Commits

Breadcrumbs

History for

onmaster

User selector

All users

All time

Commit history

Commits on Nov 12, 2018

• Microsoft.Data.Sqlite SQLi sinks added

  JarLob

  committed
  80fa8b4

  Copy full SHA for 80fa8b4

• System.Data.SQLite SQLi sinks added

  JarLob

  committed
  067e8f6

  Copy full SHA for 067e8f6

• SQLi sinks added for Entity Framework Core

  JarLob

  committed
  ce02c56

  Copy full SHA for ce02c56

• System.Data.Entity.DbSet.SqlQuery sink added

  JarLob

  committed
  976dc02

  Copy full SHA for 976dc02

Commits on Nov 11, 2018

• Created 0035 for Entity Framework injections and 0036 for EnterpriseLibrary.Data

  JarLob

  committed
  5019897

  Copy full SHA for 5019897

• Added warnings about LDAP injection (#92)

  Show description for 411ab03
  

  zaichenko

  authored and

  JarLob

  committed
  411ab03

  Copy full SHA for 411ab03

Commits on Nov 9, 2018

• Made CsrfAnalyzer to ignore [IgnoreAntiforgeryToken] and [FromBody] and optimized configuration loading in the analyzer.

  JarLob

  committed
  8eb60fb

  Copy full SHA for 8eb60fb

Commits on Nov 8, 2018

• Optimization: look for CSRF only in Controller based classes

  JarLob

  committed
  e6d1260

  Copy full SHA for e6d1260

Commits on Nov 7, 2018

• Add NonAction attribute check. Closes #90

  JarLob

  committed
  5615a53

  Copy full SHA for 5615a53

Commits on Nov 4, 2018

• Removed redundant functions: GetNameNode, GetCallTargetNode

  

  eloisetaylor5693

  committed
  295e6a1

  Copy full SHA for 295e6a1

• Marked GetCallTargetNode obsolete

  

  eloisetaylor5693

  committed
  69f7597

  Copy full SHA for 69f7597

• Merge branch '#49' of https://github.com/eloisetaylor5693/security-code-scan into #49

  

  eloisetaylor5693

  committed
  45db919

  Copy full SHA for 45db919

• merge

  

  eloisetaylor5693

  committed
  7f2cc1d

  Copy full SHA for 7f2cc1d

Commits on Nov 3, 2018

• Fix null reference exception in vb helper

  JarLob

  committed
  2fd69bd

  Copy full SHA for 2fd69bd

• Fixed Behavior to support extension methods.

  JarLob

  committed
  b037085

  Copy full SHA for b037085

• Renamed method

  

  eloisetaylor5693

  committed
  e427521

  Copy full SHA for e427521

• Merging

  

  eloisetaylor5693

  committed
  683f23a

  Copy full SHA for 683f23a

Commits on Nov 2, 2018

• Added search for XPath injection in XPathExpression.Compile, XPathSelectElement, XPathSelectElements and XPathEvaluate.

  Show description for 12fc7fd
  zaichenko

  committed
  12fc7fd

  Copy full SHA for 12fc7fd

Commits on Oct 30, 2018

• Added search for XPath injection in several methods

  zaichenko

  committed
  eb975c3

  Copy full SHA for eb975c3

Commits on Oct 28, 2018

• Using new function to get method/function node for CheckUnvalidated. Methods/functions can't be aliased, so don't need to worry about that

  

  eloisetaylor5693

  committed
  9d0537a

  Copy full SHA for 9d0537a

• Removed optimisation which allowed false negatives for AllowHtml attribute (when using alias directives)

  

  eloisetaylor5693

  committed
  107611c

  Copy full SHA for 107611c

Commits on Oct 27, 2018

• Added search for LINQ injection in method DataContext.ExecuteCommand.

  Show description for 7837726
  zaichenko

  committed
  7837726

  Copy full SHA for 7837726

• Merge branch 'master' into #49

  

  [email protected]

  committed
  cd86e2a

  Copy full SHA for cd86e2a

Commits on Oct 24, 2018

• Corrected sink SqlQuery

  zaichenko

  committed
  801b947

  Copy full SHA for 801b947

• Separated sinks: SqlDataSource, SqlDataAdapter, Entity Framework and Microsoft Enterprise Library.

  Show description for a566d81
  zaichenko

  committed
  a566d81

  Copy full SHA for a566d81

Commits on Oct 23, 2018

• Merge branch 'master' of git://github.com/security-code-scan/security-code-scan

  zaichenko

  committed
  4be1b12

  Copy full SHA for 4be1b12

Commits on Oct 22, 2018

• Added search for sql injection in methods of Entity Framework and Microsoft Enterprise Library

  zaichenko

  committed
  a9e48d6

  Copy full SHA for a9e48d6

Commits on Oct 21, 2018

• UnsafeDeserializationAnalyzer no longer uses nodeHelper.GetNameNode

  

  [email protected]

  committed
  48f8052

  Copy full SHA for 48f8052

• Marked method obsolete

  

  [email protected]

  committed
  549ad2c

  Copy full SHA for 549ad2c

Commits on Oct 20, 2018

• AuditMode added to InsecureCookieAnalyzer

  JarLob

  committed
  e3a12b3

  Copy full SHA for e3a12b3

• AuditMode added to WeakPasswordAnalyzer

  JarLob

  committed
  8965ae3

  Copy full SHA for 8965ae3

• #49 Fixed false negative for alias directives

  

  [email protected]

  committed
  ab13cf7

  Copy full SHA for ab13cf7

Commits on Oct 19, 2018

• Added search sql injection in constructor of SqlDataAdapter

  Show description for ae94b2b
  zaichenko

  committed
  ae94b2b

  Copy full SHA for ae94b2b

Commits on Oct 17, 2018

• False positive fix for'Redirect(Url.RouteUrl...'

  JarLob

  committed
  63b0d46

  Copy full SHA for 63b0d46

Commits on Oct 16, 2018

• HttpResponse.Write sink added.

  JarLob

  committed
  ccce87a

  Copy full SHA for ccce87a