Commits

Breadcrumbs

History for

ond27442e

User selector

All users

All time

Commit History

Commits on Aug 26, 2020

• Apply suggestions from code review

  Show description for d27442e
  

  esbena

  and

  felicitymay

  authored
  d27442e

  Copy full SHA for d27442e

• JS: make sanitization a "common" technique rather than "important"

  esbena

  committed
  8930586

  Copy full SHA for 8930586

Commits on Aug 13, 2020

• more permissive path elements in `js/incomplete-url-substring-sanitization`

  erik-krogh

  committed
  15a7449

  Copy full SHA for 15a7449

Commits on Aug 12, 2020

• expand what urls are detected by `js/incomplete-url-substring-sanitization`

  erik-krogh

  committed
  1d111c3

  Copy full SHA for 1d111c3

Commits on Aug 5, 2020

• rename JsonSerializeCall to JsonStringifyCall

  erik-krogh

  committed
  cc5ef4d

  Copy full SHA for cc5ef4d

• introduce model for JSON.stringify and similar libraries

  erik-krogh

  committed
  5a3f67a

  Copy full SHA for 5a3f67a

Commits on Jul 6, 2020

• Merge pull request #3905 from erik-krogh/unsafeShellTypo

  Show description for 13c3513
  semmle-qlci

  authored
  13c3513

  Copy full SHA for 13c3513

• fix typo in js/shell-command-constructed-from-input

  erik-krogh

  committed
  8585312

  Copy full SHA for 8585312

Commits on Jun 30, 2020

• Update UnsafeHtmlExpansion-transformed.html

  esbena

  authored
  80981ec

  Copy full SHA for 80981ec

Commits on Jun 23, 2020

• don't report insecure randomness when the insecure random is just a fallback

  erik-krogh

  committed
  3f8881a

  Copy full SHA for 3f8881a

• Merge pull request #3753 from asger-semmle/js/xss-dom-exception-rephrasing

  Show description for 0d61443
  semmle-qlci

  authored
  0d61443

  Copy full SHA for 0d61443

Commits on Jun 22, 2020

• Merge branch 'js-team-sprint' into js/insecure-http-options

  asgerf

  authored
  ca06f6d

  Copy full SHA for ca06f6d

• Merge branch 'js-team-sprint' into js/delay-slow-query-merge

  asgerf

  authored
  7d54b02

  Copy full SHA for 7d54b02

• Revert "Merge pull request #3702 from esbena/js/memory-exhaustion"

  Show description for 9a0bbb3
  esbena

  committed
  9a0bbb3

  Copy full SHA for 9a0bbb3

• Revert "Merge pull request #3672 from esbena/js/server-crashing-route-handler"

  Show description for 0a8d15c
  esbena

  committed
  0a8d15c

  Copy full SHA for 0a8d15c

• JS: polish js/incomplete-html-attribute-sanitization

  esbena

  committed
  3be094e

  Copy full SHA for 3be094e

• Update javascript/ql/src/Security/CWE-079/ExceptionXss.ql

  Show description for 56124b6
  

  asgerf

  and

  erik-krogh

  authored
  56124b6

  Copy full SHA for 56124b6

• JS: Rephrase XSS queries that use exception/dom text as source

  asgerf

  committed
  1edb2a1

  Copy full SHA for 1edb2a1

• Merge branch 'js-team-sprint' into js/insecure-http-options

  esbena

  authored
  0654823

  Copy full SHA for 0654823

• Update DisablingCertificateValidation.qhelp

  esbena

  authored
  f1dad0d

  Copy full SHA for f1dad0d

• Apply suggestions from code review

  Show description for 3e89848
  

  esbena

  and

  mchammer01

  authored
  3e89848

  Copy full SHA for 3e89848

Commits on Jun 19, 2020

• Merge pull request #3702 from esbena/js/memory-exhaustion

  Show description for eca5e2d
  asgerf

  authored
  eca5e2d

  Copy full SHA for eca5e2d

• Merge branch 'js-team-sprint' into https-fix

  erik-krogh

  authored
  0f5ef2c

  Copy full SHA for 0f5ef2c

• Merge branch 'js-team-sprint' into priv-file-polish

  erik-krogh

  authored
  a17d152

  Copy full SHA for a17d152

• JS: mention MITM

  esbena

  committed
  457588e

  Copy full SHA for 457588e

• Update javascript/ql/src/Security/CWE-770/ResourceExhaustion.qhelp

  Show description for 0463c42
  

  esbena

  and

  mchammer01

  authored
  0463c42

  Copy full SHA for 0463c42

• Update javascript/ql/src/Security/CWE-770/ResourceExhaustion.qhelp

  Show description for b8229ca
  

  esbena

  and

  mchammer01

  authored
  b8229ca

  Copy full SHA for b8229ca

• Update javascript/ql/src/Security/CWE-770/ResourceExhaustion.qhelp

  Show description for e73becc
  

  esbena

  and

  mchammer01

  authored
  e73becc

  Copy full SHA for e73becc

• Update javascript/ql/src/Security/CWE-770/ResourceExhaustion.qhelp

  Show description for 2846666
  

  esbena

  and

  mchammer01

  authored
  2846666

  Copy full SHA for 2846666

• Update javascript/ql/src/Security/CWE-770/ResourceExhaustion.qhelp

  Show description for 4557af3
  

  esbena

  and

  mchammer01

  authored
  4557af3

  Copy full SHA for 4557af3

Commits on Jun 18, 2020

• Merge branch 'js-team-sprint' into https-fix

  erik-krogh

  authored
  7d6dac4

  Copy full SHA for 7d6dac4

• Merge branch 'js-team-sprint' into bad-random-polish

  erik-krogh

  authored
  dcf617b

  Copy full SHA for dcf617b

• rewrite sentence in private-file-exposure qhelp

  erik-krogh

  committed
  6b0adf1

  Copy full SHA for 6b0adf1

• Merge branch 'js-team-sprint' into priv-file-polish

  erik-krogh

  committed
  1556b62

  Copy full SHA for 1556b62

• Apply suggestions from doc review

  Show description for 9ba2c98
  

  erik-krogh

  and

  mchammer01

  authored
  9ba2c98

  Copy full SHA for 9ba2c98