Commit history

1. Commits on Mar 4, 2021

   • Merge pull request #5183 from erik-krogh/next

     Show description for 15049ca
     codeql-ci

     authored
     15049caView commit details

     Copy full SHA for 15049ca

     View code at this pointBrowse repository at this point

   • Merge branch 'main' into java/merge-5226

     aschackmull

     committed
     45f5228View commit details

     Copy full SHA for 45f5228

     View code at this pointBrowse repository at this point

   • Merge pull request #5301 from asgerf/js/ajv-model

     Show description for 342c7ab
     codeql-ci

     authored
     342c7abView commit details

     Copy full SHA for 342c7ab

     View code at this pointBrowse repository at this point
2. Commits on Mar 3, 2021

   • Merge pull request #5286 from RasmusWL/share-crypto-algorithms

     Show description for c1fd484
     tausbn

     authored
     c1fd484View commit details

     Copy full SHA for c1fd484

     View code at this pointBrowse repository at this point

   • Sync .qhelp file renaming to other languages

     Marcono1234

     committed
     b9c0193View commit details

     Copy full SHA for b9c0193

     View code at this pointBrowse repository at this point

   • Python/JS: Sync CryptoAlgorithms.qll

     RasmusWL

     committed
     c3175aeView commit details

     Copy full SHA for c3175ae

     View code at this pointBrowse repository at this point

   • remove development comment

     erik-krogh

     committed
     b9450c9View commit details

     Copy full SHA for b9450c9

     View code at this pointBrowse repository at this point
3. Commits on Mar 2, 2021

   • refactor FunctionStyleClass to get a better join-order

     erik-krogh

     committed
     95a1edcView commit details

     Copy full SHA for 95a1edc

     View code at this pointBrowse repository at this point

   • optimize getACalleeValue

     erik-krogh

     committed
     4d33407View commit details

     Copy full SHA for 4d33407

     View code at this pointBrowse repository at this point

   • Update javascript/ql/src/semmle/javascript/security/dataflow/DeepObjectResourceExhaustionCustomizations.qll

     Show description for 919ee38
     

     asgerf

     and

     erik-krogh

     authored
     919ee38View commit details

     Copy full SHA for 919ee38

     View code at this pointBrowse repository at this point

   • Apply suggestions from code review

     Show description for 6c884f8
     

     asgerf

     and

     erik-krogh

     authored
     6c884f8View commit details

     Copy full SHA for 6c884f8

     View code at this pointBrowse repository at this point

   • JS: Add DeepResourceExhaustion test

     asgerf

     committed
     6e0322dView commit details

     Copy full SHA for 6e0322d

     View code at this pointBrowse repository at this point

   • JS: Move RemotePropertyInjection test into subfolder

     asgerf

     committed
     88e5348View commit details

     Copy full SHA for 88e5348

     View code at this pointBrowse repository at this point

   • JS: Move Source def into customizations lib

     asgerf

     committed
     5d27cd9View commit details

     Copy full SHA for 5d27cd9

     View code at this pointBrowse repository at this point

   • JS: Move ExceptionXss source into Xss.qll

     asgerf

     committed
     d916118View commit details

     Copy full SHA for d916118

     View code at this pointBrowse repository at this point

   • use local dataflow instead of type-inference for `mayHaveBooleanValue`

     erik-krogh

     committed
     47f4faaView commit details

     Copy full SHA for 47f4faa

     View code at this pointBrowse repository at this point

   • use callgraph instead of type-inference for array taint-steps

     erik-krogh

     committed
     ae56285View commit details

     Copy full SHA for ae56285

     View code at this pointBrowse repository at this point

   • use callgraph instead of TypeInference in Testing.qll

     erik-krogh

     committed
     b20ce8bView commit details

     Copy full SHA for b20ce8b

     View code at this pointBrowse repository at this point

   • JS: Update expected output for poly ReDoS

     asgerf

     committed
     fd9604cView commit details

     Copy full SHA for fd9604c

     View code at this pointBrowse repository at this point

   • JS: Fix missing qldoc

     asgerf

     committed
     31721b5View commit details

     Copy full SHA for 31721b5

     View code at this pointBrowse repository at this point

   • JS: Change note

     asgerf

     committed
     05594f2View commit details

     Copy full SHA for 05594f2

     View code at this pointBrowse repository at this point

   • JS: Autoformat

     asgerf

     committed
     0bd60c1View commit details

     Copy full SHA for 0bd60c1

     View code at this pointBrowse repository at this point

   • JS: Recognize RegExps in JSON schemas

     asgerf

     committed
     12079cdView commit details

     Copy full SHA for 12079cd

     View code at this pointBrowse repository at this point

   • JS: Add ajv error as source of ExceptionXss

     asgerf

     committed
     7afa755View commit details

     Copy full SHA for 7afa755

     View code at this pointBrowse repository at this point

   • JS: Add query for resource exhaustion from deep object handling

     asgerf

     committed
     24199a5View commit details

     Copy full SHA for 24199a5

     View code at this pointBrowse repository at this point

   • JS: Add schema validation as TaintedObject sanitizer

     asgerf

     committed
     b978359View commit details

     Copy full SHA for b978359

     View code at this pointBrowse repository at this point

   • add change note

     erik-krogh

     committed
     55985c9View commit details

     Copy full SHA for 55985c9

     View code at this pointBrowse repository at this point

   • only flag React elements in ClientSideUrlRedirect if it's a HTML element, or known link class

     erik-krogh

     committed
     ecccb8aView commit details

     Copy full SHA for ecccb8a

     View code at this pointBrowse repository at this point

   • update Next.js xss example such that the attack is viable

     erik-krogh

     committed
     36049f0View commit details

     Copy full SHA for 36049f0

     View code at this pointBrowse repository at this point

   • rename and move getAPropertyNameInterpretedAsJavaScriptUrl

     erik-krogh

     committed
     1f02594View commit details

     Copy full SHA for 1f02594

     View code at this pointBrowse repository at this point

   • add support for replace in Next.js router

     erik-krogh

     committed
     5b5baceView commit details

     Copy full SHA for 5b5bace

     View code at this pointBrowse repository at this point

   • add ClientSideUrlRedirect sink for Next.js routers

     erik-krogh

     committed
     97032f8View commit details

     Copy full SHA for 97032f8

     View code at this pointBrowse repository at this point

   • support NextJS API endpoints

     erik-krogh

     committed
     a79c30aView commit details

     Copy full SHA for a79c30a

     View code at this pointBrowse repository at this point

   • support Next.js pages that export React components

     erik-krogh

     committed
     0e7e3e6View commit details

     Copy full SHA for 0e7e3e6

     View code at this pointBrowse repository at this point

   • support Next.js page request/response objects

     erik-krogh

     committed
     1fdbbb6View commit details

     Copy full SHA for 1fdbbb6

     View code at this pointBrowse repository at this point