Commits

Breadcrumbs

History for

onab1bc68

User selector

All users

All time

Commit History

Commits on Sep 21, 2021

• add a bad-tag-filter query for Python and JavaScript

  erik-krogh

  committed
  99ed4a1

  Copy full SHA for 99ed4a1

Commits on Sep 15, 2021

• Merge pull request #6694 from erik-krogh/owasp-fixes

  Show description for 3f736d3
  erik-krogh

  authored
  3f736d3

  Copy full SHA for 3f736d3

Commits on Sep 14, 2021

• add some fitting CWEs to existing queries

  erik-krogh

  committed
  b936a04

  Copy full SHA for b936a04

• use the correct cwe tags

  erik-krogh

  committed
  6d12c4a

  Copy full SHA for 6d12c4a

Commits on Aug 23, 2021

• making it more explicit what character class matching is used for

  erik-krogh

  committed
  5fe6671

  Copy full SHA for 5fe6671

Commits on Aug 18, 2021

• exclude char classes that match everything

  erik-krogh

  authored
  4cc2ac9

  Copy full SHA for 4cc2ac9

Commits on Aug 17, 2021

• restrict char class matches to alpha-numeric chars

  erik-krogh

  committed
  5d4c434

  Copy full SHA for 5d4c434

• support more regular expressions in js/incomplete-multi-character-sanitization

  erik-krogh

  committed
  59f0a41

  Copy full SHA for 59f0a41

Commits on Aug 12, 2021

• JS: Remove use of deprecated API

  asgerf

  committed
  cb0075f

  Copy full SHA for cb0075f

• JS: Migrate to *Query.qll convention

  asgerf

  committed
  f6da030

  Copy full SHA for f6da030

Commits on Aug 2, 2021

• don't report dummy authentication headers as hardcoded-crendentials

  erik-krogh

  committed
  87c0c60

  Copy full SHA for 87c0c60

Commits on Jun 18, 2021

• Merge pull request #6102 from RasmusWL/js-qhelp-fixup

  Show description for 081fd28
  codeql-ci

  authored
  081fd28

  Copy full SHA for 081fd28

• JS: Fix secure example inclusion in InsecureDownload.qhelp

  RasmusWL

  committed
  968a092

  Copy full SHA for 968a092

Commits on Jun 15, 2021

• Update security-severity scores

  calumgrant

  committed
  771e686

  Copy full SHA for 771e686

Commits on Jun 10, 2021

• Add security-severity metadata

  calumgrant

  committed
  a594afb

  Copy full SHA for a594afb

Commits on Jun 8, 2021

• model `serve-handler` in `js/exposure-of-private-files`

  erik-krogh

  committed
  1ad0867

  Copy full SHA for 1ad0867

Commits on Jun 1, 2021

• Update javascript/ql/src/Security/CWE-352/MissingCsrfMiddleware.qhelp

  Show description for 96150a4
  

  security-prince

  and

  erik-krogh

  authored
  96150a4

  Copy full SHA for 96150a4

• Adding reference link for csurf

  security-prince

  authored
  975355d

  Copy full SHA for 975355d

Commits on May 10, 2021

• rewrite the qhelp to focus more on documenting unsafe functions

  erik-krogh

  committed
  646bf99

  Copy full SHA for 646bf99

Commits on May 6, 2021

• corrections after code review

  erik-krogh

  committed
  b53759c

  Copy full SHA for b53759c

• Apply suggestions from code review

  Show description for 2d1ba59
  

  erik-krogh

  and

  esbena

  authored
  2d1ba59

  Copy full SHA for 2d1ba59

• add qhelp

  erik-krogh

  committed
  7ef641e

  Copy full SHA for 7ef641e

• add js/html-constructed-from-input query

  erik-krogh

  committed
  e86a3b5

  Copy full SHA for e86a3b5

Commits on Apr 23, 2021

• Fix all dead qhelp links

  Show description for 455b840
  smowton

  committed
  455b840

  Copy full SHA for 455b840

Commits on Apr 12, 2021

• support all ClientRequests in js/disabling-certificate-validation

  erik-krogh

  committed
  172d613

  Copy full SHA for 172d613

Commits on Mar 25, 2021

• Merge branch 'main' into topPack

  erik-krogh

  committed
  3b6b404

  Copy full SHA for 3b6b404

Commits on Mar 23, 2021

• JS: BadRandomness can just use type-tracking now

  asgerf

  committed
  f8f3770

  Copy full SHA for f8f3770

Commits on Mar 18, 2021

• add link to source in alert-message for js/shell-command-constructed-from-input

  erik-krogh

  committed
  d998d06

  Copy full SHA for d998d06

Commits on Mar 17, 2021

• JS: Update with new AdditionalTaintStep subclasses

  asgerf

  committed
  96c6e4d

  Copy full SHA for 96c6e4d

Commits on Mar 15, 2021

• Apply suggestions from code review

  Show description for b039267
  

  erik-krogh

  and

  asgerf

  authored
  b039267

  Copy full SHA for b039267

Commits on Mar 9, 2021

• add qhelp

  erik-krogh

  committed
  70b8cde

  Copy full SHA for 70b8cde

• behaviour preserving refactorization into modules

  erik-krogh

  committed
  b30484d

  Copy full SHA for b30484d

• move TemplateObjectInjection out of experimental

  erik-krogh

  committed
  caf1dbd

  Copy full SHA for caf1dbd

Commits on Mar 4, 2021

• Use `.inc.qhelp` extension for included help files

  Marcono1234

  committed
  5a8ffa5

  Copy full SHA for 5a8ffa5

Commits on Mar 2, 2021

• JS: Move ExceptionXss source into Xss.qll

  asgerf

  committed
  d916118

  Copy full SHA for d916118