Commits

Breadcrumbs

History for

onmaster

User selector

All users

All time

Commit history

Commits on May 17, 2020

• Added configuration to exclude web.config files from the analysis

  JarLob

  committed
  632ead2

  Copy full SHA for 632ead2

Commits on Feb 21, 2020

• Address false positive Open Redirects for implicit string concats and interpolated strings #152 (#153)

  watfordgnf

  authored
  192d4b4

  Copy full SHA for 192d4b4

Commits on Jan 3, 2020

• Stub for debugging out of process visual studio extension

  JarLob

  committed
  b83036a

  Copy full SHA for b83036a

• Fix out of range exception.

  JarLob

  committed
  26b8f42

  Copy full SHA for 26b8f42

Commits on Nov 28, 2019

• More tests for `this` taint transfer added

  JarLob

  committed
  7da4c87

  Copy full SHA for 7da4c87

Commits on Nov 27, 2019

• Implement `this` taint transfer. Closes #122

  JarLob

  committed
  4726675

  Copy full SHA for 4726675

Commits on Nov 25, 2019

• Fix null reference exception on `using` node without declaration

  JarLob

  committed
  9178931

  Copy full SHA for 9178931

• More explicit syntax node handlers. Closes #84

  JarLob

  committed
  90efe17

  Copy full SHA for 90efe17

• Treat nameof as taint const.

  JarLob

  committed
  5c3549b

  Copy full SHA for 5c3549b

• Fix nullreference exception on rethrow syntax node.

  JarLob

  committed
  887ebaa

  Copy full SHA for 887ebaa

Commits on Nov 24, 2019

• Dataflow doesn't support expression methods

  JarLob

  committed
  d4c356f

  Copy full SHA for d4c356f

• Fixed crash in expression method case.

  JarLob

  committed
  dbab203

  Copy full SHA for dbab203

• XSS analyzer improvements: ignore non string tainted input and highligh exact return line.

  JarLob

  committed
  a3334fa

  Copy full SHA for a3334fa

• Optimization: use cached typeinfo instead of string.

  JarLob

  committed
  b014b64

  Copy full SHA for b014b64

• Manual merge of ResolveVariableState from VS2017 branch.

  JarLob

  committed
  39cf738

  Copy full SHA for 39cf738

• XSS analyzer rewritten. Closes #43. Closes #144

  JarLob

  committed
  1bf6eb6

  Copy full SHA for 1bf6eb6

Commits on Nov 21, 2019

• Added explicit ThisExpressionSyntax switch case.

  JarLob

  committed
  2d9be44

  Copy full SHA for 2d9be44

Commits on Oct 15, 2019

• Create property state on member access. Fixes #143

  JarLob

  committed
  730558d

  Copy full SHA for 730558d

Commits on Sep 29, 2019

• Added new helper

  JarLob

  committed
  814d050

  Copy full SHA for 814d050

Commits on Sep 26, 2019

• speed up weak hash function checking

  kevin-montrose

  committed
  c13e1a4

  Copy full SHA for c13e1a4

Commits on Sep 24, 2019

• Added ReportAnalysisCompletion option

  JarLob

  committed
  792c265

  Copy full SHA for 792c265

• Run analysis single threaded when debugging

  JarLob

  committed
  03b43be

  Copy full SHA for 03b43be

Commits on Sep 20, 2019

• Add System.Net.Http.HttpClientHandler.ServerCertificateCustomValidationCallback check.

  JarLob

  committed
  077feef

  Copy full SHA for 077feef

Commits on Sep 12, 2019

• Enable XSS analyzer for Microsoft.AspNetCore.Mvc.ControllerBase. Closes #103

  JarLob

  committed
  232d45b

  Copy full SHA for 232d45b

Commits on Sep 11, 2019

• Merge pull request #137 from kevin-montrose/behavior-condition-injectable

  Show description for 1868095
  JarLob

  authored
  1868095

  Copy full SHA for 1868095

• Minor attempt to optimize and get rid of unnecessary conversions. But most probably the performance of the old object.ToString and new is/as string is comparable. At least it is more explicit now t…

  Show description for f0a1220
  JarLob

  committed
  f0a1220

  Copy full SHA for f0a1220

Commits on Sep 6, 2019

• addresses https://github.com/security-code-scan/security-code-scan/pull/137#discussion_r315837714 ; new algorithm doesn't allocate, but for multi-term conditions will have to pass over arguments mu…

  Show description for 9b0a81c
  kevin-montrose

  committed
  9b0a81c

  Copy full SHA for 9b0a81c

• Merge branch 'behavior-condition-injectable' of https://github.com/kevin-montrose/security-code-scan into behavior-condition-injectable

  kevin-montrose

  committed
  8e90671

  Copy full SHA for 8e90671

• address https://github.com/security-code-scan/security-code-scan/pull/137#discussion_r315837980 ; don't parse or tostring in actual behavior applies check

  kevin-montrose

  committed
  62c7716

  Copy full SHA for 62c7716

• address https://github.com/security-code-scan/security-code-scan/pull/137#discussion_r315827705 ; string support isn't needed, and force all values in the conditional dictionaries to ints or bools

  kevin-montrose

  committed
  cc3f419

  Copy full SHA for cc3f419

• address https://github.com/security-code-scan/security-code-scan/pull/137#discussion_r315836970

  kevin-montrose

  committed
  cc528b1

  Copy full SHA for cc528b1

• address https://github.com/security-code-scan/security-code-scan/pull/137#discussion_r315837238

  kevin-montrose

  committed
  821d249

  Copy full SHA for 821d249

• address https://github.com/security-code-scan/security-code-scan/pull/137#discussion_r315836654 ; add a test for conditionals on constructors with default parameters

  kevin-montrose

  committed
  989bd1e

  Copy full SHA for 989bd1e

• address https://github.com/security-code-scan/security-code-scan/pull/137#discussion_r315840358

  kevin-montrose

  committed
  f886c61

  Copy full SHA for f886c61

Commits on Sep 1, 2019

• Taint 'Main' parameters

  JarLob

  committed
  533d0b1

  Copy full SHA for 533d0b1