Commits

Breadcrumbs

History for

oncodeql-cli/v2.24.3

User selector

All users

All time

Commit History

Commits on Dec 14, 2022

• JS: recognize tiny-csrf

  asgerf

  committed
  b63c658

  Copy full SHA for b63c658

• JS: Replace csurf -> lusca.csrf from example and qhelp

  asgerf

  committed
  1624191

  Copy full SHA for 1624191

Commits on Oct 7, 2022

• fix some more style-guide violations in the alert-messages

  erik-krogh

  committed
  368f847

  Copy full SHA for 368f847

Commits on Sep 9, 2022

• ensure consistent casing of names

  erik-krogh

  committed
  26d8553

  Copy full SHA for 26d8553

Commits on May 24, 2022

• JS: Rename Node.{getASource -> asSource, getASink -> asSink}

  asgerf

  committed
  631527f

  Copy full SHA for 631527f

• JS: Rename getARhs -> getASink

  asgerf

  committed
  19a5db9

  Copy full SHA for 19a5db9

Commits on Feb 21, 2022

• fix some instances of ql/pred-doc-style for JS

  erik-krogh

  committed
  1407b49

  Copy full SHA for 1407b49

Commits on Dec 15, 2021

• JS: Rename RouteHandlerInput->RouteHandlerParameter

  asgerf

  committed
  8aa4d82

  Copy full SHA for 8aa4d82

Commits on Dec 7, 2021

• JS: Do not flag auth endpoints that are immune to Login CSRF

  asgerf

  committed
  5f8ea39

  Copy full SHA for 5f8ea39

• JS: Treat non-cookie based auth as CSRF preventer

  asgerf

  committed
  66b1612

  Copy full SHA for 66b1612

• JS: Improve precision of missing CSRF middleware

  asgerf

  committed
  b732193

  Copy full SHA for b732193

• JS: Port CSRF query

  asgerf

  committed
  389a3c9

  Copy full SHA for 389a3c9

Commits on Jun 15, 2021

• Update security-severity scores

  calumgrant

  committed
  771e686

  Copy full SHA for 771e686

Commits on Jun 10, 2021

• Add security-severity metadata

  calumgrant

  committed
  a594afb

  Copy full SHA for a594afb

Commits on Jun 1, 2021

• Update javascript/ql/src/Security/CWE-352/MissingCsrfMiddleware.qhelp

  Show description for 96150a4
  

  security-prince

  and

  erik-krogh

  authored
  96150a4

  Copy full SHA for 96150a4

• Adding reference link for csurf

  security-prince

  authored
  975355d

  Copy full SHA for 975355d

Commits on Oct 20, 2020

• add support for more custom CSRF checking middlewares

  erik-krogh

  committed
  e061c6a

  Copy full SHA for e061c6a

Commits on Oct 19, 2020

• add express.csrf as an CSRF protecting middleware

  erik-krogh

  committed
  ce95676

  Copy full SHA for ce95676

Commits on Oct 16, 2020

• inline `value` in `nodeLeadingToCsrfWrite`

  erik-krogh

  committed
  27a2cd3

  Copy full SHA for 27a2cd3

• Apply suggestions from code review

  Show description for 017c73d
  

  erik-krogh

  and

  asgerf

  committed
  017c73d

  Copy full SHA for 017c73d

Commits on Oct 15, 2020

• add support for home made CSRF protection middlewares in js/missing-token-validation

  erik-krogh

  committed
  4d1a974

  Copy full SHA for 4d1a974

Commits on Sep 28, 2020

• also recognize cookie writes are leading to cookie access

  erik-krogh

  committed
  e04404b

  Copy full SHA for e04404b

Commits on Sep 20, 2020

• move new predicates to a more fitting location

  erik-krogh

  committed
  ae228cb

  Copy full SHA for ae228cb

Commits on Sep 18, 2020

• add basic support for indirect route handlers

  erik-krogh

  committed
  43e5c02

  Copy full SHA for 43e5c02

Commits on May 15, 2020

• JS: fix some FNs in the qhelp examples

  esbena

  committed
  1c5bffc

  Copy full SHA for 1c5bffc

Commits on Feb 27, 2020

• JS: Autoformat everything

  asgerf

  committed
  fefcf1a

  Copy full SHA for fefcf1a

Commits on Jan 28, 2020

• Apply suggestions from code review

  Show description for 701d998
  

  asgerf

  and

  erik-krogh

  authored
  701d998

  Copy full SHA for 701d998

• Update javascript/ql/src/Security/CWE-352/MissingCsrfMiddleware.ql

  Show description for 310dd05
  

  asgerf

  and

  erik-krogh

  authored
  310dd05

  Copy full SHA for 310dd05

Commits on Jan 24, 2020

• JS: Recognize req.user a cookie access

  asgerf

  committed
  b98db62

  Copy full SHA for b98db62

Commits on Jan 23, 2020

• JS: Ignore calls and csrf/captcha access

  asgerf

  committed
  a68bb9f

  Copy full SHA for a68bb9f

• JS: Add test and dont check predecessors

  asgerf

  committed
  b1ec3e1

  Copy full SHA for b1ec3e1

• JS: Sharpen missing CSRF middleware query

  asgerf

  committed
  406c6eb

  Copy full SHA for 406c6eb

Commits on Jan 7, 2019

• JavaScript: Autoformat all QL files.

  

  Max Schaefer

  committed
  31bb39a

  Copy full SHA for 31bb39a

Commits on Sep 21, 2018

• JS: review comments

  asger-semmle

  committed
  4797924

  Copy full SHA for 4797924

• JS: recognize CSRF middleware from lusca package

  asger-semmle

  committed
  5f467d2

  Copy full SHA for 5f467d2