Commits

Breadcrumbs

History for

oncodeql-cli/v2.24.2

User selector

All users

All time

Commit History

Commits on Sep 4, 2025

• Merge remote-tracking branch 'origin/main' into js/move-cors-query-from-experimental

  Napalys

  committed
  c4c8dbc

  Copy full SHA for c4c8dbc

Commits on Aug 29, 2025

• JS: Update locations in expected files

  asgerf

  committed
  cc8fe10

  Copy full SHA for cc8fe10

Commits on Jul 30, 2025

• Move CORS misconfiguration query from experimental to Security

  Napalys

  committed
  358617f

  Copy full SHA for 358617f

Commits on Jun 30, 2025

• Merge pull request #19762 from trailofbits/VF/type-orm-model-improvements

  Show description for 3247bab
  asgerf

  authored
  3247bab

  Copy full SHA for 3247bab

Commits on Jun 25, 2025

• Merge pull request #19858 from Napalys/js/execa

  Show description for 3d9e2f5
  Napalys

  authored
  3d9e2f5

  Copy full SHA for 3d9e2f5

Commits on Jun 24, 2025

• JS: moved `execa` test cases outside experimental

  Napalys

  committed
  d05de1b

  Copy full SHA for d05de1b

Commits on Jun 23, 2025

• JS: Remove js/actions/pull-request-target

  Show description for 3a00e8d
  asgerf

  committed
  3a00e8d

  Copy full SHA for 3a00e8d

Commits on Jun 13, 2025

• Remove unnecessary spaces

  Vasco-jofra

  committed
  ddf77a0

  Copy full SHA for ddf77a0

• Model the TypeORM Repository API

  Vasco-jofra

  committed
  4ea5377

  Copy full SHA for 4ea5377

Commits on Dec 3, 2024

• Remove unsupported features from PoI

  asgerf

  committed
  75ab485

  Copy full SHA for 75ab485

• JS: Port experimental CorsPermissiveConfiguration to ConfigSig

  Show description for 871bc3b
  asgerf

  committed
  871bc3b

  Copy full SHA for 871bc3b

• JS: Port experimental decodeJwtWithoutVerificationLocalSource

  asgerf

  committed
  f5a6485

  Copy full SHA for f5a6485

• JS: Port experimental jwtDecodeWithoutVerification to ConfigSig

  asgerf

  committed
  72e5226

  Copy full SHA for 72e5226

• JS: Port experimental EnvValueInjection to ConfigSig

  asgerf

  committed
  7e162f5

  Copy full SHA for 7e162f5

• JS: Port experimental EnvValueAndKeyInjection to ConfigSig

  asgerf

  committed
  4f83907

  Copy full SHA for 4f83907

• JS: Port an experimental CodeInjection variant to ConfigSig

  asgerf

  committed
  8887ca1

  Copy full SHA for 8887ca1

• JS: Port FormParsers test to ConfigSig

  asgerf

  committed
  1832e93

  Copy full SHA for 1832e93

Commits on Nov 26, 2024

• JS: Benign test output changes

  asgerf

  committed
  8818fcc

  Copy full SHA for 8818fcc

Commits on Nov 20, 2024

• Merge branch 'main' into js/shared-dataflow-merge-main

  asgerf

  committed
  d52bc97

  Copy full SHA for d52bc97

Commits on Nov 11, 2024

• Update javascript/ql/test/experimental/Security/CWE-918/check-regex.js

  Show description for 1eabb6c
  

  Napalys

  and

  erik-krogh

  authored
  1eabb6c

  Copy full SHA for 1eabb6c

Commits on Nov 7, 2024

• Fixes false positives from commit 42600c93ffad33fce4975542e11f32d45fd25747

  Napalys

  committed
  514375d

  Copy full SHA for 514375d

• Added tests which shows false positive SSRF via matchAll

  Napalys

  committed
  42600c9

  Copy full SHA for 42600c9

• Fixes false positives from commit 445552d3b53ec9592e8e3892cb337d1004b6a432

  Napalys

  committed
  449cee9

  Copy full SHA for 449cee9

• Added tests for regex sanitization to identify false positives matchAll

  Napalys

  committed
  4106663

  Copy full SHA for 4106663

Commits on Aug 2, 2024

• Merge branch 'main' into js/shared-dataflow-merge-main

  asgerf

  committed
  df64388

  Copy full SHA for df64388

Commits on Jun 27, 2024

• Merge branch 'main' into maikypedia/javascript-cors

  maikypedia

  authored
  d0cf2a9

  Copy full SHA for d0cf2a9

Commits on Jun 26, 2024

• JS: Update some tests with provenance columns

  Show description for 53efb58
  asgerf

  committed
  53efb58

  Copy full SHA for 53efb58

Commits on Jun 25, 2024

• Merge branch 'main' into js/shared-dataflow

  asgerf

  committed
  ecf418b

  Copy full SHA for ecf418b

Commits on Jun 20, 2024

• Merge pull request #15060 from am0o0/amammad-js-envinjection

  Show description for db76896
  erik-krogh

  authored
  db76896

  Copy full SHA for db76896

• Merge pull request #14293 from am0o0/amammad-js-CodeInjection_dynamic_import

  Show description for 555d7e5
  erik-krogh

  authored
  555d7e5

  Copy full SHA for 555d7e5

Commits on Jun 13, 2024

• update tests

  am0o0

  committed
  f0a467e

  Copy full SHA for f0a467e

Commits on Jun 7, 2024

• update select statement, update test cases

  am0o0

  committed
  9db334d

  Copy full SHA for 9db334d

• update test cases expected results

  am0o0

  committed
  2c93403

  Copy full SHA for 2c93403

• make predicate for env key and value nodes, use propertyRead/Write instead of API nodes to find env key and value assignments, fix a bug thanks to @erik-krogh

  am0o0

  committed
  5e0a78c

  Copy full SHA for 5e0a78c

• remove unused imports from javascript test cases

  am0o0

  committed
  1033bf9

  Copy full SHA for 1033bf9

Pagination

Previous

Next