Commits

Commit history

1. Commits on Oct 14, 2026

   • Make queries use ActiveThreatModelSource, not RemoteFlowSource

     Show description for 9b363ee
     owen-mc

     committed
     9b363eeView commit details

     Copy full SHA for 9b363ee

     View code at this pointBrowse repository at this point

   • Use instanceof for threat model sources

     Show description for 55705d4
     

     owen-mc

     and

     Copilot

     committed
     55705d4View commit details

     Copy full SHA for 55705d4

     View code at this pointBrowse repository at this point
2. Commits on Jan 29, 2026

   • python: Add query for prompt injection

     Show description for e7a0fc7
     yoff

     committed
     e7a0fc7View commit details

     Copy full SHA for e7a0fc7

     View code at this pointBrowse repository at this point
3. Commits on Nov 26, 2025

   • Remove trailing periods from @name metadata in query files

     Show description for caf6b95
     felicitymay

     committed
     caf6b95View commit details

     Copy full SHA for caf6b95

     View code at this pointBrowse repository at this point
4. Commits on Oct 28, 2025

   • Python/CorsBypass

     d10c

     committed
     998de14View commit details

     Copy full SHA for 998de14

     View code at this pointBrowse repository at this point

   • Python/UnsafeUsageOfClientSideEncryptionVersion

     d10c

     committed
     4bc9edeView commit details

     Copy full SHA for 4bc9ede

     View code at this pointBrowse repository at this point

   • Python/UnsafeUnpackQuery

     Show description for 6d57316
     d10c

     committed
     6d57316View commit details

     Copy full SHA for 6d57316

     View code at this pointBrowse repository at this point
5. Commits on Sep 1, 2025

   • Python: Fix some Ql4Ql violations.

     michaelnebel

     committed
     dbd3125View commit details

     Copy full SHA for dbd3125

     View code at this pointBrowse repository at this point
6. Commits on Jul 17, 2025

   • [DIFF-INFORMED] Python: (Possible)TimingAttackAgainstHash

     d10c

     committed
     20030d5View commit details

     Copy full SHA for 20030d5

     View code at this pointBrowse repository at this point
7. Commits on Jun 17, 2025

   • Python: mass enable diff-informed data flow `none()` location overrides

     Show description for b79ce6d
     d10c

     committed
     b79ce6dView commit details

     Copy full SHA for b79ce6d

     View code at this pointBrowse repository at this point
8. Commits on Apr 30, 2025

   • Fix cwe tags to include leading zero

     owen-mc

     committed
     cf614a5View commit details

     Copy full SHA for cf614a5

     View code at this pointBrowse repository at this point
9. Commits on Feb 6, 2025

   • Python: ignore experimental for now

     asgerf

     committed
     15c2ccbView commit details

     Copy full SHA for 15c2ccb

     View code at this pointBrowse repository at this point

   • Python: mass enable diff-informed data flow

     asgerf

     committed
     e4a1847View commit details

     Copy full SHA for e4a1847

     View code at this pointBrowse repository at this point
10. Commits on Dec 9, 2024

    • Remove experimental version + qhelp fixes

      joefarebrother

      committed
      4602c5cView commit details

      Copy full SHA for 4602c5c

      View code at this pointBrowse repository at this point

    • Promote jinja sinks

      joefarebrother

      committed
      60d8a85View commit details

      Copy full SHA for 60d8a85

      View code at this pointBrowse repository at this point

    • Copy template injection to standard pack + add jinja sinks

      joefarebrother

      committed
      8647073View commit details

      Copy full SHA for 8647073

      View code at this pointBrowse repository at this point
11. Commits on Oct 8, 2024

    • Python: Update CORS query tags and change note

      Show description for 92bca9c
      tausbn

      committed
      92bca9cView commit details

      Copy full SHA for 92bca9c

      View code at this pointBrowse repository at this point
12. Commits on Sep 26, 2024

    • Merge branch 'main' into threat-models

      RasmusWL

      committed
      431a1afView commit details

      Copy full SHA for 431a1af

      View code at this pointBrowse repository at this point
13. Commits on Sep 24, 2024

    • Merge pull request #17305 from Kwstubbs/CORSMiddleware-Starlette

      Show description for 8c015b0
      tausbn

      authored
      8c015b0View commit details

      Copy full SHA for 8c015b0

      View code at this pointBrowse repository at this point
14. Commits on Sep 23, 2024

    • Merge branch 'main' into threat-models

      RasmusWL

      authored
      4a21a85View commit details

      Copy full SHA for 4a21a85

      View code at this pointBrowse repository at this point
15. Commits on Sep 20, 2024

    • Replace uses of StringConstCompare

      joefarebrother

      committed
      3001a57View commit details

      Copy full SHA for 3001a57

      View code at this pointBrowse repository at this point
16. Commits on Sep 13, 2024

    • Reorder and rename

      Kwstubbs

      committed
      c303328View commit details

      Copy full SHA for c303328

      View code at this pointBrowse repository at this point

    • First round feedback

      Kwstubbs

      committed
      831d522View commit details

      Copy full SHA for 831d522

      View code at this pointBrowse repository at this point
17. Commits on Sep 10, 2024

    • Python: Make queries use ActiveThreatModelSource

      RasmusWL

      committed
      528f08fView commit details

      Copy full SHA for 528f08f

      View code at this pointBrowse repository at this point
18. Commits on Sep 2, 2024

    • WIP: Python: CORS Bypass

      Show description for f86570f
      

      Porcupiney Hairs

      committed
      f86570fView commit details

      Copy full SHA for f86570f

      View code at this pointBrowse repository at this point
19. Commits on Aug 27, 2024

    • Grammar

      Kwstubbs

      committed
      c60f459View commit details

      Copy full SHA for c60f459

      View code at this pointBrowse repository at this point

    • Corrections

      Kwstubbs

      committed
      1db7865View commit details

      Copy full SHA for 1db7865

      View code at this pointBrowse repository at this point

    • Add support for vulnerable CORS middlewares

      Kwstubbs

      committed
      8bf8893View commit details

      Copy full SHA for 8bf8893

      View code at this pointBrowse repository at this point
20. Commits on Jul 29, 2024

    • Merge branch 'main' into python-cookie-concept-promote

      joefarebrother

      committed
      1127b08View commit details

      Copy full SHA for 1127b08

      View code at this pointBrowse repository at this point
21. Commits on Jul 23, 2024

    • Remove experimental query versions

      joefarebrother

      committed
      a73d675View commit details

      Copy full SHA for a73d675

      View code at this pointBrowse repository at this point

    • Use a 3-valued newtype for hasSameSiteAttribute

      joefarebrother

      committed
      226e4ebView commit details

      Copy full SHA for 226e4eb

      View code at this pointBrowse repository at this point

    • Fix experimental query compilation

      joefarebrother

      committed
      6a7bdafView commit details

      Copy full SHA for 6a7bdaf

      View code at this pointBrowse repository at this point

    • Implement cookie attributes for cases in which a raw header is set

      joefarebrother

      committed
      9ad6c8cView commit details

      Copy full SHA for 9ad6c8c

      View code at this pointBrowse repository at this point

    • Change flag predicates to boolean parameters rather than boolean results

      joefarebrother

      committed
      2df09f6View commit details

      Copy full SHA for 2df09f6

      View code at this pointBrowse repository at this point

    • Add cookie flags to cookie write concept, and alter experimental queries to use them

      joefarebrother

      committed
      6f7b2a2View commit details

      Copy full SHA for 6f7b2a2

      View code at this pointBrowse repository at this point