Commits

Commit history

1. Commits on Nov 11, 2021

   • Merge pull request #7105 from erik-krogh/flagJqueryUI

     Show description for e09c124
     erik-krogh

     authored
     e09c124View commit details

     Copy full SHA for e09c124

     View code at this pointBrowse repository at this point

   • Merge pull request #7083 from asgerf/js/type-track-object-literals-with-methods

     Show description for 34cc61e
     codeql-ci

     authored
     34cc61eView commit details

     Copy full SHA for 34cc61e

     View code at this pointBrowse repository at this point

   • Merge pull request #7021 from erik-krogh/cwe326

     Show description for b513033
     erik-krogh

     authored
     b513033View commit details

     Copy full SHA for b513033

     View code at this pointBrowse repository at this point

   • Merge pull request #5908 from erik-krogh/protoLib

     Show description for 891694b
     erik-krogh

     authored
     891694bView commit details

     Copy full SHA for 891694b

     View code at this pointBrowse repository at this point

   • Merge pull request #7029 from erik-krogh/cwe384

     Show description for 140a70f
     erik-krogh

     authored
     140a70fView commit details

     Copy full SHA for 140a70f

     View code at this pointBrowse repository at this point

   • Apply suggestions from code review

     Show description for 7d8284a
     

     asgerf

     and

     erik-krogh

     authored
     7d8284aView commit details

     Copy full SHA for 7d8284a

     View code at this pointBrowse repository at this point
2. Commits on Nov 10, 2021

   • move extend aliasing to `getAnAliasedSourceNode`

     erik-krogh

     committed
     5d901efView commit details

     Copy full SHA for 5d901ef

     View code at this pointBrowse repository at this point

   • have the aliasPropertyPresenceStep step over extend calls

     erik-krogh

     committed
     2d907f8View commit details

     Copy full SHA for 2d907f8

     View code at this pointBrowse repository at this point

   • add CWE-532 to the clear-text-logging query

     erik-krogh

     committed
     5543465View commit details

     Copy full SHA for 5543465

     View code at this pointBrowse repository at this point

   • Update javascript/ql/src/Security/CWE-384/SessionFixation.qhelp

     Show description for ab5d945
     

     erik-krogh

     and

     ethanpalm

     authored
     ab5d945View commit details

     Copy full SHA for ab5d945

     View code at this pointBrowse repository at this point
3. Commits on Nov 9, 2021

   • Merge pull request #7076 from asgerf/js/tainted-path-regexp-guard2

     Show description for d9d304f
     codeql-ci

     authored
     d9d304fView commit details

     Copy full SHA for d9d304f

     View code at this pointBrowse repository at this point

   • fix typo in change note

     Show description for 56a7c8b
     

     erik-krogh

     and

     asgerf

     authored
     56a7c8bView commit details

     Copy full SHA for 56a7c8b

     View code at this pointBrowse repository at this point

   • add comment about modes of operation

     Show description for 8727060
     

     erik-krogh

     and

     RasmusWL

     authored
     8727060View commit details

     Copy full SHA for 8727060

     View code at this pointBrowse repository at this point

   • JS: Limited tracking of object literals with methods

     asgerf

     committed
     87aa39cView commit details

     Copy full SHA for 87aa39c

     View code at this pointBrowse repository at this point

   • Revert "JS: Skip files with unsupported file encoding"

     asgerf

     authored
     0c6680bView commit details

     Copy full SHA for 0c6680b

     View code at this pointBrowse repository at this point
4. Commits on Nov 8, 2021

   • JS: Use getAMatchedString instead of getConstantString

     asgerf

     committed
     f14f944View commit details

     Copy full SHA for f14f944

     View code at this pointBrowse repository at this point

   • JS: Add test

     asgerf

     committed
     b3e64f1View commit details

     Copy full SHA for b3e64f1

     View code at this pointBrowse repository at this point

   • Merge pull request #7075 from erik-krogh/cwe297

     Show description for 330c2c4
     erik-krogh

     authored
     330c2c4View commit details

     Copy full SHA for 330c2c4

     View code at this pointBrowse repository at this point

   • add cwe-297 to `js/disabling-certificate-validation`

     erik-krogh

     committed
     a2175a3View commit details

     Copy full SHA for a2175a3

     View code at this pointBrowse repository at this point

   • add cwe-942 to `js/cors-misconfiguration-for-credentials`

     erik-krogh

     committed
     507c8adView commit details

     Copy full SHA for 507c8ad

     View code at this pointBrowse repository at this point

   • Merge pull request #6993 from asgerf/js/tainted-path-regexp-contains-check

     Show description for 6f80387
     codeql-ci

     authored
     6f80387View commit details

     Copy full SHA for 6f80387

     View code at this pointBrowse repository at this point
5. Commits on Nov 4, 2021

   • Merge pull request #7027 from github/z80coder/faster-callee-api-name-feature

     Show description for 95f21b5
     Z80coder

     authored
     95f21b5View commit details

     Copy full SHA for 95f21b5

     View code at this pointBrowse repository at this point

   • format code

     Z80coder

     committed
     b8d7f52View commit details

     Copy full SHA for b8d7f52

     View code at this pointBrowse repository at this point

   • optionally ignore everything after a dash

     erik-krogh

     committed
     a19627cView commit details

     Copy full SHA for a19627c

     View code at this pointBrowse repository at this point

   • Merge branch 'main' into protoLib

     erik-krogh

     committed
     99f5f70View commit details

     Copy full SHA for 99f5f70

     View code at this pointBrowse repository at this point

   • fix docstring

     Show description for bf5e36e
     

     erik-krogh

     and

     asgerf

     authored
     bf5e36eView commit details

     Copy full SHA for bf5e36e

     View code at this pointBrowse repository at this point

   • Merge pull request #6714 from valeria-meli/javascript/ssrf

     Show description for 2895428
     codeql-ci

     authored
     2895428View commit details

     Copy full SHA for 2895428

     View code at this pointBrowse repository at this point

   • Merge pull request #7044 from asgerf/js/proto-pollution-fps

     Show description for 5515256
     codeql-ci

     authored
     5515256View commit details

     Copy full SHA for 5515256

     View code at this pointBrowse repository at this point
6. Commits on Nov 3, 2021

   • don't include mode-of-operation into the algorithm names

     erik-krogh

     committed
     523c15cView commit details

     Copy full SHA for 523c15c

     View code at this pointBrowse repository at this point

   • formatting qll file

     

     luciaromeroML

     committed
     e509385View commit details

     Copy full SHA for e509385

     View code at this pointBrowse repository at this point

   • Merge pull request #6881 from erik-krogh/add-missing-noinline

     Show description for 3638892
     erik-krogh

     authored
     3638892View commit details

     Copy full SHA for 3638892

     View code at this pointBrowse repository at this point

   • JS: Block prototype pollution flow into this

     asgerf

     committed
     712614aView commit details

     Copy full SHA for 712614a

     View code at this pointBrowse repository at this point

   • JS: Block prototype pollution assignment flows through .replace()

     asgerf

     committed
     08bc80fView commit details

     Copy full SHA for 08bc80f

     View code at this pointBrowse repository at this point

   • JS: Check for labeled barriers in reachableFromInput

     asgerf

     committed
     76e8418View commit details

     Copy full SHA for 76e8418

     View code at this pointBrowse repository at this point

   • add js/session-fixation query

     erik-krogh

     committed
     264f4abView commit details

     Copy full SHA for 264f4ab

     View code at this pointBrowse repository at this point