Commits

Commit history

1. Commits on Nov 12, 2024

   • Merge pull request #17951 from Napalys/napalys/reverse-support

     Show description for 6266dab
     Napalys

     authored
     6266dabView commit details

     Copy full SHA for 6266dab

     View code at this pointBrowse repository at this point
2. Commits on Nov 11, 2024

   • Update ArrayInPlaceManipulationTaintStep documentation

     Napalys

     committed
     42f7f73View commit details

     Copy full SHA for 42f7f73

     View code at this pointBrowse repository at this point

   • Added change notes

     Napalys

     committed
     ae57c12View commit details

     Copy full SHA for ae57c12

     View code at this pointBrowse repository at this point

   • Refactored SortTaintStep to ArrayInPlaceManipulationTaintStep to support both sort and reverse functions. Fixed newly added test case. from 8026a99db756fe7a91d21a4912426d979794c7ca

     Napalys

     committed
     81bc7cdView commit details

     Copy full SHA for 81bc7cd

     View code at this pointBrowse repository at this point

   • Added test case for Array.prototype.reverse, which is currently not flagged as a potential sink.

     Napalys

     committed
     1c298f0View commit details

     Copy full SHA for 1c298f0

     View code at this pointBrowse repository at this point

   • Moved SortTaintStep to more appropriate home TaintTracking->Arrays

     Napalys

     committed
     f1c6dc1View commit details

     Copy full SHA for f1c6dc1

     View code at this pointBrowse repository at this point
3. Commits on Nov 5, 2024

   • fix: add "actions" tag to ActionsArtifactLeak

     Show description for 881fe0b
     mbarbero

     authored
     881fe0bView commit details

     Copy full SHA for 881fe0b

     View code at this pointBrowse repository at this point
4. Commits on Nov 4, 2024

   • Post-release preparation for codeql-cli-2.19.3

     

     github-actions[bot]

     committed
     f107d16View commit details

     Copy full SHA for f107d16

     View code at this pointBrowse repository at this point

   • Release preparation for version 2.19.3

     

     github-actions[bot]

     committed
     cc7b724View commit details

     Copy full SHA for cc7b724

     View code at this pointBrowse repository at this point
5. Commits on Nov 1, 2024

   • Merge branch 'main' into js-threat-models

     RasmusWL

     authored
     c0ad9baView commit details

     Copy full SHA for c0ad9ba

     View code at this pointBrowse repository at this point

   • JS: Convert remaining queries to use ActiveThreatModelSourceAsSource

     RasmusWL

     committed
     dc8e645View commit details

     Copy full SHA for dc8e645

     View code at this pointBrowse repository at this point

   • JS: Remove dummy comment

     Show description for 19fae76
     

     RasmusWL

     and

     asgerf

     authored
     19fae76View commit details

     Copy full SHA for 19fae76

     View code at this pointBrowse repository at this point
6. Commits on Oct 31, 2024

   • JS: Model `readline` as a `stdin` threat-model source

     Show description for 61e60de
     RasmusWL

     committed
     61e60deView commit details

     Copy full SHA for 61e60de

     View code at this pointBrowse repository at this point

   • JS: Do simple modeling of `process.stdin` as threat-model source

     RasmusWL

     committed
     eca8bf5View commit details

     Copy full SHA for eca8bf5

     View code at this pointBrowse repository at this point

   • JS: Model fs.promises.readFile as file source

     Show description for 34b86c3
     RasmusWL

     committed
     34b86c3View commit details

     Copy full SHA for 34b86c3

     View code at this pointBrowse repository at this point

   • JS: Include `fs` externs

     Show description for 971f538
     RasmusWL

     committed
     971f538View commit details

     Copy full SHA for 971f538

     View code at this pointBrowse repository at this point

   • JS: Add tests for `stdin` threat-model sources

     RasmusWL

     committed
     b47fa77View commit details

     Copy full SHA for b47fa77

     View code at this pointBrowse repository at this point
7. Commits on Oct 29, 2024

   • JS: Add initial `file` threat-model support

     Show description for 2b6c27e
     RasmusWL

     committed
     2b6c27eView commit details

     Copy full SHA for 2b6c27e

     View code at this pointBrowse repository at this point

   • JS: Add `database` threat-model source modeling

     RasmusWL

     committed
     3656864View commit details

     Copy full SHA for 3656864

     View code at this pointBrowse repository at this point

   • JS: Post-processing query for inline test expectations

     hvitved

     committed
     1259b7eView commit details

     Copy full SHA for 1259b7e

     View code at this pointBrowse repository at this point

   • JS: Add change-note

     RasmusWL

     committed
     7c7420aView commit details

     Copy full SHA for 7c7420a

     View code at this pointBrowse repository at this point

   • JS: Minor improvements to threat-model Concepts

     Show description for 84f6b89
     RasmusWL

     committed
     84f6b89View commit details

     Copy full SHA for 84f6b89

     View code at this pointBrowse repository at this point

   • JS: Bump extractor version string

     asgerf

     committed
     6aef571View commit details

     Copy full SHA for 6aef571

     View code at this pointBrowse repository at this point

   • JS: Expand attribute regex to include some Vue attributes

     asgerf

     committed
     3cc6b11View commit details

     Copy full SHA for 3cc6b11

     View code at this pointBrowse repository at this point

   • JS: Add test with some special Vue attributes

     asgerf

     committed
     560b3daView commit details

     Copy full SHA for 560b3da

     View code at this pointBrowse repository at this point
8. Commits on Oct 28, 2024

   • fix the RAM setting on Windows

     erik-krogh

     committed
     2ee88f6View commit details

     Copy full SHA for 2ee88f6

     View code at this pointBrowse repository at this point
9. Commits on Oct 25, 2024

   • JS: Add e2e threat-model test

     RasmusWL

     committed
     1726287View commit details

     Copy full SHA for 1726287

     View code at this pointBrowse repository at this point

   • JS: Model newer `yargs` command-line parsing pattern

     RasmusWL

     committed
     d3ae4c9View commit details

     Copy full SHA for d3ae4c9

     View code at this pointBrowse repository at this point

   • JS: Consolidate command-line argument modeling

     Show description for 3448751
     RasmusWL

     committed
     3448751View commit details

     Copy full SHA for 3448751

     View code at this pointBrowse repository at this point

   • JS: Add `environment` threat-model source

     RasmusWL

     committed
     412e841View commit details

     Copy full SHA for 412e841

     View code at this pointBrowse repository at this point

   • JS: Make (most) queries use ActiveThreatModelSource

     Show description for f733ac1
     RasmusWL

     committed
     f733ac1View commit details

     Copy full SHA for f733ac1

     View code at this pointBrowse repository at this point

   • JS: Integrate RemoteFlowSource with ThreatModelSource

     RasmusWL

     committed
     4b1c027View commit details

     Copy full SHA for 4b1c027

     View code at this pointBrowse repository at this point

   • JS: Remove 'response' from default threat-models

     Show description for dbfbd2c
     RasmusWL

     committed
     dbfbd2cView commit details

     Copy full SHA for dbfbd2c

     View code at this pointBrowse repository at this point

   • JS: Add test showing default active threat-models

     RasmusWL

     committed
     05dce8aView commit details

     Copy full SHA for 05dce8a

     View code at this pointBrowse repository at this point

   • JS: Setup basic support for threat-models

     Show description for 17a6d54
     RasmusWL

     committed
     17a6d54View commit details

     Copy full SHA for 17a6d54

     View code at this pointBrowse repository at this point