Commits

Commit history

1. Commits on Oct 8, 2025

   • Improve qhelp for broken crypto algo queries

     Show description for 0bcdb91
     owen-mc

     committed
     0bcdb91View commit details

     Copy full SHA for 0bcdb91

     View code at this pointBrowse repository at this point
2. Commits on Apr 2, 2025

   • JS: Protect against bad join in BadRandomness

     Show description for 78b2538
     asgerf

     committed
     78b2538View commit details

     Copy full SHA for 78b2538

     View code at this pointBrowse repository at this point
3. Commits on Mar 13, 2024

   • Merge branch 'main' into js/shared-dataflow-merged

     asgerf

     committed
     5e7d1d5View commit details

     Copy full SHA for 5e7d1d5

     View code at this pointBrowse repository at this point
4. Commits on Nov 30, 2023

   • Remove unwanted period from query name

     Show description for 4cb2f53
     felicitymay

     authored
     4cb2f53View commit details

     Copy full SHA for 4cb2f53

     View code at this pointBrowse repository at this point
5. Commits on Oct 27, 2023

   • Address review comment.

     

     Max Schaefer

     committed
     104700fView commit details

     Copy full SHA for 104700f

     View code at this pointBrowse repository at this point
6. Commits on Oct 26, 2023

   • Port changes to JavaScript.

     

     Max Schaefer

     committed
     741735cView commit details

     Copy full SHA for 741735c

     View code at this pointBrowse repository at this point
7. Commits on Oct 13, 2023

   • JS: Port BrokenCryptoAlgorithm

     asgerf

     committed
     85617c2View commit details

     Copy full SHA for 85617c2

     View code at this pointBrowse repository at this point
8. Commits on Mar 22, 2023

   • JS: add a missing space in alert message for js/weak-cryptographic-algorithm

     alexrford

     committed
     b000b9bView commit details

     Copy full SHA for b000b9b

     View code at this pointBrowse repository at this point
9. Commits on Sep 12, 2022

   • Merge branch 'main' into js-followMsg

     erik-krogh

     committed
     afcb767View commit details

     Copy full SHA for afcb767

     View code at this pointBrowse repository at this point
10. Commits on Sep 5, 2022

    • refactor the SensitiveExpr to be a dataflow node

      erik-krogh

      committed
      b4968ebView commit details

      Copy full SHA for b4968eb

      View code at this pointBrowse repository at this point

    • make the alert messages of taint-tracking queries more consistent

      erik-krogh

      committed
      aa56ca3View commit details

      Copy full SHA for aa56ca3

      View code at this pointBrowse repository at this point
11. Commits on Dec 6, 2021

    • JS: Tag queries with CWE-328

      Show description for 7ae1047
      RasmusWL

      committed
      7ae1047View commit details

      Copy full SHA for 7ae1047

      View code at this pointBrowse repository at this point
12. Commits on Aug 12, 2021

    • JS: Migrate to *Query.qll convention

      asgerf

      committed
      f6da030View commit details

      Copy full SHA for f6da030

      View code at this pointBrowse repository at this point
13. Commits on Jun 15, 2021

    • Update security-severity scores

      calumgrant

      committed
      771e686View commit details

      Copy full SHA for 771e686

      View code at this pointBrowse repository at this point
14. Commits on Jun 10, 2021

    • Add security-severity metadata

      calumgrant

      committed
      a594afbView commit details

      Copy full SHA for a594afb

      View code at this pointBrowse repository at this point
15. Commits on Mar 23, 2021

    • JS: BadRandomness can just use type-tracking now

      asgerf

      committed
      f8f3770View commit details

      Copy full SHA for f8f3770

      View code at this pointBrowse repository at this point
16. Commits on Nov 30, 2020

    • Autoformat.

      aschackmull

      committed
      8f2094fView commit details

      Copy full SHA for 8f2094f

      View code at this pointBrowse repository at this point
17. Commits on Jun 23, 2020

    • don't report insecure randomness when the insecure random is just a fallback

      erik-krogh

      committed
      3f8881aView commit details

      Copy full SHA for 3f8881a

      View code at this pointBrowse repository at this point
18. Commits on Jun 16, 2020

    • fixed from doc review, and add fixed example for js/biased-cryptographic-random using a secure library

      erik-krogh

      committed
      d811518View commit details

      Copy full SHA for d811518

      View code at this pointBrowse repository at this point

    • add qhelp to js/biased-cryptographic-random

      erik-krogh

      committed
      6968796View commit details

      Copy full SHA for 6968796

      View code at this pointBrowse repository at this point
19. Commits on Jun 15, 2020

    • add backtracking to find division that end up being rounded

      erik-krogh

      committed
      3ef5dc7View commit details

      Copy full SHA for 3ef5dc7

      View code at this pointBrowse repository at this point
20. Commits on Jun 11, 2020

    • less heuristics when flagging division that is rounded

      erik-krogh

      committed
      7c7af8dView commit details

      Copy full SHA for 7c7af8d

      View code at this pointBrowse repository at this point

    • use type inference to detect string concatenations

      erik-krogh

      committed
      f1b24baView commit details

      Copy full SHA for f1b24ba

      View code at this pointBrowse repository at this point

    • remove redundant check

      erik-krogh

      committed
      f634c62View commit details

      Copy full SHA for f634c62

      View code at this pointBrowse repository at this point

    • fixing FPs in `js/biased-cryptographic-random`

      erik-krogh

      committed
      1124816View commit details

      Copy full SHA for 1124816

      View code at this pointBrowse repository at this point
21. Commits on Jun 10, 2020

    • autoformat and update expected output

      erik-krogh

      committed
      5c31b94View commit details

      Copy full SHA for 5c31b94

      View code at this pointBrowse repository at this point

    • include the source of cryptographically random number in alert message

      erik-krogh

      committed
      c4f6113View commit details

      Copy full SHA for c4f6113

      View code at this pointBrowse repository at this point

    • use steps from InsecureRandomness, and use small-steps

      erik-krogh

      committed
      7e8fd80View commit details

      Copy full SHA for 7e8fd80

      View code at this pointBrowse repository at this point

    • add support for secure-random

      erik-krogh

      committed
      9189f23View commit details

      Copy full SHA for 9189f23

      View code at this pointBrowse repository at this point

    • add explanations about modulo by power of 2

      erik-krogh

      committed
      16ec405View commit details

      Copy full SHA for 16ec405

      View code at this pointBrowse repository at this point

    • introduce query to detect biased random number generators

      erik-krogh

      committed
      111f6d4View commit details

      Copy full SHA for 111f6d4

      View code at this pointBrowse repository at this point
22. Commits on May 15, 2020

    • JS: fix some FNs in the qhelp examples

      esbena

      committed
      1c5bffcView commit details

      Copy full SHA for 1c5bffc

      View code at this pointBrowse repository at this point
23. Commits on Nov 7, 2019

    • Update links to OWASP cheat sheet

      

      Sauyon Lee

      committed
      0040c9fView commit details

      Copy full SHA for 0040c9f

      View code at this pointBrowse repository at this point
24. Commits on Jan 7, 2019

    • JavaScript: Autoformat all QL files.

      

      Max Schaefer

      committed
      31bb39aView commit details

      Copy full SHA for 31bb39a

      View code at this pointBrowse repository at this point
25. Commits on Nov 14, 2018

    • JavaScript: Rename `hasPathFlow` to `hasFlowPath` for consistency with other languages.

      

      Max Schaefer

      committed
      3fcd02aView commit details

      Copy full SHA for 3fcd02a

      View code at this pointBrowse repository at this point