Commits

Commit history

1. Commits on Oct 22, 2025

   • CWE-020: Lower security-severity for OverlyLargeRange queries to 4.0

     Napalys

     committed
     fa47174View commit details

     Copy full SHA for fa47174

     View code at this pointBrowse repository at this point
2. Commits on Apr 30, 2025

   • Fix cwe tags to include leading zero

     owen-mc

     committed
     cf614a5View commit details

     Copy full SHA for cf614a5

     View code at this pointBrowse repository at this point
3. Commits on Jan 21, 2025

   • remove redundant cast

     erik-krogh

     committed
     2f1bd75View commit details

     Copy full SHA for 2f1bd75

     View code at this pointBrowse repository at this point

   • support that two `indexOf()` calls use the same string-concatenation in `getAnEquivalentIndexOfCall()`

     erik-krogh

     committed
     17afab7View commit details

     Copy full SHA for 17afab7

     View code at this pointBrowse repository at this point

   • ensure an `indexOf` call is equivalent with itself. (`getAUse()` is used later to find matching `indexOf` calls)

     erik-krogh

     committed
     d5529e3View commit details

     Copy full SHA for d5529e3

     View code at this pointBrowse repository at this point
4. Commits on Nov 20, 2024

   • Merge branch 'main' into js/shared-dataflow-merge-main

     asgerf

     committed
     d52bc97View commit details

     Copy full SHA for d52bc97

     View code at this pointBrowse repository at this point
5. Commits on Nov 5, 2024

   • Update javascript/ql/src/Security/CWE-020/MissingRegExpAnchor.ql

     Show description for 5e8b1b0
     

     Napalys

     and

     erik-krogh

     authored
     5e8b1b0View commit details

     Copy full SHA for 5e8b1b0

     View code at this pointBrowse repository at this point

   • Added support for matchAll in CWE-020 including new test cases

     Napalys

     committed
     ccee34dView commit details

     Copy full SHA for ccee34d

     View code at this pointBrowse repository at this point
6. Commits on May 2, 2024

   • Merge branch 'main' into js/shared-dataflow

     asgerf

     committed
     c408ab9View commit details

     Copy full SHA for c408ab9

     View code at this pointBrowse repository at this point
7. Commits on Apr 25, 2024

   • delete outdated deprecations

     erik-krogh

     committed
     baa31e1View commit details

     Copy full SHA for baa31e1

     View code at this pointBrowse repository at this point
8. Commits on Oct 13, 2023

   • JS: Port UntrustedDataToExternalAPI

     asgerf

     committed
     8e95a90View commit details

     Copy full SHA for 8e95a90

     View code at this pointBrowse repository at this point
9. Commits on May 3, 2023

   • JS: Make implicit this receivers explicit

     kaspersv

     committed
     67950c8View commit details

     Copy full SHA for 67950c8

     View code at this pointBrowse repository at this point
10. Commits on Mar 10, 2023

    • JavaScript: Autoformat

      aschackmull

      committed
      8d97fe9View commit details

      Copy full SHA for 8d97fe9

      View code at this pointBrowse repository at this point
11. Commits on Jan 4, 2023

    • Merge pull request #11582 from erik-krogh/heuristics

      Show description for cedc9c0
      erik-krogh

      authored
      cedc9c0View commit details

      Copy full SHA for cedc9c0

      View code at this pointBrowse repository at this point
12. Commits on Dec 19, 2022

    • JS: add heuristic variants of queries that use RemoteFlowSource

      erik-krogh

      committed
      442749bView commit details

      Copy full SHA for 442749b

      View code at this pointBrowse repository at this point
13. Commits on Dec 18, 2022

    • move getACommonTld into a utility module without parameters

      erik-krogh

      committed
      35e8d6aView commit details

      Copy full SHA for 35e8d6a

      View code at this pointBrowse repository at this point

    • share {js,rb}/regex/missing-regexp-anchor

      erik-krogh

      committed
      26c5480View commit details

      Copy full SHA for 26c5480

      View code at this pointBrowse repository at this point
14. Commits on Dec 17, 2022

