Commits

History for

oncodeql-cli/v2.26.2

Commits on Jul 12, 2024

Added links to eventual location of CUSTOMIZING.md
aegilops
committed
79980a9
Apply suggestions from code review - docs tweaks of CUSTOMIZING.md

aegilops
and
felicitymay
authored
11249e7
Merge branch 'aegilops/polyfill-io-compromised-script' of https://github.com/aegilops/codeql into aegilops/polyfill-io-compromised-script
aegilops
committed
61df4d2
Created guide on customizing these queries, and referenced it in the query help
aegilops
committed
00d91dc
Added a note that SRI can be considered for some dynamic services
aegilops
committed
040f948
Apply suggestions from code review - docs and wording

aegilops
and
felicitymay
authored
3f37fe6

Commits on Jul 11, 2024

Moved from `experimental` into default queries
aegilops
committed
d71be8a

Commits on Jul 9, 2024

Moved new query to 'experimental'
aegilops
committed
86afd54

Commits on Jul 1, 2024

Commits on Aug 25, 2022

rename more acronyms
erik-krogh
committed
cc7a9ef

Commits on Feb 23, 2022

apply docreview feedback
Stephan Brandauer
committed
1ed71e1

Commits on Feb 22, 2022

CWE 830 polish error messages
Stephan Brandauer
committed
2278e7f
CWE-830 add support for setting attributes via setAttribute method
Stephan Brandauer
committed
8233039
CWE 830 test where both branches in a ternary are unsafe
Stephan Brandauer
committed
d80cd1a
rewrite docs, improve error messages, etc
Stephan Brandauer
committed
2934aa1
stylistic improvements after review
Stephan Brandauer
committed
d2335b6
polish qhelp for CWE-830 and add test file
Stephan Brandauer
committed
9aec443
remove illegal chars from comments
Stephan Brandauer
committed
44d8656
replace taint tracking by type tracking and merge remaining queries for CWE-830
Stephan Brandauer
committed
fd77e27
improve error message in CWE-830
Stephan Brandauer
committed
8cafa6d
always require integrity checking for certain CDNs
Stephan Brandauer
committed
780fa97
JS: query to find dynamic creations of DOM elements that use untrusted sources
Stephan Brandauer
committed
8d397fe
permit http urls to 127.0.0.1 and others
Stephan Brandauer
committed
b35c709
add CWE 830 link to references
Stephan Brandauer
committed
dd2b779
JS: Functionality from untrusted sources query (CWE-830)
Stephan Brandauer
committed
6722c17

Loading