jarlob
|
39ff3c72a2
|
Remove label sanitizer because it is prone to race conditions
|
2023-04-03 23:28:31 +02:00 |
|
jarlob
|
8ea418216c
|
Look for script injections in actions/github-script
|
2023-04-03 23:13:28 +02:00 |
|
jarlob
|
ba5747dff3
|
fix formatting
|
2023-04-03 15:10:27 +02:00 |
|
jarlob
|
99d634c8a4
|
Add more sources, more unit tests, fixes to the GitHub Actions injection query
|
2023-04-03 15:02:02 +02:00 |
|
Jeroen Ketema
|
17bd9c12d7
|
JS: Fix qhelp after file rename
|
2023-04-03 09:25:19 +02:00 |
|
Asger F
|
dec1e4dfd6
|
Merge pull request #12666 from smiddy007/improve-insufficient-pw-hash-query
JS: Improve insufficient pw hash query
|
2023-03-31 11:58:41 +02:00 |
|
github-actions[bot]
|
0a3218676c
|
Release preparation for version 2.12.6
|
2023-03-30 19:25:06 +00:00 |
|
Erik Krogh Kristensen
|
b382465078
|
Merge pull request #12679 from ctbellanti/improved-certificate-validation
JS: Improved coverage for disabled certificate validation
|
2023-03-30 16:24:33 +02:00 |
|
github-actions[bot]
|
e87ce62f95
|
Post-release preparation for codeql-cli-2.12.5
|
2023-03-30 13:48:58 +00:00 |
|
Erik Krogh Kristensen
|
13c0effbd2
|
change to minor change
|
2023-03-28 15:27:16 +02:00 |
|
Chris Bellanti
|
6bf94e800b
|
Added check to disabling certificate validation query
|
2023-03-27 12:16:20 -04:00 |
|
Asger F
|
32d7a80221
|
JS: Change note
|
2023-03-27 14:56:57 +02:00 |
|
smiddy007
|
cef6b95b15
|
Fixed Conflicts due to recent changes to file
|
2023-03-26 22:32:34 -04:00 |
|
smiddy007
|
ad527b8f69
|
Added new example files and renamed existing ones
|
2023-03-26 21:53:22 -04:00 |
|
Alex Ford
|
b000b9b5c0
|
JS: add a missing space in alert message for js/weak-cryptographic-algorithm
|
2023-03-22 11:12:13 +00:00 |
|
Asger F
|
6d665da4dc
|
Merge pull request #12570 from github/post-release-prep/codeql-cli-2.12.5
Post-release preparation for codeql-cli-2.12.5
|
2023-03-21 13:06:25 +01:00 |
|
github-actions[bot]
|
981e171525
|
Post-release preparation for codeql-cli-2.12.5
|
2023-03-17 13:27:00 +00:00 |
|
Asger F
|
bce1f29a7e
|
JS: Add change note
|
2023-03-16 14:55:00 +01:00 |
|
github-actions[bot]
|
fe4d27e8cc
|
Release preparation for version 2.12.5
|
2023-03-16 12:58:50 +00:00 |
|
Asger F
|
5461f94c6c
|
Merge pull request #12424 from asgerf/js/html-sanitizer-for-sql
JS: Add html sanitizers as a taint step in a few queries
|
2023-03-13 11:36:19 +01:00 |
|
Anders Schack-Mulligen
|
8d97fe9ed3
|
JavaScript: Autoformat
|
2023-03-10 09:41:20 +01:00 |
|
Asger F
|
05b5aea477
|
JS: Changenote
|
2023-03-07 13:15:44 +01:00 |
|
github-actions[bot]
|
af61b45785
|
Post-release preparation for codeql-cli-2.12.4
|
2023-03-04 14:16:55 +00:00 |
|
Dave Bartolomeo
|
b342e93989
|
Move change note to appropriate pack
|
2023-03-03 14:43:00 -05:00 |
|
github-actions[bot]
|
462da63970
|
Release preparation for version 2.12.4
|
2023-03-03 14:11:51 +00:00 |
|
Erik Krogh Kristensen
|
f8f926ad50
|
Merge pull request #12175 from erik-krogh/reg-input
JS: add process.env and process.argv etc. as source for `js/regex-injection`
|
2023-02-27 09:12:02 +01:00 |
|
github-actions[bot]
|
