Commit history

1. Commits on Jun 6, 2026

   • Add experimental JS query for SSRF guards missing IPv6-transition unwrap

     Show description for e93bc11
     tonghuaroot

     committed
     e93bc11View commit details

     Copy full SHA for e93bc11

     View code at this pointBrowse repository at this point
2. Commits on Dec 3, 2025

   • Use flowFrom.

     aschackmull

     committed
     dc6d3feView commit details

     Copy full SHA for dc6d3fe

     View code at this pointBrowse repository at this point
3. Commits on Oct 28, 2025

   • JS/SSRF

     Show description for bb80d83
     d10c

     committed
     bb80d83View commit details

     Copy full SHA for bb80d83

     View code at this pointBrowse repository at this point
4. Commits on Sep 8, 2025

   • Merge pull request #20146 from Napalys/js/move-cors-query-from-experimental

     Show description for 8c34b7e
     Napalys

     authored
     8c34b7eView commit details

     Copy full SHA for 8c34b7e

     View code at this pointBrowse repository at this point
5. Commits on Sep 5, 2025

   • Remove non-breaking spaces from code

     aibaars

     committed
     5d3ec35View commit details

     Copy full SHA for 5d3ec35

     View code at this pointBrowse repository at this point
6. Commits on Jul 30, 2025

   • Move CORS misconfiguration query from experimental to Security

     Napalys

     committed
     358617fView commit details

     Copy full SHA for 358617f

     View code at this pointBrowse repository at this point
7. Commits on Jun 23, 2025

   • JS: Remove js/actions/pull-request-target

     Show description for 3a00e8d
     asgerf

     committed
     3a00e8dView commit details

     Copy full SHA for 3a00e8d

     View code at this pointBrowse repository at this point
8. Commits on Mar 14, 2025

   • JS: Deprecate getUnknownMember() and replace its uses with getArrayElement()

     Show description for ab74898
     asgerf

     committed
     ab74898View commit details

     Copy full SHA for ab74898

     View code at this pointBrowse repository at this point
9. Commits on Feb 11, 2025

   • JS: Provide more precise related locations

     asgerf

     committed
     7e3f898View commit details

     Copy full SHA for 7e3f898

     View code at this pointBrowse repository at this point
10. Commits on Jan 23, 2025

    • JS: Ignore experimental queries for now

      asgerf

      committed
      102b187View commit details

      Copy full SHA for 102b187

      View code at this pointBrowse repository at this point

    • JS: Rerun patch query after bugfix

      asgerf

      committed
      dba76a0View commit details

      Copy full SHA for dba76a0

      View code at this pointBrowse repository at this point
11. Commits on Jan 20, 2025

    • JS: Auto-patch diff informed queries

      asgerf

      committed
      fd763a0View commit details

      Copy full SHA for fd763a0

      View code at this pointBrowse repository at this point
12. Commits on Dec 16, 2024

    • JS: Mass rename to node1,state1,node2,state2 naming convention

      asgerf

      committed
      079294eView commit details

      Copy full SHA for 079294e

      View code at this pointBrowse repository at this point

    • JS: Migrate CorsPermissiveConfiguration

      asgerf

      committed
      ebe596fView commit details

      Copy full SHA for ebe596f

      View code at this pointBrowse repository at this point

    • JS: Migrate an experimental CodeInjection query

      asgerf

      committed
      d83ddfaView commit details

      Copy full SHA for d83ddfa

      View code at this pointBrowse repository at this point

    • JS: Rename an experimental query

      Show description for a398599
      asgerf

      committed
      a398599View commit details

      Copy full SHA for a398599

      View code at this pointBrowse repository at this point
13. Commits on Dec 3, 2024

