Commits

Breadcrumbs

History for

onab1bc68

User selector

All users

All time

Commit History

Commits on Jan 24, 2022

• add CWE-80 to queries that detect bad HTML sanitizers

  erik-krogh

  committed
  ab1bc68

  Copy full SHA for ab1bc68

Commits on Dec 13, 2021

• JS/Py/Ruby: Add more CWEs to bad-tag-filter queries

  Show description for 1e45fa9
  RasmusWL

  committed
  1e45fa9

  Copy full SHA for 1e45fa9

Commits on Nov 24, 2021

• Merge branch 'main' into explicit-this

  erik-krogh

  committed
  08ce03c

  Copy full SHA for 08ce03c

Commits on Nov 1, 2021

• add explicit this to all member calls

  erik-krogh

  committed
  db40cca

  Copy full SHA for db40cca

Commits on Oct 26, 2021

• Merge branch 'main' of github.com:github/codeql into htmlReg

  erik-krogh

  committed
  44afa34

  Copy full SHA for 44afa34

• use set literal instead of big disjunction of literals

  erik-krogh

  committed
  a3c55c2

  Copy full SHA for a3c55c2

Commits on Oct 4, 2021

• apply suggestions from asgerf

  erik-krogh

  committed
  8d6cac7

  Copy full SHA for 8d6cac7

Commits on Sep 28, 2021

• update qhelp

  erik-krogh

  committed
  aafae24

  Copy full SHA for aafae24

Commits on Sep 21, 2021

• add a bad-tag-filter query for Python and JavaScript

  erik-krogh

  committed
  99ed4a1

  Copy full SHA for 99ed4a1

Commits on Aug 23, 2021

• making it more explicit what character class matching is used for

  erik-krogh

  committed
  5fe6671

  Copy full SHA for 5fe6671

Commits on Aug 18, 2021

• exclude char classes that match everything

  erik-krogh

  authored
  4cc2ac9

  Copy full SHA for 4cc2ac9

Commits on Aug 17, 2021

• restrict char class matches to alpha-numeric chars

  erik-krogh

  committed
  5d4c434

  Copy full SHA for 5d4c434

• support more regular expressions in js/incomplete-multi-character-sanitization

  erik-krogh

  committed
  59f0a41

  Copy full SHA for 59f0a41

Commits on Aug 12, 2021

• JS: Migrate to *Query.qll convention

  asgerf

  committed
  f6da030

  Copy full SHA for f6da030

Commits on Jun 15, 2021

• Update security-severity scores

  calumgrant

  committed
  771e686

  Copy full SHA for 771e686

Commits on Jun 10, 2021

• Add security-severity metadata

  calumgrant

  committed
  a594afb

  Copy full SHA for a594afb

Commits on Jan 12, 2021

• JS: only select non-nullable terms in the broken sanitizer

  esbena

  committed
  8476879

  Copy full SHA for 8476879

• JS: address review feedback

  esbena

  committed
  40cfbab

  Copy full SHA for 40cfbab

Commits on Jan 11, 2021

• JS: rewrite js/incomplete-multi-character-sanitization

  esbena

  committed
  580a24e

  Copy full SHA for 580a24e

Commits on Nov 30, 2020

• Autoformat.

  aschackmull

  committed
  8f2094f

  Copy full SHA for 8f2094f

Commits on Sep 25, 2020

• JS: tag consistency: replace cwe-20 with cwe-020

  esbena

  committed
  ba0a2e1

  Copy full SHA for ba0a2e1

Commits on Sep 21, 2020

• add support for String.prototype.replaceAll

  erik-krogh

  committed
  b090153

  Copy full SHA for b090153

Commits on Aug 26, 2020

• Apply suggestions from code review

  Show description for d27442e
  

  esbena

  and

  felicitymay

  authored
  d27442e

  Copy full SHA for d27442e

• JS: make sanitization a "common" technique rather than "important"

  esbena

  committed
  8930586

  Copy full SHA for 8930586

Commits on Aug 5, 2020

• rename JsonSerializeCall to JsonStringifyCall

  erik-krogh

  committed
  cc5ef4d

  Copy full SHA for cc5ef4d

• introduce model for JSON.stringify and similar libraries

  erik-krogh

  committed
  5a3f67a

  Copy full SHA for 5a3f67a

Commits on Jun 30, 2020

• Update UnsafeHtmlExpansion-transformed.html

  esbena

  authored
  80981ec

  Copy full SHA for 80981ec

Commits on Jun 22, 2020

• JS: polish js/incomplete-html-attribute-sanitization

  esbena

  committed
  3be094e

  Copy full SHA for 3be094e

Commits on Jun 12, 2020

• JS: simplify loop detection

  esbena

  committed
  678bb7c

  Copy full SHA for 678bb7c

Commits on Jun 9, 2020

• JS: initial version of IncompleteMultiCharacterSanitization.ql

  esbena

  committed
  2d24684

  Copy full SHA for 2d24684

Commits on May 13, 2020

• JS: address qhelp feedback

  esbena

  committed
  9552352

  Copy full SHA for 9552352

Commits on May 6, 2020

• JS: qhelp fixups

  esbena

  committed
  7cc3a5a

  Copy full SHA for 7cc3a5a

• JS: qhelp for js/unsafe-html-expansion

  esbena

  committed
  6919157

  Copy full SHA for 6919157

Commits on May 5, 2020

• JS: address review comments

  esbena

  committed
  99e5db4

  Copy full SHA for 99e5db4

• JS: query and tests for unsafe HTML expansion

  esbena

  committed
  304b013

  Copy full SHA for 304b013