Commits

Breadcrumbs

History for

onv1.7.12

User selector

All users

All time

Commit history

Commits on Oct 9, 2025

• follow the URL change in the official security document

  rhysd

  committed
  8e91629

  Copy full SHA for 8e91629

Commits on Dec 22, 2024

• update URL to the security guide in error messages

  rhysd

  committed
  7991a7e

  Copy full SHA for 7991a7e

Commits on Oct 26, 2024

• fix counting safe function call depth

  rhysd

  committed
  9e16139

  Copy full SHA for 9e16139

Commits on Oct 25, 2024

• track safe function calls instead of checking parents on calling `UntrustedInputChecker.OnVisitNodeLeave`

  rhysd

  committed
  32023b2

  Copy full SHA for 32023b2

Commits on Oct 18, 2024

• skip insecure checks if inside functions which output considered safe regardless of the arguments

  IlyaGulya

  committed
  a950ac3

  Copy full SHA for a950ac3

Commits on Aug 13, 2022

• fix typos and flags description in manual

  rhysd

  committed
  4fd167e

  Copy full SHA for 4fd167e

Commits on Nov 11, 2021

• better error message when object filter extracts multiple untrusted inputs

  rhysd

  committed
  2b2f08f

  Copy full SHA for 2b2f08f

Commits on Nov 10, 2021

• optimize set data structure

  Show description for 7a3e2c1
  rhysd

  committed
  7a3e2c1

  Copy full SHA for 7a3e2c1

• add benchmark for untrusted input detection and fix iterating map issue

  rhysd

  committed
  7720988

  Copy full SHA for 7720988

• remove old implementation of untrusted input checker

  rhysd

  committed
  0d0bc9e

  Copy full SHA for 0d0bc9e

• implement new untrusted input checker with better object filtering support

  rhysd

  committed
  6d4bf20

  Copy full SHA for 6d4bf20

Commits on Sep 28, 2021

• fix GitHub document URLs by fixred part 2

  rhysd

  committed
  a3f270b

  Copy full SHA for a3f270b

Commits on Sep 9, 2021

• support untrusted inputs in github.event.discussion payload

  rhysd

  committed
  f05f9da

  Copy full SHA for f05f9da

• update docs with new official security doc

  rhysd

  committed
  aadd1b1

  Copy full SHA for aadd1b1

Commits on Sep 4, 2021

• link to the new official security document instead of securitylab blog post

  Show description for 8ece5e4
  rhysd

  committed
  8ece5e4

  Copy full SHA for 8ece5e4

Commits on Aug 10, 2021

• remove push/pop of UntrustedInputChecker state

  Show description for 4d50212
  rhysd

  committed
  4d50212

  Copy full SHA for 4d50212

• fix push/pop state of UntrustedInputChecker

  rhysd

  committed
  bad9189

  Copy full SHA for bad9189

Commits on Aug 7, 2021

• ensure to initialize UntrustedInputChecker on semantics check

  rhysd

  committed
  416f04d

  Copy full SHA for 416f04d

• consider nested index access like `github.event.pages[matrix.num].page_name`

  rhysd

  committed
  dea1de2

  Copy full SHA for dea1de2

Commits on Aug 6, 2021

• add first tests for detecting untrusted inputs

  rhysd

  committed
  d9ff674

  Copy full SHA for d9ff674

• check untrusted input in index access like github['head_ref']

  rhysd

  committed
  be8fe28

  Copy full SHA for be8fe28

Commits on Aug 5, 2021

• reduce memory usage of UntrustedInputChecker by 28.5%

  Show description for d537240
  rhysd

  committed
  d537240

  Copy full SHA for d537240

• implement detecting untrusted inputs in contexts

  rhysd

  committed
  d320852

  Copy full SHA for d320852

Loading