Commits

Breadcrumbs

History for

onmain

User selector

All users

All time

Commit History

Commits on Nov 29, 2024

• JS: follow proper code standards for get predicates

  Show description for 9d4e737
  

  Napalys

  and

  asgerf

  committed
  9d4e737

  Copy full SHA for 9d4e737

• JS: fixed bad alert messages when it came to incomplete sanitization for new RegExp objects

  Napalys

  committed
  3171f38

  Copy full SHA for 3171f38

Commits on Nov 28, 2024

• JS: imcomplete sanization now handles properly maybe global

  Napalys

  committed
  98fd977

  Copy full SHA for 98fd977

• JS: incomplete sanitization now also works with RegExp objects

  Napalys

  committed
  1ae1748

  Copy full SHA for 1ae1748

Commits on Jan 10, 2023

• JavaScript: Remove omittable exists variables

  atorralba

  committed
  3b6dae4

  Copy full SHA for 3b6dae4

Commits on May 24, 2022

• fix misspellings in predicate names

  erik-krogh

  committed
  d1ad08e

  Copy full SHA for d1ad08e

Commits on Jan 24, 2022

• add CWE-80 to queries that detect bad HTML sanitizers

  erik-krogh

  committed
  ab1bc68

  Copy full SHA for ab1bc68

Commits on Oct 26, 2021

• use set literal instead of big disjunction of literals

  erik-krogh

  committed
  a3c55c2

  Copy full SHA for a3c55c2

Commits on Jun 15, 2021

• Update security-severity scores

  calumgrant

  committed
  771e686

  Copy full SHA for 771e686

Commits on Jun 10, 2021

• Add security-severity metadata

  calumgrant

  committed
  a594afb

  Copy full SHA for a594afb

Commits on Sep 25, 2020

• JS: tag consistency: replace cwe-20 with cwe-020

  esbena

  committed
  ba0a2e1

  Copy full SHA for ba0a2e1

Commits on Sep 21, 2020

• add support for String.prototype.replaceAll

  erik-krogh

  committed
  b090153

  Copy full SHA for b090153

Commits on Aug 5, 2020

• rename JsonSerializeCall to JsonStringifyCall

  erik-krogh

  committed
  cc5ef4d

  Copy full SHA for cc5ef4d

• introduce model for JSON.stringify and similar libraries

  erik-krogh

  committed
  5a3f67a

  Copy full SHA for 5a3f67a

Commits on Feb 27, 2020

• JS: Autoformat everything

  asgerf

  committed
  fefcf1a

  Copy full SHA for fefcf1a

Commits on Nov 22, 2019

• JavaScript: Whitelist more harmless incomplete escapes.

  

  Max Schaefer

  committed
  ff002a7

  Copy full SHA for ff002a7

• JavaScript: Rephrase two predicates to help the optimiser.

  

  Max Schaefer

  committed
  659cc81

  Copy full SHA for 659cc81

• JavaScript: Introduce modelling of `String.prototype.replace` and use it in two queries.

  

  Max Schaefer

  committed
  db3eaa2

  Copy full SHA for db3eaa2

• JavaScript: Move `getAMatchedConstant(RegExpTerm)` into the library.

  

  Max Schaefer

  committed
  12ea81a

  Copy full SHA for 12ea81a

Commits on Nov 19, 2019

• JavaScript: Teach `IncompleteSanitization` to flag incomplete path sanitizers.

  

  Max Schaefer

  committed
  5565be1

  Copy full SHA for 5565be1

Commits on Sep 5, 2019

• JS: whitelist quote stripping for js/incomplete-sanitization

  

  Esben Sparre Andreasen

  committed
  a9665f5

  Copy full SHA for a9665f5

Commits on Apr 23, 2019

• JS: add newline removal whitelist for js/incomplete-sanitization

  

  Esben Sparre Andreasen

  committed
  ac0913c

  Copy full SHA for ac0913c

Commits on Apr 16, 2019

• Mergeback: rc/1.20 into Semmle/master

  

  Esben Sparre Andreasen

  committed
  c80ee3d

  Copy full SHA for c80ee3d

Commits on Apr 12, 2019

• JS: whitelist delimiter unwrapping for js/incomplete-sanitization

  

  Esben Sparre Andreasen

  committed
  fd429ce

  Copy full SHA for fd429ce

Commits on Apr 1, 2019

• JS: use RegExpLiteral as a SourceNode

  

  Esben Sparre Andreasen

  committed
  364ba1b

  Copy full SHA for 364ba1b

Commits on Feb 8, 2019

• JavaScript: Improve alert location and message for `IncompleteSanitization`.

  Show description for 3e26bc6
  

  Max Schaefer

  committed
  3e26bc6

  Copy full SHA for 3e26bc6

Commits on Jan 7, 2019

• JavaScript: Autoformat all QL files.

  

  Max Schaefer

  committed
  31bb39a

  Copy full SHA for 31bb39a

Commits on Dec 11, 2018

• JS: generalize js/incomplete-sanitization to handle ConstantString

  

  Esben Sparre Andreasen

  committed
  a1d92bf

  Copy full SHA for a1d92bf

Commits on Sep 3, 2018

• JavaScript: Improve query name and help for `js/incomplete-sanitization`.

  Show description for 58e3845
  

  Max Schaefer

  committed
  58e3845

  Copy full SHA for 58e3845

Commits on Aug 9, 2018

• JavaScript: Teach `IncompleteSanitization` to recognize incomplete URL {en,de}coding.

  

  Max Schaefer

  committed
  41da997

  Copy full SHA for 41da997

Commits on Aug 2, 2018

• QL code and tests for C#/C++/JavaScript.

  pavgust

  committed
  b55526a

  Copy full SHA for b55526a

Loading