Commits

Commit history

1. Commits on Mar 13, 2024

   • Merge branch 'main' into js/shared-dataflow-merged

     asgerf

     committed
     5e7d1d5View commit details

     Copy full SHA for 5e7d1d5

     View code at this pointBrowse repository at this point
2. Commits on Nov 21, 2023

   • Apply suggestions from code review

     Show description for dfffa1e
     

     max-schaefer

     and

     sabrowning1

     authored
     dfffa1eView commit details

     Copy full SHA for dfffa1e

     View code at this pointBrowse repository at this point
3. Commits on Nov 20, 2023

   • Update qhelp for js/path-injection.

     

     Max Schaefer

     committed
     d147fabView commit details

     Copy full SHA for d147fab

     View code at this pointBrowse repository at this point
4. Commits on Oct 13, 2023

   • JS: Port ZipSlip

     asgerf

     committed
     7a1aeadView commit details

     Copy full SHA for 7a1aead

     View code at this pointBrowse repository at this point

   • JS: Port TaintedPath

     asgerf

     committed
     65e9706View commit details

     Copy full SHA for 65e9706

     View code at this pointBrowse repository at this point
5. Commits on Jun 19, 2023

   • Adjust ZipSlip query description according to review suggestions.

     atorralba

     committed
     8f6d2edView commit details

     Copy full SHA for 8f6d2ed

     View code at this pointBrowse repository at this point

   • Apply code review suggestions.

     Show description for 3c4d938
     

     atorralba

     and

     asgerf

     committed
     3c4d938View commit details

     Copy full SHA for 3c4d938

     View code at this pointBrowse repository at this point
6. Commits on Jun 16, 2023

   • Go/Java/JS/Python/Ruby: Update the description and qhelp of the ZipSlip query

     Show description for 3e96fe6
     atorralba

     committed
     3e96fe6View commit details

     Copy full SHA for 3e96fe6

     View code at this pointBrowse repository at this point
7. Commits on Oct 7, 2022

   • fix some more style-guide violations in the alert-messages

     erik-krogh

     committed
     368f847View commit details

     Copy full SHA for 368f847

     View code at this pointBrowse repository at this point
8. Commits on Sep 5, 2022

   • make the alert messages of taint-tracking queries more consistent

     erik-krogh

     committed
     aa56ca3View commit details

     Copy full SHA for aa56ca3

     View code at this pointBrowse repository at this point
9. Commits on Aug 22, 2022

   • update {rb/py/js/go}/path-injection to match java/csharp

     erik-krogh

     committed
     3553f3dView commit details

     Copy full SHA for 3553f3d

     View code at this pointBrowse repository at this point

   • update js/zip-slip to match java/go/csharp

     erik-krogh

     committed
     594fbc6View commit details

     Copy full SHA for 594fbc6

     View code at this pointBrowse repository at this point
10. Commits on Aug 12, 2021

    • JS: Migrate to *Query.qll convention

      asgerf

      committed
      f6da030View commit details

      Copy full SHA for f6da030

      View code at this pointBrowse repository at this point
11. Commits on Jun 15, 2021

    • Update security-severity scores

      calumgrant

      committed
      771e686View commit details

      Copy full SHA for 771e686

      View code at this pointBrowse repository at this point
12. Commits on Jun 10, 2021

    • Add security-severity metadata

      calumgrant

      committed
      a594afbView commit details

      Copy full SHA for a594afb

      View code at this pointBrowse repository at this point
13. Commits on Oct 1, 2020

    • Fix OWASP broken links

      smowton

      committed
      578ea1aView commit details

      Copy full SHA for 578ea1a

      View code at this pointBrowse repository at this point
14. Commits on Aug 12, 2019

    • JavaScript: Fix inconisstency in `TaintedPath.qhelp`.

      

      Max Schaefer

      committed
      020d31cView commit details

      Copy full SHA for 020d31c

      View code at this pointBrowse repository at this point
15. Commits on Mar 14, 2019

    • JavaScript: Show ZipSlip results by default.

      

      Max Schaefer

      committed
      cc8d680View commit details

      Copy full SHA for cc8d680

      View code at this pointBrowse repository at this point
16. Commits on Feb 28, 2019

    • JS: Documentation fixes

      jcreedcmu

      committed
      c1b218aView commit details

      Copy full SHA for c1b218a

      View code at this pointBrowse repository at this point

    • JS: Actually use fileName in examples

      jcreedcmu

      committed
      c5e57daView commit details

      Copy full SHA for c5e57da

      View code at this pointBrowse repository at this point

    • JS: Address review comments

      jcreedcmu

      committed
      674d279View commit details

      Copy full SHA for 674d279

      View code at this pointBrowse repository at this point

    • JS: Fix incorrect sample link

      jcreedcmu

      committed
      caebdd2View commit details

      Copy full SHA for caebdd2

      View code at this pointBrowse repository at this point

    • JS: Address review comments

      jcreedcmu

      committed
      2fc2a39View commit details

      Copy full SHA for 2fc2a39

      View code at this pointBrowse repository at this point

    • JS: Run auto-formatter

      jcreedcmu

      committed
      32d48baView commit details

      Copy full SHA for 32d48ba

      View code at this pointBrowse repository at this point

    • JS: Address review comments

      jcreedcmu

      committed
      abd2644View commit details

      Copy full SHA for abd2644

      View code at this pointBrowse repository at this point

    • JS: Add new query for ZipSlip (CWE-022)

      jcreedcmu

      committed
      baa4f08View commit details

      Copy full SHA for baa4f08

      View code at this pointBrowse repository at this point
17. Commits on Jan 7, 2019

    • JavaScript: Autoformat all QL files.

      

      Max Schaefer

      committed
      31bb39aView commit details

      Copy full SHA for 31bb39a

      View code at this pointBrowse repository at this point
18. Commits on Nov 14, 2018

    • JavaScript: Rename `hasPathFlow` to `hasFlowPath` for consistency with other languages.

      

      Max Schaefer

      committed
      3fcd02aView commit details

      Copy full SHA for 3fcd02a

      View code at this pointBrowse repository at this point

    • JavaScript: Select `Node`s (instead of `PathNode`s) everywhere.

      

      Max Schaefer

      committed
      52ae757View commit details

      Copy full SHA for 52ae757

      View code at this pointBrowse repository at this point

    • JavaScript: Select `source` and `sink` in all path queries.

      

      Max Schaefer

      committed
      e365b72View commit details

      Copy full SHA for e365b72

      View code at this pointBrowse repository at this point

    • JavaScript: Move from `Node` to `PathNode`.

      

      Max Schaefer

      committed
      11d6259View commit details

      Copy full SHA for 11d6259

      View code at this pointBrowse repository at this point

    • JavaScript: Add `import DataFlow::PathGraph`.

      

      Max Schaefer

      committed
      8d87f55View commit details

      Copy full SHA for 8d87f55

      View code at this pointBrowse repository at this point

    • JavaScript: Make all taint-based security queries have `@kind path-problem`.

      

      Max Schaefer

      committed
      60a1357View commit details

      Copy full SHA for 60a1357

      View code at this pointBrowse repository at this point

    • JavaScript: Remove a few unnecessary imports.

      

      Max Schaefer

      committed
      c51cd50View commit details

      Copy full SHA for c51cd50

      View code at this pointBrowse repository at this point
19. Commits on Aug 2, 2018

    • QL code and tests for C#/C++/JavaScript.

      pavgust

      committed
      b55526aView commit details

      Copy full SHA for b55526a

      View code at this pointBrowse repository at this point
20. Loading