Commits

Breadcrumbs

History for

onf8f3770

User selector

All users

All time

Commit History

Commits on Mar 2, 2021

• JS: Add query for resource exhaustion from deep object handling

  asgerf

  committed
  24199a5

  Copy full SHA for 24199a5

Commits on Dec 7, 2020

• JS: Move and rename other prototype pollution queries

  asgerf

  committed
  877b4b0

  Copy full SHA for 877b4b0

Commits on May 18, 2020

• JS: change MembershipTest to MembershipCandidate

  esbena

  committed
  b3691cd

  Copy full SHA for b3691cd

• JS: introduce MembershipTests.qll and use in two locations

  esbena

  committed
  ddb545c

  Copy full SHA for ddb545c

Commits on May 5, 2020

• add test and change-note to prototype-polution

  erik-krogh

  committed
  bffb127

  Copy full SHA for bffb127

• change naming of StringSplitCall methods

  erik-krogh

  committed
  fe02137

  Copy full SHA for fe02137

• introduce StringSplitCall and use it

  erik-krogh

  committed
  89f4537

  Copy full SHA for 89f4537

Commits on Feb 27, 2020

• JS: Flag deep assignments in prototype pollution query

  asgerf

  committed
  52ebe49

  Copy full SHA for 52ebe49

• JS: Autoformat everything

  asgerf

  committed
  fefcf1a

  Copy full SHA for fefcf1a

Commits on Feb 21, 2020

• JS: Proto pollution: Add is-plain-object sanitizer

  asgerf

  committed
  d1df251

  Copy full SHA for d1df251

Commits on Feb 18, 2020

• use a barrier directly instead of a barrier guard

  erik-krogh

  committed
  e359e1a

  Copy full SHA for e359e1a

Commits on Feb 10, 2020

• Merge remote-tracking branch 'upstream/master' into FalsySanitizer

  erik-krogh

  committed
  0f511c9

  Copy full SHA for 0f511c9

Commits on Feb 7, 2020

• Merge branch 'master' of git.semmle.com:Semmle/ql into FalsySanitizer

  erik-krogh

  committed
  06e13cb

  Copy full SHA for 06e13cb

• JS: remove unused imports

  esbena

  committed
  dcdaa96

  Copy full SHA for dcdaa96

• JS: make DynamicPropertyAccess.qll from PrototypePollutionUtility.ql

  esbena

  committed
  cb30329

  Copy full SHA for cb30329

Commits on Feb 6, 2020

• JS: Fix qldoc comment

  asgerf

  committed
  a628f78

  Copy full SHA for a628f78

• JS: Handle more libraries

  asgerf

  committed
  f84af74

  Copy full SHA for f84af74

• JS: Add test and handle parameter with source object

  asgerf

  committed
  c559ab1

  Copy full SHA for c559ab1

• JS: Detect property enumeration through for-own

  asgerf

  committed
  34a9dce

  Copy full SHA for 34a9dce

• move the if(!x) from DataFLow to TaintTracking

  erik-krogh

  committed
  ade93e6

  Copy full SHA for ade93e6

• add dataflow barrier for if(xrandr)

  erik-krogh

  committed
  1f7dda7

  Copy full SHA for 1f7dda7

• JS: Fix join ordering

  asgerf

  committed
  38ef07c

  Copy full SHA for 38ef07c

Commits on Feb 5, 2020

• Update javascript/ql/src/Security/CWE-400/PrototypePollutionUtility.ql

  Show description for cf18bd7
  

  asgerf

  and

  esbena

  authored
  cf18bd7

  Copy full SHA for cf18bd7

• JS: Address comments

  asgerf

  committed
  fd9975d

  Copy full SHA for fd9975d

Commits on Feb 4, 2020

• JS: Expose argumentPassing as DataFlow::argumentPassingStep

  asgerf

  committed
  3ccdaa9

  Copy full SHA for 3ccdaa9

• JS: More pruning and more data flow

  asgerf

  committed
  c185ced

  Copy full SHA for c185ced

Commits on Feb 3, 2020

• fix compilation of PrototypePollutionUtility after refactor

  erik-krogh

  committed
  5ff958a

  Copy full SHA for 5ff958a

Commits on Jan 31, 2020

• rename getASourceAccess to getAnAliasedSourceNode

  erik-krogh

  committed
  72114a4

  Copy full SHA for 72114a4

• fix FP in js/path-injection by recognizing more prefix checks

  erik-krogh

  committed
  279c584

  Copy full SHA for 279c584

Commits on Jan 16, 2020

• Update javascript/ql/src/Security/CWE-400/PrototypePollutionUtility.qhelp

  Show description for 7a1d068
  

  asgerf

  and

  mchammer01

  authored
  7a1d068

  Copy full SHA for 7a1d068

Commits on Jan 14, 2020

• JS: Add change note and fix cwe tags

  asgerf

  committed
  2245882

  Copy full SHA for 2245882

• JS: Address review comments

  asgerf

  committed
  d76859b

  Copy full SHA for d76859b

• JS: Add sanitizer for "in" exprs

  

  asger-semmle

  authored and

  asgerf

  committed
  9bd3c4a

  Copy full SHA for 9bd3c4a

• JS: Guard against more FPs

  

  asger-semmle

  authored and

  asgerf

  committed
  bd9405a

  Copy full SHA for bd9405a

• JS: More sanitizers

  

  asger-semmle

  authored and

  asgerf

  committed
  738123d

  Copy full SHA for 738123d