8eb8daa4d4
|
Post-release preparation for codeql-cli-2.12.3
|
2023-02-16 17:23:25 +00:00 |
|
github-actions[bot]
|
b0315119c6
|
Release preparation for version 2.12.3
|
2023-02-16 11:49:06 +00:00 |
|
erik-krogh
|
393649b7ce
|
don't call environment variables for command-line arguments
|
2023-02-14 14:27:41 +01:00 |
|
erik-krogh
|
36478124ae
|
add process.env and process.argv etc. as source for js/regex-injection
|
2023-02-14 14:21:53 +01:00 |
|
Mathias Vorreiter Pedersen
|
4e7ca1a175
|
Merge pull request #12082 from github/post-release-prep/codeql-cli-2.12.2
Post-release preparation for codeql-cli-2.12.2
|
2023-02-03 09:40:57 +00:00 |
|
github-actions[bot]
|
faf21f3edb
|
Post-release preparation for codeql-cli-2.12.2
|
2023-02-02 23:01:04 +00:00 |
|
Kristen Newbury
|
231110ddca
|
Update javascript/ql/src/Security/CWE-312/CleartextLogging.qhelp
Co-authored-by: Erik Krogh Kristensen <erik-krogh@github.com>
|
2023-02-02 11:12:44 -05:00 |
|
github-actions[bot]
|
a4fa984792
|
Release preparation for version 2.12.2
|
2023-02-02 14:34:55 +00:00 |
|
Kristen Newbury
|
dc5eb40d5f
|
Update JS CleartextLogging qhelp
|
2023-02-01 16:29:13 -05:00 |
|
Erik Krogh Kristensen
|
a10b45e0db
|
Merge pull request #11927 from mvogelgesang/express-rate-limit
JS: Updated express-rate-limit example to match implementation examples f…
|
2023-01-23 14:37:50 +01:00 |
|
github-actions[bot]
|
b62cb6ba84
|
Post-release preparation for codeql-cli-2.12.1
|
2023-01-20 19:49:56 +00:00 |
|
github-actions[bot]
|
005b3e4a47
|
Release preparation for version 2.12.1
|
2023-01-20 12:03:19 +00:00 |
|
Mark Vogelgesang
|
a3ff0725a3
|
Removed change-note as it was not necessary
|
2023-01-18 16:08:29 -05:00 |
|
Mark Vogelgesang
|
c9119848d9
|
Updated express-rate-limit example to match implementation examples found on packages README
|
2023-01-18 14:42:40 -05:00 |
|
Pierre
|
c3116b3f0f
|
Merge branch 'main' into turbo/experimental/combined
|
2023-01-11 18:02:55 +01:00 |
|
Tony Torralba
|
72a11e737d
|
Merge pull request #11775 from atorralba/atorralba/all/omittable-exists
All: Remove omittable exists variables
|
2023-01-10 16:07:06 +01:00 |
|
Tony Torralba
|
3b6dae41cd
|
JavaScript: Remove omittable exists variables
|
2023-01-10 13:37:21 +01:00 |
|
erik-krogh
|
785c21f462
|
fix bad join-order in js/missing-this-qualifier
|
2023-01-09 16:06:26 +01:00 |
|
github-actions[bot]
|
cdb8f67601
|
Post-release preparation for codeql-cli-2.12.0
|
2023-01-06 10:36:34 +00:00 |
|
Nick Rolfe
|
6e07076151
|
tweak wording in 2.12 release notes
|
2023-01-05 16:46:44 +00:00 |
|
github-actions[bot]
|
b6a8193785
|
Release preparation for version 2.12.0
|
2023-01-05 16:32:14 +00:00 |
|
Erik Krogh Kristensen
|
cedc9c0bff
|
Merge pull request #11582 from erik-krogh/heuristics
JS: Add experimental variants of common security queries with more sources
|
2023-01-04 10:46:19 +01:00 |
|
Calum Grant
|
ad55706527
|
Merge branch 'main' into calumgrant/remove-lgtm
|
2023-01-03 10:27:30 +00:00 |
|
Arthur Baars
|
98c5b81456
|
Merge pull request #11723 from aibaars/alert-suppression
CodeQL alert suppression
|
2022-12-21 10:59:57 +01:00 |
|