Commits

Breadcrumbs

History for

oncodeql-cli/v2.24.0

User selector

All users

All time

Commit History

Commits on May 12, 2022

• apply suggestion from doc review

  Show description for fef4455
  

  erik-krogh

  and

  guntrip

  authored
  fef4455

  Copy full SHA for fef4455

Commits on May 5, 2022

• update the qhelp to mention that the GITHUB_TOKEN only sometimes has write-access

  erik-krogh

  committed
  0c0e280

  Copy full SHA for 0c0e280

• rename getAReferencedExpression to getASimpleReferenceExpression and add examples of what it can parse

  erik-krogh

  committed
  c0152a4

  Copy full SHA for c0152a4

Commits on May 4, 2022

• make the big disjunctions more readable by using a set literal

  erik-krogh

  committed
  8e2b00d

  Copy full SHA for 8e2b00d

• add missing security severity

  erik-krogh

  committed
  31a4de9

  Copy full SHA for 31a4de9

• expand the qhelp for js/actions/injection

  erik-krogh

  committed
  df4bfef

  Copy full SHA for df4bfef

• set js/actions/injection as a high precision warning query

  erik-krogh

  committed
  48fb01f

  Copy full SHA for 48fb01f

• move js/actions/injection out of experimental

  erik-krogh

  committed
  2a65d1d

  Copy full SHA for 2a65d1d

Commits on Mar 16, 2022

• add missing severities to JS queries

  erik-krogh

  committed
  2442bea

  Copy full SHA for 2442bea

Commits on Feb 9, 2022

• Move explanation of example above sample code

  ethanpalm

  authored
  2f7f9d9

  Copy full SHA for 2f7f9d9

Commits on Feb 7, 2022

• fix typo

  Show description for aa95dd4
  

  erik-krogh

  and

  esbena

  authored
  aa95dd4

  Copy full SHA for aa95dd4

• lower the precision of `js/unsafe-code-construction`

  erik-krogh

  committed
  6f28cb9

  Copy full SHA for 6f28cb9

• update qhelp to focus on properly documenting potentially unsafe library functions

  erik-krogh

  committed
  eb133f5

  Copy full SHA for eb133f5

• add qhelp for unsafe-code-construction

  erik-krogh

  committed
  d77c28f

  Copy full SHA for d77c28f

• add `js/unsafe-code-construction` query

  erik-krogh

  committed
  198a464

  Copy full SHA for 198a464

Commits on Oct 5, 2021

• JS: Update CWE tags and severity score of code injection query

  Show description for 3a20ca9
  asgerf

  committed
  3a20ca9

  Copy full SHA for 3a20ca9

Commits on Aug 12, 2021

• JS: Migrate to *Query.qll convention

  asgerf

  committed
  f6da030

  Copy full SHA for f6da030

Commits on Jun 15, 2021

• Update security-severity scores

  calumgrant

  committed
  771e686

  Copy full SHA for 771e686

Commits on Jun 10, 2021

• Add security-severity metadata

  calumgrant

  committed
  a594afb

  Copy full SHA for a594afb

Commits on Mar 17, 2021

• JS: Update with new AdditionalTaintStep subclasses

  asgerf

  committed
  96c6e4d

  Copy full SHA for 96c6e4d

Commits on Dec 4, 2020

• JS: Address review comments

  asgerf

  committed
  f0516dd

  Copy full SHA for f0516dd

Commits on Dec 2, 2020

• JS: Autoformat

  asgerf

  committed
  412939d

  Copy full SHA for 412939d

Commits on Dec 1, 2020

• JS: Delete old query and update qhelp

  asgerf

  committed
  5561e8f

  Copy full SHA for 5561e8f

• JS: Adjust alert message for template sinks

  asgerf

  committed
  1459d91

  Copy full SHA for 1459d91

Commits on Jun 17, 2020

• shorten sentence in qhelp

  erik-krogh

  committed
  a465fef

  Copy full SHA for a465fef

• code-injection -> code injection

  erik-krogh

  committed
  abd9aab

  Copy full SHA for abd9aab

• Apply suggestions from doc review

  Show description for 45e2b94
  

  erik-krogh

  and

  mchammer01

  authored
  45e2b94

  Copy full SHA for 45e2b94

Commits on Jun 16, 2020

• add qhelp for js/bad-code-sanitization

  erik-krogh

  committed
  5ce17be

  Copy full SHA for 5ce17be

• add additional taint steps when type-tracking RemoteFlowSource

  erik-krogh

  committed
  a0951f7

  Copy full SHA for a0951f7

Commits on Jun 12, 2020

• add qldoc and customizations module

  erik-krogh

  committed
  adabd2d

  Copy full SHA for adabd2d

Commits on Jun 10, 2020

• improve detection of duplicate results with `js/code-injection`

  erik-krogh

  committed
  aa3482c

  Copy full SHA for aa3482c

• don't import AdditionalSinks, refactor sink out in new HeuristicSinks instead

  erik-krogh

  committed
  5142670

  Copy full SHA for 5142670

• add query to detect improperly sanitized code

  erik-krogh

  committed
  373a437

  Copy full SHA for 373a437

Commits on Jan 7, 2019

• JavaScript: Autoformat all QL files.

  

  Max Schaefer

  committed
  31bb39a

  Copy full SHA for 31bb39a

Commits on Nov 21, 2018

• JS: address doc review

  asger-semmle

  committed
  27c9326

  Copy full SHA for 27c9326