Commits

Commit history

1. Commits on Oct 8, 2025

   • Improve qhelp for broken crypto algo queries

     Show description for 0bcdb91
     Owen Mansel-Chan (owen-mc)

     committed
     0bcdb91View commit details

     Copy full SHA for 0bcdb91

     View code at this pointBrowse repository at this point
2. Commits on Sep 15, 2025

   • javascript: Fix spelling error in documentation

     Show description for d0091e1
     Ian Lynagh (igfoo)

     committed
     d0091e1View commit details

     Copy full SHA for d0091e1

     View code at this pointBrowse repository at this point
3. Commits on Sep 4, 2025

   • Updated query description and added a sanitizer

     Napalys Klicius (Napalys)

     committed
     d3d608fView commit details

     Copy full SHA for d3d608f

     View code at this pointBrowse repository at this point
4. Commits on Jul 31, 2025

   • Updated qhelp for cors permissive configuration

     Napalys Klicius (Napalys)

     committed
     791a7e2View commit details

     Copy full SHA for 791a7e2

     View code at this pointBrowse repository at this point
5. Commits on Jul 30, 2025

   • Move CORS misconfiguration query from experimental to Security

     Napalys Klicius (Napalys)

     committed
     358617fView commit details

     Copy full SHA for 358617f

     View code at this pointBrowse repository at this point
6. Commits on Jun 23, 2025

   • JS: Remove js/actions/command-injection

     Show description for 76b7228
     Asger F (asgerf)

     committed
     76b7228View commit details

     Copy full SHA for 76b7228

     View code at this pointBrowse repository at this point

   • JS: Remove js/actions/actions-artifact-leak

     Show description for 9dcb61e
     Asger F (asgerf)

     committed
     9dcb61eView commit details

     Copy full SHA for 9dcb61e

     View code at this pointBrowse repository at this point
7. Commits on May 19, 2025

   • Lower the precision of a range of harcoded password queries to remove them from query suites.

     Michael Nebel (michaelnebel)

     committed
     03ecd24View commit details

     Copy full SHA for 03ecd24

     View code at this pointBrowse repository at this point
8. Commits on May 2, 2025

   • Merge pull request #19422 from Napalys/js/shelljs

     Show description for d1e769b
     Napalys Klicius (Napalys)

     authored
     d1e769bView commit details

     Copy full SHA for d1e769b

     View code at this pointBrowse repository at this point
9. Commits on May 1, 2025

   • Refactor process.env handling in CleartextLogging and IndirectCommandInjection modules to use ThreatModelSource

     Napalys Klicius (Napalys)

     committed
     d4b5ef6View commit details

     Copy full SHA for d4b5ef6

     View code at this pointBrowse repository at this point
10. Commits on Apr 30, 2025

    • Fix cwe tags to include leading zero

      Owen Mansel-Chan (owen-mc)

      committed
      cf614a5View commit details

      Copy full SHA for cf614a5

      View code at this pointBrowse repository at this point
11. Commits on Apr 4, 2025

    • Updated `SocketClass` to use API Graphs.

      Napalys Klicius (Napalys)

      committed
      e16a20eView commit details

      Copy full SHA for e16a20e

      View code at this pointBrowse repository at this point
12. Commits on Apr 2, 2025

    • JS: Protect against bad join in BadRandomness

      Show description for 78b2538
      Asger F (asgerf)

      committed
      78b2538View commit details

      Copy full SHA for 78b2538

      View code at this pointBrowse repository at this point
13. Commits on Feb 4, 2025

    • JS: Simplify config in PrototypePollutingFunction.ql.

      Anders Schack-Mulligen (aschackmull)

      committed
      db1ed67View commit details

      Copy full SHA for db1ed67

      View code at this pointBrowse repository at this point
14. Commits on Jan 29, 2025

    • Merge pull request #18397 from aegilops/angular-sources-sinks

      Show description for f8694a3
      Asger F (asgerf)

      authored
      f8694a3View commit details

      Copy full SHA for f8694a3

      View code at this pointBrowse repository at this point
15. Commits on Jan 27, 2025

    • fix example in clear-text-logging qhelp to actually be bad

      Erik Krogh Kristensen (erik-krogh)

      committed
      37a1727View commit details

      Copy full SHA for 37a1727

      View code at this pointBrowse repository at this point
16. Commits on Jan 24, 2025

    • Updated expected test result files using HEAD version of codeql

      Paul Hodgkinson (aegilops)

      committed
      d248551View commit details

      Copy full SHA for d248551

      View code at this pointBrowse repository at this point
17. Commits on Jan 23, 2025

