Commits

Breadcrumbs

History for

oncodeql-cli/v2.21.4

User selector

All users

All time

Commit History

Commits on May 1, 2025

• Added model for shelljs.env

  Napalys

  committed
  40d176a

  Copy full SHA for 40d176a

Commits on Apr 28, 2025

• Updated modeling of `aws-sdk` with `MaD`

  Napalys

  committed
  73309fb

  Copy full SHA for 73309fb

Commits on Apr 9, 2025

• Added `make-dir` model as data

  Napalys

  committed
  ce2fc25

  Copy full SHA for ce2fc25

• Merge pull request #19210 from Napalys/js/mkdirp

  Show description for f02783a
  Napalys

  authored
  f02783a

  Copy full SHA for f02783a

Commits on Apr 8, 2025

• Added `open` package model as data.

  Napalys

  committed
  b8802a2

  Copy full SHA for b8802a2

Commits on Apr 3, 2025

• Removed old `mkdirp` modeling and replaced it with `MaD`.

  Napalys

  committed
  04a39eb

  Copy full SHA for 04a39eb

• Add sink model for `mkdirp` and update tests for path injection alerts.

  Napalys

  committed
  3fa24d6

  Copy full SHA for 3fa24d6

Commits on Apr 2, 2025

• Add `rimraf` model and update tests for path injection vulnerabilities

  Napalys

  committed
  b16b407

  Copy full SHA for b16b407

Commits on Mar 28, 2025

• Added sources from `hana` db as `MaD`.

  Napalys

  committed
  d0e2aa8

  Copy full SHA for d0e2aa8

• Refactored hana's DB client to use `GuardedRouteHandler`, improving precision.

  Napalys

  committed
  f3af23e

  Copy full SHA for f3af23e

• Merge branch 'main' into js/hana_db_client

  Napalys

  authored
  f7264d8

  Copy full SHA for f7264d8

Commits on Mar 25, 2025

• Added SQL injection detection for `exec` method embeded Express client from `hdbext`.

  Napalys

  committed
  4cdc40d

  Copy full SHA for 4cdc40d

• Added `createProcStatement` as potential sql sink.

  Napalys

  committed
  7cc0634

  Copy full SHA for 7cc0634

• Added `@sap/hdbext.loadProccedure` as sql sink.

  Napalys

  committed
  0285cb6

  Copy full SHA for 0285cb6

• Modeled `execute` as potential `hana`'s sink.

  Napalys

  committed
  e595def

  Copy full SHA for e595def

• Added sink models for `hana`'s client `prepare` function.

  Napalys

  committed
  d28af95

  Copy full SHA for d28af95

• Add sink model for SQL injection detection in `exec` clients.

  Napalys

  committed
  9229962

  Copy full SHA for 9229962

• Update javascript/ql/lib/ext/axios.model.yml

  Show description for 0689cf7
  

  Napalys

  and

  asgerf

  committed
  0689cf7

  Copy full SHA for 0689cf7

• Added support for `axios.interceptors.response`.

  Napalys

  committed
  1ee3fde

  Copy full SHA for 1ee3fde

• Added support for `axios.interceptors.request`.

  Napalys

  committed
  10498bb

  Copy full SHA for 10498bb

Commits on Mar 21, 2025

• Merge pull request #19060 from Napalys/js/apollo-server

  Show description for 7bd1c4d
  Napalys

  authored
  7bd1c4d

  Copy full SHA for 7bd1c4d

Commits on Mar 20, 2025

• Added aliases for `@apollo/server`.

  Napalys

  committed
  3a243d2

  Copy full SHA for 3a243d2

• Adressed comments.

  Napalys

  committed
  ca53e97

  Copy full SHA for ca53e97

• Merge branch 'main' into js/underscore-string

  Napalys

  authored
  221cc19

  Copy full SHA for 221cc19

• Restricted taint to array elements.

  Napalys

  committed
  f4ca2dc

  Copy full SHA for f4ca2dc

• Fixed `map` modeling and added test cases.

  Napalys

  committed
  752f02f

  Copy full SHA for 752f02f

Commits on Mar 19, 2025

• Added data as model for `ApolloServer`.

  Napalys

  committed
  cb18408

  Copy full SHA for cb18408

Commits on Mar 18, 2025

• JS: Use ArrayElement instead of AnyMember

  Show description for 53ba588
  asgerf

  committed
  53ba588

  Copy full SHA for 53ba588

Commits on Mar 17, 2025

• Removed `value` from modeling its return value as Wrapper class, since it return simple string.

  Napalys

  committed
  2c7562d

  Copy full SHA for 2c7562d

• Added modeling for `tap` function.

  Napalys

  committed
  d8e6d76

  Copy full SHA for d8e6d76

• Added modeling for aliases.

  Napalys

  committed
  fc6b779

  Copy full SHA for fc6b779

• Added modeling for extra chaining function from `underscore.string`.

  Napalys

  committed
  3a83c8d

  Copy full SHA for 3a83c8d

• Added chaining modeling for `underscore.string` package.

  Napalys

  committed
  ca9ae8a

  Copy full SHA for ca9ae8a

• Added modeling `underscore.string` of function which contain multiple sources points.

  Napalys

  committed
  b59b9c8

  Copy full SHA for b59b9c8

• Added modeling `underscore.string` array to string functions.

  Napalys

  committed
  6b105b2

  Copy full SHA for 6b105b2