Commits

Breadcrumbs

History for

oncfc5629

User selector

All users

All time

Commit History

Commits on Jun 15, 2021

• Update security-severity scores

  calumgrant

  committed
  771e686

  Copy full SHA for 771e686

Commits on Jun 10, 2021

• Add security-severity metadata

  calumgrant

  committed
  a594afb

  Copy full SHA for a594afb

Commits on Oct 20, 2020

• add support for more custom CSRF checking middlewares

  erik-krogh

  committed
  e061c6a

  Copy full SHA for e061c6a

Commits on Oct 19, 2020

• add express.csrf as an CSRF protecting middleware

  erik-krogh

  committed
  ce95676

  Copy full SHA for ce95676

Commits on Oct 16, 2020

• inline `value` in `nodeLeadingToCsrfWrite`

  erik-krogh

  committed
  27a2cd3

  Copy full SHA for 27a2cd3

• Apply suggestions from code review

  Show description for 017c73d
  

  erik-krogh

  and

  asgerf

  committed
  017c73d

  Copy full SHA for 017c73d

Commits on Oct 15, 2020

• add support for home made CSRF protection middlewares in js/missing-token-validation

  erik-krogh

  committed
  4d1a974

  Copy full SHA for 4d1a974

Commits on Sep 28, 2020

• also recognize cookie writes are leading to cookie access

  erik-krogh

  committed
  e04404b

  Copy full SHA for e04404b

Commits on Sep 20, 2020

• move new predicates to a more fitting location

  erik-krogh

  committed
  ae228cb

  Copy full SHA for ae228cb

Commits on Sep 18, 2020

• add basic support for indirect route handlers

  erik-krogh

  committed
  43e5c02

  Copy full SHA for 43e5c02

Commits on Feb 27, 2020

• JS: Autoformat everything

  asgerf

  committed
  fefcf1a

  Copy full SHA for fefcf1a

Commits on Jan 28, 2020

• Apply suggestions from code review

  Show description for 701d998
  

  asgerf

  and

  erik-krogh

  authored
  701d998

  Copy full SHA for 701d998

• Update javascript/ql/src/Security/CWE-352/MissingCsrfMiddleware.ql

  Show description for 310dd05
  

  asgerf

  and

  erik-krogh

  authored
  310dd05

  Copy full SHA for 310dd05

Commits on Jan 24, 2020

• JS: Recognize req.user a cookie access

  asgerf

  committed
  b98db62

  Copy full SHA for b98db62

Commits on Jan 23, 2020

• JS: Ignore calls and csrf/captcha access

  asgerf

  committed
  a68bb9f

  Copy full SHA for a68bb9f

• JS: Add test and dont check predecessors

  asgerf

  committed
  b1ec3e1

  Copy full SHA for b1ec3e1

• JS: Sharpen missing CSRF middleware query

  asgerf

  committed
  406c6eb

  Copy full SHA for 406c6eb

Commits on Jan 7, 2019

• JavaScript: Autoformat all QL files.

  

  Max Schaefer

  committed
  31bb39a

  Copy full SHA for 31bb39a

Commits on Sep 21, 2018

• JS: review comments

  asger-semmle

  committed
  4797924

  Copy full SHA for 4797924

• JS: recognize CSRF middleware from lusca package

  asger-semmle

  committed
  5f467d2

  Copy full SHA for 5f467d2

Commits on Aug 2, 2018

• QL code and tests for C#/C++/JavaScript.

  pavgust

  committed
  b55526a

  Copy full SHA for b55526a

Loading