Commits

Breadcrumbs

History for

on9d4e737

User selector

All users

All time

Commit History

Commits on Apr 17, 2020

• Xss through DOM

  erik-krogh

  committed
  14b551f

  Copy full SHA for 14b551f

Commits on Feb 27, 2020

• JS: Autoformat everything

  asgerf

  committed
  fefcf1a

  Copy full SHA for fefcf1a

Commits on Jan 31, 2020

• JS: address doc-review comments

  esbena

  committed
  7f25c1b

  Copy full SHA for 7f25c1b

• JS: address review comments for js/unsafe-jquery-plugin

  esbena

  committed
  c70997f

  Copy full SHA for c70997f

• JS: change severity to warning

  esbena

  committed
  eaff78b

  Copy full SHA for eaff78b

• JS: add query "Unsafe jQuery plugin"

  esbena

  committed
  fef918a

  Copy full SHA for fef918a

Commits on Nov 27, 2019

• update description

  erik-krogh

  committed
  e27a699

  Copy full SHA for e27a699

Commits on Nov 26, 2019

• small changes based on review feedback

  erik-krogh

  committed
  b5a5798

  Copy full SHA for b5a5798

• change doc based on review feedback

  erik-krogh

  committed
  7ee12a3

  Copy full SHA for 7ee12a3

Commits on Nov 22, 2019

• cleanup module imports and update expected outputs

  erik-krogh

  committed
  f40d792

  Copy full SHA for f40d792

Commits on Nov 17, 2019

• apply suggestions from max

  Show description for 3b9847e
  

  erik-krogh

  and

  max-schaefer

  authored
  3b9847e

  Copy full SHA for 3b9847e

Commits on Nov 15, 2019

• import all the shared XSS sources and sinks

  erik-krogh

  committed
  e95ccee

  Copy full SHA for e95ccee

• use flow labels to avoid dual configurations

  erik-krogh

  committed
  65a018c

  Copy full SHA for 65a018c

Commits on Nov 14, 2019

• up precision from low to medium, and fix tab/spaces

  erik-krogh

  committed
  e49b5e4

  Copy full SHA for e49b5e4

• Added query for detecting XSS that happens through an exception

  erik-krogh

  committed
  7137a64

  Copy full SHA for 7137a64

Commits on Nov 7, 2019

• Update links to OWASP cheat sheet

  

  Sauyon Lee

  committed
  0040c9f

  Copy full SHA for 0040c9f

Commits on Jun 24, 2019

• JavaScript: Update link to the OWASP XSS prevetion cheat sheet.

  chrisgavin

  committed
  bce1536

  Copy full SHA for bce1536

Commits on Jan 7, 2019

• JavaScript: Autoformat all QL files.

  

  Max Schaefer

  committed
  31bb39a

  Copy full SHA for 31bb39a

Commits on Dec 6, 2018

• JavaScript: Teach Xss query about WinJS HTML injection functions.

  

  Max Schaefer

  committed
  ef347b3

  Copy full SHA for ef347b3

Commits on Nov 14, 2018

• JavaScript: Rename `hasPathFlow` to `hasFlowPath` for consistency with other languages.

  

  Max Schaefer

  committed
  3fcd02a

  Copy full SHA for 3fcd02a

• JavaScript: Select `Node`s (instead of `PathNode`s) everywhere.

  

  Max Schaefer

  committed
  52ae757

  Copy full SHA for 52ae757

• JavaScript: Select `source` and `sink` in all path queries.

  

  Max Schaefer

  committed
  e365b72

  Copy full SHA for e365b72

• JavaScript: Move from `Node` to `PathNode`.

  

  Max Schaefer

  committed
  11d6259

  Copy full SHA for 11d6259

• JavaScript: Add `import DataFlow::PathGraph`.

  

  Max Schaefer

  committed
  8d87f55

  Copy full SHA for 8d87f55

• JavaScript: Make all taint-based security queries have `@kind path-problem`.

  

  Max Schaefer

  committed
  60a1357

  Copy full SHA for 60a1357

• JavaScript: Refactor security queries for uniformity.

  

  Max Schaefer

  committed
  65bcf0f

  Copy full SHA for 65bcf0f

Commits on Nov 7, 2018

• JS: add email HTML body as XSS sink

  asger-semmle

  committed
  e0d5557

  Copy full SHA for e0d5557

Commits on Oct 2, 2018

• fix JS example based on LGTM.com alerts

  Show description for c4eb6f0
  sj

  committed
  c4eb6f0

  Copy full SHA for c4eb6f0

Commits on Sep 17, 2018

• JS: address doc review comments

  

  Esben Sparre Andreasen

  committed
  bb48421

  Copy full SHA for bb48421

Commits on Sep 14, 2018

• JS: add query: js/stored-xss

  

  Esben Sparre Andreasen

  committed
  33f98dd

  Copy full SHA for 33f98dd

Commits on Aug 2, 2018

• QL code and tests for C#/C++/JavaScript.

  pavgust

  committed
  b55526a

  Copy full SHA for b55526a

Loading