Commits

Breadcrumbs

History for

onmain

User selector

All users

All time

Commit history

Commits on Dec 17, 2021

• Merge pull request #7327 from asgerf/js/handlebars-more-raw-interpolation

  Show description for de4b655
  codeql-ci

  authored
  de4b655

  Copy full SHA for de4b655

• Merge pull request #7049 from asgerf/js/routing-trees

  Show description for 39ec713
  codeql-ci

  authored
  39ec713

  Copy full SHA for 39ec713

• JS: Recognize {{& ... }} as an XSS sink

  asgerf

  committed
  e2c6dd7

  Copy full SHA for e2c6dd7

• JS: Recognize leading/trailing ~ and & in mustache-tags

  asgerf

  committed
  61cc84b

  Copy full SHA for 61cc84b

Commits on Dec 16, 2021

• Merge pull request #7409 from asgerf/js/track-functions-with-methods

  Show description for f274f06
  codeql-ci

  authored
  f274f06

  Copy full SHA for f274f06

• Merge pull request #7408 from asgerf/js/trusted-types-sinks

  Show description for acbf791
  codeql-ci

  authored
  acbf791

  Copy full SHA for acbf791

Commits on Dec 15, 2021

• JS: Add test to stress flow through properties

  asgerf

  committed
  53b3581

  Copy full SHA for 53b3581

• JS: Add test for fastify-rate-limit

  asgerf

  committed
  4d85799

  Copy full SHA for 4d85799

• JS: Fix handling of fastify-plugin

  asgerf

  committed
  615b2ec

  Copy full SHA for 615b2ec

• JS: Add test for res.locals flow to template

  asgerf

  committed
  995e331

  Copy full SHA for 995e331

• JS: Shift line numbers in test expectations

  asgerf

  committed
  04bdba8

  Copy full SHA for 04bdba8

Commits on Dec 14, 2021

• JS: Use return value of trusted type policy callback as a sink

  asgerf

  committed
  7e947b2

  Copy full SHA for 7e947b2

• Merge pull request #7352 from github/esbena/atm-endpoint-polish

  Show description for 1c79d1f
  Z80coder

  authored
  1c79d1f

  Copy full SHA for 1c79d1f

Commits on Dec 13, 2021

• Merge pull request #7344 from SZFsir/main

  Show description for de44583
  erik-krogh

  authored
  de44583

  Copy full SHA for de44583

• update test output for additional DatabaseAccesses

  esbena

  committed
  c66d299

  Copy full SHA for c66d299

Commits on Dec 10, 2021

• Merge pull request #7285 from github/post-release-prep-2.7.3-ddd4ccbb

  Show description for 66c1629
  aeisenberg

  authored
  66c1629

  Copy full SHA for 66c1629

• add file write model for express-fileupload mv

  esbena

  committed
  9ffc029

  Copy full SHA for 9ffc029

• JS: Track functions with methods

  asgerf

  committed
  b336c29

  Copy full SHA for b336c29

• JS: Add test

  asgerf

  committed
  4ef2a5f

  Copy full SHA for 4ef2a5f

Commits on Dec 9, 2021

• Merge pull request #7216 from erik-krogh/ts45

  Show description for e7209d1
  erik-krogh

  authored
  e7209d1

  Copy full SHA for e7209d1

• JS: Improv inter-procedural type inference for FunctionExpr

  SZFsir

  committed
  1a1a741

  Copy full SHA for 1a1a741

Commits on Dec 7, 2021

• JS: Use routing trees to detect deeply tainted req.body

  asgerf

  committed
  da8e67b

  Copy full SHA for da8e67b

• JS: Add test with route handler indirection

  asgerf

  committed
  7492293

  Copy full SHA for 7492293

• JS: Add consistency checks to TemplateObjectInjection test

  asgerf

  committed
  3cbe94a

  Copy full SHA for 3cbe94a

• JS: Add explicit body-parsers to TemplateObjectInjection test

  asgerf

  committed
  64db70f

  Copy full SHA for 64db70f

• JS: Shift line numbers in TemplateObjectInjection test

  asgerf

  committed
  8af430d

  Copy full SHA for 8af430d

• JS: Improve precision of missing CSRF middleware

  asgerf

  committed
  b732193

  Copy full SHA for b732193

• JS: Exclude error handling from auth calls

  asgerf

  committed
  d0e94e6

  Copy full SHA for d0e94e6

• JS: Instantiate for Fastify

  asgerf

  committed
  7182056

  Copy full SHA for 7182056

• JS: Port missing rate limiting query

  asgerf

  committed
  5269933

  Copy full SHA for 5269933

• JS: Port CSRF query

  asgerf

  committed
  389a3c9

  Copy full SHA for 389a3c9

• JS: Instantiate for Express and add tests

  asgerf

  committed
  3dd5d4d

  Copy full SHA for 3dd5d4d

Commits on Dec 2, 2021

• remove paths without unmatched returns from polynomial-redos

  erik-krogh

  committed
  6327fce

  Copy full SHA for 6327fce

Commits on Dec 1, 2021

• remove spurious whitespace

  Show description for de53727
  

  erik-krogh

  and

  asgerf

  authored
  de53727

  Copy full SHA for de53727

Commits on Nov 29, 2021

• Add `groups` property

  Show description for 2dfcd1d
  

  Dave Bartolomeo

  committed
  2dfcd1d

  Copy full SHA for 2dfcd1d