Commits

Breadcrumbs

History for

onf8f3770

User selector

All users

All time

Commit History

Commits on Nov 22, 2019

• JavaScript: Refactor `DoubleEscaping.ql`.

  

  Max Schaefer

  committed
  5dcf55e

  Copy full SHA for 5dcf55e

Commits on Nov 21, 2019

• Merge pull request #2393 from max-schaefer/js/improve-incomplete-sanitization-docs

  Show description for 8cca9b0
  semmle-qlci

  authored
  8cca9b0

  Copy full SHA for 8cca9b0

Commits on Nov 20, 2019

• JavaScript: Add a warning to `IncompleteSanitization` help.

  Show description for cb20de8
  

  Max Schaefer

  committed
  cb20de8

  Copy full SHA for cb20de8

Commits on Nov 19, 2019

• JavaScript: Teach `IncompleteSanitization` to flag incomplete path sanitizers.

  

  Max Schaefer

  committed
  5565be1

  Copy full SHA for 5565be1

Commits on Nov 12, 2019

• Revert "JavaScript: Improve double-escaping query"

  max-schaefer

  authored
  155cea7

  Copy full SHA for 155cea7

Commits on Nov 4, 2019

• JavaScript: Address review comments.

  

  Max Schaefer

  committed
  016808b

  Copy full SHA for 016808b

Commits on Oct 30, 2019

• JavaScript: Autoformat.

  

  Max Schaefer

  committed
  3bbded5

  Copy full SHA for 3bbded5

• JavaScript: Deal with escape-unescape-escape (and similar) chains.

  

  Max Schaefer

  committed
  bb0771b

  Copy full SHA for bb0771b

• JavaScript: Deal with (un-)escaping on captured variables.

  

  Max Schaefer

  committed
  8c133ff

  Copy full SHA for 8c133ff

• JavaScript: Fix regexes for escaping schemes.

  

  Max Schaefer

  committed
  a8214ce

  Copy full SHA for a8214ce

• JavaScript: Recognise wrapped chains of replacements.

  

  Max Schaefer

  committed
  5349e0f

  Copy full SHA for 5349e0f

• JavaScript: Recognise wrapped string replacement functions.

  

  Max Schaefer

  committed
  02d16b1

  Copy full SHA for 02d16b1

• JavaScript: Recognize string escaping using `.replace` with a callback.

  

  Max Schaefer

  committed
  aaeca32

  Copy full SHA for aaeca32

• JavaScript: Recognise `JSON.stringify` and `JSON.parse` as escaper/unescaper.

  

  Max Schaefer

  committed
  bd1c99d

  Copy full SHA for bd1c99d

• JavaScript: Refactor `DoubleEscaping.ql`.

  

  Max Schaefer

  committed
  63f2447

  Copy full SHA for 63f2447

Commits on Sep 11, 2019

• Merge pull request #1876 from esben-semmle/js/more-delimiter-stripping-whitelisting

  Show description for 16c95d8
  semmle-qlci

  authored
  16c95d8

  Copy full SHA for 16c95d8

Commits on Sep 6, 2019

• JavaScript: Autoformat.

  aschackmull

  committed
  ca45fb5

  Copy full SHA for ca45fb5

Commits on Sep 5, 2019

• JS: whitelist quote stripping for js/incomplete-sanitization

  

  Esben Sparre Andreasen

  committed
  a9665f5

  Copy full SHA for a9665f5

Commits on Apr 23, 2019

• JS: add newline removal whitelist for js/incomplete-sanitization

  

  Esben Sparre Andreasen

  committed
  ac0913c

  Copy full SHA for ac0913c

Commits on Apr 16, 2019

• Mergeback: rc/1.20 into Semmle/master

  

  Esben Sparre Andreasen

  committed
  c80ee3d

  Copy full SHA for c80ee3d

Commits on Apr 12, 2019

• JS: whitelist delimiter unwrapping for js/incomplete-sanitization

  

  Esben Sparre Andreasen

  committed
  fd429ce

  Copy full SHA for fd429ce

Commits on Apr 1, 2019

• JS: use RegExpLiteral as a SourceNode

  

  Esben Sparre Andreasen

  committed
  364ba1b

  Copy full SHA for 364ba1b

Commits on Mar 8, 2019

• JavaScript: Fix erroneous backticks in query help.

  

  Max Schaefer

  committed
  c74db8b

  Copy full SHA for c74db8b

Commits on Feb 13, 2019

• Merge pull request #932 from asger-semmle/cookbook-prepare

  Show description for 92a6e7e
  semmle-qlci

  authored
  92a6e7e

  Copy full SHA for 92a6e7e

Commits on Feb 12, 2019

• JS: add DataFlow::Node.getStringValue()

  asger-semmle

  committed
  0fd9d15

  Copy full SHA for 0fd9d15

• Javascript: Autoformat qls

  aschackmull

  committed
  1182fca

  Copy full SHA for 1182fca

Commits on Feb 8, 2019

• JavaScript: Improve alert location and message for `IncompleteSanitization`.

  Show description for 3e26bc6
  

  Max Schaefer

  committed
  3e26bc6

  Copy full SHA for 3e26bc6

Commits on Jan 21, 2019

• Update DoubleEscaping.qhelp

  Show description for 43f4fe1
  

  Max Schaefer

  committed
  43f4fe1

  Copy full SHA for 43f4fe1

Commits on Jan 7, 2019

• JavaScript: Autoformat all QL files.

  

  Max Schaefer

  committed
  31bb39a

  Copy full SHA for 31bb39a

Commits on Dec 11, 2018

• JS: generalize js/incomplete-sanitization to handle ConstantString

  

  Esben Sparre Andreasen

  committed
  a1d92bf

  Copy full SHA for a1d92bf

Commits on Nov 30, 2018

• JavaScript: Add new query `DoubleEscaping`.

  

  Max Schaefer

  committed
  10166be

  Copy full SHA for 10166be

Commits on Sep 3, 2018

• JavaScript: Improve query name and help for `js/incomplete-sanitization`.

  Show description for 58e3845
  

  Max Schaefer

  committed
  58e3845

  Copy full SHA for 58e3845

Commits on Aug 9, 2018

• JavaScript: Teach `IncompleteSanitization` to recognize incomplete URL {en,de}coding.

  

  Max Schaefer

  committed
  41da997

  Copy full SHA for 41da997

Commits on Aug 2, 2018

• QL code and tests for C#/C++/JavaScript.

  pavgust

  committed
  b55526a

  Copy full SHA for b55526a

Loading