    • Merge

      Paul Hodgkinson (aegilops)

      committed
      522f3d1View commit details

      Copy full SHA for 522f3d1

      View code at this pointBrowse repository at this point
18. Commits on Jan 21, 2025

    • remove redundant cast

      Erik Krogh Kristensen (erik-krogh)

      committed
      2f1bd75View commit details

      Copy full SHA for 2f1bd75

      View code at this pointBrowse repository at this point

    • support that two `indexOf()` calls use the same string-concatenation in `getAnEquivalentIndexOfCall()`

      Erik Krogh Kristensen (erik-krogh)

      committed
      17afab7View commit details

      Copy full SHA for 17afab7

      View code at this pointBrowse repository at this point

    • ensure an `indexOf` call is equivalent with itself. (`getAUse()` is used later to find matching `indexOf` calls)

      Erik Krogh Kristensen (erik-krogh)

      committed
      d5529e3View commit details

      Copy full SHA for d5529e3

      View code at this pointBrowse repository at this point
19. Commits on Jan 20, 2025

    • JS: Update PrototypePollutingFunction.ql

      Asger F (asgerf)

      committed
      8fe622fView commit details

      Copy full SHA for 8fe622f

      View code at this pointBrowse repository at this point

    • JS: Auto-patch diff informed queries

      Asger F (asgerf)

      committed
      fd763a0View commit details

      Copy full SHA for fd763a0

      View code at this pointBrowse repository at this point
20. Commits on Jan 6, 2025

    • JS: Restrict AP length in prototype-polluting function

      Asger F (asgerf)

      committed
      0cdda87View commit details

      Copy full SHA for 0cdda87

      View code at this pointBrowse repository at this point
21. Commits on Dec 19, 2024

    • Merge branch 'main' into js/shared-dataflow-merge-main

      Asger F (asgerf)

      committed
      3acd481View commit details

      Copy full SHA for 3acd481

      View code at this pointBrowse repository at this point
22. Commits on Dec 16, 2024

    • JS: Migrate PrototypePollutingFunction

      Asger F (asgerf)

      committed
      73af3f3View commit details

      Copy full SHA for 73af3f3

      View code at this pointBrowse repository at this point
23. Commits on Dec 13, 2024

    • JS: Follow naming convention in InsecureModuleFlow module

      Asger F (asgerf)

      committed
      4e25036View commit details

      Copy full SHA for 4e25036

      View code at this pointBrowse repository at this point
24. Commits on Dec 3, 2024

    • JS: Update a reference to AdditionalSanitizerGuardNode

      Show description for 04a3a67
      Asger F (asgerf)

      committed
      04a3a67View commit details

      Copy full SHA for 04a3a67

      View code at this pointBrowse repository at this point
25. Commits on Nov 29, 2024

    • JS: follow proper code standards for get predicates

      Show description for 9d4e737
      

      Napalys Klicius (Napalys)

      and

      Asger F (asgerf)

      committed
      9d4e737View commit details

      Copy full SHA for 9d4e737

      View code at this pointBrowse repository at this point

    • JS: fixed bad alert messages when it came to incomplete sanitization for new RegExp objects

      Napalys Klicius (Napalys)

      committed
      3171f38View commit details

      Copy full SHA for 3171f38

      View code at this pointBrowse repository at this point
26. Commits on Nov 28, 2024

    • JS: imcomplete sanization now handles properly maybe global

      Napalys Klicius (Napalys)

      committed
      98fd977View commit details

      Copy full SHA for 98fd977

      View code at this pointBrowse repository at this point

    • JS: incomplete sanitization now also works with RegExp objects

      Napalys Klicius (Napalys)

      committed
      1ae1748View commit details

      Copy full SHA for 1ae1748

      View code at this pointBrowse repository at this point
27. Commits on Nov 25, 2024

    • Update javascript/ql/src/Security/CWE-178/CaseSensitiveMiddlewarePath.ql

      Show description for d6372ae
      

      Napalys Klicius (Napalys)

      and

      Erik Krogh Kristensen (erik-krogh)

      committed
      d6372aeView commit details

      Copy full SHA for d6372ae

      View code at this pointBrowse repository at this point

    • JS: previously js/case-sensitive-middleware-path was not taking into consideration unknown flags

      Napalys Klicius (Napalys)

      committed
      e38b63eView commit details

      Copy full SHA for e38b63e

      View code at this pointBrowse repository at this point
28. Commits on Nov 20, 2024

    • Merge branch 'main' into js/shared-dataflow-merge-main

      Asger F (asgerf)

      committed
      d52bc97View commit details

      Copy full SHA for d52bc97

      View code at this pointBrowse repository at this point