Commits

Breadcrumbs

History for

onmaster

User selector

All users

All time

Commit history

Commits on Jul 9, 2020

• Merge pull request #3932 from max-schaefer/portals-additions

  Show description for e167b87
  semmle-qlci

  authored
  e167b87

  Copy full SHA for e167b87

• JavaScript: Update and expand tests.

  

  Max Schaefer

  committed
  7a1410e

  Copy full SHA for 7a1410e

• JavaScript: Add support for global variables to portals.

  

  Max Schaefer

  committed
  1c47260

  Copy full SHA for 1c47260

• JavaScript: Broaden scope of imports considered relevant to portals.

  Show description for c40ef05
  

  Max Schaefer

  committed
  c40ef05

  Copy full SHA for c40ef05

• JavaScript: Add utility predicate `getBasePortal(i)`.

  Show description for 8b4b578
  

  Max Schaefer

  committed
  8b4b578

  Copy full SHA for 8b4b578

Commits on Jul 7, 2020

• C++/C#/JavaScript/Python: Port Location qldoc update.

  aschackmull

  committed
  67db1df

  Copy full SHA for 67db1df

Commits on Jul 6, 2020

• Merge pull request #3892 from asger-semmle/js/redirect-starts-with-sanitizer

  Show description for fe0c5a9
  semmle-qlci

  authored
  fe0c5a9

  Copy full SHA for fe0c5a9

• Merge pull request #3851 from erik-krogh/queryStuff

  Show description for 6d80445
  semmle-qlci

  authored
  6d80445

  Copy full SHA for 6d80445

• autoformat

  erik-krogh

  authored
  9a94462

  Copy full SHA for 9a94462

• Merge pull request #3905 from erik-krogh/unsafeShellTypo

  Show description for 13c3513
  semmle-qlci

  authored
  13c3513

  Copy full SHA for 13c3513

• Merge pull request #3844 from github/esbena-patch-3

  Show description for 73d606d
  semmle-qlci

  authored
  73d606d

  Copy full SHA for 73d606d

• fix typo in js/shell-command-constructed-from-input

  erik-krogh

  committed
  8585312

  Copy full SHA for 8585312

Commits on Jul 3, 2020

• JS: Add StartsWith sanitizer

  asgerf

  committed
  b5104ae

  Copy full SHA for b5104ae

• JS: Add test showing FPs

  asgerf

  committed
  4c06eb8

  Copy full SHA for 4c06eb8

Commits on Jul 2, 2020

• autoformat

  erik-krogh

  committed
  078b6a8

  Copy full SHA for 078b6a8

• Merge remote-tracking branch 'upstream/master' into queryStuff

  erik-krogh

  committed
  261821b

  Copy full SHA for 261821b

• Merge pull request #3805 from esbena/js/seal-freeze-flow

  Show description for b5c8f22
  semmle-qlci

  authored
  b5c8f22

  Copy full SHA for b5c8f22

• split out type-tracking into two predicates, to avoid catastrophic join-order

  erik-krogh

  committed
  2b0a091

  Copy full SHA for 2b0a091

• Merge pull request #3829 from asger-semmle/js/xss-substr

  Show description for 97128b1
  semmle-qlci

  authored
  97128b1

  Copy full SHA for 97128b1

• Merge pull request #3832 from asger-semmle/js/typescript-in-html-files3

  Show description for bfb734e
  semmle-qlci

  authored
  bfb734e

  Copy full SHA for bfb734e

Commits on Jul 1, 2020

• Merge pull request #3619 from erik-krogh/CWE022-Correctness

  Show description for 45ef3ec
  semmle-qlci

  authored
  45ef3ec

  Copy full SHA for 45ef3ec

• Merge pull request #3853 from max-schaefer/js/canonical-names

  Show description for 66a6fe7
  semmle-qlci

  authored
  66a6fe7

  Copy full SHA for 66a6fe7

• JavaScript: Make `getADefinition` and `getAnAccess` available on all `CanonicalName`s.

  

  Max Schaefer

  committed
  a6d8073

  Copy full SHA for a6d8073

• JS: rename predicate

  esbena

  committed
  3ca6031

  Copy full SHA for 3ca6031

• JS: teach the dataflow library identity functions Object.freeze/seal

  esbena

  committed
  75451e3

  Copy full SHA for 75451e3

• JS: more dataflow and global access path testing

  esbena

  committed
  33c5276

  Copy full SHA for 33c5276

• add noSQL tests for type-tracking req.query

  erik-krogh

  committed
  3157cd7

  Copy full SHA for 3157cd7

• add test for type-tracking req.params

  erik-krogh

  committed
  bace299

  Copy full SHA for bace299

• also use new type-tracking in isUserControlledObject

  erik-krogh

  committed
  8227010

  Copy full SHA for 8227010

Commits on Jun 30, 2020

• recognize access to a query object through function calls

  erik-krogh

  committed
  ed48efe

  Copy full SHA for ed48efe

• Merge pull request #3845 from max-schaefer/js/walk-sync

  Show description for 224289c
  semmle-qlci

  authored
  224289c

  Copy full SHA for 224289c

• Merge pull request #3824 from asger-semmle/js/static-regexp-capture-group-step

  Show description for 42bca1a
  semmle-qlci

  authored
  42bca1a

  Copy full SHA for 42bca1a

• Merge pull request #3833 from asger-semmle/js/vue-class-component

  Show description for c850938
  semmle-qlci

  authored
  c850938

  Copy full SHA for c850938

• Merge pull request #3834 from asger-semmle/js/vue-classification

  Show description for 15a0297
  semmle-qlci

  authored
  15a0297

  Copy full SHA for 15a0297

• JavaScript: Fix module name for `walk-sync` package.

  

  Max Schaefer

  committed
  62d56a3

  Copy full SHA for 62d56a3