Commits

Breadcrumbs

History for

onab23fff

User selector

All users

All time

Commit History

Commits on Oct 26, 2021

• documentation overhaul for clear-text-cookie

  erik-krogh

  committed
  ab23fff

  Copy full SHA for ab23fff

• only report clear-text cookies for sensitive cookies

  erik-krogh

  committed
  f36accf

  Copy full SHA for f36accf

• combine test files

  erik-krogh

  committed
  53b4337

  Copy full SHA for 53b4337

• delete the experimental query library for cookie queries

  erik-krogh

  committed
  9193984

  Copy full SHA for 9193984

• port experimental cookie models to non-experimental

  erik-krogh

  committed
  6858acc

  Copy full SHA for 6858acc

Commits on Oct 14, 2021

• Merge pull request #6869 from MathiasVP/fix-prefix/suffix-equality

  Show description for 47a85bb
  MathiasVP

  authored
  47a85bb

  Copy full SHA for 47a85bb

Commits on Oct 13, 2021

• JS: Replace '.prefix'/'.suffix' with '.matches'.

  MathiasVP

  committed
  f3bb0a6

  Copy full SHA for f3bb0a6

Commits on Oct 7, 2021

• Merge pull request #6815 from asgerf/js/adjust-security-severity-scores

  Show description for a0dd3d9
  codeql-ci

  authored
  a0dd3d9

  Copy full SHA for a0dd3d9

Commits on Oct 5, 2021

• JS: Update CWE tags and severity score of code injection query

  Show description for 3a20ca9
  asgerf

  committed
  3a20ca9

  Copy full SHA for 3a20ca9

• JS: Update score and add CWE-730 to LoopBoundInjection

  Show description for c4e8af9
  asgerf

  committed
  c4e8af9

  Copy full SHA for c4e8af9

• JS: Make TaintedFormatString have same severity as LogInjection

  Show description for 682a711
  asgerf

  committed
  682a711

  Copy full SHA for 682a711

• JS: Lower security-severity of queries with speculative threat model

  Show description for 83ca4ef
  asgerf

  committed
  83ca4ef

  Copy full SHA for 83ca4ef

Commits on Sep 29, 2021

• Fix `hasLocationInfo` URL reference

  Show description for 987b573
  RasmusWL

  committed
  987b573

  Copy full SHA for 987b573

Commits on Sep 15, 2021

• Merge pull request #6694 from erik-krogh/owasp-fixes

  Show description for 3f736d3
  erik-krogh

  authored
  3f736d3

  Copy full SHA for 3f736d3

Commits on Sep 14, 2021

• add some fitting CWEs to existing queries

  erik-krogh

  committed
  b936a04

  Copy full SHA for b936a04

• use the correct cwe tags

  erik-krogh

  committed
  6d12c4a

  Copy full SHA for 6d12c4a

Commits on Aug 23, 2021

• making it more explicit what character class matching is used for

  erik-krogh

  committed
  5fe6671

  Copy full SHA for 5fe6671

Commits on Aug 18, 2021

• exclude char classes that match everything

  erik-krogh

  authored
  4cc2ac9

  Copy full SHA for 4cc2ac9

Commits on Aug 17, 2021

• restrict char class matches to alpha-numeric chars

  erik-krogh

  committed
  5d4c434

  Copy full SHA for 5d4c434

• support more regular expressions in js/incomplete-multi-character-sanitization

  erik-krogh

  committed
  59f0a41

  Copy full SHA for 59f0a41

Commits on Aug 12, 2021

• JS: Remove use of deprecated API

  asgerf

  committed
  cb0075f

  Copy full SHA for cb0075f

• JS: Migrate to *Query.qll convention

  asgerf

  committed
  f6da030

  Copy full SHA for f6da030

Commits on Aug 2, 2021

• don't report dummy authentication headers as hardcoded-crendentials

  erik-krogh

  committed
  87c0c60

  Copy full SHA for 87c0c60

Commits on Jun 18, 2021

• Merge pull request #6102 from RasmusWL/js-qhelp-fixup

  Show description for 081fd28
  codeql-ci

  authored
  081fd28

  Copy full SHA for 081fd28

• JS: Fix secure example inclusion in InsecureDownload.qhelp

  RasmusWL

  committed
  968a092

  Copy full SHA for 968a092

Commits on Jun 15, 2021

• Update security-severity scores

  calumgrant

  committed
  771e686

  Copy full SHA for 771e686

Commits on Jun 10, 2021

• Add security-severity metadata

  calumgrant

  committed
  a594afb

  Copy full SHA for a594afb

Commits on Jun 8, 2021

• model `serve-handler` in `js/exposure-of-private-files`

  erik-krogh

  committed
  1ad0867

  Copy full SHA for 1ad0867

Commits on Jun 1, 2021

• Update javascript/ql/src/Security/CWE-352/MissingCsrfMiddleware.qhelp

  Show description for 96150a4
  

  security-prince

  and

  erik-krogh

  authored
  96150a4

  Copy full SHA for 96150a4

• Adding reference link for csurf

  security-prince

  authored
  975355d

  Copy full SHA for 975355d

Commits on May 10, 2021

• rewrite the qhelp to focus more on documenting unsafe functions

  erik-krogh

  committed
  646bf99

  Copy full SHA for 646bf99

Commits on May 6, 2021

• corrections after code review

  erik-krogh

  committed
  b53759c

  Copy full SHA for b53759c

• Apply suggestions from code review

  Show description for 2d1ba59
  

  erik-krogh

  and

  esbena

  authored
  2d1ba59

  Copy full SHA for 2d1ba59

• add qhelp

  erik-krogh

  committed
  7ef641e

  Copy full SHA for 7ef641e

• add js/html-constructed-from-input query

  erik-krogh

  committed
  e86a3b5

  Copy full SHA for e86a3b5