Erik Krogh Kristensen
|
0f5ef2c02a
|
Merge branch 'js-team-sprint' into https-fix
|
2020-06-19 14:57:44 +02:00 |
|
semmle-qlci
|
e13353f26a
|
Merge pull request #3732 from erik-krogh/priv-file-polish
Approved by mchammer01
|
2020-06-19 13:56:57 +01:00 |
|
Erik Krogh Kristensen
|
a17d152ca4
|
Merge branch 'js-team-sprint' into priv-file-polish
|
2020-06-19 13:19:10 +02:00 |
|
semmle-qlci
|
bfb2e9d6ea
|
Merge pull request #3724 from erik-krogh/bad-random-polish
Approved by mchammer01
|
2020-06-19 12:18:25 +01:00 |
|
Erik Krogh Kristensen
|
7d6dac479c
|
Merge branch 'js-team-sprint' into https-fix
|
2020-06-18 16:53:01 +02:00 |
|
Erik Krogh Kristensen
|
dcf617b235
|
Merge branch 'js-team-sprint' into bad-random-polish
|
2020-06-18 16:52:32 +02:00 |
|
Erik Krogh Kristensen
|
6b0adf18d1
|
rewrite sentence in private-file-exposure qhelp
|
2020-06-18 16:51:15 +02:00 |
|
Erik Krogh Kristensen
|
1556b62007
|
Merge branch 'js-team-sprint' into priv-file-polish
|
2020-06-18 16:40:53 +02:00 |
|
Erik Krogh Kristensen
|
9ba2c98ec0
|
Apply suggestions from doc review
Co-authored-by: mc <42146119+mchammer01@users.noreply.github.com>
|
2020-06-18 16:38:52 +02:00 |
|
semmle-qlci
|
20e96799e2
|
Merge pull request #3661 from erik-krogh/build-leaks
Approved by asgerf, mchammer01
|
2020-06-18 15:32:45 +01:00 |
|
Erik Krogh Kristensen
|
27a20b263e
|
Merge branch 'https-fix' of github.com:erik-krogh/ql into https-fix
|
2020-06-17 21:06:21 +02:00 |
|
Erik Krogh Kristensen
|
7a1c161e9e
|
Merge branch 'js-team-sprint' into https-fix
|
2020-06-17 21:04:44 +02:00 |
|
Erik Krogh Kristensen
|
218338b4f1
|
Merge branch 'js-team-sprint' into bad-random-polish
|
2020-06-17 21:04:00 +02:00 |
|
Erik Krogh Kristensen
|
73f26956a6
|
Merge branch 'js-team-sprint' into priv-file-polish
|
2020-06-17 21:03:09 +02:00 |
|
Erik Krogh Kristensen
|
bdda587247
|
Merge branch 'js-team-sprint' into build-leaks
|
2020-06-17 19:51:30 +02:00 |
|
Erik Krogh Kristensen
|
6d6f29eb85
|
Merge pull request #3726 from erik-krogh/bad-code-polish
JS: Bad code polish
|
2020-06-17 19:45:37 +02:00 |
|
Erik Krogh Kristensen
|
a465fef7aa
|
shorten sentence in qhelp
|
2020-06-17 17:24:18 +02:00 |
|
Erik Krogh Kristensen
|
7aa911b9f4
|
add reference to cwe-116 in change-note
|
2020-06-17 17:20:46 +02:00 |
|
Erik Krogh Kristensen
|
abd9aab109
|
code-injection -> code injection
|
2020-06-17 17:20:46 +02:00 |
|
Erik Krogh Kristensen
|
45e2b94eb5
|
Apply suggestions from doc review
Co-authored-by: mc <42146119+mchammer01@users.noreply.github.com>
|
2020-06-17 17:19:44 +02:00 |
|
Erik Krogh Kristensen
|
69888f90c6
|
add dot after bullet-point
|
2020-06-17 17:15:39 +02:00 |
|
Erik Krogh Kristensen
|
b0be0eb805
|
fix qhelp links
|
2020-06-17 11:50:44 +02:00 |
|
Erik Krogh Kristensen
|
fa0a8c3423
|
add documentation examples as tests
|
2020-06-17 11:37:32 +02:00 |
|
Erik Krogh Kristensen
|
b42824640d
|
add qhelp for js/exposure-of-private-files
|
2020-06-17 11:29:24 +02:00 |
|
Erik Krogh Kristensen
|
345283fe34
|
add change note
|
