Commits

Breadcrumbs

History for

oncodeql-cli-2.18.3

User selector

All users

All time

Commit History

Commits on Aug 16, 2024

• JS: Move AngularJSTemplateUrlSink to ClientSideUrlRedirection query

  Show description for 9ee7599
  asgerf

  committed
  9ee7599

  Copy full SHA for 9ee7599

• JS: Treat browser message events as client-side sources

  asgerf

  committed
  2d26405

  Copy full SHA for 2d26405

Commits on Aug 13, 2024

• Sync shared files

  hvitved

  committed
  0fcfb47

  Copy full SHA for 0fcfb47

Commits on Aug 8, 2024

• Merge pull request #14666 from am0o0/amammad-js-hardcodedJWTKey

  Show description for 41506fb
  erik-krogh

  authored
  41506fb

  Copy full SHA for 41506fb

Commits on Aug 7, 2024

• remove a part of code related to debugging :)

  am0o0

  committed
  b64cb4d

  Copy full SHA for b64cb4d

Commits on Aug 5, 2024

• apply autoformat to `HardcodedCredentialsCustomizations.qll`

  am0o0

  committed
  fce183c

  Copy full SHA for fce183c

Commits on Aug 1, 2024

• apply changes from @erik-krogh

  am0o0

  committed
  354fcbe

  Copy full SHA for 354fcbe

Commits on Jul 12, 2024

• Merge branch 'main' into aegilops/polyfill-io-compromised-script

  aegilops

  authored
  c9af53f

  Copy full SHA for c9af53f

Commits on Jul 9, 2024

• Formatting of QLL

  aegilops

  committed
  0aab2ae

  Copy full SHA for 0aab2ae

• QLDoc

  aegilops

  committed
  dae2aeb

  Copy full SHA for dae2aeb

• Moved new query to 'experimental'

  Show description for 86afd54
  aegilops

  committed
  86afd54

  Copy full SHA for 86afd54

Commits on Jul 8, 2024

• Merge branch 'main' into aegilops/js/insecure-helmet-middleware

  aegilops

  authored
  d896fdf

  Copy full SHA for d896fdf

• Split out "compromised" functionality

  aegilops

  committed
  1fe14e2

  Copy full SHA for 1fe14e2

Commits on Jul 1, 2024

• Added some missing QLDoc

  aegilops

  committed
  73fc6bc

  Copy full SHA for 73fc6bc

• Added detection for specific Polyfill.io CDN compromise - edited existing library and added new query and tests

  aegilops

  committed
  a1b0703

  Copy full SHA for a1b0703

• add new default cred kind

  am0o0

  committed
  6ecd8b7

  Copy full SHA for 6ecd8b7

• move the TextEncoder and Buffer jose.base64url taint steps to a local query taint step

  am0o0

  committed
  fa8c457

  Copy full SHA for fa8c457

• implement TextEncoderStep taint step with globalVarRef predicate

  am0o0

  committed
  60aa711

  Copy full SHA for 60aa711

• move jose SharedTaintStep to a local taint step, add more additional steps with test cases, update test cases and expected test results

  am0o0

  committed
  65fdb8c

  Copy full SHA for 65fdb8c

Commits on Jun 19, 2024

• Added data extension to set defaults, updated help, added README to explain customization

  aegilops

  committed
  252c9e9

  Copy full SHA for 252c9e9

Commits on Jun 14, 2024

• JS: Support spread arguments in `array.splice`

  RasmusWL

  committed
  3f2befc

  Copy full SHA for 3f2befc

Commits on Jun 12, 2024

• JS: Provide better model for `Array.splice`

  RasmusWL

  committed
  ec18786

  Copy full SHA for ec18786

• JS: Allow many Array steps to be used in type-tracking

  RasmusWL

  committed
  1027ca2

  Copy full SHA for 1027ca2

Commits on Jun 7, 2024

• Javascript: Add support for pretty-printed provenace in tests.

  aschackmull

  committed
  0c47203

  Copy full SHA for 0c47203

Commits on Jun 6, 2024

• remove sanitnzer and add a where condition instead

  Show description for ee05ec0
  am0o0

  committed
  ee05ec0

  Copy full SHA for ee05ec0

• Or to or in docs

  am0o0

  committed
  61a11c6

  Copy full SHA for 61a11c6

Commits on May 25, 2024

• fix a document

  am0o0

  committed
  c2f96a1

  Copy full SHA for c2f96a1

• Merge branch 'main' into amammad-js-hardcodedJWTKey

  am0o0

  authored
  2226f51

  Copy full SHA for 2226f51

• Revert "stash"

  Show description for c299b56
  am0o0

  committed
  c299b56

  Copy full SHA for c299b56

Commits on May 21, 2024

• JS: Remove redundant import

  asgerf

  committed
  3b21108

  Copy full SHA for 3b21108

• JS: Add TypeModel.isTypeUsed

  Show description for 43abc72
  asgerf

  committed
  43abc72

  Copy full SHA for 43abc72

• Merge pull request #16446 from joefarebrother/shared-sensitive-heuristics

  Show description for 01a6c5e
  joefarebrother

  authored
  01a6c5e

  Copy full SHA for 01a6c5e

Commits on May 17, 2024

• Merge pull request #14291 from am0o0/amammad-js-CodeInjection_Shelljs

  Show description for 03cf9b7
  erik-krogh

  authored
  03cf9b7

  Copy full SHA for 03cf9b7

Commits on May 16, 2024

• make shellJSMember predicate private, improve predicate document

  am0o0

  committed
  42a9962

  Copy full SHA for 42a9962

Commits on May 13, 2024

• stash

  am0o0

  committed
  bdee99a

  Copy full SHA for bdee99a