Commits

Commit history

1. Commits on May 16, 2024

   • Merge pull request #13554 from am0o0/amammad-js-bombs

     Show description for 499c4df
     asgerf

     authored
     499c4dfView commit details

     Copy full SHA for 499c4df

     View code at this pointBrowse repository at this point
2. Commits on May 3, 2024

   • add qhelp recommendation that you can use an obvious placeholder value

     erik-krogh

     committed
     39a8b49View commit details

     Copy full SHA for 39a8b49

     View code at this pointBrowse repository at this point

   • test the change to hardcoded-credentials

     erik-krogh

     committed
     b209fc6View commit details

     Copy full SHA for b209fc6

     View code at this pointBrowse repository at this point
3. Commits on Mar 13, 2024

   • allow more flow through .filter()

     erik-krogh

     committed
     129286aView commit details

     Copy full SHA for 129286a

     View code at this pointBrowse repository at this point
4. Commits on Feb 22, 2024

   • update expected output

     erik-krogh

     committed
     bf22f4aView commit details

     Copy full SHA for bf22f4a

     View code at this pointBrowse repository at this point
5. Commits on Jan 25, 2024

   • remove an FP in overly-large-range for [@-Z]

     erik-krogh

     committed
     396da11View commit details

     Copy full SHA for 396da11

     View code at this pointBrowse repository at this point

   • Merge branch 'main' into amammad-js-bombs

     ghsecuritylab

     authored
     df10a7eView commit details

     Copy full SHA for df10a7e

     View code at this pointBrowse repository at this point
6. Commits on Jan 17, 2024

   • mark the range [0-?] as good in the overly-large-range query

     erik-krogh

     committed
     1a8a70dView commit details

     Copy full SHA for 1a8a70d

     View code at this pointBrowse repository at this point
7. Commits on Jan 4, 2024

   • promote `PropsTaintStep` to a `PreCallGraphStep`

     erik-krogh

     committed
     a9f2b3fView commit details

     Copy full SHA for a9f2b3f

     View code at this pointBrowse repository at this point
8. Commits on Nov 21, 2023

   • Apply suggestions from code review

     Show description for dfffa1e
     

     max-schaefer

     and

     sabrowning1

     authored
     dfffa1eView commit details

     Copy full SHA for dfffa1e

     View code at this pointBrowse repository at this point
9. Commits on Nov 20, 2023

   • Update qhelp for js/path-injection.

     

     Max Schaefer

     committed
     d147fabView commit details

     Copy full SHA for d147fab

     View code at this pointBrowse repository at this point
10. Commits on Nov 8, 2023

    • Merge pull request #14603 from github/max-schaefer/broken-crypto-algorithm-link

      Show description for 43d9d2c
      RasmusWL

      authored
      43d9d2cView commit details

      Copy full SHA for 43d9d2c

      View code at this pointBrowse repository at this point
11. Commits on Oct 27, 2023

    • Address review comment.

      

      Max Schaefer

      committed
      104700fView commit details

      Copy full SHA for 104700f

      View code at this pointBrowse repository at this point
12. Commits on Oct 26, 2023

    • Port changes to JavaScript.

      

      Max Schaefer

      committed
      741735cView commit details

      Copy full SHA for 741735c

      View code at this pointBrowse repository at this point

    • Move test files into right directory.

      

      Max Schaefer

      committed
      2c72913View commit details

      Copy full SHA for 2c72913

      View code at this pointBrowse repository at this point

    • JavaScript: Add support for `rateLimit` export from `express-rate-limit` package.

