Commits

Breadcrumbs

History for

oncodeql-cli/v2.19.3

User selector

All users

All time

Commit History

Commits on Nov 1, 2024

• Merge branch 'main' into js-threat-models

  RasmusWL

  authored
  c0ad9ba

  Copy full SHA for c0ad9ba

Commits on Oct 29, 2024

• JS: Post-processing query for inline test expectations

  hvitved

  committed
  1259b7e

  Copy full SHA for 1259b7e

Commits on Oct 25, 2024

• JS: Add e2e threat-model test

  RasmusWL

  committed
  1726287

  Copy full SHA for 1726287

Commits on Oct 4, 2024

• JS: Update expected test output

  hvitved

  committed
  d0ca39f

  Copy full SHA for d0ca39f

Commits on Sep 25, 2024

• resolve id conflict with dom based xss test ql

  5idg5

  committed
  e8c68ff

  Copy full SHA for e8c68ff

Commits on Sep 6, 2024

• fix: Use YamlScalar for booleans

  

  Alvaro Muñoz

  committed
  5d1da86

  Copy full SHA for 5d1da86

• [javascript] Query to detect GITHUB_TOKEN leaked in artifacts

  

  Alvaro Muñoz

  committed
  d9e8792

  Copy full SHA for d9e8792

Commits on Aug 22, 2024

• Merge pull request #17212 from mbaluda/main

  Show description for 09aca6b
  asgerf

  authored
  09aca6b

  Copy full SHA for 09aca6b

Commits on Aug 16, 2024

• JS: Delete unneeded test code (and shift line numbers)

  asgerf

  committed
  7a7ab45

  Copy full SHA for 7a7ab45

• JS: Move AngularJSTemplateUrlSink to ClientSideUrlRedirection query

  Show description for 9ee7599
  asgerf

  committed
  9ee7599

  Copy full SHA for 9ee7599

• JS: Update a RegExp injection test

  Show description for 699d3a0
  asgerf

  committed
  699d3a0

  Copy full SHA for 699d3a0

Commits on Aug 13, 2024

• Add support for importing NPM modules in XSJS sources

  mbaluda

  committed
  be0a60a

  Copy full SHA for be0a60a

Commits on Aug 8, 2024

• Merge pull request #14666 from am0o0/amammad-js-hardcodedJWTKey

  Show description for 41506fb
  erik-krogh

  authored
  41506fb

  Copy full SHA for 41506fb

Commits on Aug 1, 2024

• apply changes from @erik-krogh

  am0o0

  committed
  354fcbe

  Copy full SHA for 354fcbe

Commits on Jul 12, 2024

• Merge branch 'main' into aegilops/polyfill-io-compromised-script

  aegilops

  authored
  c9af53f

  Copy full SHA for c9af53f

Commits on Jul 11, 2024

• Moved from `experimental` into default queries

  aegilops

  committed
  d71be8a

  Copy full SHA for d71be8a

Commits on Jul 9, 2024

• Moved new query to 'experimental'

  Show description for 86afd54
  aegilops

  committed
  86afd54

  Copy full SHA for 86afd54

Commits on Jul 1, 2024

• Added dot to end of test message

  aegilops

  committed
  e2b37f9

  Copy full SHA for e2b37f9

• Added detection for specific Polyfill.io CDN compromise - edited existing library and added new query and tests

  aegilops

  committed
  a1b0703

  Copy full SHA for a1b0703

• Update hardcodedCredentials query file to only exclude 'jwt key' kind from with the isTestFile predicate.

  Show description for b360c8a
  am0o0

  committed
  b360c8a

  Copy full SHA for b360c8a

• update test cases of __tests__/ dir

  Show description for 5a18775
  am0o0

  committed
  5a18775

  Copy full SHA for 5a18775

• add new default cred kind

  am0o0

  committed
  6ecd8b7

  Copy full SHA for 6ecd8b7

• move jose SharedTaintStep to a local taint step, add more additional steps with test cases, update test cases and expected test results

  am0o0

  committed
  65fdb8c

  Copy full SHA for 65fdb8c

Commits on Jun 26, 2024

• Fixed expected test results for Helmet query

  aegilops

  committed
  f227789

  Copy full SHA for f227789

Commits on Jun 7, 2024

• use isTestFile from ClassifyFiles module file instead previous where condition, update tests accordingly

  am0o0

  committed
  5a69bbf

  Copy full SHA for 5a69bbf

Commits on Jun 6, 2024

• add tests for new where condition, update expected test results

  am0o0

  committed
  e4ffdb8

  Copy full SHA for e4ffdb8

Commits on May 25, 2024

• update tests

  am0o0

  committed
  d775135

  Copy full SHA for d775135

Commits on May 21, 2024

• Merge branch 'main' into aegilops/js/insecure-helmet-middleware

  aegilops

  authored
  65dfd4c

  Copy full SHA for 65dfd4c

• Fixed wrong filenames in the InsecureHelmet tests

  aegilops

  committed
  bda794f

  Copy full SHA for bda794f

Commits on May 20, 2024

• Tests for InsecureHelmet

  aegilops

  committed
  8300aeb

  Copy full SHA for 8300aeb

Commits on May 16, 2024

• Merge pull request #13554 from am0o0/amammad-js-bombs

  Show description for 499c4df
  asgerf

  authored
  499c4df

  Copy full SHA for 499c4df

Commits on May 3, 2024

• add qhelp recommendation that you can use an obvious placeholder value

  erik-krogh

  committed
  39a8b49

  Copy full SHA for 39a8b49

• test the change to hardcoded-credentials

  erik-krogh

  committed
  b209fc6

  Copy full SHA for b209fc6

Commits on Mar 13, 2024

• allow more flow through .filter()

  erik-krogh

  committed
  129286a

  Copy full SHA for 129286a

Commits on Feb 22, 2024

• update expected output

  erik-krogh

  committed
  bf22f4a

  Copy full SHA for bf22f4a