Commits

Breadcrumbs

History for

oncodeql-cli/v2.19.4

User selector

All users

All time

Commit History

Commits on Nov 15, 2024

• JS: Fix: Now Array.prototype.with is properly flagged as taint step

  Napalys

  committed
  bed1f25

  Copy full SHA for bed1f25

Commits on Nov 14, 2024

• Merge branch 'main' into napalys/toSpliced-support

  Napalys

  committed
  6fa3ff3

  Copy full SHA for 6fa3ff3

• Merge pull request #17910 from Napalys/napalys/matchAll-support

  Show description for c8c15a0
  Napalys

  authored
  c8c15a0

  Copy full SHA for c8c15a0

• JS: Fix: now one can determine regex via Array.prototype.toSpliced function call.

  Napalys

  committed
  b333f52

  Copy full SHA for b333f52

Commits on Nov 13, 2024

• JS: Fix: Ensure toSpliced with spread operator is flagged

  Napalys

  committed
  84234d5

  Copy full SHA for 84234d5

• JS: Fix: Ensure toSpliced is flagged by taint tracking in test suite (ed44358143be1ec4b0fb323f767552fd12b933bf)

  Napalys

  committed
  2df3d1b

  Copy full SHA for 2df3d1b

• Added toSpliced as part ArraySliceStep and ArraySpliceStep, fixed tests from 2d9bc43506725685502608a861a90a4e19f849a9

  Napalys

  committed
  df4b596

  Copy full SHA for df4b596

• Added taint step for toSpliced, handles test from a65f80ef76482637904030c43cbb91c35fd4ab5c

  Napalys

  committed
  b4c84d3

  Copy full SHA for b4c84d3

Commits on Nov 12, 2024

• Added test case for Array.prototype.toReversed, which is currently not flagged as a taint sink.

  Napalys

  committed
  7427a24

  Copy full SHA for 7427a24

• Added support for Array.prototype.toSorted function

  Napalys

  committed
  3f0a54c

  Copy full SHA for 3f0a54c

• Merge pull request #17951 from Napalys/napalys/reverse-support

  Show description for 6266dab
  Napalys

  authored
  6266dab

  Copy full SHA for 6266dab

Commits on Nov 11, 2024

• Update ArrayInPlaceManipulationTaintStep documentation

  Napalys

  committed
  42f7f73

  Copy full SHA for 42f7f73

• Refactored SortTaintStep to ArrayInPlaceManipulationTaintStep to support both sort and reverse functions. Fixed newly added test case. from 8026a99db756fe7a91d21a4912426d979794c7ca

  Napalys

  committed
  81bc7cd

  Copy full SHA for 81bc7cd

• Moved SortTaintStep to more appropriate home TaintTracking->Arrays

  Napalys

  committed
  f1c6dc1

  Copy full SHA for f1c6dc1

Commits on Nov 8, 2024

• Now catches usage of RegExp. after matchAll usage.

  Napalys

  committed
  70cf1a5

  Copy full SHA for 70cf1a5

Commits on Nov 7, 2024

• Fixed issue where TaintTracking was not catching matchAll vulnerability

  Napalys

  committed
  dbd57e3

  Copy full SHA for dbd57e3

• Fixes false positives from commit 42600c93ffad33fce4975542e11f32d45fd25747

  Napalys

  committed
  514375d

  Copy full SHA for 514375d

• Fixes false positives from commit 445552d3b53ec9592e8e3892cb337d1004b6a432

  Napalys

  committed
  449cee9

  Copy full SHA for 449cee9

Commits on Nov 5, 2024

• Merge branch 'github:main' into napalys/matchAll-support

  Napalys

  authored
  7825a46

  Copy full SHA for 7825a46

• Added support for matchAll in CWE-020 including new test cases

  Napalys

  committed
  ccee34d

  Copy full SHA for ccee34d

Commits on Nov 1, 2024

• JS: Convert remaining queries to use ActiveThreatModelSourceAsSource

  RasmusWL

  committed
  dc8e645

  Copy full SHA for dc8e645

• JS: Remove dummy comment

  Show description for 19fae76
  

  RasmusWL

  and

  asgerf

  authored
  19fae76

  Copy full SHA for 19fae76

Commits on Oct 31, 2024

• JS: Model `readline` as a `stdin` threat-model source

  Show description for 61e60de
  RasmusWL

  committed
  61e60de

  Copy full SHA for 61e60de

• JS: Do simple modeling of `process.stdin` as threat-model source

  RasmusWL

  committed
  eca8bf5

  Copy full SHA for eca8bf5

• JS: Model fs.promises.readFile as file source

  Show description for 34b86c3
  RasmusWL

  committed
  34b86c3

  Copy full SHA for 34b86c3

Commits on Oct 29, 2024

• JS: Add initial `file` threat-model support

  Show description for 2b6c27e
  RasmusWL

  committed
  2b6c27e

  Copy full SHA for 2b6c27e

• JS: Add `database` threat-model source modeling

  RasmusWL

  committed
  3656864

  Copy full SHA for 3656864

• JS: Minor improvements to threat-model Concepts

  Show description for 84f6b89
  RasmusWL

  committed
  84f6b89

  Copy full SHA for 84f6b89

Commits on Oct 25, 2024

• JS: Model newer `yargs` command-line parsing pattern

  RasmusWL

  committed
  d3ae4c9

  Copy full SHA for d3ae4c9

• JS: Consolidate command-line argument modeling

  Show description for 3448751
  RasmusWL

  committed
  3448751

  Copy full SHA for 3448751

• JS: Add `environment` threat-model source

  RasmusWL

  committed
  412e841

  Copy full SHA for 412e841

• JS: Make (most) queries use ActiveThreatModelSource

  Show description for f733ac1
  RasmusWL

  committed
  f733ac1

  Copy full SHA for f733ac1

• JS: Integrate RemoteFlowSource with ThreatModelSource

  RasmusWL

  committed
  4b1c027

  Copy full SHA for 4b1c027

• JS: Setup basic support for threat-models

  Show description for 17a6d54
  RasmusWL

  committed
  17a6d54

  Copy full SHA for 17a6d54

Commits on Sep 3, 2024

• use my script to delete outdated deprecations

  erik-krogh

  committed
  0fdd06f

  Copy full SHA for 0fdd06f