Commits

Breadcrumbs

History for

onab1bc68

User selector

All users

All time

Commit History

Commits on Apr 27, 2020

• Apply suggestions from code review

  Show description for c025089
  

  esbena

  and

  mchammer01

  authored
  c025089

  Copy full SHA for c025089

• Update javascript/ql/src/Security/CWE-116/IncompleteHtmlAttributeSanitization.qhelp

  Show description for 0a8e371
  

  esbena

  and

  asgerf

  authored
  0a8e371

  Copy full SHA for 0a8e371

Commits on Apr 24, 2020

• JS: fixup documentation

  esbena

  committed
  58b5bd5

  Copy full SHA for 58b5bd5

• JS: add qhelp

  esbena

  committed
  6d6ec89

  Copy full SHA for 6d6ec89

• JS: add query for incomplete HTML attribute sanitization

  esbena

  committed
  89613db

  Copy full SHA for 89613db

Commits on Feb 27, 2020

• JS: Autoformat everything

  asgerf

  committed
  fefcf1a

  Copy full SHA for fefcf1a

Commits on Nov 22, 2019

• JavaScript: Simplify `DoubleEscaping`.

  Show description for 1951461
  

  Max Schaefer

  committed
  1951461

  Copy full SHA for 1951461

• JavaScript: Whitelist more harmless incomplete escapes.

  

  Max Schaefer

  committed
  ff002a7

  Copy full SHA for ff002a7

• JavaScript: Rephrase two predicates to help the optimiser.

  

  Max Schaefer

  committed
  659cc81

  Copy full SHA for 659cc81

• JavaScript: Introduce modelling of `String.prototype.replace` and use it in two queries.

  

  Max Schaefer

  committed
  db3eaa2

  Copy full SHA for db3eaa2

• JavaScript: Move `getAMatchedConstant(RegExpTerm)` into the library.

  

  Max Schaefer

  committed
  12ea81a

  Copy full SHA for 12ea81a

• JavaScript: Move `getStringValue(RegExpLiteral)` into the library.

  

  Max Schaefer

  committed
  a5a5deb

  Copy full SHA for a5a5deb

• JavaScript: Deal with escape-unescape-escape (and similar) chains.

  

  Max Schaefer

  committed
  0edb70f

  Copy full SHA for 0edb70f

• JavaScript: Deal with (un-)escaping on captured variables.

  

  Max Schaefer

  committed
  cb54618

  Copy full SHA for cb54618

• JavaScript: Fix regexes for escaping schemes.

  

  Max Schaefer

  committed
  61aa075

  Copy full SHA for 61aa075

• JavaScript: Recognize string escaping using `.replace` with a callback.

  

  Max Schaefer

  committed
  4f899a9

  Copy full SHA for 4f899a9

• JavaScript: Refactor `DoubleEscaping.ql`.

  

  Max Schaefer

  committed
  5dcf55e

  Copy full SHA for 5dcf55e

Commits on Nov 21, 2019

• Merge pull request #2393 from max-schaefer/js/improve-incomplete-sanitization-docs

  Show description for 8cca9b0
  semmle-qlci

  authored
  8cca9b0

  Copy full SHA for 8cca9b0

Commits on Nov 20, 2019

• JavaScript: Add a warning to `IncompleteSanitization` help.

  Show description for cb20de8
  

  Max Schaefer

  committed
  cb20de8

  Copy full SHA for cb20de8

Commits on Nov 19, 2019

• JavaScript: Teach `IncompleteSanitization` to flag incomplete path sanitizers.

  

  Max Schaefer

  committed
  5565be1

  Copy full SHA for 5565be1

Commits on Nov 12, 2019

• Revert "JavaScript: Improve double-escaping query"

  max-schaefer

  authored
  155cea7

  Copy full SHA for 155cea7

Commits on Nov 4, 2019

• JavaScript: Address review comments.

  

  Max Schaefer

  committed
  016808b

  Copy full SHA for 016808b

Commits on Oct 30, 2019

• JavaScript: Autoformat.

  

  Max Schaefer

  committed
  3bbded5

  Copy full SHA for 3bbded5

• JavaScript: Deal with escape-unescape-escape (and similar) chains.

  

  Max Schaefer

  committed
  bb0771b

  Copy full SHA for bb0771b

• JavaScript: Deal with (un-)escaping on captured variables.

  

  Max Schaefer

  committed
  8c133ff

  Copy full SHA for 8c133ff

• JavaScript: Fix regexes for escaping schemes.

  

  Max Schaefer

  committed
  a8214ce

  Copy full SHA for a8214ce

• JavaScript: Recognise wrapped chains of replacements.

  

  Max Schaefer

  committed
  5349e0f

  Copy full SHA for 5349e0f

• JavaScript: Recognise wrapped string replacement functions.

  

  Max Schaefer

  committed
  02d16b1

  Copy full SHA for 02d16b1

• JavaScript: Recognize string escaping using `.replace` with a callback.

  

  Max Schaefer

  committed
  aaeca32

  Copy full SHA for aaeca32

• JavaScript: Recognise `JSON.stringify` and `JSON.parse` as escaper/unescaper.

  

  Max Schaefer

  committed
  bd1c99d

  Copy full SHA for bd1c99d

• JavaScript: Refactor `DoubleEscaping.ql`.

  

  Max Schaefer

  committed
  63f2447

  Copy full SHA for 63f2447

Commits on Sep 11, 2019

• Merge pull request #1876 from esben-semmle/js/more-delimiter-stripping-whitelisting

  Show description for 16c95d8
  semmle-qlci

  authored
  16c95d8

  Copy full SHA for 16c95d8

Commits on Sep 6, 2019

• JavaScript: Autoformat.

  aschackmull

  committed
  ca45fb5

  Copy full SHA for ca45fb5

Commits on Sep 5, 2019

• JS: whitelist quote stripping for js/incomplete-sanitization

  

  Esben Sparre Andreasen

  committed
  a9665f5

  Copy full SHA for a9665f5

Commits on Apr 23, 2019

• JS: add newline removal whitelist for js/incomplete-sanitization

  

  Esben Sparre Andreasen

  committed
  ac0913c

  Copy full SHA for ac0913c