full SHA for b090153

Commits on Aug 13, 2020

• more permissive path elements in `js/incomplete-url-substring-sanitization`

  erik-krogh

  committed
  15a7449

  Copy full SHA for 15a7449

Commits on Aug 12, 2020

• expand what urls are detected by `js/incomplete-url-substring-sanitization`

  erik-krogh

  committed
  1d111c3

  Copy full SHA for 1d111c3

Commits on May 18, 2020

• JS: typo fixups

  esbena

  committed
  aa87008

  Copy full SHA for aa87008

• JS: change MembershipTest to MembershipCandidate

  esbena

  committed
  b3691cd

  Copy full SHA for b3691cd

• JS: introduce MembershipTests.qll and use in two locations

  esbena

  committed
  ddb545c

  Copy full SHA for ddb545c

Commits on May 5, 2020

• change getAnElementRead to getASubstringRead

  erik-krogh

  committed
  3568439

  Copy full SHA for 3568439

• change naming of StringSplitCall methods

  erik-krogh

  committed
  fe02137

  Copy full SHA for fe02137

• introduce StringSplitCall and use it

  erik-krogh

  committed
  89f4537

  Copy full SHA for 89f4537

Commits on Apr 6, 2020

• JS: Autoformat

  asgerf

  committed
  7da0345

  Copy full SHA for 7da0345

• JS: Recognize more forms of scheme checks

  asgerf

  committed
  2c6bead

  Copy full SHA for 2c6bead

Commits on Feb 27, 2020

• JS: Autoformat everything

  asgerf

  committed
  fefcf1a

  Copy full SHA for fefcf1a

Commits on Nov 15, 2019

• JS: Add qldoc to HostnameRegexpShared

  asger-semmle

  committed
  66db382

  Copy full SHA for 66db382

• Update javascript/ql/src/Security/CWE-020/IncompleteHostnameRegExp.ql

  Show description for 77e5305
  

  asger-semmle

  and

  max-schaefer

  committed
  77e5305

  Copy full SHA for 77e5305

• JS: Check for [^.]

  asger-semmle

  committed
  4d1f783

  Copy full SHA for 4d1f783

• JS: Disregard capture groups in lookaround assertions

  asger-semmle

  committed
  a7a90b4

  Copy full SHA for a7a90b4

• JS: Fix a FP

  asger-semmle

  committed
  153d346

  Copy full SHA for 153d346