Commits

Breadcrumbs

History for

one48158b

User selector

All users

All time

Commit History

Commits on Jun 10, 2021

• Add security-severity metadata

  calumgrant

  committed
  a594afb

  Copy full SHA for a594afb

Commits on Nov 30, 2020

• Autoformat.

  aschackmull

  committed
  8f2094f

  Copy full SHA for 8f2094f

Commits on Nov 20, 2020

• JS: followed -> followed by

  asgerf

  committed
  16429c8

  Copy full SHA for 16429c8

Commits on Nov 19, 2020

• JS: Add UntrustedDataToExternalApi query

  asgerf

  committed
  f737f34

  Copy full SHA for f737f34

Commits on Sep 25, 2020

• JS: tag consistency: replace cwe-20 with cwe-020

  esbena

  committed
  ba0a2e1

  Copy full SHA for ba0a2e1

Commits on Sep 21, 2020

• add support for String.prototype.replaceAll

  erik-krogh

  committed
  b090153

  Copy full SHA for b090153

Commits on Aug 13, 2020

• more permissive path elements in `js/incomplete-url-substring-sanitization`

  erik-krogh

  committed
  15a7449

  Copy full SHA for 15a7449

Commits on Aug 12, 2020

• expand what urls are detected by `js/incomplete-url-substring-sanitization`

  erik-krogh

  committed
  1d111c3

  Copy full SHA for 1d111c3

Commits on May 18, 2020

• JS: typo fixups

  esbena

  committed
  aa87008

  Copy full SHA for aa87008

• JS: change MembershipTest to MembershipCandidate

  esbena

  committed
  b3691cd

  Copy full SHA for b3691cd

• JS: introduce MembershipTests.qll and use in two locations

  esbena

  committed
  ddb545c

  Copy full SHA for ddb545c

Commits on May 5, 2020

• change getAnElementRead to getASubstringRead

  erik-krogh

  committed
  3568439

  Copy full SHA for 3568439

• change naming of StringSplitCall methods

  erik-krogh

  committed
  fe02137

  Copy full SHA for fe02137

• introduce StringSplitCall and use it

  erik-krogh

  committed
  89f4537

  Copy full SHA for 89f4537

Commits on Apr 6, 2020

• JS: Autoformat

  asgerf

  committed
  7da0345

  Copy full SHA for 7da0345

• JS: Recognize more forms of scheme checks

  asgerf

  committed
  2c6bead

  Copy full SHA for 2c6bead

Commits on Feb 27, 2020

• JS: Autoformat everything

  asgerf

  committed
  fefcf1a

  Copy full SHA for fefcf1a

Commits on Nov 15, 2019

• JS: Add qldoc to HostnameRegexpShared

  asger-semmle

  committed
  66db382

  Copy full SHA for 66db382

• Update javascript/ql/src/Security/CWE-020/IncompleteHostnameRegExp.ql

  Show description for 77e5305
  

  asger-semmle

  and

  max-schaefer

  committed
  77e5305

  Copy full SHA for 77e5305

• JS: Check for [^.]

  asger-semmle

  committed
  4d1f783

  Copy full SHA for 4d1f783

• JS: Disregard capture groups in lookaround assertions

  asger-semmle

  committed
  a7a90b4

  Copy full SHA for a7a90b4

• JS: Fix a FP

  asger-semmle

  committed
  153d346

  Copy full SHA for 153d346

• JS: Add missing post-anchor case to MissingRegExpAnchor

  asger-semmle

  committed
  8c5b9b9

  Copy full SHA for 8c5b9b9

• JS: Fix FPs from TLDs without a domain name

  asger-semmle

  committed
  17ad978

  Copy full SHA for 17ad978

• JS: Port IncompleteHostnameRegExp

  asger-semmle

  committed
  e45c361

  Copy full SHA for e45c361

• JS: Port unanchored RegExp query but for hostnames only

  asger-semmle

  committed
  9ecab1b

  Copy full SHA for 9ecab1b

• JS: Do not flag semi-anchored regexps in .replace()

  asger-semmle

  committed
  e5f2f9e

  Copy full SHA for e5f2f9e

• JS: Whitelist one more FP case

  asger-semmle

  committed
  3e37950

  Copy full SHA for 3e37950

• JS: Include anchor direction in message

  asger-semmle

  committed
  2b151cd

  Copy full SHA for 2b151cd

• JS: Restrict semi-anchored regex query more

  asger-semmle

  committed
  3e952cf

  Copy full SHA for 3e952cf

• JS: Update semi-anchored regex query

  asger-semmle

  committed
  8bc89ee

  Copy full SHA for 8bc89ee

Commits on Nov 14, 2019

• Merge pull request #2310 from max-schaefer/js/insufficient-url-scheme-check

  Show description for 2ea7d14
  esbena

  authored
  2ea7d14

  Copy full SHA for 2ea7d14

• JavaScript: Address review comments.

  

  Max Schaefer

  committed
  3b1e6c3

  Copy full SHA for 3b1e6c3

Commits on Nov 13, 2019

• Update javascript/ql/src/Security/CWE-020/IncompleteUrlSchemeCheck.ql

  Show description for f804d31
  

  max-schaefer

  and

  esbena

  authored
  f804d31

  Copy full SHA for f804d31

• JavaScript: Add query `IncompleteUrlSchemeCheck.ql`.

  

  Max Schaefer

  committed
  ab583b7

  Copy full SHA for ab583b7