Commits

Commit history

1. Commits on Feb 4, 2025

   • JS: Simplify config in PrototypePollutingFunction.ql.

     aschackmull

     committed
     db1ed67View commit details

     Copy full SHA for db1ed67

     View code at this pointBrowse repository at this point
2. Commits on Jan 20, 2025

   • JS: Update PrototypePollutingFunction.ql

     asgerf

     committed
     8fe622fView commit details

     Copy full SHA for 8fe622f

     View code at this pointBrowse repository at this point

   • JS: Auto-patch diff informed queries

     asgerf

     committed
     fd763a0View commit details

     Copy full SHA for fd763a0

     View code at this pointBrowse repository at this point
3. Commits on Jan 6, 2025

   • JS: Restrict AP length in prototype-polluting function

     asgerf

     committed
     0cdda87View commit details

     Copy full SHA for 0cdda87

     View code at this pointBrowse repository at this point
4. Commits on Dec 16, 2024

   • JS: Migrate PrototypePollutingFunction

     asgerf

     committed
     73af3f3View commit details

     Copy full SHA for 73af3f3

     View code at this pointBrowse repository at this point
5. Commits on Dec 3, 2024

   • JS: Update a reference to AdditionalSanitizerGuardNode

     Show description for 04a3a67
     asgerf

     committed
     04a3a67View commit details

     Copy full SHA for 04a3a67

     View code at this pointBrowse repository at this point
6. Commits on Oct 13, 2023

   • JS: Port PrototypePollutingMergeCall

     asgerf

     committed
     a5c221fView commit details

     Copy full SHA for a5c221f

     View code at this pointBrowse repository at this point

   • JS: Port PrototypePollutingFunction

     asgerf

     committed
     adf7d54View commit details

     Copy full SHA for adf7d54

     View code at this pointBrowse repository at this point

   • JS: Port PrototypePollutingAssignment

     asgerf

     committed
     f1f4592View commit details

     Copy full SHA for f1f4592

     View code at this pointBrowse repository at this point
7. Commits on May 15, 2023

   • add another example of how to fix the prototype pollution issue

     erik-krogh

     committed
     2ebce99View commit details

     Copy full SHA for 2ebce99

     View code at this pointBrowse repository at this point

   • fix typo, the variable in the example is called `items`

     erik-krogh

     committed
     7a338c4View commit details

     Copy full SHA for 7a338c4

     View code at this pointBrowse repository at this point
8. Commits on May 3, 2023

   • JS: Make implicit this receivers explicit

     kaspersv

     committed
     67950c8View commit details

     Copy full SHA for 67950c8

     View code at this pointBrowse repository at this point
9. Commits on Dec 19, 2022

   • JS: add heuristic variants of queries that use RemoteFlowSource

     erik-krogh

     committed
     442749bView commit details

     Copy full SHA for 442749b

     View code at this pointBrowse repository at this point
10. Commits on Oct 7, 2022

    • fix some more style-guide violations in the alert-messages

      erik-krogh

      committed
      368f847View commit details

      Copy full SHA for 368f847

      View code at this pointBrowse repository at this point
11. Commits on May 24, 2022

    • make a model for hasOwnProperty calls and similar

      erik-krogh

      committed
      82c6c22View commit details

      Copy full SHA for 82c6c22

      View code at this pointBrowse repository at this point

    • add support for Object.hasOwn(obj, key)

      erik-krogh

      committed
      2a97dd9View commit details

      Copy full SHA for 2a97dd9

      View code at this pointBrowse repository at this point
12. Commits on Apr 28, 2022

    • fix a FN for prototype polluting function query

      

      Stephan Brandauer

      committed
      3f13a5eView commit details

      Copy full SHA for 3f13a5e

      View code at this pointBrowse repository at this point
13. Commits on Apr 22, 2022

    • delete redundant imports

      erik-krogh

      committed
      ff73dbcView commit details

      Copy full SHA for ff73dbc

      View code at this pointBrowse repository at this point

    • fix PrototypePollutingAssignment examples

      

      Khang. Võ Vĩ

      committed
      f4581aeView commit details

      Copy full SHA for f4581ae

      View code at this pointBrowse repository at this point
14. Commits on Feb 22, 2022

    • support more property writes in js/prototype-pollution-utility, and generalize ObjectDefinePropertyAsPropWrite

      erik-krogh

      committed
      517e17dView commit details

      Copy full SHA for 517e17d

      View code at this pointBrowse repository at this point
15. Commits on Jan 20, 2022

    • fix most issues found by ql/class-doc-style in JS

      erik-krogh

      committed
      5780161View commit details

      Copy full SHA for 5780161

      View code at this pointBrowse repository at this point
16. Commits on Jan 19, 2022

    • add cwe-471 to js/prototype-pollution

      erik-krogh

      committed
      cb9e14fView commit details

      Copy full SHA for cb9e14f

      View code at this pointBrowse repository at this point

    • add CWE-471 to the prototype-pollution queries

      erik-krogh

      committed
      e4203a4View commit details

      Copy full SHA for e4203a4

      View code at this pointBrowse repository at this point
17. Commits on Oct 27, 2021

    • update alert message to distinguish between library input and remote flow

      erik-krogh

      committed
      d1238dfView commit details

      Copy full SHA for d1238df

      View code at this pointBrowse repository at this point
18. Commits on Aug 12, 2021

    • JS: Migrate to *Query.qll convention

      asgerf

      committed
      f6da030View commit details

      Copy full SHA for f6da030

      View code at this pointBrowse repository at this point
19. Commits on Jun 15, 2021

    • Update security-severity scores

      calumgrant

      committed
      771e686View commit details

      Copy full SHA for 771e686

      View code at this pointBrowse repository at this point
20. Commits on Jun 10, 2021

    • Add security-severity metadata

      calumgrant

      committed
      a594afbView commit details

      Copy full SHA for a594afb

      View code at this pointBrowse repository at this point
21. Commits on Dec 22, 2020

    • use strings in isTypeofGard

      erik-krogh

      committed
      f7f8868View commit details

      Copy full SHA for f7f8868

      View code at this pointBrowse repository at this point

    • introduce and use TaintTracking::isTypeofGuard

      erik-krogh

      committed
      6eb88b9View commit details

      Copy full SHA for 6eb88b9

      View code at this pointBrowse repository at this point
22. Commits on Dec 9, 2020

    • Apply suggestions from code review

      Show description for ed729a1
      

      asgerf

      and

      mchammer01

      authored
      ed729a1View commit details

      Copy full SHA for ed729a1

      View code at this pointBrowse repository at this point

    • JS: Address doc review

      asgerf

      committed
      fd293d0View commit details

      Copy full SHA for fd293d0

      View code at this pointBrowse repository at this point
23. Commits on Dec 7, 2020

    • JS: Deny -> block

      asgerf

      committed
      f96c425View commit details

      Copy full SHA for f96c425

      View code at this pointBrowse repository at this point

    • JS: Update to use more inclusive language

      asgerf

      committed
      479dcf5View commit details

      Copy full SHA for 479dcf5

      View code at this pointBrowse repository at this point

    • JS: Update CWE tags

      asgerf

      committed
      ca38a1cView commit details

      Copy full SHA for ca38a1c

      View code at this pointBrowse repository at this point

    • JS: Move all prototype pollution queries to CWE-915

      asgerf

      committed
      25161edView commit details

      Copy full SHA for 25161ed

      View code at this pointBrowse repository at this point
24. Loading