Commits

Breadcrumbs

History for

ond27442e

User selector

All users

All time

Commit History

Commits on Aug 26, 2020

• Apply suggestions from code review

  Show description for d27442e
  

  esbena

  and

  felicitymay

  authored
  d27442e

  Copy full SHA for d27442e

• JS: make sanitization a "common" technique rather than "important"

  esbena

  committed
  8930586

  Copy full SHA for 8930586

Commits on Aug 5, 2020

• rename JsonSerializeCall to JsonStringifyCall

  erik-krogh

  committed
  cc5ef4d

  Copy full SHA for cc5ef4d

• introduce model for JSON.stringify and similar libraries

  erik-krogh

  committed
  5a3f67a

  Copy full SHA for 5a3f67a

Commits on Jun 30, 2020

• Update UnsafeHtmlExpansion-transformed.html

  esbena

  authored
  80981ec

  Copy full SHA for 80981ec

Commits on Jun 22, 2020

• JS: polish js/incomplete-html-attribute-sanitization

  esbena

  committed
  3be094e

  Copy full SHA for 3be094e

Commits on Jun 12, 2020

• JS: simplify loop detection

  esbena

  committed
  678bb7c

  Copy full SHA for 678bb7c

Commits on Jun 9, 2020

• JS: initial version of IncompleteMultiCharacterSanitization.ql

  esbena

  committed
  2d24684

  Copy full SHA for 2d24684

Commits on May 13, 2020

• JS: address qhelp feedback

  esbena

  committed
  9552352

  Copy full SHA for 9552352

Commits on May 6, 2020

• JS: qhelp fixups

  esbena

  committed
  7cc3a5a

  Copy full SHA for 7cc3a5a

• JS: qhelp for js/unsafe-html-expansion

  esbena

  committed
  6919157

  Copy full SHA for 6919157

Commits on May 5, 2020

• JS: address review comments

  esbena

  committed
  99e5db4

  Copy full SHA for 99e5db4

• JS: query and tests for unsafe HTML expansion

  esbena

  committed
  304b013

  Copy full SHA for 304b013

Commits on Apr 27, 2020

• Apply suggestions from code review

  Show description for c025089
  

  esbena

  and

  mchammer01

  authored
  c025089

  Copy full SHA for c025089

• Update javascript/ql/src/Security/CWE-116/IncompleteHtmlAttributeSanitization.qhelp

  Show description for 0a8e371
  

  esbena

  and

  asgerf

  authored
  0a8e371

  Copy full SHA for 0a8e371

Commits on Apr 24, 2020

• JS: fixup documentation

  esbena

  committed
  58b5bd5

  Copy full SHA for 58b5bd5

• JS: add qhelp

  esbena

  committed
  6d6ec89

  Copy full SHA for 6d6ec89

• JS: add query for incomplete HTML attribute sanitization

  esbena

  committed
  89613db

  Copy full SHA for 89613db

Commits on Feb 27, 2020

• JS: Autoformat everything

  asgerf

  committed
  fefcf1a

  Copy full SHA for fefcf1a

Commits on Nov 22, 2019

• JavaScript: Simplify `DoubleEscaping`.

  Show description for 1951461
  

  Max Schaefer

  committed
  1951461

  Copy full SHA for 1951461

• JavaScript: Whitelist more harmless incomplete escapes.

  

  Max Schaefer

  committed
  ff002a7

  Copy full SHA for ff002a7

• JavaScript: Rephrase two predicates to help the optimiser.

  

  Max Schaefer

  committed
  659cc81

  Copy full SHA for 659cc81

• JavaScript: Introduce modelling of `String.prototype.replace` and use it in two queries.

  

  Max Schaefer

  committed
  db3eaa2

  Copy full SHA for db3eaa2

• JavaScript: Move `getAMatchedConstant(RegExpTerm)` into the library.

  

  Max Schaefer

  committed
  12ea81a

  Copy full SHA for 12ea81a

• JavaScript: Move `getStringValue(RegExpLiteral)` into the library.

  

  Max Schaefer

  committed
  a5a5deb

  Copy full SHA for a5a5deb

• JavaScript: Deal with escape-unescape-escape (and similar) chains.

  

  Max Schaefer

  committed
  0edb70f

  Copy full SHA for 0edb70f

• JavaScript: Deal with (un-)escaping on captured variables.

  

  Max Schaefer

  committed
  cb54618

  Copy full SHA for cb54618

• JavaScript: Fix regexes for escaping schemes.

  

  Max Schaefer

  committed
  61aa075

  Copy full SHA for 61aa075

• JavaScript: Recognize string escaping using `.replace` with a callback.

  

  Max Schaefer

  committed
  4f899a9

  Copy full SHA for 4f899a9

• JavaScript: Refactor `DoubleEscaping.ql`.

  

  Max Schaefer

  committed
  5dcf55e

  Copy full SHA for 5dcf55e

Commits on Nov 21, 2019

• Merge pull request #2393 from max-schaefer/js/improve-incomplete-sanitization-docs

  Show description for 8cca9b0
  semmle-qlci

  authored
  8cca9b0

  Copy full SHA for 8cca9b0

Commits on Nov 20, 2019

• JavaScript: Add a warning to `IncompleteSanitization` help.

  Show description for cb20de8
  

  Max Schaefer

  committed
  cb20de8

  Copy full SHA for cb20de8

Commits on Nov 19, 2019

• JavaScript: Teach `IncompleteSanitization` to flag incomplete path sanitizers.

  

  Max Schaefer

  committed
  5565be1

  Copy full SHA for 5565be1

Commits on Nov 12, 2019

• Revert "JavaScript: Improve double-escaping query"

  max-schaefer

  authored
  155cea7

  Copy full SHA for 155cea7

Commits on Nov 4, 2019

• JavaScript: Address review comments.

  

  Max Schaefer

  committed
  016808b

  Copy full SHA for 016808b