Commits

History for

oncodeql-cli/v2.15.2

Commits on Oct 10, 2023

delete an .expected file outside the test directories
erik-krogh
committed
ccd06c7

Commits on Sep 14, 2023

Merge pull request #13641 from erik-krogh/multi-char
erik-krogh
authored
7e7852e

Commits on Sep 13, 2023

Merge pull request #13771 from github/max-schaefer/server-side-url-redirect-help
max-schaefer
authored
e722e32

Commits on Sep 12, 2023

Make suggestion to replace example.com more explicit.
Max Schaefer
committed
a9e8167
Apply suggestions from code review

max-schaefer
and
felicitymay
authored
7ddb7da

Commits on Sep 7, 2023

Explain about redirects to example.com.
Max Schaefer
committed
46d7165

Commits on Sep 6, 2023

Use better sanitiser.
Max Schaefer
committed
a02f373

Commits on Aug 21, 2023

Use more sensible validator in example.
Max Schaefer
committed
8736413

Commits on Aug 10, 2023

change the defaults in the qhelp for missing-rate-limit to something more reasonable
erik-krogh
committed
5ffce86

Commits on Aug 7, 2023

re-appearing -> reappearing

erik-krogh
and
mattpollard
authored
6631e83

Commits on Aug 1, 2023

Update javascript/ql/src/Security/CWE-730/ServerCrash.qhelp

max-schaefer
and
asgerf
authored
5124310

Commits on Jul 19, 2023

JavaScript: Improve query help for `js/server-side-unvalidated-url-redirection`.
Max Schaefer
committed
7823ff9

Commits on Jul 17, 2023

JavaScript: Improve qhelp for js/server-crash.
Max Schaefer
committed
9432fec

Commits on Jul 13, 2023

suggestions based on review: add a popular library example for HTML-sanitization, and use the old text about ../ replacements
erik-krogh
committed
1fe6623
apply suggestion from review

erik-krogh
and
max-schaefer
authored
9db970f
Apply suggestions from code review

max-schaefer
and
subatoi
authored
ae23724

Commits on Jul 10, 2023

Add another example of when and how to use shell-quote.
Max Schaefer
committed
63c45a0

Commits on Jul 6, 2023

Add example of manual sanitisation.
Max Schaefer
committed
1d3e344
Fix spurious character in code example.
Max Schaefer
committed
240e079
Update javascript/ql/src/Security/CWE-078/IndirectCommandInjection.qhelp

max-schaefer
and
erik-krogh
authored
83a854c
Apply suggestions from code review

max-schaefer
and
erik-krogh
authored
6fb41ad

Commits on Jul 5, 2023

Address more review feedback.
Max Schaefer
committed
f89992e
Apply suggestions from code review

max-schaefer
and
erik-krogh
authored
921d8de

Commits on Jul 4, 2023

Clarify that splitting arguments on space is not safe.
Max Schaefer
committed
5fb6b58
Improve command-injection example and provide a fixed version.
Max Schaefer
committed
74af0b1

Commits on Jul 3, 2023

Commits on Jun 21, 2023

Update javascript/ql/src/Security/CWE-798/HardcodedCredentials.qhelp

adrienpessu
and
erik-krogh
authored
e332a43
Merge branch 'main' into main
adrienpessu
authored
4d1bbe3
clean examples
adrienpessu
committed
7dfb404
remove useless phrase
adrienpessu
committed
e85987b

Commits on Jun 20, 2023

fixed text not in a tag
adrienpessu
committed
2a2f6de
Add fixed proposition for NodeJS
adrienpessu
committed
36cb60c