Commits

Breadcrumbs

History for

oncodeql-cli/latest

User selector

All users

All time

Commit History

Commits on Feb 4, 2025

• JS: Simplify config in PrototypePollutingFunction.ql.

  aschackmull

  committed
  db1ed67

  Copy full SHA for db1ed67

Commits on Jan 20, 2025

• JS: Update PrototypePollutingFunction.ql

  asgerf

  committed
  8fe622f

  Copy full SHA for 8fe622f

• JS: Auto-patch diff informed queries

  asgerf

  committed
  fd763a0

  Copy full SHA for fd763a0

Commits on Jan 6, 2025

• JS: Restrict AP length in prototype-polluting function

  asgerf

  committed
  0cdda87

  Copy full SHA for 0cdda87

Commits on Dec 16, 2024

• JS: Migrate PrototypePollutingFunction

  asgerf

  committed
  73af3f3

  Copy full SHA for 73af3f3

Commits on Dec 3, 2024

• JS: Update a reference to AdditionalSanitizerGuardNode

  Show description for 04a3a67
  asgerf

  committed
  04a3a67

  Copy full SHA for 04a3a67

Commits on Oct 13, 2023

• JS: Port PrototypePollutingMergeCall

  asgerf

  committed
  a5c221f

  Copy full SHA for a5c221f

• JS: Port PrototypePollutingFunction

  asgerf

  committed
  adf7d54

  Copy full SHA for adf7d54

• JS: Port PrototypePollutingAssignment

  asgerf

  committed
  f1f4592

  Copy full SHA for f1f4592

Commits on May 15, 2023

• add another example of how to fix the prototype pollution issue

  erik-krogh

  committed
  2ebce99

  Copy full SHA for 2ebce99

• fix typo, the variable in the example is called `items`

  erik-krogh

  committed
  7a338c4

  Copy full SHA for 7a338c4

Commits on May 3, 2023

• JS: Make implicit this receivers explicit

  kaspersv

  committed
  67950c8

  Copy full SHA for 67950c8

Commits on Dec 19, 2022

• JS: add heuristic variants of queries that use RemoteFlowSource

  erik-krogh

  committed
  442749b

  Copy full SHA for 442749b

Commits on Oct 7, 2022

• fix some more style-guide violations in the alert-messages

  erik-krogh

  committed
  368f847

  Copy full SHA for 368f847

Commits on May 24, 2022

• make a model for hasOwnProperty calls and similar

  erik-krogh

  committed
  82c6c22

  Copy full SHA for 82c6c22

• add support for Object.hasOwn(obj, key)

  erik-krogh

  committed
  2a97dd9

  Copy full SHA for 2a97dd9

Commits on Apr 28, 2022

• fix a FN for prototype polluting function query

  

  Stephan Brandauer

  committed
  3f13a5e

  Copy full SHA for 3f13a5e

Commits on Apr 22, 2022

• delete redundant imports

  erik-krogh

  committed
  ff73dbc

  Copy full SHA for ff73dbc

• fix PrototypePollutingAssignment examples

  

  Khang. Võ Vĩ

  committed
  f4581ae

  Copy full SHA for f4581ae

Commits on Feb 22, 2022

• support more property writes in js/prototype-pollution-utility, and generalize ObjectDefinePropertyAsPropWrite

  erik-krogh

  committed
  517e17d

  Copy full SHA for 517e17d

Commits on Jan 20, 2022

• fix most issues found by ql/class-doc-style in JS

  erik-krogh

  committed
  5780161

  Copy full SHA for 5780161

Commits on Jan 19, 2022

• add cwe-471 to js/prototype-pollution

  erik-krogh

  committed
  cb9e14f

  Copy full SHA for cb9e14f

• add CWE-471 to the prototype-pollution queries

  erik-krogh

  committed
  e4203a4

  Copy full SHA for e4203a4

Commits on Oct 27, 2021

• update alert message to distinguish between library input and remote flow

  erik-krogh

  committed
  d1238df

  Copy full SHA for d1238df

Commits on Aug 12, 2021

• JS: Migrate to *Query.qll convention

  asgerf

  committed
  f6da030

  Copy full SHA for f6da030

Commits on Jun 15, 2021

• Update security-severity scores

  calumgrant

  committed
  771e686

  Copy full SHA for 771e686

Commits on Jun 10, 2021

• Add security-severity metadata

  calumgrant

  committed
  a594afb

  Copy full SHA for a594afb

Commits on Dec 22, 2020

• use strings in isTypeofGard

  erik-krogh

  committed
  f7f8868

  Copy full SHA for f7f8868

• introduce and use TaintTracking::isTypeofGuard

  erik-krogh

  committed
  6eb88b9

  Copy full SHA for 6eb88b9

Commits on Dec 9, 2020

• Apply suggestions from code review

  Show description for ed729a1
  

  asgerf

  and

  mchammer01

  authored
  ed729a1

  Copy full SHA for ed729a1

• JS: Address doc review

  asgerf

  committed
  fd293d0

  Copy full SHA for fd293d0

Commits on Dec 7, 2020

• JS: Deny -> block

  asgerf

  committed
  f96c425

  Copy full SHA for f96c425

• JS: Update to use more inclusive language

  asgerf

  committed
  479dcf5

  Copy full SHA for 479dcf5

• JS: Update CWE tags

  asgerf

  committed
  ca38a1c

  Copy full SHA for ca38a1c

• JS: Move all prototype pollution queries to CWE-915

  asgerf

  committed
  25161ed

  Copy full SHA for 25161ed

Loading