Commits

Breadcrumbs

History for

ona3c55c2

User selector

All users

All time

Commit History

Commits on Oct 26, 2021

• use set literal instead of big disjunction of literals

  erik-krogh

  committed
  a3c55c2

  Copy full SHA for a3c55c2

Commits on Aug 23, 2021

• making it more explicit what character class matching is used for

  erik-krogh

  committed
  5fe6671

  Copy full SHA for 5fe6671

Commits on Aug 18, 2021

• exclude char classes that match everything

  erik-krogh

  authored
  4cc2ac9

  Copy full SHA for 4cc2ac9

Commits on Aug 17, 2021

• restrict char class matches to alpha-numeric chars

  erik-krogh

  committed
  5d4c434

  Copy full SHA for 5d4c434

• support more regular expressions in js/incomplete-multi-character-sanitization

  erik-krogh

  committed
  59f0a41

  Copy full SHA for 59f0a41

Commits on Aug 12, 2021

• JS: Migrate to *Query.qll convention

  asgerf

  committed
  f6da030

  Copy full SHA for f6da030

Commits on Jun 15, 2021

• Update security-severity scores

  calumgrant

  committed
  771e686

  Copy full SHA for 771e686

Commits on Jun 10, 2021

• Add security-severity metadata

  calumgrant

  committed
  a594afb

  Copy full SHA for a594afb

Commits on Jan 12, 2021

• JS: only select non-nullable terms in the broken sanitizer

  esbena

  committed
  8476879

  Copy full SHA for 8476879

• JS: address review feedback

  esbena

  committed
  40cfbab

  Copy full SHA for 40cfbab

Commits on Jan 11, 2021

• JS: rewrite js/incomplete-multi-character-sanitization

  esbena

  committed
  580a24e

  Copy full SHA for 580a24e

Commits on Nov 30, 2020

• Autoformat.

  aschackmull

  committed
  8f2094f

  Copy full SHA for 8f2094f

Commits on Sep 25, 2020

• JS: tag consistency: replace cwe-20 with cwe-020

  esbena

  committed
  ba0a2e1

  Copy full SHA for ba0a2e1

Commits on Sep 21, 2020

• add support for String.prototype.replaceAll

  erik-krogh

  committed
  b090153

  Copy full SHA for b090153

Commits on Aug 26, 2020

• Apply suggestions from code review

  Show description for d27442e
  

  esbena

  and

  felicitymay

  authored
  d27442e

  Copy full SHA for d27442e

• JS: make sanitization a "common" technique rather than "important"

  esbena

  committed
  8930586

  Copy full SHA for 8930586

Commits on Aug 5, 2020

• rename JsonSerializeCall to JsonStringifyCall

  erik-krogh

  committed
  cc5ef4d

  Copy full SHA for cc5ef4d

• introduce model for JSON.stringify and similar libraries

  erik-krogh

  committed
  5a3f67a

  Copy full SHA for 5a3f67a

Commits on Jun 30, 2020

• Update UnsafeHtmlExpansion-transformed.html

  esbena

  authored
  80981ec

  Copy full SHA for 80981ec

Commits on Jun 22, 2020

• JS: polish js/incomplete-html-attribute-sanitization

  esbena

  committed
  3be094e

  Copy full SHA for 3be094e

Commits on Jun 12, 2020

• JS: simplify loop detection

  esbena

  committed
  678bb7c

  Copy full SHA for 678bb7c

Commits on Jun 9, 2020

• JS: initial version of IncompleteMultiCharacterSanitization.ql

  esbena

  committed
  2d24684

  Copy full SHA for 2d24684

Commits on May 13, 2020

• JS: address qhelp feedback

  esbena

  committed
  9552352

  Copy full SHA for 9552352

Commits on May 6, 2020

• JS: qhelp fixups

  esbena

  committed
  7cc3a5a

  Copy full SHA for 7cc3a5a

• JS: qhelp for js/unsafe-html-expansion

  esbena

  committed
  6919157

  Copy full SHA for 6919157

Commits on May 5, 2020

• JS: address review comments

  esbena

  committed
  99e5db4

  Copy full SHA for 99e5db4

• JS: query and tests for unsafe HTML expansion

  esbena

  committed
  304b013

  Copy full SHA for 304b013

Commits on Apr 27, 2020

• Apply suggestions from code review

  Show description for c025089
  

  esbena

  and

  mchammer01

  authored
  c025089

  Copy full SHA for c025089

• Update javascript/ql/src/Security/CWE-116/IncompleteHtmlAttributeSanitization.qhelp

  Show description for 0a8e371
  

  esbena

  and

  asgerf

  authored
  0a8e371

  Copy full SHA for 0a8e371

Commits on Apr 24, 2020

• JS: fixup documentation

  esbena

  committed
  58b5bd5

  Copy full SHA for 58b5bd5

• JS: add qhelp

  esbena

  committed
  6d6ec89

  Copy full SHA for 6d6ec89

• JS: add query for incomplete HTML attribute sanitization

  esbena

  committed
  89613db

  Copy full SHA for 89613db

Commits on Feb 27, 2020

• JS: Autoformat everything

  asgerf

  committed
  fefcf1a

  Copy full SHA for fefcf1a

Commits on Nov 22, 2019

• JavaScript: Simplify `DoubleEscaping`.

  Show description for 1951461
  

  Max Schaefer

  committed
  1951461

  Copy full SHA for 1951461

• JavaScript: Whitelist more harmless incomplete escapes.

  

  Max Schaefer

  committed
  ff002a7

  Copy full SHA for ff002a7