Commits

Breadcrumbs

History for

oncodeql-cli/v2.24.1

User selector

All users

All time

Commit History

Commits on Oct 22, 2025

• JS: Align DOM XSS query severity with other XSS queries

  Napalys

  committed
  7b6720c

  Copy full SHA for 7b6720c

Commits on Jan 24, 2025

• Updated expected test result files using HEAD version of codeql

  aegilops

  committed
  d248551

  Copy full SHA for d248551

Commits on Jan 23, 2025

• Merge

  aegilops

  committed
  522f3d1

  Copy full SHA for 522f3d1

Commits on Mar 13, 2024

• Merge branch 'main' into js/shared-dataflow-merged

  asgerf

  committed
  5e7d1d5

  Copy full SHA for 5e7d1d5

Commits on Nov 14, 2023

• Restore XssThroughDom.ql's severity

  rvermeulen

  authored
  6bd7047

  Copy full SHA for 6bd7047

Commits on Oct 13, 2023

• JS: Port UnsafeJQueryPlugin

  asgerf

  committed
  d08e450

  Copy full SHA for d08e450

• JS: Port UnsafeHtmlConstruction

  asgerf

  committed
  6e3f4bd

  Copy full SHA for 6e3f4bd

• JS: Port ExceptionXss

  asgerf

  committed
  d7b4e0c

  Copy full SHA for d7b4e0c

• JS: Port XssThroughDom

  asgerf

  committed
  cf5450d

  Copy full SHA for cf5450d

• JS: Port StoredXss

  asgerf

  committed
  5f05232

  Copy full SHA for 5f05232

• JS: Port ReflectedXss

  asgerf

  committed
  46b90e5

  Copy full SHA for 46b90e5

• JS: Port DomBasedXss

  asgerf

  committed
  e091fde

  Copy full SHA for e091fde

Commits on Oct 9, 2023

• Adjust query severities

  rvermeulen

  committed
  76e56cd

  Copy full SHA for 76e56cd

Commits on Dec 19, 2022

• JS: add heuristic variants of queries that use RemoteFlowSource

  erik-krogh

  committed
  442749b

  Copy full SHA for 442749b

Commits on Oct 27, 2022

• Merge pull request #10727 from erik-krogh/js-last-msg

  Show description for bbdda9e
  erik-krogh

  authored
  bbdda9e

  Copy full SHA for bbdda9e

Commits on Oct 11, 2022

• spelling: arbitrary

  Show description for 6db3661
  jsoref

  committed
  6db3661

  Copy full SHA for 6db3661

Commits on Oct 7, 2022

• fix some more style-guide violations in the alert-messages

  erik-krogh

  committed
  368f847

  Copy full SHA for 368f847

Commits on Sep 30, 2022

• JS/Python/Ruby: s/a HTML/an HTML/

  nickrolfe

  committed
  ed74e0a

  Copy full SHA for ed74e0a

Commits on Sep 12, 2022

• apply another suggestion from doc review

  erik-krogh

  committed
  87fb01d

  Copy full SHA for 87fb01d

Commits on Sep 5, 2022

• make the alert messages of taint-tracking queries more consistent

  erik-krogh

  committed
  aa56ca3

  Copy full SHA for aa56ca3

Commits on Mar 16, 2022

• refactor the `js/xss` query to use three flowlabels and one configuration

  erik-krogh

  committed
  f083e87

  Copy full SHA for f083e87

Commits on Aug 12, 2021

• JS: Migrate to *Query.qll convention

  asgerf

  committed
  f6da030

  Copy full SHA for f6da030

Commits on Jun 15, 2021

• Update security-severity scores

  calumgrant

  committed
  771e686

  Copy full SHA for 771e686

Commits on Jun 10, 2021

• Add security-severity metadata

  calumgrant

  committed
  a594afb

  Copy full SHA for a594afb

Commits on May 10, 2021

• rewrite the qhelp to focus more on documenting unsafe functions

  erik-krogh

  committed
  646bf99

  Copy full SHA for 646bf99

Commits on May 6, 2021

• corrections after code review

  erik-krogh

  committed
  b53759c

  Copy full SHA for b53759c

• Apply suggestions from code review

  Show description for 2d1ba59
  

  erik-krogh

  and

  esbena

  authored
  2d1ba59

  Copy full SHA for 2d1ba59

• add qhelp

  erik-krogh

  committed
  7ef641e

  Copy full SHA for 7ef641e

• add js/html-constructed-from-input query

  erik-krogh

  committed
  e86a3b5

  Copy full SHA for e86a3b5

Commits on Apr 23, 2021

• Fix all dead qhelp links

  Show description for 455b840
  smowton

  committed
  455b840

  Copy full SHA for 455b840

Commits on Mar 2, 2021

• JS: Move ExceptionXss source into Xss.qll

  asgerf

  committed
  d916118

  Copy full SHA for d916118

• JS: Add ajv error as source of ExceptionXss

  asgerf

  committed
  7afa755

  Copy full SHA for 7afa755

Commits on Oct 20, 2020

• JS: Address review comments

  asgerf

  committed
  c91cdb5

  Copy full SHA for c91cdb5

• JS: Move $() sink into separate dataflow config

  asgerf

  committed
  50a015c

  Copy full SHA for 50a015c

Commits on Sep 4, 2020

• use `isLikelyIntentionalHtmlSink` in the sink instead of in the where clause

  erik-krogh

  committed
  6fccf5a

  Copy full SHA for 6fccf5a