Commits

Commit history

1. Commits on Oct 13, 2023

   • JS: Port SqlInjection

     asgerf

     committed
     547a8a9View commit details

     Copy full SHA for 547a8a9

     View code at this pointBrowse repository at this point
2. Commits on Jun 5, 2023

   • fix nits from doc review

     erik-krogh

     committed
     3cb2ec4View commit details

     Copy full SHA for 3cb2ec4

     View code at this pointBrowse repository at this point
3. Commits on Jun 1, 2023

   • changes based on review

     erik-krogh

     committed
     9aeba4fView commit details

     Copy full SHA for 9aeba4f

     View code at this pointBrowse repository at this point
4. Commits on May 31, 2023

   • less duplicated headers in the sql-injection samples

     erik-krogh

     committed
     1e08105View commit details

     Copy full SHA for 1e08105

     View code at this pointBrowse repository at this point

   • show how to use mysql.escape in the sql-injection qhelp

     erik-krogh

     committed
     9882078View commit details

     Copy full SHA for 9882078

     View code at this pointBrowse repository at this point

   • add an example of using dollar eq

     erik-krogh

     committed
     7d801e0View commit details

     Copy full SHA for 7d801e0

     View code at this pointBrowse repository at this point

   • elaborate on both SQL and NoSQL injection in the js/sql-injection qhelp

     erik-krogh

     committed
     e24b45bView commit details

     Copy full SHA for e24b45b

     View code at this pointBrowse repository at this point

   • put string/object in the alert-message for sql-injection

     erik-krogh

     committed
     b343dcaView commit details

     Copy full SHA for b343dca

     View code at this pointBrowse repository at this point
5. Commits on Dec 19, 2022

   • JS: add heuristic variants of queries that use RemoteFlowSource

     erik-krogh

     committed
     442749bView commit details

     Copy full SHA for 442749b

     View code at this pointBrowse repository at this point
6. Commits on Oct 7, 2022

   • fix some more style-guide violations in the alert-messages

     erik-krogh

     committed
     368f847View commit details

     Copy full SHA for 368f847

     View code at this pointBrowse repository at this point
7. Commits on Oct 1, 2021

   • add cwe 090 (ldap injection) and cwe 943 (Improper Neutralization of Special Elements in Data Query Logic) to SqlInjection.ql

     erik-krogh

     committed
     51b56a9View commit details

     Copy full SHA for 51b56a9

     View code at this pointBrowse repository at this point
8. Commits on Aug 12, 2021

   • JS: Remove use of deprecated API

     asgerf

     committed
     cb0075fView commit details

     Copy full SHA for cb0075f

     View code at this pointBrowse repository at this point
9. Commits on Jun 15, 2021

   • Update security-severity scores

     calumgrant

     committed
     771e686View commit details

     Copy full SHA for 771e686

     View code at this pointBrowse repository at this point
10. Commits on Jun 10, 2021

    • Add security-severity metadata

      calumgrant

      committed
      a594afbView commit details

      Copy full SHA for a594afb

      View code at this pointBrowse repository at this point
11. Commits on Nov 30, 2020

    • JavaScript: Add models for more Mongoose methods.

      

      Max Schaefer

      committed
      978d2dbView commit details

      Copy full SHA for 978d2db

      View code at this pointBrowse repository at this point
12. Commits on May 15, 2020

    • JS: fix some FNs in the qhelp examples

      esbena

      committed
      1c5bffcView commit details

      Copy full SHA for 1c5bffc

      View code at this pointBrowse repository at this point
13. Commits on Jan 7, 2019

    • JavaScript: Autoformat all QL files.

      

      Max Schaefer

      committed
      31bb39aView commit details

      Copy full SHA for 31bb39a

      View code at this pointBrowse repository at this point
14. Commits on Nov 19, 2018

    • JavaScript: Remove accidentally committed `.actual` file.

      

      Max Schaefer

      committed
      6021d24View commit details

      Copy full SHA for 6021d24

      View code at this pointBrowse repository at this point
15. Commits on Nov 14, 2018

    • JavaScript: Rename `hasPathFlow` to `hasFlowPath` for consistency with other languages.

      

      Max Schaefer

      committed
      3fcd02aView commit details

      Copy full SHA for 3fcd02a

      View code at this pointBrowse repository at this point

    • JavaScript: Select `Node`s (instead of `PathNode`s) everywhere.

      

      Max Schaefer

      committed
      52ae757View commit details

      Copy full SHA for 52ae757

      View code at this pointBrowse repository at this point

    • JavaScript: Select `source` and `sink` in all path queries.

      

      Max Schaefer

      committed
      e365b72View commit details

      Copy full SHA for e365b72

      View code at this pointBrowse repository at this point

    • JavaScript: Move from `Node` to `PathNode`.

      

      Max Schaefer

      committed
      11d6259View commit details

      Copy full SHA for 11d6259

      View code at this pointBrowse repository at this point

    • JavaScript: Add `import DataFlow::PathGraph`.

      

      Max Schaefer

      committed
      8d87f55View commit details

      Copy full SHA for 8d87f55

      View code at this pointBrowse repository at this point

    • JavaScript: Make all taint-based security queries have `@kind path-problem`.

      

      Max Schaefer

      committed
      60a1357View commit details

      Copy full SHA for 60a1357

      View code at this pointBrowse repository at this point

    • JavaScript: Refactor security queries for uniformity.

      

      Max Schaefer

      committed
      65bcf0fView commit details

      Copy full SHA for 65bcf0f

      View code at this pointBrowse repository at this point
16. Commits on Oct 10, 2018

    • JS: make NosqlInjection use object taint

      asger-semmle

      committed
      d72d734View commit details

      Copy full SHA for d72d734

      View code at this pointBrowse repository at this point
17. Commits on Aug 2, 2018

    • QL code and tests for C#/C++/JavaScript.

      pavgust

      committed
      b55526aView commit details

      Copy full SHA for b55526a

      View code at this pointBrowse repository at this point
18. Loading