Commits

Breadcrumbs

History for

onmain

User selector

All users

All time

Commit history

Commits on Aug 29, 2025

• Merge pull request #20048 from Napalys/js/xml_bomb_sinks

  Show description for bafe22c
  Napalys

  authored
  bafe22c

  Copy full SHA for bafe22c

Commits on Aug 28, 2025

• Merge pull request #20297 from asgerf/js/simpler-summary-pruning

  Show description for 4437f47
  asgerf

  authored
  4437f47

  Copy full SHA for 4437f47

Commits on Aug 27, 2025

• JS: Change pruning to not rely on Import

  asgerf

  committed
  be32579

  Copy full SHA for be32579

Commits on Aug 18, 2025

• Post-release preparation for codeql-cli-2.22.4

  

  github-actions[bot]

  committed
  42e3d31

  Copy full SHA for 42e3d31

• Release preparation for version 2.22.4

  

  github-actions[bot]

  committed
  90d2999

  Copy full SHA for 90d2999

• Merge pull request #20151 from Napalys/js/command-line-libs

  Show description for b19d1e0
  Napalys

  authored
  b19d1e0

  Copy full SHA for b19d1e0

• Merge pull request #20148 from Napalys/js/reg-exp-env-variable-threat-model

  Show description for b234618
  Napalys

  authored
  b234618

  Copy full SHA for b234618

Commits on Aug 11, 2025

• Merge pull request #20172 from hvitved/shared/concepts-final-aliases

  Show description for 874f951
  hvitved

  authored
  874f951

  Copy full SHA for 874f951

Commits on Aug 6, 2025

• JS: Generate legacy flow steps for all flow summaries

  hvitved

  committed
  eb3c054

  Copy full SHA for eb3c054

Commits on Aug 5, 2025

• Shared: Use `final` aliases in `ConcentsShared.qll`

  hvitved

  committed
  11dcd90

  Copy full SHA for 11dcd90

Commits on Aug 4, 2025

• Post-release preparation for codeql-cli-2.22.3

  

  github-actions[bot]

  committed
  fb4b0aa

  Copy full SHA for fb4b0aa

• Release preparation for version 2.22.3

  

  github-actions[bot]

  committed
  fd82aeb

  Copy full SHA for fd82aeb

Commits on Aug 1, 2025

• Added change note

  Napalys

  committed
  881ea76

  Copy full SHA for 881ea76

• add taint flow for arg/command-line-args with custom argv option

  Napalys

  committed
  ae4077d

  Copy full SHA for ae4077d

• Add taint flow for Commander.js direct property access and action callbacks

  Napalys

  committed
  d6508f3

  Copy full SHA for d6508f3

• Added couple more test cases for commander js

  Napalys

  committed
  39170f3

  Copy full SHA for 39170f3

• Added a step from parse to opts for commander js

  Napalys

  committed
  6b4e34d

  Copy full SHA for 6b4e34d

• Added step through yargs/yargs constructor and chained methods.

  Napalys

  committed
  e980798

  Copy full SHA for e980798

• Add command injection tests for CLI argument parsing libraries

  Napalys

  committed
  e8eb9be

  Copy full SHA for e8eb9be

Commits on Jul 31, 2025

• Added change note

  Napalys

  committed
  3f9061a

  Copy full SHA for 3f9061a

• Added new test cases for regexp injection with enviromental variable threat model enabled

  Napalys

  committed
  d28a6e6

  Copy full SHA for d28a6e6

• Created new folder for test with threat models disabled

  Napalys

  committed
  8583257

  Copy full SHA for 8583257

• Exlucde environmental variables from default detection in regexp injection

  Napalys

  committed
  5f53820

  Copy full SHA for 5f53820

Commits on Jul 28, 2025

• SSA: Update data flow integration and BarrierGuard interface to use GuardValue.

  aschackmull

  committed
  3b8234e

  Copy full SHA for 3b8234e

Commits on Jul 23, 2025

• Merge branch 'main' into moresensitive2

  geoffw0

  committed
  4f6b698

  Copy full SHA for 4f6b698

Commits on Jul 22, 2025

• Post-release preparation for codeql-cli-2.22.2

  

  github-actions[bot]

  committed
  37cc782

  Copy full SHA for 37cc782

• Release preparation for version 2.22.2

  

  github-actions[bot]

  committed
  997547b

  Copy full SHA for 997547b

• Revert "Release preparation for version 2.22.2"

  nickrolfe

  authored
  825c813

  Copy full SHA for 825c813

Commits on Jul 21, 2025

• Release preparation for version 2.22.2

  

  github-actions[bot]

  committed
  c8632b7

  Copy full SHA for c8632b7

• Revert "Merge pull request #19994 from github/post-release-prep/codeql-cli-2.22.2"

  Show description for ad9b637
  nickrolfe

  committed
  ad9b637

  Copy full SHA for ad9b637

Commits on Jul 17, 2025

• Merge pull request #19931 from michaelnebel/ql4ql/qualitytagcheck

  Show description for 2f29459
  michaelnebel

  authored
  2f29459

  Copy full SHA for 2f29459

• Merge pull request #19984 from jketema/jketema/sec-shared

  Show description for acc66c7
  jketema

  authored
  acc66c7

  Copy full SHA for acc66c7

Commits on Jul 16, 2025

• JS: Fix import

  Show description for 1990438
  jketema

  committed
  1990438

  Copy full SHA for 1990438

Commits on Jul 15, 2025

• Added change note

  Napalys

  committed
  887d80f

  Copy full SHA for 887d80f

• Removed `libxmljs` from being marked as `sink` for `xml-bomb`.

  Napalys

  committed
  1851deb

  Copy full SHA for 1851deb