      

      Max Schaefer

      committed
      bb146a1View commit details

      Copy full SHA for bb146a1

      View code at this pointBrowse repository at this point
13. Commits on Oct 10, 2023

    • revert for in additional steps

      am0o0

      committed
      6f73e9cView commit details

      Copy full SHA for 6f73e9c

      View code at this pointBrowse repository at this point
14. Commits on Oct 7, 2023

    • comments improvement,separate module file, fix tests

      am0o0

      committed
      aff6f00View commit details

      Copy full SHA for aff6f00

      View code at this pointBrowse repository at this point
15. Commits on Oct 6, 2023

    • fix tests

      am0o0

      committed
      5a49f6bView commit details

      Copy full SHA for 5a49f6b

      View code at this pointBrowse repository at this point
16. Commits on Sep 13, 2023

    • Merge pull request #13771 from github/max-schaefer/server-side-url-redirect-help

      Show description for e722e32
      max-schaefer

      authored
      e722e32View commit details

      Copy full SHA for e722e32

      View code at this pointBrowse repository at this point
17. Commits on Sep 12, 2023

    • Make suggestion to replace example.com more explicit.

      

      Max Schaefer

      committed
      a9e8167View commit details

      Copy full SHA for a9e8167

      View code at this pointBrowse repository at this point
18. Commits on Sep 6, 2023

    • Use better sanitiser.

      

      Max Schaefer

      committed
      a02f373View commit details

      Copy full SHA for a02f373

      View code at this pointBrowse repository at this point
19. Commits on Aug 21, 2023

    • Use more sensible validator in example.

      

      Max Schaefer

      committed
      8736413View commit details

      Copy full SHA for 8736413

      View code at this pointBrowse repository at this point
20. Commits on Aug 8, 2023

    • support arbitrary codepoints in NfaUtils.qll

      erik-krogh

      committed
      0bce424View commit details

      Copy full SHA for 0bce424

      View code at this pointBrowse repository at this point
21. Commits on Aug 7, 2023

    • escape unicode chars in the output for the ReDoS queries

      erik-krogh

      committed
      92db7b0View commit details

      Copy full SHA for 92db7b0

      View code at this pointBrowse repository at this point
22. Commits on Jul 19, 2023

    • JavaScript: Improve query help for `js/server-side-unvalidated-url-redirection`.

      

      Max Schaefer

      committed
      7823ff9View commit details

      Copy full SHA for 7823ff9

      View code at this pointBrowse repository at this point
23. Commits on Jul 13, 2023

    • Merge pull request #13719 from asgerf/js/barrier-inout

      Show description for d57276c
      asgerf

      authored
      d57276cView commit details

      Copy full SHA for d57276c

      View code at this pointBrowse repository at this point
24. Commits on Jul 11, 2023

    • JS: Replace ClearTextLogging::isSanitizerEdge with a node

      asgerf

      committed
      944a2caView commit details

      Copy full SHA for 944a2ca

      View code at this pointBrowse repository at this point
25. Commits on Jul 10, 2023

    • JS: Fix whitespace

      asgerf

      committed
      27085b1View commit details

      Copy full SHA for 27085b1

      View code at this pointBrowse repository at this point

    • JS: Add test for path.join with spread argument

      asgerf

      committed
      fe90146View commit details

      Copy full SHA for fe90146

      View code at this pointBrowse repository at this point

    • JS: Add test for fs/promises

      asgerf

      committed
      06bc0f6View commit details

      Copy full SHA for 06bc0f6

      View code at this pointBrowse repository at this point
26. Commits on Jul 6, 2023

    • Merge pull request #13642 from erik-krogh/san-script

      Show description for b2a60bf
      erik-krogh

      authored
      b2a60bfView commit details

      Copy full SHA for b2a60bf

      View code at this pointBrowse repository at this point
27. Commits on Jul 1, 2023

    • fix FP by requiring that the regular expression mention on of the chars important in the prefix

      erik-krogh

      committed
      f9eee90View commit details

      Copy full SHA for f9eee90

      View code at this pointBrowse repository at this point

    • add FP for incomplete-multi-char-sanitization

      erik-krogh

      committed
      bd400beView commit details

      Copy full SHA for bd400be

      View code at this pointBrowse repository at this point
28. Commits on Jun 28, 2023

    • Adapt `Webix` modeling to support HTML use-cases

      jorgectf

      committed
      2ac334bView commit details

      Copy full SHA for 2ac334b

      View code at this pointBrowse repository at this point