2020-06-17 10:48:27 +02:00 |
|
Erik Krogh Kristensen
|
639907967f
|
add home/rootdir as leaking folders
|
2020-06-17 10:46:42 +02:00 |
|
Erik Krogh Kristensen
|
6675ddae12
|
add more libraries that serve static files to js/exposure-of-private-files
|
2020-06-17 10:00:59 +02:00 |
|
Erik Krogh Kristensen
|
fb5e13b456
|
Apply suggestions from doc review
Co-authored-by: mc <42146119+mchammer01@users.noreply.github.com>
|
2020-06-16 23:45:45 +02:00 |
|
Erik Krogh Kristensen
|
d811518a2e
|
fixed from doc review, and add fixed example for js/biased-cryptographic-random using a secure library
|
2020-06-16 23:26:54 +02:00 |
|
Erik Krogh Kristensen
|
210e71cd93
|
update expected output
|
2020-06-16 21:52:59 +02:00 |
|
Erik Krogh Kristensen
|
ac1a0d9925
|
Merge pull request #3725 from erik-krogh/yargs-changenote
JS: add changenote for yargs
|
2020-06-16 16:28:43 +02:00 |
|
Erik Krogh Kristensen
|
02c825351c
|
add change note for js/bad-code-sanitization
|
2020-06-16 16:25:30 +02:00 |
|
Erik Krogh Kristensen
|
5ce17bea60
|
add qhelp for js/bad-code-sanitization
|
2020-06-16 16:23:41 +02:00 |
|
Erik Krogh Kristensen
|
a0951f76b6
|
add additional taint steps when type-tracking RemoteFlowSource
|
2020-06-16 14:55:07 +02:00 |
|
Erik Krogh Kristensen
|
cb5b946546
|
add changenote for yargs
|
2020-06-16 14:37:53 +02:00 |
|
Erik Krogh Kristensen
|
696879653a
|
add qhelp to js/biased-cryptographic-random
|
2020-06-16 11:10:09 +02:00 |
|
Erik Krogh Kristensen
|
5e060fa6a8
|
Apply suggestions from code review
Co-authored-by: Asger F <asgerf@github.com>
|
2020-06-15 23:47:40 +02:00 |
|
Erik Krogh Kristensen
|
315faaffee
|
small corrections in documentation
Co-authored-by: Asger F <asgerf@github.com>
|
2020-06-15 23:40:27 +02:00 |
|
Erik Krogh Kristensen
|
23223fc5fb
|
change-note
|
2020-06-15 17:22:11 +02:00 |
|
Erik Krogh Kristensen
|
3ef5dc74a1
|
add backtracking to find division that end up being rounded
|
2020-06-15 17:10:10 +02:00 |
|
Erik Krogh Kristensen
|
e8db624e74
|
add .jar and .war to the list of sensitive files for js/insecure-download
|
2020-06-15 16:48:07 +02:00 |
|
Erik Krogh Kristensen
|
d2716c532c
|
qhelp
|
2020-06-15 14:59:48 +02:00 |
|
Erik Krogh Kristensen
|
dc09a68eb4
|
add change-note
|
2020-06-15 14:30:34 +02:00 |
|
Erik Krogh Kristensen
|
8682918779
|
add change note
|
2020-06-15 13:47:43 +02:00 |
|
Erik Krogh Kristensen
|
fe9aa241a1
|
add qhelp
|
2020-06-15 13:47:39 +02:00 |
|
Erik Krogh Kristensen
|
4d1920eec1
|
add .js and .py files to js/insecure-download
|
2020-06-15 12:48:50 +02:00 |
|
semmle-qlci
|
b6b838774e
|
Merge pull request #3704 from asger-semmle/js/cve-serve
Approved by esbena
|
2020-06-15 09:54:17 +01:00 |
|
Asger Feldthaus
|
315f3389d1
|
JS: Autoformat test
|
2020-06-12 19:58:05 +01:00 |
|
Asger F
|
d844e0025a
|
Merge pull request #3651 from esbena/js/bad-multicharacter-sanitization
JS: initial version of IncompleteMultiCharacterSanitization.ql
|
2020-06-12 16:25:22 +01:00 |
|
Asger Feldthaus
|
b9cd157c0f
|
JS: Autoformat
|
2020-06-12 15:36:02 +01:00 |
|