Commits

Breadcrumbs

History for

onfix-javascript-example

User selector

All users

All time

Commit History

Commits on Oct 2, 2018

• Merge pull request #162 from asger-semmle/partial-calls

  Show description for b35f450
  semmle-qlci

  authored
  b35f450

  Copy full SHA for b35f450

• Merge pull request #259 from asger-semmle/open-redirect-expr

  Show description for 829a5cc
  semmle-qlci

  authored
  829a5cc

  Copy full SHA for 829a5cc

Commits on Oct 1, 2018

• JS: bugfix in server-side redirect query

  asger-semmle

  committed
  9f07b10

  Copy full SHA for 9f07b10

Commits on Sep 27, 2018

• JS: Add HostHeaderPoisoningInEmailGeneration query

  asger-semmle

  committed
  46336a5

  Copy full SHA for 46336a5

Commits on Sep 25, 2018

• JavaScript: add flow steps through partial function application

  asger-semmle

  committed
  269bbc9

  Copy full SHA for 269bbc9

Commits on Sep 24, 2018

• Merge pull request #216 from asger-semmle/lusca-csrf

  Show description for 7f56be6
  semmle-qlci

  authored
  7f56be6

  Copy full SHA for 7f56be6

• Merge pull request #213 from asger-semmle/sendfile

  Show description for 4617827
  semmle-qlci

  authored
  4617827

  Copy full SHA for 4617827

Commits on Sep 21, 2018

• JS: review comments

  asger-semmle

  committed
  4797924

  Copy full SHA for 4797924

• JS: recognize CSRF middleware from lusca package

  asger-semmle

  committed
  5f467d2

  Copy full SHA for 5f467d2

• JS: add a test case for res.sendfile

  asger-semmle

  committed
  6f109a7

  Copy full SHA for 6f109a7

Commits on Sep 19, 2018

• Merge pull request #201 from asger-semmle/string-concatenation-squashed

  Show description for 4aca8f4
  semmle-qlci

  authored
  4aca8f4

  Copy full SHA for 4aca8f4

• JavaScript: fix expected output

  asger-semmle

  committed
  1d793c0

  Copy full SHA for 1d793c0

Commits on Sep 17, 2018

• JavaScript: ensure prefix sanitizers work for array.join()

  asger-semmle

  committed
  9384b85

  Copy full SHA for 9384b85

Commits on Sep 14, 2018

• JS: add query: js/stored-xss

  

  Esben Sparre Andreasen

  committed
  33f98dd

  Copy full SHA for 33f98dd

Commits on Sep 13, 2018

• Merge pull request #186 from Semmle/rc/1.18

  Show description for 3d02229
  semmle-qlci

  authored
  3d02229

  Copy full SHA for 3d02229

Commits on Sep 6, 2018

• JS: fix typo in test case

  

  Esben Sparre Andreasen

  committed
  3d3b7b0

  Copy full SHA for 3d3b7b0

Commits on Sep 5, 2018

• JS: better matching of String.prototype.search in js/regex-injection

  

  Esben Sparre Andreasen

  committed
  b9d825b

  Copy full SHA for b9d825b

Commits on Sep 4, 2018

• JS: add security query: js/request-forgery

  

  Esben Sparre Andreasen

  committed
  f5a6af5

  Copy full SHA for f5a6af5

Commits on Aug 24, 2018

• Merge pull request #91 from esben-semmle/js/additional-indexof-sanitizers

  Show description for 55ceb9b
  semmle-qlci

  authored
  55ceb9b

  Copy full SHA for 55ceb9b

Commits on Aug 23, 2018

• Merge pull request #89 from esben-semmle/js/sharpen-type-confusion

  Show description for 2187b0c
  

  Max Schaefer

  authored
  2187b0c

  Copy full SHA for 2187b0c

Commits on Aug 22, 2018

• JS: support relational indexof comparison sanitizers

  

  Esben Sparre Andreasen

  committed
  20b48a2

  Copy full SHA for 20b48a2

• JS: address review comments

  

  Esben Sparre Andreasen

  committed
  218c0cb

  Copy full SHA for 218c0cb

• JS: remove emptiness checks from the type confusion `x.length` sinks

  

  Esben Sparre Andreasen

  committed
  fef257b

  Copy full SHA for fef257b

• Merge pull request #73 from esben-semmle/js/cleartext-logging-query

  Show description for 7e7e30c
  semmle-qlci

  authored
  7e7e30c

  Copy full SHA for 7e7e30c

Commits on Aug 21, 2018

• JS: remove check for test-environment in js/clear-text-logging

  

  Esben Sparre Andreasen

  committed
  2b9f5c3

  Copy full SHA for 2b9f5c3

• JS: extract and expose StringConcatenationTaintStep in TaintTracking

  

  Esben Sparre Andreasen

  committed
  3636708

  Copy full SHA for 3636708

• JS: mark PrintfStyleCall as a taint step

  

  Esben Sparre Andreasen

  committed
  bbdf6b0

  Copy full SHA for bbdf6b0

Commits on Aug 20, 2018

• Merge pull request #14 from rdmarsh2/rdmarsh/js/electron-http-client

  Show description for 44e4b25
  semmle-qlci

  authored
  44e4b25

  Copy full SHA for 44e4b25

• JS: add query js/cleartext-logging

  

  Esben Sparre Andreasen

  committed
  0c4fb15

  Copy full SHA for 0c4fb15

Commits on Aug 17, 2018

• JavaScript: add the ESLint attack as a test

  

  Robert Marsh

  committed
  aaeda5d

  Copy full SHA for aaeda5d

Commits on Aug 13, 2018

• JavaScript: add test cases for new array steps

  asger-semmle

  committed
  d9ba5a1

  Copy full SHA for d9ba5a1

• Merge pull request #48 from xiemaisi/js/webview-sinks

  Show description for 3d0748c
  semmle-qlci

  authored
  3d0748c

  Copy full SHA for 3d0748c

Commits on Aug 10, 2018

• JavaScript: Add `WebView`-related taint sinks for `CodeInjection`, `DomBasedXss` and `ServerSideUrlRedirect`.

  

  Max Schaefer

  committed
  199990f

  Copy full SHA for 199990f

• Merge pull request #43 from xiemaisi/js/odasa-7275

  Show description for 2478c6e
  semmle-qlci

  authored
  2478c6e

  Copy full SHA for 2478c6e

Commits on Aug 9, 2018

• Make NodeJSLib use moduleMember for ES6-compatibility

  asger-semmle

  committed
  b00938e

  Copy full SHA for b00938e