Commit history

1. Commits on May 26, 2020

   • Merge pull request #3387 from geoffw0/tostringperf

     Show description for 5deeda0
     jbj

     authored
     5deeda0View commit details

     Copy full SHA for 5deeda0

     View code at this pointBrowse repository at this point

   • Merge pull request #3564 from max-schaefer/js/reflective-argument-access

     Show description for be5b343
     semmle-qlci

     authored
     be5b343View commit details

     Copy full SHA for be5b343

     View code at this pointBrowse repository at this point

   • Merge pull request #3555 from max-schaefer/js/require-flow

     Show description for 4b0354c
     semmle-qlci

     authored
     4b0354cView commit details

     Copy full SHA for 4b0354c

     View code at this pointBrowse repository at this point

   • JavaScript: Update expected output for unrelated tests.

     

     Max Schaefer

     committed
     7ddf5ceView commit details

     Copy full SHA for 7ddf5ce

     View code at this pointBrowse repository at this point

   • Merge pull request #3527 from esbena/js/fastify

     Show description for 4b56229
     semmle-qlci

     authored
     4b56229View commit details

     Copy full SHA for 4b56229

     View code at this pointBrowse repository at this point

   • Merge pull request #3539 from asger-semmle/js/capture-level-flow

     Show description for df205b6
     semmle-qlci

     authored
     df205b6View commit details

     Copy full SHA for df205b6

     View code at this pointBrowse repository at this point

   • JavaScript: Add basic support for reasoning about reflective parameter accesses.

     Show description for 9d3a9d7
     

     Max Schaefer

     committed
     9d3a9d7View commit details

     Copy full SHA for 9d3a9d7

     View code at this pointBrowse repository at this point

   • JavaScript: Add test for `FlowSteps::argumentPassing` predicate.

     

     Max Schaefer

     committed
     a39e8b4View commit details

     Copy full SHA for a39e8b4

     View code at this pointBrowse repository at this point
2. Commits on May 25, 2020

   • C++/JavaScript: Improve CodeDuplication.qll QLDoc

     Show description for 6fc9e1d
     jbj

     committed
     6fc9e1dView commit details

     Copy full SHA for 6fc9e1d

     View code at this pointBrowse repository at this point
3. Commits on May 24, 2020

   • JavaScript: Track `require` through local data flow.

     

     Max Schaefer

     committed
     573fdaaView commit details

     Copy full SHA for 573fdaa

     View code at this pointBrowse repository at this point
4. Commits on May 22, 2020

   • Merge pull request #3447 from erik-krogh/LibCmdInjection

     Show description for b9ecf1a
     semmle-qlci

     authored
     b9ecf1aView commit details

     Copy full SHA for b9ecf1a

     View code at this pointBrowse repository at this point
5. Commits on May 21, 2020

   • JS: Add test case for missed captured flow

     asgerf

     committed
     75be3b7View commit details

     Copy full SHA for 75be3b7

     View code at this pointBrowse repository at this point

   • Apply suggestions from doc review

     Show description for b297837
     

     erik-krogh

     and

     mchammer01

     authored
     b297837View commit details

     Copy full SHA for b297837

     View code at this pointBrowse repository at this point

   • JS: fixup expected output

     esbena

     committed
     b31f83aView commit details

     Copy full SHA for b31f83a

     View code at this pointBrowse repository at this point

   • JS: fixup

     esbena

     committed
     e588e59View commit details

     Copy full SHA for e588e59

     View code at this pointBrowse repository at this point

   • JS: make the Fastify model support `isUserControlledObject`

     esbena

     committed
     c400b45View commit details

     Copy full SHA for c400b45

     View code at this pointBrowse repository at this point

   • JS: de-boilerplate the fastify model: address expr/dataflow comments

     esbena

     committed
     894033dView commit details

     Copy full SHA for 894033d

     View code at this pointBrowse repository at this point

   • JS: make the qldoc check happy

     esbena

     committed
     74fc33eView commit details

     Copy full SHA for 74fc33e

     View code at this pointBrowse repository at this point

   • JS: model fastify

     esbena

     committed
     a76c70dView commit details

     Copy full SHA for a76c70d

     View code at this pointBrowse repository at this point
6. Commits on May 20, 2020

   • Merge pull request #3525 from erik-krogh/ZipTaint

     Show description for 8df7b7c
     semmle-qlci

     authored
     8df7b7cView commit details

     Copy full SHA for 8df7b7c

     View code at this pointBrowse repository at this point

   • autoformat

     erik-krogh

     committed
     a23cde1View commit details

     Copy full SHA for a23cde1

     View code at this pointBrowse repository at this point

   • rename isTaintedPathStep to isPosixPathStep

     erik-krogh

     committed
     5a3eec8View commit details

     Copy full SHA for 5a3eec8

     View code at this pointBrowse repository at this point

   • update docstring

     Show description for 97c199e
     

     erik-krogh

     and

     asgerf

     authored
     97c199eView commit details

     Copy full SHA for 97c199e

     View code at this pointBrowse repository at this point

   • Merge pull request #3516 from asger-semmle/js/typescript-3.9.2

     Show description for c15d22d
     semmle-qlci

     authored
     c15d22dView commit details

     Copy full SHA for c15d22d

     View code at this pointBrowse repository at this point

   • Merge pull request #3478 from erik-krogh/PromiseAll

     Show description for 2bbc1c2
     semmle-qlci

     authored
     2bbc1c2View commit details

     Copy full SHA for 2bbc1c2

     View code at this pointBrowse repository at this point

   • Merge pull request #3508 from asger-semmle/js/shared-data-flow-node

     Show description for 29b8a0d
     semmle-qlci

     authored
     29b8a0dView commit details

     Copy full SHA for 29b8a0d

     View code at this pointBrowse repository at this point

   • use NodeJSLib::Path instead of DataFlow::moduleMember

     erik-krogh

     committed
     33e0f25View commit details

     Copy full SHA for 33e0f25

     View code at this pointBrowse repository at this point

   • share implementation between TaintedPath and ZipSlip

     erik-krogh

     committed
     7c51dffView commit details

     Copy full SHA for 7c51dff

     View code at this pointBrowse repository at this point
7. Commits on May 19, 2020

   • add a sanitizer for chained replace-calls

     erik-krogh

     committed
     5b569a4View commit details

     Copy full SHA for 5b569a4

     View code at this pointBrowse repository at this point

   • JS: Update qldoc for ValueNode

     asgerf

     committed
     9d00632View commit details

     Copy full SHA for 9d00632

     View code at this pointBrowse repository at this point

   • Merge pull request #3510 from max-schaefer/cull-boring-queries

     Show description for 26dfca8
     semmle-qlci

     authored
     26dfca8View commit details

     Copy full SHA for 26dfca8

     View code at this pointBrowse repository at this point

   • JS: Update output due to whitelisting change

     asgerf

     committed
     b39e0ecView commit details

     Copy full SHA for b39e0ec

     View code at this pointBrowse repository at this point

   • Lower precision for a number of queries.

     Show description for a803120
     

     Max Schaefer

     committed
     a803120View commit details

     Copy full SHA for a803120

     View code at this pointBrowse repository at this point

   • Apply suggestions from code review

     Show description for b719192
     

     erik-krogh

     and

     asgerf

     authored
     b719192View commit details

     Copy full SHA for b719192

     View code at this pointBrowse repository at this point

   • Update javascript/ql/src/semmle/javascript/CFG.qll

     Show description for 875c370
     

     asgerf

     and

     esbena

     authored
     875c370View commit details

     Copy full SHA for 875c370

     View code at this pointBrowse repository at this point