Commit history

1. Commits on Feb 14, 2020

   • JavaScript: Add model of `http2` compatibility API.

     Show description for 46f8dda
     

     Max Schaefer

     committed
     46f8ddaView commit details

     Copy full SHA for 46f8dda

     View code at this pointBrowse repository at this point
2. Commits on Jan 31, 2020

   • Merge pull request #2716 from esbena/js/additional-koa-requests

     Show description for d995d5a
     semmle-qlci

     authored
     d995d5aView commit details

     Copy full SHA for d995d5a

     View code at this pointBrowse repository at this point

   • Merge pull request #2618 from erik-krogh/ExceptionalPromise

     Show description for f8d0b4e
     semmle-qlci

     authored
     f8d0b4eView commit details

     Copy full SHA for f8d0b4e

     View code at this pointBrowse repository at this point
3. Commits on Jan 30, 2020

   • Merge pull request #2705 from erik-krogh/CVE75

     Show description for 3158b84
     semmle-qlci

     authored
     3158b84View commit details

     Copy full SHA for 3158b84

     View code at this pointBrowse repository at this point

   • Merge pull request #2708 from asger-semmle/js/react-flow-through-imports

     Show description for 120b50f
     semmle-qlci

     authored
     120b50fView commit details

     Copy full SHA for 120b50f

     View code at this pointBrowse repository at this point
4. Commits on Jan 29, 2020

   • Update javascript/ql/src/semmle/javascript/frameworks/Koa.qll

     Show description for 31743c4
     

     esbena

     and

     erik-krogh

     authored
     31743c4View commit details

     Copy full SHA for 31743c4

     View code at this pointBrowse repository at this point

   • JS: support additional Koa request sources

     esbena

     committed
     a6d3afdView commit details

     Copy full SHA for a6d3afd

     View code at this pointBrowse repository at this point

   • JS: add koa test

     esbena

     committed
     d4d910bView commit details

     Copy full SHA for d4d910b

     View code at this pointBrowse repository at this point

   • Javascript/Python: Sync XML.qll

     aschackmull

     committed
     743b612View commit details

     Copy full SHA for 743b612

     View code at this pointBrowse repository at this point

   • Merge pull request #2681 from asger-semmle/csrf-only-session-cookie-access

     Show description for fb90c2b
     semmle-qlci

     authored
     fb90c2bView commit details

     Copy full SHA for fb90c2b

     View code at this pointBrowse repository at this point
5. Commits on Jan 28, 2020

   • adjust API naming

     erik-krogh

     committed
     aea365cView commit details

     Copy full SHA for aea365c

     View code at this pointBrowse repository at this point

   • adjust type-tracking on custom EventEmitters

     erik-krogh

     committed
     cb16116View commit details

     Copy full SHA for cb16116

     View code at this pointBrowse repository at this point

   • Apply suggestions from code review

     Show description for 701d998
     

     asgerf

     and

     erik-krogh

     authored
     701d998View commit details

     Copy full SHA for 701d998

     View code at this pointBrowse repository at this point

   • Update javascript/ql/src/Security/CWE-352/MissingCsrfMiddleware.ql

     Show description for 310dd05
     

     asgerf

     and

     erik-krogh

     authored
     310dd05View commit details

     Copy full SHA for 310dd05

     View code at this pointBrowse repository at this point

   • Merge pull request #2699 from asger-semmle/js/callback-doc-typo

     Show description for 5ab6457
     semmle-qlci

     authored
     5ab6457View commit details

     Copy full SHA for 5ab6457

     View code at this pointBrowse repository at this point

   • JS: Type-track react component factories

     asgerf

     committed
     b306571View commit details

     Copy full SHA for b306571

     View code at this pointBrowse repository at this point

   • add EventEmitter models for `net.createServer()` and `respjs`.

     erik-krogh

     committed
     082967aView commit details

     Copy full SHA for 082967a

     View code at this pointBrowse repository at this point

   • add support for `this` references in classes that extend EventEmitter

     erik-krogh

     committed
     a2e54b1View commit details

     Copy full SHA for a2e54b1

     View code at this pointBrowse repository at this point
6. Commits on Jan 27, 2020

   • JS: Close an unterminated code block

     asgerf

     committed
     3d567ebView commit details

     Copy full SHA for 3d567eb

     View code at this pointBrowse repository at this point

   • Merge pull request #2689 from erik-krogh/LastEventEmitters

     Show description for 8a6de11
     semmle-qlci

     authored
     8a6de11View commit details

     Copy full SHA for 8a6de11

     View code at this pointBrowse repository at this point

   • Merge pull request #2675 from erik-krogh/WebSocket

     Show description for 7d9956e
     semmle-qlci

     authored
     7d9956eView commit details

     Copy full SHA for 7d9956e

     View code at this pointBrowse repository at this point
7. Commits on Jan 24, 2020

   • reuse existing type-tracking for classes

     erik-krogh

     committed
     8492f60View commit details

     Copy full SHA for 8492f60

     View code at this pointBrowse repository at this point

   • use the EventEmitter registration methods instead of just "on"

     erik-krogh

     committed
     0b55aedView commit details

     Copy full SHA for 0b55aed

     View code at this pointBrowse repository at this point

   • fix typos

     Show description for 148ec9a
     

     erik-krogh

     and

     esbena

     authored
     148ec9aView commit details

     Copy full SHA for 148ec9a

     View code at this pointBrowse repository at this point

   • JS: Recognize req.user a cookie access

     asgerf

     committed
     b98db62View commit details

     Copy full SHA for b98db62

     View code at this pointBrowse repository at this point

   • adjust the ReceiveNode docstrings

     erik-krogh

     committed
     c0af378View commit details

     Copy full SHA for c0af378

     View code at this pointBrowse repository at this point
8. Commits on Jan 23, 2020

   • changes based on review

     erik-krogh

     committed
     2044b4bView commit details

     Copy full SHA for 2044b4b

     View code at this pointBrowse repository at this point

   • JS: Ignore calls and csrf/captcha access

     asgerf

     committed
     a68bb9fView commit details

     Copy full SHA for a68bb9f

     View code at this pointBrowse repository at this point

   • JS: Add test and dont check predecessors

     asgerf

     committed
     b1ec3e1View commit details

     Copy full SHA for b1ec3e1

     View code at this pointBrowse repository at this point

   • JS: Sharpen missing CSRF middleware query

     asgerf

     committed
     406c6ebView commit details

     Copy full SHA for 406c6eb

     View code at this pointBrowse repository at this point
9. Commits on Jan 22, 2020

   • implement a model of WebSocket and ws based on the EventEmitter model

     erik-krogh

     committed
     b526a2eView commit details

     Copy full SHA for b526a2e

     View code at this pointBrowse repository at this point

   • Merge pull request #2636 from erik-krogh/NewSocketIO

     Show description for 007b079
     semmle-qlci

     authored
     007b079View commit details

     Copy full SHA for 007b079

     View code at this pointBrowse repository at this point

   • update expected output

     erik-krogh

     committed
     5063e38View commit details

     Copy full SHA for 5063e38

     View code at this pointBrowse repository at this point
10. Commits on Jan 21, 2020

    • add support for creating a promise with another resolved promise, e.g: Promise.resolve(otherPromise)

      erik-krogh

      committed
      8370699View commit details

      Copy full SHA for 8370699

      View code at this pointBrowse repository at this point

    • copy data from both callbacks in Promise data-flow

      erik-krogh

      committed
      8679132View commit details

      Copy full SHA for 8679132

      View code at this pointBrowse repository at this point