Commits

Breadcrumbs

History for

onnext

User selector

All users

All time

Commit History

Commits on Jan 4, 2019

• Merge remote-tracking branch 'upstream/next' into qlucie/master

  

  Max Schaefer

  committed
  b4f400f

  Copy full SHA for b4f400f

Commits on Jan 3, 2019

• Merge pull request #716 from xiemaisi/js/cosmetics

  Show description for 6c76826
  semmle-qlci

  authored
  6c76826

  Copy full SHA for 6c76826

Commits on Dec 19, 2018

• Merge pull request #691 from asger-semmle/sendfile-root

  Show description for c57f8a6
  

  Esben Sparre Andreasen

  authored
  c57f8a6

  Copy full SHA for c57f8a6

• Merge pull request #698 from asger-semmle/remove-cookie-as-source

  Show description for 495a1fc
  semmle-qlci

  authored
  495a1fc

  Copy full SHA for 495a1fc

• Merge pull request #696 from esben-semmle/js/host-request-forgery

  Show description for b11b714
  semmle-qlci

  authored
  b11b714

  Copy full SHA for b11b714

• JS: remove cookie source; rely on persistent flow steps instead

  asger-semmle

  committed
  78334af

  Copy full SHA for 78334af

• JS: recognize res.sendfile root option

  asger-semmle

  committed
  0e40717

  Copy full SHA for 0e40717

Commits on Dec 18, 2018

• JS: whitelist $(location) in simple cases

  asger-semmle

  committed
  02978c9

  Copy full SHA for 02978c9

Commits on Dec 17, 2018

• Merge remote-tracking branch 'upstream/master' into mergeback-20181217

  jbj

  committed
  5ac5aa0

  Copy full SHA for 5ac5aa0

• Merge pull request #631 from esben-semmle/js/bad-url-regexing

  Show description for 7adf1d9
  asger-semmle

  authored
  7adf1d9

  Copy full SHA for 7adf1d9

• JS: add "host" as a sink for `js/request-forgery`

  

  Esben Sparre Andreasen

  committed
  c6b4e29

  Copy full SHA for c6b4e29

• JS: add ClientRequest::getHost

  

  Esben Sparre Andreasen

  committed
  60fe017

  Copy full SHA for 60fe017

• JS: minor fixups in ClientRequests.qll

  

  Esben Sparre Andreasen

  committed
  3a5962a

  Copy full SHA for 3a5962a

Commits on Dec 14, 2018

• JavaScript: Minor improvements.

  

  Max Schaefer

  committed
  5ccad6f

  Copy full SHA for 5ccad6f

• Merge master into next.

  adityasharad

  committed
  7bc729a

  Copy full SHA for 7bc729a

• Merge pull request #671 from xiemaisi/js/more-unhelpful-magic

  Show description for 936094d
  semmle-qlci

  authored
  936094d

  Copy full SHA for 936094d

• Merge pull request #678 from asger-semmle/function-receiver

  Show description for 7f21f14
  semmle-qlci

  authored
  7f21f14

  Copy full SHA for 7f21f14

Commits on Dec 13, 2018

• Merge master into next.

  adityasharad

  committed
  f71e5ac

  Copy full SHA for f71e5ac

• JS: rename getThisParameter to getReceiver

  asger-semmle

  committed
  cb34934

  Copy full SHA for cb34934

• Merge pull request #629 from esben-semmle/js/persistent-read-taint

  Show description for e194021
  

  Max Schaefer

  authored
  e194021

  Copy full SHA for e194021

• Merge pull request #657 from esben-semmle/js/classify-more-files

  Show description for 969fe6e
  

  Max Schaefer

  authored
  969fe6e

  Copy full SHA for 969fe6e

• Merge pull request #659 from esben-semmle/js/more-constant-string-usage

  Show description for e8c8360
  

  Max Schaefer

  authored
  e8c8360

  Copy full SHA for e8c8360

• Merge pull request #632 from asger-semmle/pseudo-random-bytes

  Show description for 54bb9d1
  

  Max Schaefer

  authored
  54bb9d1

  Copy full SHA for 54bb9d1

Commits on Dec 12, 2018

• Merge master into next.

  Show description for f92456f
  adityasharad

  committed
  f92456f

  Copy full SHA for f92456f

• JS: add FunctionNode.getThisParameter

  asger-semmle

  committed
  635a3cb

  Copy full SHA for 635a3cb

• JS: restrict when a variable reference is considered a source

  asger-semmle

  committed
  a96c53f

  Copy full SHA for a96c53f

• JS: add window.name as DOM-based remote flow source

  asger-semmle

  committed
  1462176

  Copy full SHA for 1462176

• JavaScript: Avoid more unhelpful magic.

  

  Max Schaefer

  committed
  faaca21

  Copy full SHA for faaca21

Commits on Dec 11, 2018

• JS: add crypto.pseudoRandomBytes as source in InsecureRandomness.ql

  asger-semmle

  committed
  a01a9dc

  Copy full SHA for a01a9dc

• JS: generalize js/command-line-injection to handle ConstantString

  

  Esben Sparre Andreasen

  committed
  376ed7a

  Copy full SHA for 376ed7a

• JS: address review comments

  

  Esben Sparre Andreasen

  committed
  1bc73ab

  Copy full SHA for 1bc73ab

• JS: handle additional multi-license file patterns

  

  Esben Sparre Andreasen

  committed
  73aa223

  Copy full SHA for 73aa223

• JS: improve whitespace handling for multi-license file recognition

  

  Esben Sparre Andreasen

  committed
  edbef28

  Copy full SHA for edbef28

• JS: support purs classification

  

  Esben Sparre Andreasen

  committed
  e016098

  Copy full SHA for e016098

• JS: support <meta name="generator"/> classification

  

  Esben Sparre Andreasen

  committed
  3879e57

  Copy full SHA for 3879e57