Commits

Breadcrumbs

History for

onmain

User selector

All users

All time

Commit History

Commits on Jan 29, 2026

• python: Add query for prompt injection

  Show description for e7a0fc7
  yoff

  committed
  e7a0fc7

  Copy full SHA for e7a0fc7

Commits on Jul 23, 2024

• Remove experimental query versions

  joefarebrother

  committed
  a73d675

  Copy full SHA for a73d675

• Use a 3-valued newtype for hasSameSiteAttribute

  joefarebrother

  committed
  226e4eb

  Copy full SHA for 226e4eb

• Change flag predicates to boolean parameters rather than boolean results

  joefarebrother

  committed
  2df09f6

  Copy full SHA for 2df09f6

• Add cookie flags to cookie write concept, and alter experimental queries to use them

  joefarebrother

  committed
  6f7b2a2

  Copy full SHA for 6f7b2a2

Commits on Jun 18, 2024

• fix conflict

  am0o0

  committed
  8a7fdfa

  Copy full SHA for 8a7fdfa

Commits on May 29, 2024

• SecondaryCommandInjection to RemoteCommandExecution, change RemoteCommandExecution to module like SystemCommandExecution module

  am0o0

  committed
  52a8091

  Copy full SHA for 52a8091

• Ssh2.qll: fix a typo

  am0o0

  committed
  1714866

  Copy full SHA for 1714866

Commits on May 10, 2024

• fix actions reviews

  am0o0

  committed
  0e80e86

  Copy full SHA for 0e80e86

Commits on May 6, 2024

• update Twisted document link

  

  am0o0

  authored and

  tausbn

  committed
  6b9cc1a

  Copy full SHA for 6b9cc1a

• add twisted SSH client as secondary server command injection sinks, add proper test cases

  

  am0o0

  authored and

  tausbn

  committed
  c4a38d0

  Copy full SHA for c4a38d0

• add jsonpickle and pexpect libs in case of unsafe decoding and secondary command execution, add proper test cases

  

  am0o0

  authored and

  tausbn

  committed
  0a765cc

  Copy full SHA for 0a765cc

• finalize Secondary server command injection queries and tests.

  

  am0o0

  authored and

  tausbn

  committed
  7e93102

  Copy full SHA for 7e93102

• add ssh client libraries, add SecondaryServerCmdInjectionCustomizations

  

  am0o0

  authored and

  tausbn

  committed
  ead2474

  Copy full SHA for ead2474

Commits on Apr 24, 2024

• Implemented sinks for bulk header updates, and added corresponding tests.

  joefarebrother

  committed
  a88ad62

  Copy full SHA for a88ad62

• Add to header write concept a specification of whether the name or value arg allows newlines.

  Show description for 68d9091
  joefarebrother

  committed
  68d9091

  Copy full SHA for 68d9091

Commits on Apr 22, 2024

• Python: Autoformat everything

  Show description for b484aee
  tausbn

  committed
  b484aee

  Copy full SHA for b484aee

• Python: Change all remaining occurrences of `StrConst`

  Show description for 1c68c98
  tausbn

  committed
  1c68c98

  Copy full SHA for 1c68c98

Commits on Jan 22, 2024

• delete outdated deprecations

  erik-krogh

  committed
  8be7ead

  Copy full SHA for 8be7ead

Commits on Sep 7, 2023

• Python: prepare to promote NoSqlInjection

  Show description for 60dc1af
  yoff

  committed
  60dc1af

  Copy full SHA for 60dc1af

Commits on Oct 12, 2022

• python: rewrite models using subscripts

  Show description for db616a5
  yoff

  committed
  db616a5

  Copy full SHA for db616a5

• Python: fix def nodes for subscript

  Show description for 0b8e908
  yoff

  committed
  0b8e908

  Copy full SHA for 0b8e908

Commits on Sep 30, 2022

• Merge pull request #10634 from yoff/python/rewrite-typetrackers

  Show description for b66e5c5
  codeql-ci

  authored
  b66e5c5

  Copy full SHA for b66e5c5

Commits on Sep 29, 2022

• python: rewrite type tracker for ldap operations

  Show description for 84ab860
  yoff

  committed
  84ab860

  Copy full SHA for 84ab860

Commits on Sep 28, 2022

• Python: inline `mongoCollectionMethod`

  yoff

  committed
  63ee51a

  Copy full SHA for 63ee51a

Commits on Sep 26, 2022

• Python: type trackers to API graph

  Show description for 441fc1b
  yoff

  committed
  441fc1b

  Copy full SHA for 441fc1b

• Python: type tracking to API graph

  Show description for 9b1ec03
  yoff

  committed
  9b1ec03

  Copy full SHA for 9b1ec03

Commits on Sep 9, 2022

• ensure consistent casing of names

  erik-krogh

  committed
  26d8553

  Copy full SHA for 26d8553

Commits on Aug 25, 2022

• rename more acronyms

  erik-krogh

  committed
  cc7a9ef

  Copy full SHA for cc7a9ef

Commits on Aug 22, 2022

• run the implicit-this patch

  erik-krogh

  committed
  28083eb

  Copy full SHA for 28083eb

• make some acronyms camelCase

  erik-krogh

  committed
  e89e0eb

  Copy full SHA for e89e0eb

Commits on Jun 21, 2022

• Python: Rename getAUse -> getAValueReachableFromSource

  asgerf

  committed
  b096f9e

  Copy full SHA for b096f9e

Commits on Jun 14, 2022

• Merge pull request #7127 from jty-team/jty/python/emailInjection

  Show description for 6997618
  yoff

  authored
  6997618

  Copy full SHA for 6997618

Commits on Jun 3, 2022

• Format `FlaskMail.qll` and `Sendgrid.qll`

  jorgectf

  committed
  171239b

  Copy full SHA for 171239b

Commits on Jun 1, 2022

• Apply suggestions from code review

  Show description for 897d5c9
  

  jorgectf

  and

  yoff

  authored
  897d5c9

  Copy full SHA for 897d5c9

Pagination

Previous

Next