    • JS: Remove use of SanitizerGuardNode in experimental SSRF query

      Show description for b346198
      asgerf

      committed
      b346198View commit details

      Copy full SHA for b346198

      View code at this pointBrowse repository at this point

    • JS: Remove use of MakeLegacyBarrierGuard in experimental SSRF

      asgerf

      committed
      a574ff1View commit details

      Copy full SHA for a574ff1

      View code at this pointBrowse repository at this point

    • JS: Port experimental DecompressionBombs to ConfigSig

      asgerf

      committed
      834d35bView commit details

      Copy full SHA for 834d35b

      View code at this pointBrowse repository at this point

    • JS: Port experimental CorsPermissiveConfiguration to ConfigSig

      Show description for 871bc3b
      asgerf

      committed
      871bc3bView commit details

      Copy full SHA for 871bc3b

      View code at this pointBrowse repository at this point

    • JS: Port experimental decodeJwtWithoutVerificationLocalSource

      asgerf

      committed
      f5a6485View commit details

      Copy full SHA for f5a6485

      View code at this pointBrowse repository at this point

    • JS: Port experimental jwtDecodeWithoutVerification to ConfigSig

      asgerf

      committed
      72e5226View commit details

      Copy full SHA for 72e5226

      View code at this pointBrowse repository at this point

    • JS: Port experimental EnvValueInjection to ConfigSig

      asgerf

      committed
      7e162f5View commit details

      Copy full SHA for 7e162f5

      View code at this pointBrowse repository at this point

    • JS: Port experimental EnvValueAndKeyInjection to ConfigSig

      asgerf

      committed
      4f83907View commit details

      Copy full SHA for 4f83907

      View code at this pointBrowse repository at this point

    • JS: Port an experimental CodeInjection variant to ConfigSig

      asgerf

      committed
      8887ca1View commit details

      Copy full SHA for 8887ca1

      View code at this pointBrowse repository at this point
14. Commits on Nov 20, 2024

    • Merge branch 'main' into js/shared-dataflow-merge-main

      asgerf

      committed
      d52bc97View commit details

      Copy full SHA for d52bc97

      View code at this pointBrowse repository at this point
15. Commits on Nov 1, 2024

    • JS: Convert remaining queries to use ActiveThreatModelSourceAsSource

      RasmusWL

      committed
      dc8e645View commit details

      Copy full SHA for dc8e645

      View code at this pointBrowse repository at this point
16. Commits on Aug 2, 2024

    • Merge branch 'main' into js/shared-dataflow-merge-main

      asgerf

      committed
      df64388View commit details

      Copy full SHA for df64388

      View code at this pointBrowse repository at this point
17. Commits on Jun 27, 2024

    • Merge branch 'main' into maikypedia/javascript-cors

      maikypedia

      authored
      d0cf2a9View commit details

      Copy full SHA for d0cf2a9

      View code at this pointBrowse repository at this point
18. Commits on Jun 25, 2024

    • Merge branch 'main' into js/shared-dataflow

      asgerf

      committed
      ecf418bView commit details

      Copy full SHA for ecf418b

      View code at this pointBrowse repository at this point
19. Commits on Jun 20, 2024

    • Merge pull request #15060 from am0o0/amammad-js-envinjection

      Show description for db76896
      erik-krogh

      authored
      db76896View commit details

      Copy full SHA for db76896

      View code at this pointBrowse repository at this point

    • Merge pull request #14293 from am0o0/amammad-js-CodeInjection_dynamic_import

      Show description for 555d7e5
      erik-krogh

      authored
      555d7e5View commit details

      Copy full SHA for 555d7e5

      View code at this pointBrowse repository at this point
20. Commits on Jun 14, 2024

    • fix invalid js file sample in qlhelp

      am0o0

      committed
      4e1f7a9View commit details

      Copy full SHA for 4e1f7a9

      View code at this pointBrowse repository at this point
21. Commits on Jun 13, 2024

    • format the query file

      am0o0

      committed
      bb03a9fView commit details

      Copy full SHA for bb03a9f

      View code at this pointBrowse repository at this point

    • fix qlhelp errors

      am0o0

      committed
      84b9d4dView commit details

      Copy full SHA for 84b9d4d

      View code at this pointBrowse repository at this point