Commit history

1. Commits on Mar 18, 2022

   • Merge pull request #8483 from jketema/command-line-injection-test-cases-with-calls

     Show description for 4bf35ad
     

     Robert Marsh

     authored
     4bf35adView commit details

     Copy full SHA for 4bf35ad

     Browse repository at this point

   • Merge pull request #8332 from hvitved/ruby/regexp-taint-flow

     Show description for beef8e2
     aibaars

     authored
     beef8e2View commit details

     Copy full SHA for beef8e2

     Browse repository at this point

   • C++: Add command line injection test that currently results in a false positive

     jketema

     committed
     d37ef1bView commit details

     Copy full SHA for d37ef1b

     Browse repository at this point

   • Merge pull request #7917 from aibaars/incomplete-hostname

     Show description for 117fb5b
     aibaars

     authored
     117fb5bView commit details

     Copy full SHA for 117fb5b

     Browse repository at this point

   • Ruby: Use taint tracking instead of type tracking to define `regExpSource`

     hvitved

     committed
     1437aefView commit details

     Copy full SHA for 1437aef

     Browse repository at this point

   • Ruby: Add dataflow/taintracking copies for use in libraries

     hvitved

     committed
     d97eabaView commit details

     Copy full SHA for d97eaba

     Browse repository at this point

   • Ruby/JS add missing ^ in qhelp

     aibaars

     committed
     4a27928View commit details

     Copy full SHA for 4a27928

     Browse repository at this point

   • C++: Add additional command line injection tests

     jketema

     committed
     459870aView commit details

     Copy full SHA for 459870a

     Browse repository at this point

   • Merge remote-tracking branch 'upstream/main' into incomplete-hostname

     aibaars

     committed
     431b605View commit details

     Copy full SHA for 431b605

     Browse repository at this point

   • Revert "Python: switch to shared implementation of IncompleteHostnameRegExp.ql"

     Show description for 6d24591
     aibaars

     committed
     6d24591View commit details

     Copy full SHA for 6d24591

     Browse repository at this point

   • Merge pull request #8032 from JLLeitschuh/feat/JLL/check_os

     Show description for 7674535
     smowton

     authored
     7674535View commit details

     Copy full SHA for 7674535

     Browse repository at this point

   • Merge pull request #8254 from asgerf/ruby/mad-prototype

     Show description for 929419a
     asgerf

     authored
     929419aView commit details

     Copy full SHA for 929419a

     Browse repository at this point

   • Merge pull request #8474 from hvitved/flow-state-changing-steps-should-be-in-path-explanation-alternative

     Show description for 8bf1729
     MathiasVP

     authored
     8bf1729View commit details

     Copy full SHA for 8bf1729

     Browse repository at this point
2. Commits on Mar 17, 2022

   • Python: Accept test changes.

     

     MathiasVP

     authored and

     hvitved

     committed
     abe3045View commit details

     Copy full SHA for abe3045

     Browse repository at this point

   • Data flow: Sync files

     hvitved

     committed
     79ea2a3View commit details

     Copy full SHA for 79ea2a3

     Browse repository at this point

   • Data flow: State-changing taint steps should not be stepped over by the big step relation

     hvitved

     committed
     4df12dcView commit details

     Copy full SHA for 4df12dc

     Browse repository at this point

   • Merge pull request #8473 from erik-krogh/redundantAnyCast

     Show description for 870521b
     erik-krogh

     authored
     870521bView commit details

     Copy full SHA for 870521b

     Browse repository at this point

   • rename redundant-inline-cast to redundant-cast

     erik-krogh

     committed
     fe94421View commit details

     Copy full SHA for fe94421

     Browse repository at this point

   • Merge pull request #8304 from erik-krogh/xssUrl

     Show description for 86398a8
     erik-krogh

     authored
     86398a8View commit details

     Copy full SHA for 86398a8

     Browse repository at this point
3. Commits on Mar 16, 2022

   • update reference to deprecated class name

     erik-krogh

     committed
     aa8b7c8View commit details

     Copy full SHA for aa8b7c8

     Browse repository at this point

   • update expected output

     erik-krogh

     committed
     6cdc387View commit details

     Copy full SHA for 6cdc387

     Browse repository at this point

   • simplify TaintedUrlSuffix::source() to only consider window.location based sources

     erik-krogh

     committed
     d8a5947View commit details

     Copy full SHA for d8a5947

     Browse repository at this point

   • move `PrefixStringSanitizer` to the Query.qll file, and have it extend `LabeledSanitizerGuardNode`

     erik-krogh

     committed
     b3de5d9View commit details

     Copy full SHA for b3de5d9

     Browse repository at this point

   • rename `isXSSSink` to `isXssSink`

     erik-krogh

     committed
     562dce5View commit details

     Copy full SHA for 562dce5

     Browse repository at this point

   • refactor the `js/xss` query to use three flowlabels and one configuration

     erik-krogh

     committed
     f083e87View commit details

     Copy full SHA for f083e87

     Browse repository at this point

   • add client-side-url sinks that may execute JavaScript as XSS sinks

     erik-krogh

     committed
     87842bbView commit details

     Copy full SHA for 87842bb

     Browse repository at this point

   • split `interpretsArgumentsAsURL` out of `interpretsArgumentsAsHTML`, and use it to generalize AttributeUrlSink

     erik-krogh

     committed
     b471fecView commit details

     Copy full SHA for b471fec

     Browse repository at this point

   • add utility predicate to get client-side remote-flow-sources that contain a URL query/fragment

     erik-krogh

     committed
     2576e1fView commit details

     Copy full SHA for 2576e1f

     Browse repository at this point

   • add a `isXSSSink` predicate to the client-side-url-redirection sinks

     erik-krogh

     committed
     67e6a4cView commit details

     Copy full SHA for 67e6a4c

     Browse repository at this point

   • add tests

     erik-krogh

     committed
     fc79242View commit details

     Copy full SHA for fc79242

     Browse repository at this point

   • remove unnecessary module qualifier

     erik-krogh

     committed
     559f03eView commit details

     Copy full SHA for 559f03e

     Browse repository at this point

   • remove unused import

     erik-krogh

     committed
     2d9d383View commit details

     Copy full SHA for 2d9d383

     Browse repository at this point

   • Ruby: regex: fix getGroupNumber

     Show description for 1a51f0c
     aibaars

     committed
     1a51f0cView commit details

     Copy full SHA for 1a51f0c

     Browse repository at this point

   • Merge pull request #8435 from jketema/all-the-barriers

     Show description for 7a9a9d8
     jketema

     authored
     7a9a9d8View commit details

     Copy full SHA for 7a9a9d8

     Browse repository at this point

   • Merge pull request #8462 from michaelnebel/csharp/capture-models-fix-bad-join-order

     Show description for 68f24cd
     michaelnebel

     authored
     68f24cdView commit details

     Copy full SHA for 68f24cd

     Browse repository at this point