Commits

Breadcrumbs

History for

oncodeql-cli/v2.13.4

User selector

All users

All time

Commit History

Commits on Jun 8, 2023

• Merge pull request #13283 from asgerf/js/restrict-regex-search-function

  Show description for 76a8e98
  asgerf

  authored
  76a8e98

  Copy full SHA for 76a8e98

Commits on Jun 6, 2023

• Merge pull request #13329 from erik-krogh/sqlhelp

  Show description for b78cd48
  erik-krogh

  authored
  b78cd48

  Copy full SHA for b78cd48

Commits on May 31, 2023

• put string/object in the alert-message for sql-injection

  erik-krogh

  committed
  b343dca

  Copy full SHA for b343dca

Commits on May 26, 2023

• JS: Update test for RegExpAlwaysMatches

  asgerf

  committed
  c637b6f

  Copy full SHA for c637b6f

• JS: Update test and expectations for MissingRegExpAnchor

  asgerf

  committed
  9df9ca2

  Copy full SHA for 9df9ca2

• JS: Update RegExpInjection test and expectations

  asgerf

  committed
  40daa9c

  Copy full SHA for 40daa9c

Commits on May 23, 2023

• add expected output

  erik-krogh

  committed
  f7419c9

  Copy full SHA for f7419c9

• update expected output

  erik-krogh

  committed
  f85b3e1

  Copy full SHA for f85b3e1

Commits on May 17, 2023

• require arguments to be shell interpreted to be flagged by indirect-command-injection

  erik-krogh

  committed
  3293a55

  Copy full SHA for 3293a55

Commits on May 15, 2023

• Merge pull request #12748 from JarLob/yi

  Show description for 20e8ee8
  asgerf

  authored
  20e8ee8

  Copy full SHA for 20e8ee8

Commits on May 10, 2023

• Merge pull request #12978 from asgerf/js/github-actions-sources

  Show description for c376eeb
  asgerf

  authored
  c376eeb

  Copy full SHA for c376eeb

Commits on May 3, 2023

• JS: Restrict getInput to indirect command injection query

  asgerf

  committed
  1a99563

  Copy full SHA for 1a99563

• JS: Make implicit this receivers explicit

  kaspersv

  committed
  67950c8

  Copy full SHA for 67950c8

• JS: List safe environment variables in IndirectCommandInjection

  asgerf

  committed
  b9ad417

  Copy full SHA for b9ad417

Commits on May 1, 2023

• JS: Add sources from actions/core

  asgerf

  committed
  08785a4

  Copy full SHA for 08785a4

• JS: Add tests

  asgerf

  committed
  cb95dbf

  Copy full SHA for cb95dbf

• Merge pull request #12887 from asgerf/js/unsafe-yaml-deserialization

  Show description for e9f1e99
  asgerf

  authored
  e9f1e99

  Copy full SHA for e9f1e99

Commits on Apr 28, 2023

• Track interfile useRouter

  tyage

  committed
  933b55d

  Copy full SHA for 933b55d

Commits on Apr 26, 2023

• JS: Add tests

  asgerf

  committed
  611a706

  Copy full SHA for 611a706

Commits on Apr 21, 2023

• Use double curly braces

  JarLob

  committed
  6e9f54e

  Copy full SHA for 6e9f54e

Commits on Apr 17, 2023

• JS: Fix the ExtendCall restriction

  asgerf

  committed
  13b1e97

  Copy full SHA for 13b1e97

• JS: Update test output after ExtendCall restriction

  asgerf

  committed
  eafef91

  Copy full SHA for eafef91

• JS: Add prototype pollution test

  asgerf

  committed
  0247606

  Copy full SHA for 0247606

• JS: update test output after adding 'this' sanitizer

  asgerf

  committed
  0407975

  Copy full SHA for 0407975

• JS: Add test to unsafe jquery plugin

  asgerf

  committed
  f87f6c8

  Copy full SHA for f87f6c8

• Update UntrustedDataToExternalAPI.expected

  asgerf

  committed
  62dca44

  Copy full SHA for 62dca44

• JS: Trim whitespace in test

  asgerf

  committed
  b0d4b31

  Copy full SHA for b0d4b31

• JS: Add test

  asgerf

  committed
  c7f16cd

  Copy full SHA for c7f16cd

Commits on Apr 14, 2023

• Encapsulate composite actions

  JarLob

  committed
  d80c541

  Copy full SHA for d80c541

Commits on Apr 12, 2023

• add browser history as XSS sink

  erik-krogh

  committed
  b195762

  Copy full SHA for b195762

Commits on Apr 8, 2023

• Add replace method test

  tyage

  committed
  320cb99

  Copy full SHA for 320cb99

• Remove unnecessary whiteline

  tyage

  committed
  668e1ac

  Copy full SHA for 668e1ac

• Add Next.js router push as XSS sink

  tyage

  committed
  7f9b855

  Copy full SHA for 7f9b855

Commits on Apr 6, 2023

• Add support for composite actions

  JarLob

  committed
  9c7eecf

  Copy full SHA for 9c7eecf

• fix tests

  JarLob

  committed
  baefeab

  Copy full SHA for baefeab