Commits

Breadcrumbs

History for

oncodeql-cli/v2.25.0

User selector

All users

All time

Commit History

Commits on Oct 8, 2025

• Improve qhelp for broken crypto algo queries

  Show description for 0bcdb91
  owen-mc

  committed
  0bcdb91

  Copy full SHA for 0bcdb91

Commits on Apr 2, 2025

• JS: Protect against bad join in BadRandomness

  Show description for 78b2538
  asgerf

  committed
  78b2538

  Copy full SHA for 78b2538

Commits on Mar 13, 2024

• Merge branch 'main' into js/shared-dataflow-merged

  asgerf

  committed
  5e7d1d5

  Copy full SHA for 5e7d1d5

Commits on Nov 30, 2023

• Remove unwanted period from query name

  Show description for 4cb2f53
  felicitymay

  authored
  4cb2f53

  Copy full SHA for 4cb2f53

Commits on Oct 27, 2023

• Address review comment.

  

  Max Schaefer

  committed
  104700f

  Copy full SHA for 104700f

Commits on Oct 26, 2023

• Port changes to JavaScript.

  

  Max Schaefer

  committed
  741735c

  Copy full SHA for 741735c

Commits on Oct 13, 2023

• JS: Port BrokenCryptoAlgorithm

  asgerf

  committed
  85617c2

  Copy full SHA for 85617c2

Commits on Mar 22, 2023

• JS: add a missing space in alert message for js/weak-cryptographic-algorithm

  alexrford

  committed
  b000b9b

  Copy full SHA for b000b9b

Commits on Sep 12, 2022

• Merge branch 'main' into js-followMsg

  erik-krogh

  committed
  afcb767

  Copy full SHA for afcb767

Commits on Sep 5, 2022

• refactor the SensitiveExpr to be a dataflow node

  erik-krogh

  committed
  b4968eb

  Copy full SHA for b4968eb

• make the alert messages of taint-tracking queries more consistent

  erik-krogh

  committed
  aa56ca3

  Copy full SHA for aa56ca3

Commits on Dec 6, 2021

• JS: Tag queries with CWE-328

  Show description for 7ae1047
  RasmusWL

  committed
  7ae1047

  Copy full SHA for 7ae1047

Commits on Aug 12, 2021

• JS: Migrate to *Query.qll convention

  asgerf

  committed
  f6da030

  Copy full SHA for f6da030

Commits on Jun 15, 2021

• Update security-severity scores

  calumgrant

  committed
  771e686

  Copy full SHA for 771e686

Commits on Jun 10, 2021

• Add security-severity metadata

  calumgrant

  committed
  a594afb

  Copy full SHA for a594afb

Commits on Mar 23, 2021

• JS: BadRandomness can just use type-tracking now

  asgerf

  committed
  f8f3770

  Copy full SHA for f8f3770

Commits on Nov 30, 2020

• Autoformat.

  aschackmull

  committed
  8f2094f

  Copy full SHA for 8f2094f

Commits on Jun 23, 2020

• don't report insecure randomness when the insecure random is just a fallback

  erik-krogh

  committed
  3f8881a

  Copy full SHA for 3f8881a

Commits on Jun 16, 2020

• fixed from doc review, and add fixed example for js/biased-cryptographic-random using a secure library

  erik-krogh

  committed
  d811518

  Copy full SHA for d811518

• add qhelp to js/biased-cryptographic-random

  erik-krogh

  committed
  6968796

  Copy full SHA for 6968796

Commits on Jun 15, 2020

• add backtracking to find division that end up being rounded

  erik-krogh

  committed
  3ef5dc7

  Copy full SHA for 3ef5dc7

Commits on Jun 11, 2020

• less heuristics when flagging division that is rounded

  erik-krogh

  committed
  7c7af8d

  Copy full SHA for 7c7af8d

• use type inference to detect string concatenations

  erik-krogh

  committed
  f1b24ba

  Copy full SHA for f1b24ba

• remove redundant check

  erik-krogh

  committed
  f634c62

  Copy full SHA for f634c62

• fixing FPs in `js/biased-cryptographic-random`

  erik-krogh

  committed
  1124816

  Copy full SHA for 1124816

Commits on Jun 10, 2020

• autoformat and update expected output

  erik-krogh

  committed
  5c31b94

  Copy full SHA for 5c31b94

• include the source of cryptographically random number in alert message

  erik-krogh

  committed
  c4f6113

  Copy full SHA for c4f6113

• use steps from InsecureRandomness, and use small-steps

  erik-krogh

  committed
  7e8fd80

  Copy full SHA for 7e8fd80

• add support for secure-random

  erik-krogh

  committed
  9189f23

  Copy full SHA for 9189f23

• add explanations about modulo by power of 2

  erik-krogh

  committed
  16ec405

  Copy full SHA for 16ec405

• introduce query to detect biased random number generators

  erik-krogh

  committed
  111f6d4

  Copy full SHA for 111f6d4

Commits on May 15, 2020

• JS: fix some FNs in the qhelp examples

  esbena

  committed
  1c5bffc

  Copy full SHA for 1c5bffc

Commits on Nov 7, 2019

• Update links to OWASP cheat sheet

  

  Sauyon Lee

  committed
  0040c9f

  Copy full SHA for 0040c9f

Commits on Jan 7, 2019

• JavaScript: Autoformat all QL files.

  

  Max Schaefer

  committed
  31bb39a

  Copy full SHA for 31bb39a

Commits on Nov 14, 2018

• JavaScript: Rename `hasPathFlow` to `hasFlowPath` for consistency with other languages.

  

  Max Schaefer

  committed
  3fcd02a

  Copy full SHA for 3fcd02a