Commits

Breadcrumbs

History for

oncodeql-cli-2.25.0

User selector

All users

All time

Commit History

Commits on Oct 13, 2023

• JS: Port SqlInjection

  asgerf

  committed
  547a8a9

  Copy full SHA for 547a8a9

Commits on Jun 5, 2023

• fix nits from doc review

  erik-krogh

  committed
  3cb2ec4

  Copy full SHA for 3cb2ec4

Commits on Jun 1, 2023

• changes based on review

  erik-krogh

  committed
  9aeba4f

  Copy full SHA for 9aeba4f

Commits on May 31, 2023

• less duplicated headers in the sql-injection samples

  erik-krogh

  committed
  1e08105

  Copy full SHA for 1e08105

• show how to use mysql.escape in the sql-injection qhelp

  erik-krogh

  committed
  9882078

  Copy full SHA for 9882078

• add an example of using dollar eq

  erik-krogh

  committed
  7d801e0

  Copy full SHA for 7d801e0

• elaborate on both SQL and NoSQL injection in the js/sql-injection qhelp

  erik-krogh

  committed
  e24b45b

  Copy full SHA for e24b45b

• put string/object in the alert-message for sql-injection

  erik-krogh

  committed
  b343dca

  Copy full SHA for b343dca

Commits on Dec 19, 2022

• JS: add heuristic variants of queries that use RemoteFlowSource

  erik-krogh

  committed
  442749b

  Copy full SHA for 442749b

Commits on Oct 7, 2022

• fix some more style-guide violations in the alert-messages

  erik-krogh

  committed
  368f847

  Copy full SHA for 368f847

Commits on Oct 1, 2021

• add cwe 090 (ldap injection) and cwe 943 (Improper Neutralization of Special Elements in Data Query Logic) to SqlInjection.ql

  erik-krogh

  committed
  51b56a9

  Copy full SHA for 51b56a9

Commits on Aug 12, 2021

• JS: Remove use of deprecated API

  asgerf

  committed
  cb0075f

  Copy full SHA for cb0075f

Commits on Jun 15, 2021

• Update security-severity scores

  calumgrant

  committed
  771e686

  Copy full SHA for 771e686

Commits on Jun 10, 2021

• Add security-severity metadata

  calumgrant

  committed
  a594afb

  Copy full SHA for a594afb

Commits on Nov 30, 2020

• JavaScript: Add models for more Mongoose methods.

  

  Max Schaefer

  committed
  978d2db

  Copy full SHA for 978d2db

Commits on May 15, 2020

• JS: fix some FNs in the qhelp examples

  esbena

  committed
  1c5bffc

  Copy full SHA for 1c5bffc

Commits on Jan 7, 2019

• JavaScript: Autoformat all QL files.

  

  Max Schaefer

  committed
  31bb39a

  Copy full SHA for 31bb39a

Commits on Nov 19, 2018

• JavaScript: Remove accidentally committed `.actual` file.

  

  Max Schaefer

  committed
  6021d24

  Copy full SHA for 6021d24

Commits on Nov 14, 2018

• JavaScript: Rename `hasPathFlow` to `hasFlowPath` for consistency with other languages.

  

  Max Schaefer

  committed
  3fcd02a

  Copy full SHA for 3fcd02a

• JavaScript: Select `Node`s (instead of `PathNode`s) everywhere.

  

  Max Schaefer

  committed
  52ae757

  Copy full SHA for 52ae757

• JavaScript: Select `source` and `sink` in all path queries.

  

  Max Schaefer

  committed
  e365b72

  Copy full SHA for e365b72

• JavaScript: Move from `Node` to `PathNode`.

  

  Max Schaefer

  committed
  11d6259

  Copy full SHA for 11d6259

• JavaScript: Add `import DataFlow::PathGraph`.

  

  Max Schaefer

  committed
  8d87f55

  Copy full SHA for 8d87f55

• JavaScript: Make all taint-based security queries have `@kind path-problem`.

  

  Max Schaefer

  committed
  60a1357

  Copy full SHA for 60a1357

• JavaScript: Refactor security queries for uniformity.

  

  Max Schaefer

  committed
  65bcf0f

  Copy full SHA for 65bcf0f

Commits on Oct 10, 2018

• JS: make NosqlInjection use object taint

  asger-semmle

  committed
  d72d734

  Copy full SHA for d72d734

Commits on Aug 2, 2018

• QL code and tests for C#/C++/JavaScript.

  pavgust

  committed
  b55526a

  Copy full SHA for b55526a

Loading