Commits

Breadcrumbs

History for

oncodeql-cli-2.20.0

User selector

All users

All time

Commit History

Commits on Dec 6, 2024

• Add periods for consistency

  henrymercer

  authored
  92d614d

  Copy full SHA for 92d614d

• Release preparation for version 2.20.0

  

  github-actions[bot]

  committed
  8c64648

  Copy full SHA for 8c64648

• Revert "Release preparation for version 2.20.0"

  henrymercer

  authored
  a6a4ad6

  Copy full SHA for a6a4ad6

Commits on Dec 4, 2024

• Add periods for consistency

  henrymercer

  authored
  e0e82ad

  Copy full SHA for e0e82ad

• Release preparation for version 2.20.0

  

  github-actions[bot]

  committed
  96564b7

  Copy full SHA for 96564b7

• Merge branch 'main' into henrymercer/merge-back-rc-3.16

  henrymercer

  committed
  963f084

  Copy full SHA for 963f084

Commits on Dec 3, 2024

• JS: Update expected test results

  jketema

  committed
  3d84937

  Copy full SHA for 3d84937

• Merge pull request #18089 from Napalys/napalys/regexp-unknown-flags

  Show description for 1e1674a
  Napalys

  authored
  1e1674a

  Copy full SHA for 1e1674a

Commits on Dec 2, 2024

• Update javascript/ql/lib/change-notes/2024-11-28-regexp-unknown-flags.md

  Show description for 08ef0dc
  

  Napalys

  and

  asgerf

  authored
  08ef0dc

  Copy full SHA for 08ef0dc

Commits on Nov 29, 2024

• JS: follow proper code standards for get predicates

  Show description for 9d4e737
  

  Napalys

  and

  asgerf

  committed
  9d4e737

  Copy full SHA for 9d4e737

• JS: fixed bad alert messages when it came to incomplete sanitization for new RegExp objects

  Napalys

  committed
  3171f38

  Copy full SHA for 3171f38

• Update javascript/ql/lib/change-notes/2024-11-28-regexp-unknown-flags.md

  Show description for 13afd63
  

  Napalys

  and

  erik-krogh

  authored
  13afd63

  Copy full SHA for 13afd63

Commits on Nov 28, 2024

• Fixed change notes

  Napalys

  committed
  d2de9a2

  Copy full SHA for d2de9a2

• Update RegExp handling and add test case

  Show description for 9ca0fe4
  

  Napalys

  and

  erik-krogh

  committed
  9ca0fe4

  Copy full SHA for 9ca0fe4

• Added change notes

  Napalys

  committed
  fd77360

  Copy full SHA for fd77360

• JS: Added in RegExpCreationNode maybeGlobal predicate for more convenience.

  Napalys

  committed
  9a1c1f4

  Copy full SHA for 9a1c1f4

• JS: now Reg Exp injection treats unknownFlags as sanitization, MetacharEscapeSanitizer

  Napalys

  committed
  1d2e08a

  Copy full SHA for 1d2e08a

• JS: add test cases RegExp with unknown flags

  Napalys

  committed
  62194f5

  Copy full SHA for 62194f5

• JS: now RegExp with unknown flags is not flagged as an issue within password Clear text storage of sensitive information

  Napalys

  committed
  e673348

  Copy full SHA for e673348

• JS: fixed issue where MaskingReplacer would work only with regexp literals but not objects

  Napalys

  committed
  a2c4674

  Copy full SHA for a2c4674

• JS: add test cases with RegExp object for MaskingReplacer, currently gives wrong results

  Napalys

  committed
  1ca57cf

  Copy full SHA for 1ca57cf

• JS: xss does not flag anymore replace with RegExp unknown flags

  Napalys

  committed
  c71778f

  Copy full SHA for c71778f

• JS: add xss test cases with unknownflags for replace using RegExp

  Napalys

  committed
  dbae553

  Copy full SHA for dbae553

• JS: add test cases with unknown flags for double escaping, works as expected.

  Napalys

  committed
  fe28657

  Copy full SHA for fe28657

• JS: imcomplete sanization now handles properly maybe global

  Napalys

  committed
  98fd977

  Copy full SHA for 98fd977

• JS: incomplete sanitization now also works with RegExp objects

  Napalys

  committed
  1ae1748

  Copy full SHA for 1ae1748

• JS: Add test cases for RegExp object usage in replace within incomplete sanitization

  Napalys

  committed
  7631803

  Copy full SHA for 7631803

• JS: Added tests for ReDos with unknownFlags, everything seems to be good

  Napalys

  committed
  9c2366a

  Copy full SHA for 9c2366a

• JS: Fixed path query not flagging new RegExp with DotRemovingReplaceCall

  Napalys

  committed
  875478c

  Copy full SHA for 875478c

• JS: Added tests for DotRemovingReplaceCall with RegExp Object.

  Napalys

  committed
  aa557cf

  Copy full SHA for aa557cf

• JS: UnsafeShellCommand Using unknown flags in the RegExp object is no longer flagged as bad sanitization to reduce false positives.

  Napalys

  committed
  a0df33c

  Copy full SHA for a0df33c

• JS: Added test cases for unsafe shell command sanitization with RegExpr Object, instead of literal

  Napalys

  committed
  155f1fc

  Copy full SHA for 155f1fc

• JS: Now unknown flags are not flagged in taint paths

  Napalys

  committed
  23b18ae

  Copy full SHA for 23b18ae

• JS: Fixed docs description

  Napalys

  committed
  eca7a88

  Copy full SHA for eca7a88

• JS: Added test cases with new RegExp for Tainted paths, currently works only with literals

  Napalys

  committed
  7db6f7c

  Copy full SHA for 7db6f7c