Commits

Breadcrumbs

History for

oncodeql-cli/v2.15.2

User selector

All users

All time

Commit History

Commits on Oct 26, 2023

• Merge pull request #14600 from github/max-schaefer/express-rate-limit

  Show description for abef848
  max-schaefer

  authored
  abef848

  Copy full SHA for abef848

• Update javascript/ql/lib/semmle/javascript/security/dataflow/MissingRateLimiting.qll

  Show description for aff848b
  

  max-schaefer

  and

  erik-krogh

  authored
  aff848b

  Copy full SHA for aff848b

• JavaScript: Add support for `rateLimit` export from `express-rate-limit` package.

  

  Max Schaefer

  committed
  bb146a1

  Copy full SHA for bb146a1

Commits on Oct 20, 2023

• Update UnsafeHtmlConstructionQuery.qll

  Show description for ee813c1
  flyboss

  authored
  ee813c1

  Copy full SHA for ee813c1

Commits on Oct 19, 2023

• fix typo

  flyboss

  committed
  8633656

  Copy full SHA for 8633656

Commits on Oct 16, 2023

• Merge pull request #14484 from aibaars/ts53-js

  Show description for 0e3369f
  aibaars

  authored
  0e3369f

  Copy full SHA for 0e3369f

Commits on Oct 12, 2023

• Rename DynamicImportExpr::getImport{Attributes => Options}

  aibaars

  committed
  a9a21aa

  Copy full SHA for a9a21aa

• Rename 'getImportAssertion()' to 'getImportAttributes()' in QL library

  aibaars

  committed
  c28004f

  Copy full SHA for c28004f

Commits on Oct 11, 2023

• Merge pull request #14405 from erik-krogh/tagCall

  Show description for 85bb14f
  erik-krogh

  authored
  85bb14f

  Copy full SHA for 85bb14f

• Update javascript/ql/lib/semmle/javascript/dataflow/DataFlow.qll

  Show description for 6377e92
  

  erik-krogh

  and

  asgerf

  authored
  6377e92

  Copy full SHA for 6377e92

Commits on Oct 9, 2023

• JavaScript: add import that populate the shared abstract classes

  erik-krogh

  committed
  f48b47c

  Copy full SHA for f48b47c

• JS: delete various outdated deprecations

  erik-krogh

  committed
  c2942b3

  Copy full SHA for c2942b3

• delete old deprecated aliases of various regex libraries

  erik-krogh

  committed
  0d992a3

  Copy full SHA for 0d992a3

Commits on Oct 7, 2023

• fix performance by caching `getArgument`

  erik-krogh

  committed
  56e9eda

  Copy full SHA for 56e9eda

Commits on Oct 6, 2023

• recognize tagged templates as `DataFlow::CallNode`

  erik-krogh

  committed
  18e6a54

  Copy full SHA for 18e6a54

Commits on Oct 4, 2023

• JS: Add AmdModuleDefinition::Range

  asgerf

  committed
  162c477

  Copy full SHA for 162c477

Commits on Sep 28, 2023

• JavaScript: Use shared FileSystem library.

  aschackmull

  committed
  855c896

  Copy full SHA for 855c896

Commits on Aug 24, 2023

• add JS support the `using` keyword

  erik-krogh

  committed
  a7d92b3

  Copy full SHA for a7d92b3

Commits on Aug 23, 2023

• JS: Follow immediate predecessors in path resolution

  asgerf

  committed
  dec6039

  Copy full SHA for dec6039

Commits on Aug 16, 2023

• Merge pull request #13729 from yoff/python/model-aws-lambdas

  Show description for 7f2f6f1
  yoff

  authored
  7f2f6f1

  Copy full SHA for 7f2f6f1

Commits on Aug 3, 2023

• Merge pull request #13737 from asgerf/dynamic/fuzzy-models

  Show description for c38cbe8
  asgerf

  authored
  c38cbe8

  Copy full SHA for c38cbe8

Commits on Jul 28, 2023

• Add support for log injection in MaD

  jeongsoolee09

  committed
  4529d8b

  Copy full SHA for 4529d8b

Commits on Jul 13, 2023

• Merge pull request #13719 from asgerf/js/barrier-inout

  Show description for d57276c
  asgerf

  authored
  d57276c

  Copy full SHA for d57276c

• JS: Add Fuzzy token in identifying access path

  asgerf

  committed
  f3fab58

  Copy full SHA for f3fab58

• JS: Fix accidental recursion in Vue model

  Show description for 7c9e1ad
  asgerf

  committed
  7c9e1ad

  Copy full SHA for 7c9e1ad

Commits on Jul 12, 2023

• JavaScript: Use shared library for serverless

  yoff

  committed
  02c41f3

  Copy full SHA for 02c41f3

• JS: Remove the unused edge-sanitizer hook in UnvalidatedDynamicMethodCall

  asgerf

  committed
  c7abd4c

  Copy full SHA for c7abd4c

Commits on Jul 11, 2023

• JS: Use sanitizerOut in PrototypePollutingAssignment

  asgerf

  committed
  1a395c5

  Copy full SHA for 1a395c5

• JS: Update UnsafeJQueryPlugin

  asgerf

  committed
  b09ed4b

  Copy full SHA for b09ed4b

• JS: Update ResourceExhaustion

  asgerf

  committed
  a1d8a05

  Copy full SHA for a1d8a05

• JS: Update InsecureRandomness

  asgerf

  committed
  58a557b

  Copy full SHA for 58a557b

• JS: Use sanitizerIn in ExtenralAPIUsedWithUntrustedData

  asgerf

  committed
  e863e23

  Copy full SHA for e863e23

• JS: Replace sanitizing prefix edge with node

  asgerf

  committed
  094302a

  Copy full SHA for 094302a

• JS: Replace ClearTextLogging::isSanitizerEdge with a node

  asgerf

  committed
  944a2ca

  Copy full SHA for 944a2ca

• JS: Replace isOptionallySanitizedEdge with a node

  asgerf

  committed
  68584e5

  Copy full SHA for 68584e5