Commits

Breadcrumbs

History for

oncodeql-cli-2.25.2

User selector

All users

All time

Commit History

Commits on Oct 13, 2023

• JS: Port RemotePropertyInjection

  asgerf

  committed
  b9bd052

  Copy full SHA for b9bd052

• JS: Port DeepObjectResourceExhaustion

  asgerf

  committed
  d324e55

  Copy full SHA for d324e55

Commits on Oct 10, 2023

• delete an .expected file outside the test directories

  erik-krogh

  committed
  ccd06c7

  Copy full SHA for ccd06c7

Commits on Dec 19, 2022

• JS: add heuristic variants of queries that use RemoteFlowSource

  erik-krogh

  committed
  442749b

  Copy full SHA for 442749b

Commits on Oct 7, 2022

• fix some more style-guide violations in the alert-messages

  erik-krogh

  committed
  368f847

  Copy full SHA for 368f847

Commits on Sep 12, 2022

• apply suggestions from doc review

  erik-krogh

  committed
  6ec03d4

  Copy full SHA for 6ec03d4

Commits on Sep 5, 2022

• make the alert messages of taint-tracking queries more consistent

  erik-krogh

  committed
  aa56ca3

  Copy full SHA for aa56ca3

Commits on Aug 12, 2021

• JS: Migrate to *Query.qll convention

  asgerf

  committed
  f6da030

  Copy full SHA for f6da030

Commits on Jun 15, 2021

• Update security-severity scores

  calumgrant

  committed
  771e686

  Copy full SHA for 771e686

Commits on Jun 10, 2021

• Add security-severity metadata

  calumgrant

  committed
  a594afb

  Copy full SHA for a594afb

Commits on Apr 23, 2021

• Fix all dead qhelp links

  Show description for 455b840
  smowton

  committed
  455b840

  Copy full SHA for 455b840

Commits on Mar 2, 2021

• JS: Add query for resource exhaustion from deep object handling

  asgerf

  committed
  24199a5

  Copy full SHA for 24199a5

Commits on Dec 7, 2020

• JS: Move and rename other prototype pollution queries

  asgerf

  committed
  877b4b0

  Copy full SHA for 877b4b0

Commits on May 18, 2020

• JS: change MembershipTest to MembershipCandidate

  esbena

  committed
  b3691cd

  Copy full SHA for b3691cd

• JS: introduce MembershipTests.qll and use in two locations

  esbena

  committed
  ddb545c

  Copy full SHA for ddb545c

Commits on May 5, 2020

• add test and change-note to prototype-polution

  erik-krogh

  committed
  bffb127

  Copy full SHA for bffb127

• change naming of StringSplitCall methods

  erik-krogh

  committed
  fe02137

  Copy full SHA for fe02137

• introduce StringSplitCall and use it

  erik-krogh

  committed
  89f4537

  Copy full SHA for 89f4537

Commits on Feb 27, 2020

• JS: Flag deep assignments in prototype pollution query

  asgerf

  committed
  52ebe49

  Copy full SHA for 52ebe49

• JS: Autoformat everything

  asgerf

  committed
  fefcf1a

  Copy full SHA for fefcf1a

Commits on Feb 21, 2020

• JS: Proto pollution: Add is-plain-object sanitizer

  asgerf

  committed
  d1df251

  Copy full SHA for d1df251

Commits on Feb 18, 2020

• use a barrier directly instead of a barrier guard

  erik-krogh

  committed
  e359e1a

  Copy full SHA for e359e1a

Commits on Feb 10, 2020

• Merge remote-tracking branch 'upstream/master' into FalsySanitizer

  erik-krogh

  committed
  0f511c9

  Copy full SHA for 0f511c9

Commits on Feb 7, 2020

• Merge branch 'master' of git.semmle.com:Semmle/ql into FalsySanitizer

  erik-krogh

  committed
  06e13cb

  Copy full SHA for 06e13cb

• JS: remove unused imports

  esbena

  committed
  dcdaa96

  Copy full SHA for dcdaa96

• JS: make DynamicPropertyAccess.qll from PrototypePollutionUtility.ql

  esbena

  committed
  cb30329

  Copy full SHA for cb30329

Commits on Feb 6, 2020

• JS: Fix qldoc comment

  asgerf

  committed
  a628f78

  Copy full SHA for a628f78

• JS: Handle more libraries

  asgerf

  committed
  f84af74

  Copy full SHA for f84af74

• JS: Add test and handle parameter with source object

  asgerf

  committed
  c559ab1

  Copy full SHA for c559ab1

• JS: Detect property enumeration through for-own

  asgerf

  committed
  34a9dce

  Copy full SHA for 34a9dce

• move the if(!x) from DataFLow to TaintTracking

  erik-krogh

  committed
  ade93e6

  Copy full SHA for ade93e6

• add dataflow barrier for if(xrandr)

  erik-krogh

  committed
  1f7dda7

  Copy full SHA for 1f7dda7

• JS: Fix join ordering

  asgerf

  committed
  38ef07c

  Copy full SHA for 38ef07c

Commits on Feb 5, 2020

• Update javascript/ql/src/Security/CWE-400/PrototypePollutionUtility.ql

  Show description for cf18bd7
  

  asgerf

  and

  esbena

  authored
  cf18bd7

  Copy full SHA for cf18bd7

• JS: Address comments

  asgerf

  committed
  fd9975d

  Copy full SHA for fd9975d