Commits

Commit history

1. Commits on Jun 23, 2025

   • JS: Remove js/actions/command-injection

     Show description for 76b7228
     asgerf

     committed
     76b7228View commit details

     Copy full SHA for 76b7228

     View code at this pointBrowse repository at this point
2. Commits on Oct 13, 2023

   • JS: Port UnsafeDynamicMethodAccess

     asgerf

     committed
     7f4d42dView commit details

     Copy full SHA for 7f4d42d

     View code at this pointBrowse repository at this point

   • JS: Port UnsafeCodeConstruction

     asgerf

     committed
     32022ccView commit details

     Copy full SHA for 32022cc

     View code at this pointBrowse repository at this point

   • JS: Port ImproperCodeSanitization

     asgerf

     committed
     9128722View commit details

     Copy full SHA for 9128722

     View code at this pointBrowse repository at this point

   • JS: Port CodeInjection

     asgerf

     committed
     fcfab52View commit details

     Copy full SHA for fcfab52

     View code at this pointBrowse repository at this point
3. Commits on Jun 20, 2023

   • Single quote was preventing the shell from expanding the BODY variable

     Show description for 1508546
     tspascoal

     authored
     1508546View commit details

     Copy full SHA for 1508546

     View code at this pointBrowse repository at this point
4. Commits on May 9, 2023

   • Update javascript/ql/src/Security/CWE-094/ExpressionInjection.qhelp

     Show description for 5aa7135
     

     JarLob

     and

     asgerf

     authored
     5aa7135View commit details

     Copy full SHA for 5aa7135

     View code at this pointBrowse repository at this point
5. Commits on Apr 21, 2023

   • Use double curly braces

     JarLob

     committed
     6e9f54eView commit details

     Copy full SHA for 6e9f54e

     View code at this pointBrowse repository at this point
6. Commits on Apr 14, 2023

   • Move `actions/github-script` out of Actions.qll

     JarLob

     committed
     e9dee3aView commit details

     Copy full SHA for e9dee3a

     View code at this pointBrowse repository at this point

   • Extract `where` parts into predicates

     JarLob

     committed
     3724ea1View commit details

     Copy full SHA for 3724ea1

     View code at this pointBrowse repository at this point

   • Encapsulate github-script

     JarLob

     committed
     ac1c206View commit details

     Copy full SHA for ac1c206

     View code at this pointBrowse repository at this point

   • Encapsulate composite actions

     JarLob

     committed
     d80c541View commit details

     Copy full SHA for d80c541

     View code at this pointBrowse repository at this point
7. Commits on Apr 13, 2023

   • Make predicate name clearer

     JarLob

     committed
     9406576View commit details

     Copy full SHA for 9406576

     View code at this pointBrowse repository at this point

   • Use `YamlMapping` for modeling `Env`

     JarLob

     committed
     79218a3View commit details

     Copy full SHA for 79218a3

     View code at this pointBrowse repository at this point

   • Rename Env

     JarLob

     committed
     dd52ef8View commit details

     Copy full SHA for dd52ef8

     View code at this pointBrowse repository at this point
8. Commits on Apr 6, 2023

   • Fix warnings

     JarLob

     committed
     7573c61View commit details

     Copy full SHA for 7573c61

     View code at this pointBrowse repository at this point

   • Add support for composite actions

     JarLob

     committed
     9c7eecfView commit details

     Copy full SHA for 9c7eecf

     View code at this pointBrowse repository at this point
9. Commits on Apr 5, 2023

   • Improve documentation

     JarLob

     committed
     40635e6View commit details

     Copy full SHA for 40635e6

     View code at this pointBrowse repository at this point

   • Improve documentation

     JarLob

     committed
     9fba7d3View commit details

     Copy full SHA for 9fba7d3

     View code at this pointBrowse repository at this point

   • Change UI message

     JarLob

     committed
     eef1973View commit details

     Copy full SHA for eef1973

     View code at this pointBrowse repository at this point

   • Add simple taint tracking for env variables

     JarLob

     committed
     5c5b9f9View commit details

     Copy full SHA for 5c5b9f9

     View code at this pointBrowse repository at this point
10. Commits on Apr 3, 2023

    • Look for script injections in actions/github-script

      JarLob

      committed
      8ea4182View commit details

      Copy full SHA for 8ea4182

      View code at this pointBrowse repository at this point

    • fix formatting

      JarLob

      committed
      ba5747dView commit details

      Copy full SHA for ba5747d

      View code at this pointBrowse repository at this point

    • Add more sources, more unit tests, fixes to the GitHub Actions injection query

      JarLob

      committed
      99d634cView commit details

      Copy full SHA for 99d634c

      View code at this pointBrowse repository at this point
11. Commits on Dec 19, 2022

    • JS: add heuristic variants of queries that use RemoteFlowSource

      erik-krogh

      committed
      442749bView commit details

      Copy full SHA for 442749b

      View code at this pointBrowse repository at this point
12. Commits on Oct 27, 2022

    • Merge pull request #10727 from erik-krogh/js-last-msg

      Show description for bbdda9e
      erik-krogh

      authored
      bbdda9eView commit details

      Copy full SHA for bbdda9e

      View code at this pointBrowse repository at this point
13. Commits on Oct 12, 2022

    • spelling: the

      Show description for 9d6ea28
      jsoref

      committed
      9d6ea28View commit details

      Copy full SHA for 9d6ea28

      View code at this pointBrowse repository at this point
14. Commits on Oct 7, 2022

    • fix some more style-guide violations in the alert-messages

      erik-krogh

      committed
      368f847View commit details

      Copy full SHA for 368f847

      View code at this pointBrowse repository at this point
15. Commits on Sep 30, 2022

    • JS/Python/Ruby: s/a HTML/an HTML/

      nickrolfe

      committed
      ed74e0aView commit details

      Copy full SHA for ed74e0a

      View code at this pointBrowse repository at this point
16. Commits on Sep 12, 2022

    • apply suggestions from doc review

      erik-krogh

      committed
      6ec03d4View commit details

      Copy full SHA for 6ec03d4

      View code at this pointBrowse repository at this point
17. Commits on Sep 5, 2022

    • make the alert messages of taint-tracking queries more consistent

      erik-krogh

      committed
      aa56ca3View commit details

      Copy full SHA for aa56ca3

      View code at this pointBrowse repository at this point
18. Commits on Jul 13, 2022

    • use small steps in TypeBackTracker correctly

      erik-krogh

      committed
      fd10947View commit details

      Copy full SHA for fd10947

      View code at this pointBrowse repository at this point
19. Commits on May 17, 2022

    • change @id from js/actions/injection to js/actions/command-injection

      erik-krogh

      committed
      2550988View commit details

      Copy full SHA for 2550988

      View code at this pointBrowse repository at this point
20. Commits on May 12, 2022

    • Merge remote-tracking branch 'origin/main' into nickrolfe/misspelling

      nickrolfe

      committed
      1115227View commit details

      Copy full SHA for 1115227

      View code at this pointBrowse repository at this point

    • JS: fix typos in comments

      nickrolfe

      committed
      2ed42c3View commit details

      Copy full SHA for 2ed42c3

      View code at this pointBrowse repository at this point