    • move `getACommonTld` to the shared pack

      erik-krogh

      committed
      355499eView commit details

      Copy full SHA for 355499e

      View code at this pointBrowse repository at this point

    • put the shared HostnameRegexp code in the shared regex pack

      erik-krogh

      committed
      f67d0bcView commit details

      Copy full SHA for f67d0bc

      View code at this pointBrowse repository at this point
15. Commits on Nov 22, 2022

    • use RegExpTreeView insteaed of RegexTreeView in JS

      erik-krogh

      committed
      6b5cd9aView commit details

      Copy full SHA for 6b5cd9a

      View code at this pointBrowse repository at this point
16. Commits on Nov 15, 2022

    • port the JS regex/redos queries to use the shared pack

      erik-krogh

      committed
      e18cebaView commit details

      Copy full SHA for e18ceba

      View code at this pointBrowse repository at this point
17. Commits on Aug 15, 2022

    • Merge pull request #9712 from erik-krogh/badRange

      Show description for 0adb588
      erik-krogh

      authored
      0adb588View commit details

      Copy full SHA for 0adb588

      View code at this pointBrowse repository at this point
18. Commits on Aug 9, 2022

    • apply changes based on docs review

      erik-krogh

      committed
      0abbd50View commit details

      Copy full SHA for 0abbd50

      View code at this pointBrowse repository at this point
19. Commits on Jul 13, 2022

    • add some more references to the overly-large-range qhelp

      erik-krogh

      committed
      a4262f8View commit details

      Copy full SHA for a4262f8

      View code at this pointBrowse repository at this point

    • Merge branch 'main' into missDocParam

      erik-krogh

      committed
      a49d34cView commit details

      Copy full SHA for a49d34c

      View code at this pointBrowse repository at this point
20. Commits on Jul 12, 2022

    • convert tabs to spaces in qhelp

      erik-krogh

      committed
      220ff3cView commit details

      Copy full SHA for 220ff3c

      View code at this pointBrowse repository at this point

    • rename query to overly-large-range, and rewrite the @description

      erik-krogh

      committed
      ff25451View commit details

      Copy full SHA for ff25451

      View code at this pointBrowse repository at this point
21. Commits on Jun 28, 2022

    • add suspicious-regexp-range query

      erik-krogh

      committed
      a343ceaView commit details

      Copy full SHA for a343cea

      View code at this pointBrowse repository at this point
22. Commits on May 25, 2022

    • add CWE-940 to js/missing-origin-check

      erik-krogh

      committed
      ed907f6View commit details

      Copy full SHA for ed907f6

      View code at this pointBrowse repository at this point
23. Commits on May 24, 2022

    • add explicit this

      erik-krogh

      committed
      d58fe8eView commit details

      Copy full SHA for d58fe8e

      View code at this pointBrowse repository at this point
24. Commits on May 5, 2022

    • add missing word in qhelp

      erik-krogh

      authored
      58db922View commit details

      Copy full SHA for 58db922

      View code at this pointBrowse repository at this point

    • apply suggestions from doc review

      Show description for 2d7c7ff
      

      erik-krogh

      and

      mchammer01

      authored
      2d7c7ffView commit details

      Copy full SHA for 2d7c7ff

      View code at this pointBrowse repository at this point
25. Commits on Apr 25, 2022

    • include startsWith/endsWith checks in js/missing-origin-check

      erik-krogh

      committed
      0a26e89View commit details

      Copy full SHA for 0a26e89

      View code at this pointBrowse repository at this point

    • fix qhelp: the window, not the origin, is sending the message

      Show description for fe3d71e
      

      erik-krogh

      and

      esbena

      authored
      fe3d71eView commit details

      Copy full SHA for fe3d71e

      View code at this pointBrowse repository at this point
26. Commits on Apr 12, 2022

    • rename files

      erik-krogh

      committed
      bca4d14View commit details

      Copy full SHA for bca4d14

      View code at this pointBrowse repository at this point