Commits

Breadcrumbs

History for

onab1bc68

User selector

All users

All time

Commit History

Commits on Jan 24, 2022

• add CWE-80 to queries that detect bad HTML sanitizers

  erik-krogh

  committed
  ab1bc68

  Copy full SHA for ab1bc68

Commits on Jan 20, 2022

• fix most issues found by ql/class-doc-style in JS

  erik-krogh

  committed
  5780161

  Copy full SHA for 5780161

Commits on Jan 19, 2022

• add cwe-471 to js/prototype-pollution

  erik-krogh

  committed
  cb9e14f

  Copy full SHA for cb9e14f

• add CWE-471 to the prototype-pollution queries

  erik-krogh

  committed
  e4203a4

  Copy full SHA for e4203a4

Commits on Jan 14, 2022

• Merge pull request #7489 from edoardopirovano/fix-example

  Show description for f2818eb
  edoardopirovano

  authored
  f2818eb

  Copy full SHA for f2818eb

Commits on Jan 4, 2022

• Apply suggestions from code review

  Show description for 081765c
  

  edoardopirovano

  and

  asgerf

  authored
  081765c

  Copy full SHA for 081765c

• Merge pull request #7369 from RasmusWL/filter-tag-cwe

  Show description for 5ba70ff
  yoff

  authored
  5ba70ff

  Copy full SHA for 5ba70ff

Commits on Dec 29, 2021

• Fix example in JavaScript query

  edoardopirovano

  committed
  a616059

  Copy full SHA for a616059

Commits on Dec 17, 2021

• Merge pull request #7049 from asgerf/js/routing-trees

  Show description for 39ec713
  codeql-ci

  authored
  39ec713

  Copy full SHA for 39ec713

Commits on Dec 15, 2021

• JS: Rename RouteHandlerInput->RouteHandlerParameter

  asgerf

  committed
  8aa4d82

  Copy full SHA for 8aa4d82

• JS: Rename getAUseSite -> getRouteInstallation

  asgerf

  committed
  218b746

  Copy full SHA for 218b746

Commits on Dec 13, 2021

• JS/Py/Ruby: Add more CWEs to bad-tag-filter queries

  Show description for 1e45fa9
  RasmusWL

  committed
  1e45fa9

  Copy full SHA for 1e45fa9

Commits on Dec 7, 2021

• JS: Remove stray TODO

  asgerf

  committed
  23480b2

  Copy full SHA for 23480b2

• JS: Do not flag auth endpoints that are immune to Login CSRF

  asgerf

  committed
  5f8ea39

  Copy full SHA for 5f8ea39

• JS: Treat non-cookie based auth as CSRF preventer

  asgerf

  committed
  66b1612

  Copy full SHA for 66b1612

• JS: Improve precision of missing CSRF middleware

  asgerf

  committed
  b732193

  Copy full SHA for b732193

• JS: Port missing rate limiting query

  asgerf

  committed
  5269933

  Copy full SHA for 5269933

• JS: Port CSRF query

  asgerf

  committed
  389a3c9

  Copy full SHA for 389a3c9

Commits on Dec 6, 2021

• JS: Tag queries with CWE-328

  Show description for 7ae1047
  RasmusWL

  committed
  7ae1047

  Copy full SHA for 7ae1047

Commits on Nov 29, 2021

• Merge pull request #7233 from RasmusWL/fix-cleartext-logging-cwes

  Show description for e63f914
  yoff

  authored
  e63f914

  Copy full SHA for e63f914

Commits on Nov 24, 2021

• Merge branch 'main' into explicit-this

  erik-krogh

  committed
  08ce03c

  Copy full SHA for 08ce03c

• JS/PY: Remove CWE-315 form CleartextLogging

  Show description for c05ffd4
  RasmusWL

  committed
  c05ffd4

  Copy full SHA for c05ffd4

Commits on Nov 18, 2021

• Merge pull request #6561 from erik-krogh/htmlReg

  Show description for 1cca377
  erik-krogh

  authored
  1cca377

  Copy full SHA for 1cca377

Commits on Nov 13, 2021

• Merge branch 'main' into explicit-this

  erik-krogh

  committed
  0ff36cd

  Copy full SHA for 0ff36cd

Commits on Nov 12, 2021

• Merge pull request #7057 from erik-krogh/cwe598

  Show description for eef7709
  erik-krogh

  authored
  eef7709

  Copy full SHA for eef7709

Commits on Nov 11, 2021

• Merge pull request #7021 from erik-krogh/cwe326

  Show description for b513033
  erik-krogh

  authored
  b513033

  Copy full SHA for b513033

• Merge pull request #5908 from erik-krogh/protoLib

  Show description for 891694b
  erik-krogh

  authored
  891694b

  Copy full SHA for 891694b

• Merge pull request #7029 from erik-krogh/cwe384

  Show description for 140a70f
  erik-krogh

  authored
  140a70f

  Copy full SHA for 140a70f

Commits on Nov 10, 2021

• add CWE-532 to the clear-text-logging query

  erik-krogh

  committed
  5543465

  Copy full SHA for 5543465

• Update javascript/ql/src/Security/CWE-384/SessionFixation.qhelp

  Show description for ab5d945
  

  erik-krogh

  and

  ethanpalm

  authored
  ab5d945

  Copy full SHA for ab5d945

Commits on Nov 8, 2021

• Merge pull request #7075 from erik-krogh/cwe297

  Show description for 330c2c4
  erik-krogh

  authored
  330c2c4

  Copy full SHA for 330c2c4

• add cwe-297 to `js/disabling-certificate-validation`

  erik-krogh

  committed
  a2175a3

  Copy full SHA for a2175a3

• add cwe-942 to `js/cors-misconfiguration-for-credentials`

  erik-krogh

  committed
  507c8ad

  Copy full SHA for 507c8ad

• improve qhelp

  Show description for 3d6a526
  

  erik-krogh

  and

  esbena

  authored
  3d6a526

  Copy full SHA for 3d6a526

Commits on Nov 4, 2021

• Merge branch 'main' into htmlReg

  erik-krogh

  committed
  02f500b

  Copy full SHA for 02f500b