Commit history

1. Commits on Feb 10, 2022

   • Merge pull request #7591 from asgerf/js/mysql-sinks

     Show description for 9ebbd9e
     codeql-ci

     authored
     9ebbd9eView commit details

     Copy full SHA for 9ebbd9e

     View code at this pointBrowse repository at this point

   • Merge pull request #5841 from erik-krogh/libCode

     Show description for 1a91a79
     codeql-ci

     authored
     1a91a79View commit details

     Copy full SHA for 1a91a79

     View code at this pointBrowse repository at this point

   • Merge pull request #7911 from kaeluka/javascript/add-getFlowLabel-to-PathNode

     Show description for a73cdf3
     

     Stephan Brandauer

     authored
     a73cdf3View commit details

     Copy full SHA for a73cdf3

     View code at this pointBrowse repository at this point
2. Commits on Feb 9, 2022

   • Move explanation of example above sample code

     ethanpalm

     authored
     2f7f9d9View commit details

     Copy full SHA for 2f7f9d9

     View code at this pointBrowse repository at this point

   • add a getFlowLabel method to the PathNode class

     

     Stephan Brandauer

     committed
     3e88d46View commit details

     Copy full SHA for 3e88d46

     View code at this pointBrowse repository at this point

   • Merge branch 'main' into post-release-prep/codeql-cli-2.8.0

     hvitved

     authored
     9440a45View commit details

     Copy full SHA for 9440a45

     View code at this pointBrowse repository at this point
3. Commits on Feb 8, 2022

   • Merge pull request #7876 from erik-krogh/zipRelative

     Show description for 4bbb7ad
     erik-krogh

     authored
     4bbb7adView commit details

     Copy full SHA for 4bbb7ad

     View code at this pointBrowse repository at this point

   • add explicit this

     erik-krogh

     committed
     28ba78cView commit details

     Copy full SHA for 28ba78c

     View code at this pointBrowse repository at this point

   • rename `maybeGetJoinArg` `maybeGetPathSuffix`

     erik-krogh

     committed
     d73b2efView commit details

     Copy full SHA for d73b2ef

     View code at this pointBrowse repository at this point
4. Commits on Feb 7, 2022

   • fix performance issue by inlining a simpler version of `getASourceProp`

     erik-krogh

     committed
     cc3f9bfView commit details

     Copy full SHA for cc3f9bf

     View code at this pointBrowse repository at this point

   • fix typo

     Show description for aa95dd4
     

     erik-krogh

     and

     esbena

     authored
     aa95dd4View commit details

     Copy full SHA for aa95dd4

     View code at this pointBrowse repository at this point

   • update locations of expected output

     erik-krogh

     committed
     b59c791View commit details

     Copy full SHA for b59c791

     View code at this pointBrowse repository at this point

   • recognize more startswith sanitizers for path-injection queries

     erik-krogh

     committed
     ca5f91eView commit details

     Copy full SHA for ca5f91e

     View code at this pointBrowse repository at this point

   • lower the precision of `js/unsafe-code-construction`

     erik-krogh

     committed
     6f28cb9View commit details

     Copy full SHA for 6f28cb9

     View code at this pointBrowse repository at this point

   • add change note

     erik-krogh

     committed
     06f9924View commit details

     Copy full SHA for 06f9924

     View code at this pointBrowse repository at this point

   • update expected output now that JSON.stringify() is seen as a sanitizer

     erik-krogh

     committed
     896d2baView commit details

     Copy full SHA for 896d2ba

     View code at this pointBrowse repository at this point

   • add values written to the global scope as exports

     erik-krogh

     committed
     d1d4ebbView commit details

     Copy full SHA for d1d4ebb

     View code at this pointBrowse repository at this point

   • move .qll files from `src` to `lib`

     erik-krogh

     committed
     91b03f5View commit details

     Copy full SHA for 91b03f5

     View code at this pointBrowse repository at this point

   • update qhelp to focus on properly documenting potentially unsafe library functions

     erik-krogh

     committed
     eb133f5View commit details

     Copy full SHA for eb133f5

     View code at this pointBrowse repository at this point

   • reuse utility predicate

     erik-krogh

     committed
     a9f7756View commit details

     Copy full SHA for a9f7756

     View code at this pointBrowse repository at this point

   • add comment about parameters named "code"

     erik-krogh

     committed
     681179dView commit details

     Copy full SHA for 681179d

     View code at this pointBrowse repository at this point

   • ignore sources named "code"

     erik-krogh

     committed
     53315e6View commit details

     Copy full SHA for 53315e6

     View code at this pointBrowse repository at this point

   • add missing qldoc

     erik-krogh

     committed
     59cc099View commit details

     Copy full SHA for 59cc099

     View code at this pointBrowse repository at this point

   • add qhelp for unsafe-code-construction

     erik-krogh

     committed
     d77c28fView commit details

     Copy full SHA for d77c28f

     View code at this pointBrowse repository at this point

   • add test for unsafe-code-construction query

     erik-krogh

     committed
     d790f3cView commit details

     Copy full SHA for d790f3c

     View code at this pointBrowse repository at this point

   • add `js/unsafe-code-construction` query

     erik-krogh

     committed
     198a464View commit details

     Copy full SHA for 198a464

     View code at this pointBrowse repository at this point

   • add JSON.stringify as a code-injection sanitizer

     erik-krogh

     committed
     955ad8cView commit details

     Copy full SHA for 955ad8c

     View code at this pointBrowse repository at this point

   • add code-injection sink for calls to node

     erik-krogh

     committed
     68a5c1fView commit details

     Copy full SHA for 68a5c1f

     View code at this pointBrowse repository at this point

   • recognize a nodejs re-exports in a loop

     erik-krogh

     committed
     0584a6aView commit details

     Copy full SHA for 0584a6a

     View code at this pointBrowse repository at this point
5. Commits on Feb 6, 2022

   • Post-release preparation for codeql-cli-2.8.0

     

     github-actions[bot]

     committed
     b4ab86cView commit details

     Copy full SHA for b4ab86c

     View code at this pointBrowse repository at this point
6. Commits on Feb 4, 2022

   • Merge pull request #7828 from Naman-ntc/main

     Show description for ab2d3a7
     erik-krogh

     authored
     ab2d3a7View commit details

     Copy full SHA for ab2d3a7

     View code at this pointBrowse repository at this point

   • Merge pull request #7843 from erik-krogh/CVE-2021-23484

     Show description for f00d723
     erik-krogh

     authored
     f00d723View commit details

     Copy full SHA for f00d723

     View code at this pointBrowse repository at this point

   • Merge pull request #7785 from github/z80coder/impose-length-restriction

     Show description for 6c3daf4
     Z80coder

     authored
     6c3daf4View commit details

     Copy full SHA for 6c3daf4

     View code at this pointBrowse repository at this point

   • Update javascript/ql/experimental/adaptivethreatmodeling/lib/experimental/adaptivethreatmodeling/FunctionBodyFeatures.qll

     Show description for be5e8da
     

     Z80coder

     and

     henrymercer

     authored
     be5e8daView commit details

     Copy full SHA for be5e8da

     View code at this pointBrowse repository at this point

   • Update javascript/ql/experimental/adaptivethreatmodeling/lib/experimental/adaptivethreatmodeling/FunctionBodyFeatures.qll

     Show description for e57a0e0
     

     Z80coder

     and

     henrymercer

     authored
     e57a0e0View commit details

     Copy full SHA for e57a0e0

     View code at this pointBrowse repository at this point