Commits

Breadcrumbs

History for

ona1d92bf

User selector

All users

All time

Commit History

Commits on Dec 11, 2018

• JS: generalize js/incomplete-sanitization to handle ConstantString

  

  Esben Sparre Andreasen

  committed
  a1d92bf

  Copy full SHA for a1d92bf

Commits on Dec 6, 2018

• Merge pull request #623 from esben-semmle/js/incomplete-url-sanitization

  Show description for 9e73ed7
  semmle-qlci

  authored
  9e73ed7

  Copy full SHA for 9e73ed7

• JS: recognize HTTP URLs in js/incomplete-url-sanitization

  

  Esben Sparre Andreasen

  committed
  4f53411

  Copy full SHA for 4f53411

• JS: add query js/incomplete-url-substring-sanitization

  

  Esben Sparre Andreasen

  committed
  229eea0

  Copy full SHA for 229eea0

• Merge pull request #628 from xiemaisi/js/setUnsafeHTML

  Show description for 3397533
  semmle-qlci

  authored
  3397533

  Copy full SHA for 3397533

• JavaScript: Teach Xss query about WinJS HTML injection functions.

  

  Max Schaefer

  committed
  ef347b3

  Copy full SHA for ef347b3

Commits on Dec 4, 2018

• JS: address comments

  asger-semmle

  committed
  7121a18

  Copy full SHA for 7121a18

Commits on Dec 3, 2018

• JS: add comment about arrays

  asger-semmle

  committed
  1130d0c

  Copy full SHA for 1130d0c

• JS: address comments

  asger-semmle

  committed
  374f7ab

  Copy full SHA for 374f7ab

• JS: fix typo in method name

  asger-semmle

  committed
  c4d7672

  Copy full SHA for c4d7672

• JS: add IncorrectSuffixCheck query

  asger-semmle

  committed
  0462eb4

  Copy full SHA for 0462eb4

Commits on Nov 30, 2018

• JavaScript: Add new query `DoubleEscaping`.

  

  Max Schaefer

  committed
  10166be

  Copy full SHA for 10166be

Commits on Nov 19, 2018

• JavaScript: Remove accidentally committed `.actual` file.

  

  Max Schaefer

  committed
  6021d24

  Copy full SHA for 6021d24

Commits on Nov 14, 2018

• JavaScript: Rename `hasPathFlow` to `hasFlowPath` for consistency with other languages.

  

  Max Schaefer

  committed
  3fcd02a

  Copy full SHA for 3fcd02a

• JavaScript: Select `Node`s (instead of `PathNode`s) everywhere.

  

  Max Schaefer

  committed
  52ae757

  Copy full SHA for 52ae757

• JavaScript: Select `source` and `sink` in all path queries.

  

  Max Schaefer

  committed
  e365b72

  Copy full SHA for e365b72

• JavaScript: Adjust `ConditionalBypass` query.

  

  Max Schaefer

  committed
  d5af008

  Copy full SHA for d5af008

• JavaScript: Move from `Node` to `PathNode`.

  

  Max Schaefer

  committed
  11d6259

  Copy full SHA for 11d6259

• JavaScript: Add `import DataFlow::PathGraph`.

  

  Max Schaefer

  committed
  8d87f55

  Copy full SHA for 8d87f55

• JavaScript: Make all taint-based security queries have `@kind path-problem`.

  

  Max Schaefer

  committed
  60a1357

  Copy full SHA for 60a1357

• JavaScript: Refactor security queries for uniformity.

  

  Max Schaefer

  committed
  65bcf0f

  Copy full SHA for 65bcf0f

• JavaScript: Refactor `HostHeaderPoisoningInEmailGeneration` query.

  

  Max Schaefer

  committed
  9b4ae9e

  Copy full SHA for 9b4ae9e

• JavaScript: Remove a few unnecessary imports.

  

  Max Schaefer

  committed
  c51cd50

  Copy full SHA for c51cd50

Commits on Nov 8, 2018

• Merge pull request #407 from asger-semmle/email-xss

  Show description for 3c49bc6
  semmle-qlci

  authored
  3c49bc6

  Copy full SHA for 3c49bc6

Commits on Nov 7, 2018

• JS: add email HTML body as XSS sink

  asger-semmle

  committed
  e0d5557

  Copy full SHA for e0d5557

• JavaScript: Fix mixed tabs/spaces in qhelp.

  

  Max Schaefer

  committed
  5ffe45a

  Copy full SHA for 5ffe45a

Commits on Oct 22, 2018

• Merge pull request #305 from asger-semmle/json-taint-kind

  Show description for 7702b58
  

  Max Schaefer

  authored
  7702b58

  Copy full SHA for 7702b58

Commits on Oct 16, 2018

• JS: avoid flagging early returns in js/user-controlled-bypass

  

  Esben Sparre Andreasen

  committed
  ffbbb80

  Copy full SHA for ffbbb80

Commits on Oct 10, 2018

• JS: make NosqlInjection use object taint

  asger-semmle

  committed
  d72d734

  Copy full SHA for d72d734

• JS: change "remote request" to "network request"

  

  Esben Sparre Andreasen

  committed
  358b6c3

  Copy full SHA for 358b6c3

• JS: address more review comments

  

  Esben Sparre Andreasen

  committed
  e93545d

  Copy full SHA for e93545d

• JS: polish HttpToFileAccess.ql

  

  Esben Sparre Andreasen

  committed
  b00aa36

  Copy full SHA for b00aa36

• JS: polish FileAccessToHttp.ql

  

  Esben Sparre Andreasen

  committed
  d261915

  Copy full SHA for d261915

Commits on Oct 8, 2018

• Merge pull request #227 from xiemaisi/js/taint-kinds

  Show description for d2af4ab
  asger-semmle

  authored
  d2af4ab

  Copy full SHA for d2af4ab

Commits on Oct 4, 2018

• Merge pull request #132 from denislevin/denisl/js/HttpToFileAccessTest

  Show description for 98254e8
  semmle-qlci

  authored
  98254e8

  Copy full SHA for 98254e8