Commits

Commit history

1. Commits on Oct 13, 2023

   • JS: Port RemotePropertyInjection

     asgerf

     committed
     b9bd052View commit details

     Copy full SHA for b9bd052

     View code at this pointBrowse repository at this point

   • JS: Port DeepObjectResourceExhaustion

     asgerf

     committed
     d324e55View commit details

     Copy full SHA for d324e55

     View code at this pointBrowse repository at this point
2. Commits on Oct 10, 2023

   • delete an .expected file outside the test directories

     erik-krogh

     committed
     ccd06c7View commit details

     Copy full SHA for ccd06c7

     View code at this pointBrowse repository at this point
3. Commits on Dec 19, 2022

   • JS: add heuristic variants of queries that use RemoteFlowSource

     erik-krogh

     committed
     442749bView commit details

     Copy full SHA for 442749b

     View code at this pointBrowse repository at this point
4. Commits on Oct 7, 2022

   • fix some more style-guide violations in the alert-messages

     erik-krogh

     committed
     368f847View commit details

     Copy full SHA for 368f847

     View code at this pointBrowse repository at this point
5. Commits on Sep 12, 2022

   • apply suggestions from doc review

     erik-krogh

     committed
     6ec03d4View commit details

     Copy full SHA for 6ec03d4

     View code at this pointBrowse repository at this point
6. Commits on Sep 5, 2022

   • make the alert messages of taint-tracking queries more consistent

     erik-krogh

     committed
     aa56ca3View commit details

     Copy full SHA for aa56ca3

     View code at this pointBrowse repository at this point
7. Commits on Aug 12, 2021

   • JS: Migrate to *Query.qll convention

     asgerf

     committed
     f6da030View commit details

     Copy full SHA for f6da030

     View code at this pointBrowse repository at this point
8. Commits on Jun 15, 2021

   • Update security-severity scores

     calumgrant

     committed
     771e686View commit details

     Copy full SHA for 771e686

     View code at this pointBrowse repository at this point
9. Commits on Jun 10, 2021

   • Add security-severity metadata

     calumgrant

     committed
     a594afbView commit details

     Copy full SHA for a594afb

     View code at this pointBrowse repository at this point
10. Commits on Apr 23, 2021

    • Fix all dead qhelp links

      Show description for 455b840
      smowton

      committed
      455b840View commit details

      Copy full SHA for 455b840

      View code at this pointBrowse repository at this point
11. Commits on Mar 2, 2021

    • JS: Add query for resource exhaustion from deep object handling

      asgerf

      committed
      24199a5View commit details

      Copy full SHA for 24199a5

      View code at this pointBrowse repository at this point
12. Commits on Dec 7, 2020

    • JS: Move and rename other prototype pollution queries

      asgerf

      committed
      877b4b0View commit details

      Copy full SHA for 877b4b0

      View code at this pointBrowse repository at this point
13. Commits on May 18, 2020

    • JS: change MembershipTest to MembershipCandidate

      esbena

      committed
      b3691cdView commit details

      Copy full SHA for b3691cd

      View code at this pointBrowse repository at this point

    • JS: introduce MembershipTests.qll and use in two locations

      esbena

      committed
      ddb545cView commit details

      Copy full SHA for ddb545c

      View code at this pointBrowse repository at this point
14. Commits on May 5, 2020

    • add test and change-note to prototype-polution

      erik-krogh

      committed
      bffb127View commit details

      Copy full SHA for bffb127

      View code at this pointBrowse repository at this point

    • change naming of StringSplitCall methods

      erik-krogh

      committed
      fe02137View commit details

      Copy full SHA for fe02137

      View code at this pointBrowse repository at this point

    • introduce StringSplitCall and use it

      erik-krogh

      committed
      89f4537View commit details

      Copy full SHA for 89f4537

      View code at this pointBrowse repository at this point
15. Commits on Feb 27, 2020

    • JS: Flag deep assignments in prototype pollution query

      asgerf

      committed
      52ebe49View commit details

      Copy full SHA for 52ebe49

      View code at this pointBrowse repository at this point

    • JS: Autoformat everything

      asgerf

      committed
      fefcf1aView commit details

      Copy full SHA for fefcf1a

      View code at this pointBrowse repository at this point
16. Commits on Feb 21, 2020

    • JS: Proto pollution: Add is-plain-object sanitizer

      asgerf

      committed
      d1df251View commit details

      Copy full SHA for d1df251

      View code at this pointBrowse repository at this point
17. Commits on Feb 18, 2020

    • use a barrier directly instead of a barrier guard

      erik-krogh

      committed
      e359e1aView commit details

      Copy full SHA for e359e1a

      View code at this pointBrowse repository at this point
18. Commits on Feb 10, 2020

    • Merge remote-tracking branch 'upstream/master' into FalsySanitizer

      erik-krogh

      committed
      0f511c9View commit details

      Copy full SHA for 0f511c9

      View code at this pointBrowse repository at this point
19. Commits on Feb 7, 2020

    • Merge branch 'master' of git.semmle.com:Semmle/ql into FalsySanitizer

      erik-krogh

      committed
      06e13cbView commit details

      Copy full SHA for 06e13cb

      View code at this pointBrowse repository at this point

    • JS: remove unused imports

      esbena

      committed
      dcdaa96View commit details

      Copy full SHA for dcdaa96

      View code at this pointBrowse repository at this point

    • JS: make DynamicPropertyAccess.qll from PrototypePollutionUtility.ql

      esbena

      committed
      cb30329View commit details

      Copy full SHA for cb30329

      View code at this pointBrowse repository at this point
20. Commits on Feb 6, 2020

    • JS: Fix qldoc comment

      asgerf

      committed
      a628f78View commit details

      Copy full SHA for a628f78

      View code at this pointBrowse repository at this point

    • JS: Handle more libraries

      asgerf

      committed
      f84af74View commit details

      Copy full SHA for f84af74

      View code at this pointBrowse repository at this point

    • JS: Add test and handle parameter with source object

      asgerf

      committed
      c559ab1View commit details

      Copy full SHA for c559ab1

      View code at this pointBrowse repository at this point

    • JS: Detect property enumeration through for-own

      asgerf

      committed
      34a9dceView commit details

      Copy full SHA for 34a9dce

      View code at this pointBrowse repository at this point

    • move the if(!x) from DataFLow to TaintTracking

      erik-krogh

      committed
      ade93e6View commit details

      Copy full SHA for ade93e6

      View code at this pointBrowse repository at this point

    • add dataflow barrier for if(xrandr)

      erik-krogh

      committed
      1f7dda7View commit details

      Copy full SHA for 1f7dda7

      View code at this pointBrowse repository at this point

    • JS: Fix join ordering

      asgerf

      committed
      38ef07cView commit details

      Copy full SHA for 38ef07c

      View code at this pointBrowse repository at this point
21. Commits on Feb 5, 2020

    • Update javascript/ql/src/Security/CWE-400/PrototypePollutionUtility.ql

      Show description for cf18bd7
      

      asgerf

      and

      esbena

      authored
      cf18bd7View commit details

      Copy full SHA for cf18bd7

      View code at this pointBrowse repository at this point

    • JS: Address comments

      asgerf

      committed
      fd9975dView commit details

      Copy full SHA for fd9975d

      View code at this pointBrowse repository at this point