Commits

Breadcrumbs

History for

onf8f3770

User selector

All users

All time

Commit History

Commits on Dec 7, 2020

• JS: Move all prototype pollution queries to CWE-915

  asgerf

  committed
  25161ed

  Copy full SHA for 25161ed

• JS: Move and rename other prototype pollution queries

  asgerf

  committed
  877b4b0

  Copy full SHA for 877b4b0

• JS: Add PrototypePollutingAssignment

  asgerf

  committed
  972c4d6

  Copy full SHA for 972c4d6

Commits on Dec 4, 2020

• JS: Address review comments

  asgerf

  committed
  f0516dd

  Copy full SHA for f0516dd

Commits on Dec 3, 2020

• Merge pull request #4753 from max-schaefer/js/more-nosql-query-args

  Show description for edbbc84
  codeql-ci

  authored
  edbbc84

  Copy full SHA for edbbc84

Commits on Dec 2, 2020

• JS: Autoformat

  asgerf

  committed
  412939d

  Copy full SHA for 412939d

Commits on Dec 1, 2020

• JS: Delete old query and update qhelp

  asgerf

  committed
  5561e8f

  Copy full SHA for 5561e8f

• JS: Adjust alert message for template sinks

  asgerf

  committed
  1459d91

  Copy full SHA for 1459d91

• move logInjection out of experimental

  erik-krogh

  committed
  6f29a87

  Copy full SHA for 6f29a87

Commits on Nov 30, 2020

• JavaScript: Add models for more Mongoose methods.

  

  Max Schaefer

  committed
  978d2db

  Copy full SHA for 978d2db

• Autoformat.

  aschackmull

  committed
  8f2094f

  Copy full SHA for 8f2094f

Commits on Nov 23, 2020

• change description for source root folder

  erik-krogh

  committed
  f03429a

  Copy full SHA for f03429a

• avoid reporting empty names in `js/exposure-of-private-files`

  erik-krogh

  committed
  f7f9bee

  Copy full SHA for f7f9bee

• remove superfluous space

  erik-krogh

  committed
  02d5fbf

  Copy full SHA for 02d5fbf

Commits on Nov 20, 2020

• JS: followed -> followed by

  asgerf

  committed
  16429c8

  Copy full SHA for 16429c8

Commits on Nov 19, 2020

• JS: Add UntrustedDataToExternalApi query

  asgerf

  committed
  f737f34

  Copy full SHA for f737f34

Commits on Oct 21, 2020

• Merge pull request #4506 from asgerf/js/separate-jquery-config

  Show description for da58306
  codeql-ci

  authored
  da58306

  Copy full SHA for da58306

Commits on Oct 20, 2020

• add support for more custom CSRF checking middlewares

  erik-krogh

  committed
  e061c6a

  Copy full SHA for e061c6a

• JS: Address review comments

  asgerf

  committed
  c91cdb5

  Copy full SHA for c91cdb5

• JS: Move $() sink into separate dataflow config

  asgerf

  committed
  50a015c

  Copy full SHA for 50a015c

Commits on Oct 19, 2020

• add express.csrf as an CSRF protecting middleware

  erik-krogh

  committed
  ce95676

  Copy full SHA for ce95676

Commits on Oct 16, 2020

• inline `value` in `nodeLeadingToCsrfWrite`

  erik-krogh

  committed
  27a2cd3

  Copy full SHA for 27a2cd3

• Apply suggestions from code review

  Show description for 017c73d
  

  erik-krogh

  and

  asgerf

  committed
  017c73d

  Copy full SHA for 017c73d

Commits on Oct 15, 2020

• add support for home made CSRF protection middlewares in js/missing-token-validation

  erik-krogh

  committed
  4d1a974

  Copy full SHA for 4d1a974

Commits on Oct 5, 2020

• Merge pull request #4344 from esbena/js/fixup-cwe-20-to-cwe-020

  Show description for 339c072
  codeql-ci

  authored
  339c072

  Copy full SHA for 339c072

Commits on Oct 1, 2020

• Fix OWASP broken links

  smowton

  committed
  578ea1a

  Copy full SHA for 578ea1a

Commits on Sep 28, 2020

• also recognize cookie writes are leading to cookie access

  erik-krogh

  committed
  e04404b

  Copy full SHA for e04404b

Commits on Sep 25, 2020

• JS: tag consistency: replace cwe-20 with cwe-020

  esbena

  committed
  ba0a2e1

  Copy full SHA for ba0a2e1

Commits on Sep 22, 2020

• Merge pull request #4282 from erik-krogh/es2021

  Show description for 9a30686
  codeql-ci

  authored
  9a30686

  Copy full SHA for 9a30686

Commits on Sep 21, 2020

• add support for String.prototype.replaceAll

  erik-krogh

  committed
  b090153

  Copy full SHA for b090153

Commits on Sep 20, 2020

• move new predicates to a more fitting location

  erik-krogh

  committed
  ae228cb

  Copy full SHA for ae228cb

Commits on Sep 18, 2020

• add basic support for indirect route handlers

  erik-krogh

  committed
  43e5c02

  Copy full SHA for 43e5c02

Commits on Sep 4, 2020

• use `isLikelyIntentionalHtmlSink` in the sink instead of in the where clause

  erik-krogh

  committed
  6fccf5a

  Copy full SHA for 6fccf5a

Commits on Aug 26, 2020

• Apply suggestions from code review

  Show description for d27442e
  

  esbena

  and

  felicitymay

  authored
  d27442e

  Copy full SHA for d27442e

• JS: make sanitization a "common" technique rather than "important"

  esbena

  committed
  8930586

  Copy full SHA for 8930586