Commits

Breadcrumbs

History for

oncodeql-cli-2.23.4

User selector

All users

All time

Commit History

Commits on Oct 30, 2025

• JS: Add pragma[nomagic] just to be safe

  Show description for c583b48
  asgerf

  committed
  c583b48

  Copy full SHA for c583b48

• JS: Fix bad join order in getNextToken()

  asgerf

  committed
  a5819a1

  Copy full SHA for a5819a1

Commits on Oct 28, 2025

• Constrain location overrides to actual sources/sinks

  d10c

  committed
  a0975e7

  Copy full SHA for a0975e7

• JS/PolynomialReDoSQuery

  Show description for bcdbe0b
  d10c

  committed
  bcdbe0b

  Copy full SHA for bcdbe0b

• JS/ShellCommandInjectionFromEnvironmentQuery

  Show description for 9434325
  d10c

  committed
  9434325

  Copy full SHA for 9434325

• JS/IndirectCommandInjectionQuery

  Show description for 71cf042
  d10c

  committed
  71cf042

  Copy full SHA for 71cf042

• JS/CommandInjectionQuery

  Show description for 2a30ea9
  d10c

  committed
  2a30ea9

  Copy full SHA for 2a30ea9

• Merge pull request #20397 from asgerf/js/build-artifact-leak-fp

  Show description for 8d49f26
  asgerf

  authored
  8d49f26

  Copy full SHA for 8d49f26

Commits on Oct 15, 2025

• JS: Avoid magic and improve a join in type resolution

  asgerf

  committed
  c6577c8

  Copy full SHA for c6577c8

Commits on Oct 8, 2025

• Merge pull request #20586 from asgerf/js/api-graphs-block-this

  Show description for 10c9b74
  asgerf

  authored
  10c9b74

  Copy full SHA for 10c9b74

Commits on Oct 6, 2025

• JS: Refine criteria so that explicit this-passing is not affected

  asgerf

  committed
  587ad5c

  Copy full SHA for 587ad5c

• JS: Restrict this-argument passing in API graphs

  asgerf

  committed
  4d33190

  Copy full SHA for 4d33190

Commits on Sep 24, 2025

• Merge pull request #20452 from paldepind/rust/mad-source-parameter

  Show description for 26aa938
  paldepind

  authored
  26aa938

  Copy full SHA for 26aa938

• Merge pull request #20419 from asgerf/js/express-json-send

  Show description for 2e8091f
  asgerf

  authored
  2e8091f

  Copy full SHA for 2e8091f

Commits on Sep 22, 2025

• Adapt all languages to changes in shared library

  paldepind

  committed
  7d6e206

  Copy full SHA for 7d6e206

Commits on Sep 16, 2025

• Merge pull request #20375 from asgerf/js/promise-try

  Show description for 7670a2b
  asgerf

  authored
  7670a2b

  Copy full SHA for 7670a2b

• Merge pull request #20435 from Napalys/js/promisification_modeling

  Show description for 97a11de
  Napalys

  authored
  97a11de

  Copy full SHA for 97a11de

• Update javascript/ql/lib/semmle/javascript/frameworks/Express.qll

  Show description for 0b90071
  

  asgerf

  and

  Copilot

  authored
  0b90071

  Copy full SHA for 0b90071

• JS: Simplify exist clause to use `Promisify::PromisifyAllCall` instead of `DataFlow::SourceNode`

  Napalys

  committed
  49ccb8c

  Copy full SHA for 49ccb8c

• JS: Add support for Array.prototype.with

  Show description for 429c4ea
  asgerf

  committed
  429c4ea

  Copy full SHA for 429c4ea

• JS: Add support for Promise.try

  asgerf

  committed
  ee78b7d

  Copy full SHA for ee78b7d

• Merge pull request #20399 from asgerf/js/default-interop2

  Show description for 45eff3d
  asgerf

  authored
  45eff3d

  Copy full SHA for 45eff3d

• Merge pull request #19770 from trailofbits/VF/async-package-improvements

  Show description for 65102a0
  asgerf

  authored
  65102a0

  Copy full SHA for 65102a0

• Merge pull request #19768 from trailofbits/VF/lodash-group-by

  Show description for f587273
  asgerf

  authored
  f587273

  Copy full SHA for f587273

Commits on Sep 15, 2025

• JS: Add data flow modeling for promisified user-defined functions

  Napalys

  committed
  0d23ab0

  Copy full SHA for 0d23ab0

• JS: Add modeling for util promisify*

  Napalys

  committed
  2c6db00

  Copy full SHA for 2c6db00

• JS: Add modeling for `es6-promisify`

  Napalys

  committed
  e002f20

  Copy full SHA for e002f20

• JS: Add modeling for `@gar/promisify`

  Napalys

  committed
  35c75c0

  Copy full SHA for 35c75c0

• JS: Add modeling for `@google-cloud/promisify`

  Napalys

  committed
  312471e

  Copy full SHA for 312471e

• JS: Treat promisify(obj).member as obj.member

  Napalys

  committed
  d37425a

  Copy full SHA for d37425a

• JS: Add modeling for `thenify-all`

  Napalys

  committed
  22b6185

  Copy full SHA for 22b6185

Commits on Sep 12, 2025

• JS: Model json and jsonp methods

  asgerf

  committed
  132a8b8

  Copy full SHA for 132a8b8

Commits on Sep 11, 2025

• JS: Deprecate Portals and delete tests

  Show description for 7a2391f
  asgerf

  committed
  7a2391f

  Copy full SHA for 7a2391f

Commits on Sep 10, 2025

• Merge pull request #20317 from asgerf/js/xunit

  Show description for d39263d
  asgerf

  authored
  d39263d

  Copy full SHA for d39263d

• JS: Refactor 'default' import interop

  asgerf

  committed
  dacc9e2

  Copy full SHA for dacc9e2