Commits

Breadcrumbs

History for

on40635e6

User selector

All users

All time

Commit History

Commits on Apr 5, 2023

• Improve documentation

  JarLob

  committed
  40635e6

  Copy full SHA for 40635e6

• Improve documentation

  JarLob

  committed
  9fba7d3

  Copy full SHA for 9fba7d3

• Change UI message

  JarLob

  committed
  eef1973

  Copy full SHA for eef1973

• Add simple taint tracking for env variables

  JarLob

  committed
  5c5b9f9

  Copy full SHA for 5c5b9f9

Commits on Apr 3, 2023

• Look for script injections in actions/github-script

  JarLob

  committed
  8ea4182

  Copy full SHA for 8ea4182

• fix formatting

  JarLob

  committed
  ba5747d

  Copy full SHA for ba5747d

• Add more sources, more unit tests, fixes to the GitHub Actions injection query

  JarLob

  committed
  99d634c

  Copy full SHA for 99d634c

Commits on Dec 19, 2022

• JS: add heuristic variants of queries that use RemoteFlowSource

  erik-krogh

  committed
  442749b

  Copy full SHA for 442749b

Commits on Oct 27, 2022

• Merge pull request #10727 from erik-krogh/js-last-msg

  Show description for bbdda9e
  erik-krogh

  authored
  bbdda9e

  Copy full SHA for bbdda9e

Commits on Oct 12, 2022

• spelling: the

  Show description for 9d6ea28
  jsoref

  committed
  9d6ea28

  Copy full SHA for 9d6ea28

Commits on Oct 7, 2022

• fix some more style-guide violations in the alert-messages

  erik-krogh

  committed
  368f847

  Copy full SHA for 368f847

Commits on Sep 30, 2022

• JS/Python/Ruby: s/a HTML/an HTML/

  nickrolfe

  committed
  ed74e0a

  Copy full SHA for ed74e0a

Commits on Sep 12, 2022

• apply suggestions from doc review

  erik-krogh

  committed
  6ec03d4

  Copy full SHA for 6ec03d4

Commits on Sep 5, 2022

• make the alert messages of taint-tracking queries more consistent

  erik-krogh

  committed
  aa56ca3

  Copy full SHA for aa56ca3

Commits on Jul 13, 2022

• use small steps in TypeBackTracker correctly

  erik-krogh

  committed
  fd10947

  Copy full SHA for fd10947

Commits on May 17, 2022

• change @id from js/actions/injection to js/actions/command-injection

  erik-krogh

  committed
  2550988

  Copy full SHA for 2550988

Commits on May 12, 2022

• Merge remote-tracking branch 'origin/main' into nickrolfe/misspelling

  nickrolfe

  committed
  1115227

  Copy full SHA for 1115227

• JS: fix typos in comments

  nickrolfe

  committed
  2ed42c3

  Copy full SHA for 2ed42c3

• apply suggestion from doc review

  Show description for fef4455
  

  erik-krogh

  and

  guntrip

  authored
  fef4455

  Copy full SHA for fef4455

Commits on May 5, 2022

• update the qhelp to mention that the GITHUB_TOKEN only sometimes has write-access

  erik-krogh

  committed
  0c0e280

  Copy full SHA for 0c0e280

• rename getAReferencedExpression to getASimpleReferenceExpression and add examples of what it can parse

  erik-krogh

  committed
  c0152a4

  Copy full SHA for c0152a4

Commits on May 4, 2022

• make the big disjunctions more readable by using a set literal

  erik-krogh

  committed
  8e2b00d

  Copy full SHA for 8e2b00d

• add missing security severity

  erik-krogh

  committed
  31a4de9

  Copy full SHA for 31a4de9

• expand the qhelp for js/actions/injection

  erik-krogh

  committed
  df4bfef

  Copy full SHA for df4bfef

• set js/actions/injection as a high precision warning query

  erik-krogh

  committed
  48fb01f

  Copy full SHA for 48fb01f

• move js/actions/injection out of experimental

  erik-krogh

  committed
  2a65d1d

  Copy full SHA for 2a65d1d

Commits on Mar 16, 2022

• add missing severities to JS queries

  erik-krogh

  committed
  2442bea

  Copy full SHA for 2442bea

Commits on Feb 9, 2022

• Move explanation of example above sample code

  ethanpalm

  authored
  2f7f9d9

  Copy full SHA for 2f7f9d9

Commits on Feb 7, 2022

• fix typo

  Show description for aa95dd4
  

  erik-krogh

  and

  esbena

  authored
  aa95dd4

  Copy full SHA for aa95dd4

• lower the precision of `js/unsafe-code-construction`

  erik-krogh

  committed
  6f28cb9

  Copy full SHA for 6f28cb9

• update qhelp to focus on properly documenting potentially unsafe library functions

  erik-krogh

  committed
  eb133f5

  Copy full SHA for eb133f5

• add qhelp for unsafe-code-construction

  erik-krogh

  committed
  d77c28f

  Copy full SHA for d77c28f

• add `js/unsafe-code-construction` query

  erik-krogh

  committed
  198a464

  Copy full SHA for 198a464

Commits on Oct 5, 2021

• JS: Update CWE tags and severity score of code injection query

  Show description for 3a20ca9
  asgerf

  committed
  3a20ca9

  Copy full SHA for 3a20ca9

Commits on Aug 12, 2021

• JS: Migrate to *Query.qll convention

  asgerf

  committed
  f6da030

  Copy full SHA for f6da030