Commit history

1. Commits on Aug 22, 2026

   • Use HTTPS for Wikimedia query-help links

     miachillgood

     committed
     c8afb1dView commit details

     Copy full SHA for c8afb1d

     View code at this pointBrowse repository at this point
2. Commits on Oct 22, 2025

   • JS: Align DOM XSS query severity with other XSS queries

     Napalys

     committed
     7b6720cView commit details

     Copy full SHA for 7b6720c

     View code at this pointBrowse repository at this point
3. Commits on Jan 24, 2025

   • Updated expected test result files using HEAD version of codeql

     aegilops

     committed
     d248551View commit details

     Copy full SHA for d248551

     View code at this pointBrowse repository at this point
4. Commits on Jan 23, 2025

   • Merge

     aegilops

     committed
     522f3d1View commit details

     Copy full SHA for 522f3d1

     View code at this pointBrowse repository at this point
5. Commits on Mar 13, 2024

   • Merge branch 'main' into js/shared-dataflow-merged

     asgerf

     committed
     5e7d1d5View commit details

     Copy full SHA for 5e7d1d5

     View code at this pointBrowse repository at this point
6. Commits on Nov 14, 2023

   • Restore XssThroughDom.ql's severity

     rvermeulen

     authored
     6bd7047View commit details

     Copy full SHA for 6bd7047

     View code at this pointBrowse repository at this point
7. Commits on Oct 13, 2023

   • JS: Port UnsafeJQueryPlugin

     asgerf

     committed
     d08e450View commit details

     Copy full SHA for d08e450

     View code at this pointBrowse repository at this point

   • JS: Port UnsafeHtmlConstruction

     asgerf

     committed
     6e3f4bdView commit details

     Copy full SHA for 6e3f4bd

     View code at this pointBrowse repository at this point

   • JS: Port ExceptionXss

     asgerf

     committed
     d7b4e0cView commit details

     Copy full SHA for d7b4e0c

     View code at this pointBrowse repository at this point

   • JS: Port XssThroughDom

     asgerf

     committed
     cf5450dView commit details

     Copy full SHA for cf5450d

     View code at this pointBrowse repository at this point

   • JS: Port StoredXss

     asgerf

     committed
     5f05232View commit details

     Copy full SHA for 5f05232

     View code at this pointBrowse repository at this point

   • JS: Port ReflectedXss

     asgerf

     committed
     46b90e5View commit details

     Copy full SHA for 46b90e5

     View code at this pointBrowse repository at this point

   • JS: Port DomBasedXss

     asgerf

     committed
     e091fdeView commit details

     Copy full SHA for e091fde

     View code at this pointBrowse repository at this point
8. Commits on Oct 9, 2023

   • Adjust query severities

     rvermeulen

     committed
     76e56cdView commit details

     Copy full SHA for 76e56cd

     View code at this pointBrowse repository at this point
9. Commits on Dec 19, 2022

   • JS: add heuristic variants of queries that use RemoteFlowSource

     erik-krogh

     committed
     442749bView commit details

     Copy full SHA for 442749b

     View code at this pointBrowse repository at this point
10. Commits on Oct 27, 2022

    • Merge pull request #10727 from erik-krogh/js-last-msg

      Show description for bbdda9e
      erik-krogh

      authored
      bbdda9eView commit details

      Copy full SHA for bbdda9e

      View code at this pointBrowse repository at this point
11. Commits on Oct 11, 2022

    • spelling: arbitrary

      Show description for 6db3661
      jsoref

      committed
      6db3661View commit details

      Copy full SHA for 6db3661

      View code at this pointBrowse repository at this point
12. Commits on Oct 7, 2022

    • fix some more style-guide violations in the alert-messages

      erik-krogh

      committed
      368f847View commit details

      Copy full SHA for 368f847

      View code at this pointBrowse repository at this point
13. Commits on Sep 30, 2022

    • JS/Python/Ruby: s/a HTML/an HTML/

      nickrolfe

      committed
      ed74e0aView commit details

      Copy full SHA for ed74e0a

      View code at this pointBrowse repository at this point
14. Commits on Sep 12, 2022

    • apply another suggestion from doc review

      erik-krogh

      committed
      87fb01dView commit details

      Copy full SHA for 87fb01d

      View code at this pointBrowse repository at this point
15. Commits on Sep 5, 2022

    • make the alert messages of taint-tracking queries more consistent

      erik-krogh

      committed
      aa56ca3View commit details

      Copy full SHA for aa56ca3

      View code at this pointBrowse repository at this point
16. Commits on Mar 16, 2022

    • refactor the `js/xss` query to use three flowlabels and one configuration

      erik-krogh

      committed
      f083e87View commit details

      Copy full SHA for f083e87

      View code at this pointBrowse repository at this point
17. Commits on Aug 12, 2021

    • JS: Migrate to *Query.qll convention

      asgerf

      committed
      f6da030View commit details

      Copy full SHA for f6da030

      View code at this pointBrowse repository at this point
18. Commits on Jun 15, 2021

    • Update security-severity scores

      calumgrant

      committed
      771e686View commit details

      Copy full SHA for 771e686

      View code at this pointBrowse repository at this point
19. Commits on Jun 10, 2021

    • Add security-severity metadata

      calumgrant

      committed
      a594afbView commit details

      Copy full SHA for a594afb

      View code at this pointBrowse repository at this point
20. Commits on May 10, 2021

    • rewrite the qhelp to focus more on documenting unsafe functions

      erik-krogh

      committed
      646bf99View commit details

      Copy full SHA for 646bf99

      View code at this pointBrowse repository at this point
21. Commits on May 6, 2021

    • corrections after code review

      erik-krogh

      committed
      b53759cView commit details

      Copy full SHA for b53759c

      View code at this pointBrowse repository at this point

    • Apply suggestions from code review

      Show description for 2d1ba59
      

      erik-krogh

      and

      esbena

      authored
      2d1ba59View commit details

      Copy full SHA for 2d1ba59

      View code at this pointBrowse repository at this point

    • add qhelp

      erik-krogh

      committed
      7ef641eView commit details

      Copy full SHA for 7ef641e

      View code at this pointBrowse repository at this point

    • add js/html-constructed-from-input query

      erik-krogh

      committed
      e86a3b5View commit details

      Copy full SHA for e86a3b5

      View code at this pointBrowse repository at this point
22. Commits on Apr 23, 2021

    • Fix all dead qhelp links

      Show description for 455b840
      smowton

      committed
      455b840View commit details

      Copy full SHA for 455b840

      View code at this pointBrowse repository at this point
23. Commits on Mar 2, 2021

    • JS: Move ExceptionXss source into Xss.qll

      asgerf

      committed
      d916118View commit details

      Copy full SHA for d916118

      View code at this pointBrowse repository at this point

    • JS: Add ajv error as source of ExceptionXss

      asgerf

      committed
      7afa755View commit details

      Copy full SHA for 7afa755

      View code at this pointBrowse repository at this point
24. Commits on Oct 20, 2020

    • JS: Address review comments

      asgerf

      committed
      c91cdb5View commit details

      Copy full SHA for c91cdb5

      View code at this pointBrowse repository at this point

    • JS: Move $() sink into separate dataflow config

      asgerf

      committed
      50a015cView commit details

      Copy full SHA for 50a015c

      View code at this pointBrowse repository at this point