Commits

Breadcrumbs

History for

onsauyon/java-spring-stringutils

User selector

All users

All time

Commit History

Commits on Mar 17, 2021

• add model for puppeteer

  erik-krogh

  committed
  2f3869f

  Copy full SHA for 2f3869f

Commits on Aug 13, 2020

• better support for the `&&=`, `||=`, and `??=` operators

  erik-krogh

  committed
  d95d427

  Copy full SHA for d95d427

Commits on Jul 1, 2020

• Merge pull request #3619 from erik-krogh/CWE022-Correctness

  Show description for 45ef3ec
  semmle-qlci

  authored
  45ef3ec

  Copy full SHA for 45ef3ec

Commits on Jun 30, 2020

• JS: support additional promisification of the fs-module members

  esbena

  committed
  c7f67fa

  Copy full SHA for c7f67fa

Commits on Jun 25, 2020

• require that a write must dominate the enclosing stmt of a read

  erik-krogh

  committed
  926f2c1

  Copy full SHA for 926f2c1

• use dominating write check in js/path-injection

  erik-krogh

  committed
  e467d3c

  Copy full SHA for e467d3c

Commits on Jun 4, 2020

• adjust comments to reflect that tainted-path have no array-steps

  erik-krogh

  committed
  5ce2987

  Copy full SHA for 5ce2987

• update TaintedPath to use new consistency checking

  erik-krogh

  committed
  60320a9

  Copy full SHA for 60320a9

• update test comments to be consistent

  erik-krogh

  committed
  c7c46ea

  Copy full SHA for c7c46ea

• use MemberShipTest in TaintedPath

  erik-krogh

  committed
  550c578

  Copy full SHA for 550c578

• update comments in TaintedPath tests

  erik-krogh

  committed
  d513e6c

  Copy full SHA for d513e6c

Commits on May 20, 2020

• share implementation between TaintedPath and ZipSlip

  erik-krogh

  committed
  7c51dff

  Copy full SHA for 7c51dff

Commits on May 19, 2020

• add testing for complex path sanitizer in ZipSlip

  erik-krogh

  committed
  5a5192b

  Copy full SHA for 5a5192b

Commits on May 14, 2020

• add test

  erik-krogh

  committed
  e7d1b12

  Copy full SHA for e7d1b12

• add test for new zipslip sanitizer

  erik-krogh

  committed
  b12e21e

  Copy full SHA for b12e21e

• add test case

  erik-krogh

  committed
  4175d36

  Copy full SHA for 4175d36

Commits on May 12, 2020

• add test case

  erik-krogh

  committed
  d46148c

  Copy full SHA for d46148c

Commits on Apr 17, 2020

• basic support for util.promisify for NodeJSFileSystemAccess

  erik-krogh

  committed
  eca98b4

  Copy full SHA for eca98b4

Commits on Apr 3, 2020

• writing out the truth table for DotDotSlashPrefixRemovingReplace

  erik-krogh

  committed
  9c20531

  Copy full SHA for 9c20531

• dst can be relative for "../" replace call

  erik-krogh

  committed
  94751c1

  Copy full SHA for 94751c1

• add a "../" removing taint-step for js/path-injection

  erik-krogh

  committed
  e46cde1

  Copy full SHA for e46cde1

Commits on Mar 4, 2020

• Merge pull request #2962 from erik-krogh/YetAnotherSanitizer

  Show description for c5d3903
  semmle-qlci

  authored
  c5d3903

  Copy full SHA for c5d3903

Commits on Mar 3, 2020

• Merge branch 'master' of github.com:Semmle/ql into js/more-fs-modules

  esbena

  committed
  4625217

  Copy full SHA for 4625217

• add taint step for replace call that only removes dots

  erik-krogh

  committed
  f03c672

  Copy full SHA for f03c672

• use RegExpTerm to generalize predicate

  erik-krogh

  committed
  95819c8

  Copy full SHA for 95819c8

• use regexp term instead of char class

  erik-krogh

  committed
  622a2fc

  Copy full SHA for 622a2fc

• Merge branch 'master' of github.com:Semmle/ql into js/more-fs-modules

  esbena

  committed
  adddebf

  Copy full SHA for adddebf

Commits on Mar 2, 2020

• support sanitizers that remove all forward slashes

  erik-krogh

  committed
  53d1cd3

  Copy full SHA for 53d1cd3

• recognize utility functions implementing a StartsWith check

  erik-krogh

  committed
  26fd17b

  Copy full SHA for 26fd17b

Commits on Feb 28, 2020

• recognize another prefix check for js/path-injection

  erik-krogh

  committed
  71ff32e

  Copy full SHA for 71ff32e

• JS: add type-tracking to the fs-module and model the `original-fs`

  esbena

  committed
  a589061

  Copy full SHA for a589061

• JS: add tests for the fs-module and friends

  esbena

  committed
  5a3a1c4

  Copy full SHA for 5a3a1c4

Commits on Feb 25, 2020

• Merge remote-tracking branch 'upstream/master' into CVE481

  erik-krogh

  committed
  dc6bfad

  Copy full SHA for dc6bfad

Commits on Feb 24, 2020

• JS: model `path-is-inside`+`is-path-inside` for `js/path-injection`

  esbena

  committed
  5baba62

  Copy full SHA for 5baba62

• JS: add tests for js/path-injection

  esbena

  committed
  86b836c

  Copy full SHA for 86b836c