Erik Krogh Kristensen
|
db768960f4
|
Merge pull request #15060 from am0o0/amammad-js-envinjection
JS: Env Injection query
|
2024-06-20 21:27:21 +02:00 |
|
Erik Krogh Kristensen
|
555d7e5958
|
Merge pull request #14293 from am0o0/amammad-js-CodeInjection_dynamic_import
JS: Dynamic import as code injection sink
|
2024-06-20 21:19:57 +02:00 |
|
Erik Krogh Kristensen
|
e84028d01e
|
Merge pull request #14088 from am0o0/amammad-js-JWT
JS: decoding JWT without signature verification
|
2024-06-20 20:13:40 +02:00 |
|
am0o0
|
4e1f7a930d
|
fix invalid js file sample in qlhelp
|
2024-06-14 13:47:01 +02:00 |
|
am0o0
|
bb03a9faba
|
format the query file
|
2024-06-13 14:54:29 +02:00 |
|
am0o0
|
84b9d4d1ac
|
fix qlhelp errors
|
2024-06-13 14:32:41 +02:00 |
|
github-actions[bot]
|
8a25081a0e
|
Post-release preparation for codeql-cli-2.17.5
|
2024-06-10 15:33:08 +00:00 |
|
github-actions[bot]
|
877bfa2468
|
Release preparation for version 2.17.5
|
2024-06-10 13:40:39 +00:00 |
|
am0o0
|
9db334d02f
|
update select statement, update test cases
|
2024-06-07 21:26:20 +02:00 |
|
am0o0
|
5e0a78c4c7
|
make predicate for env key and value nodes, use propertyRead/Write instead of API nodes to find env key and value assignments, fix a bug thanks to @erik-krogh
|
2024-06-07 21:15:30 +02:00 |
|
am0o0
|
b9e3b3310e
|
update the remote flow based query thanks to @erik-krogh, update tests and separate the local and remote query tests
|
2024-06-07 06:01:49 +02:00 |
|
Am
|
af016f9416
|
Merge branch 'github:main' into amammad-js-JWT
|
2024-06-06 15:33:26 +03:30 |
|
am0o0
|
8258e377dd
|
use PascalCase for URLConstructorLabel
|
2024-06-06 14:00:56 +02:00 |
|
am0o0
|
d27a378008
|
change query-id to avoid duplicate ids
|
2024-06-06 13:59:58 +02:00 |
|
Am
|
e3e59e02e5
|
Merge branch 'github:main' into amammad-js-CodeInjection_dynamic_import
|
2024-06-04 16:22:06 +04:00 |
|
github-actions[bot]
|
906b65d09c
|
Post-release preparation for codeql-cli-2.17.4
|
2024-05-28 18:02:25 +00:00 |
|
github-actions[bot]
|
33b4ae8bbb
|
Release preparation for version 2.17.4
|
2024-05-28 15:44:32 +00:00 |
|
am0o0
|
1fc481ce81
|
v2: it is basically the first stable version :))
|
2024-05-25 20:43:36 +02:00 |
|
am0o0
|
14daf58767
|
update tests, add test cases for query with local sources
|
2024-05-25 18:17:56 +02:00 |
|
am0o0
|
b397f57357
|
change queries id according to new naming
|
2024-05-25 13:53:33 +02:00 |
|
am0o0
|
300c82a8ff
|
use Verification instead of validation in files name
|
2024-05-25 13:52:32 +02:00 |
|
am0o0
|
76beffb04a
|
change dir name
|
2024-05-25 13:49:34 +02:00 |
|
am0o0
|
f1533f40b6
|
change query files name
|
2024-05-25 13:49:01 +02:00 |
|
am0o0
|
d2d945c66d
|
merge all JWT pkgs into one
|
2024-05-25 13:47:43 +02:00 |
|
am0o0
|
4af4040bd6
|
change duplicate query IDs
|
2024-05-25 13:29:16 +02:00 |
|
am0o0
|
f905ac10c4
|
add jsonWebToken library file to remove duplicate predicate declrations
|
2024-05-25 13:28:13 +02:00 |
|
Erik Krogh Kristensen
|
c743abad54
|
Merge pull request #14294 from am0o0/amammad-js-CodeInjection_execa
JS: provide command execution sinks for execa package
|
2024-05-24 09:20:19 +02:00 |
|
Dave Bartolomeo
|
613ccaac1d
|
Add change note to all v1.0.0 packs
|
2024-05-23 13:01:22 -04:00 |
|
Dave Bartolomeo
|
ffe4c8c87b
|
Update all pack versions to 1.0.0
|
2024-05-22 13:39:08 -04:00 |
|
am0o0
|
c470c078dc
|
move to experimental
|
2024-05-21 22:42:16 +02:00 |
|
erik-krogh
|
c166cb406a
|
Merge branch 'main' into amammad-js-CodeInjection_execa
|
2024-05-21 08:48:12 +02:00 |
|
Asger F
|
499c4df79b
|
Merge pull request #13554 from am0o0/amammad-js-bombs
JS: Decompression Bombs
|
2024-05-16 13:25:41 +02:00 |
|
erik-krogh
|
56dff8540f
|
add an example of how to get a floating point value between 0 and 1
|
2024-05-16 11:15:07 +02:00 |
|
erik-krogh
|
066f3b61a2
|
RandomSource is deprecated, it's crypto now
|
2024-05-16 11:14:50 +02:00 |
|
github-actions[bot]
|
32e8b5c667
|
Post-release preparation for codeql-cli-2.17.3
|
2024-05-14 21:14:08 +00:00 |
|
github-actions[bot]
|
100166fa53
|
Release preparation for version 2.17.3
|
2024-05-14 19:23:18 +00:00 |
|
erik-krogh
|
39a8b49222
|
add qhelp recommendation that you can use an obvious placeholder value
|
2024-05-03 19:37:31 +02:00 |
|
erik-krogh
|
ff85db36e2
|
exclude credentials as kind key from hardcoded-credentials when the key looks like a dummy password
|
2024-05-03 13:58:11 +02:00 |
|
github-actions[bot]
|
99928b82ed
|
Post-release preparation for codeql-cli-2.17.2
|
2024-04-30 12:15:35 +00:00 |
|
github-actions[bot]
|
5228d94d42
|
Release preparation for version 2.17.2
|
2024-04-30 10:25:51 +00:00 |
|
erik-krogh
|
baa31e1469
|
delete outdated deprecations
|
2024-04-25 22:19:28 +02:00 |
|
Alexander Eyers-Taylor
|
da3fa22cbd
|
Merge pull request #16228 from github/post-release-prep/codeql-cli-2.17.1
Post-release preparation for codeql-cli-2.17.1
|
2024-04-17 11:24:34 +01:00 |
|
Asger F
|
ed80e4e284
|
JS: Change note
|
2024-04-17 08:41:27 +02:00 |
|
github-actions[bot]
|
622e176a16
|
Post-release preparation for codeql-cli-2.17.1
|
2024-04-16 14:21:32 +00:00 |
|
github-actions[bot]
|
9bfe4ea90a
|
Release preparation for version 2.17.1
|
2024-04-15 17:34:47 +00:00 |
|
Asger F
|
f08e8b1d5e
|
Merge pull request #16136 from asgerf/js/instance-to-subclasses
JS: Make getInstance() propagate to subclasses
|
2024-04-08 14:37:42 +02:00 |
|
Asger F
|
ad9838d0fe
|
JS: Add change note
|
2024-04-08 10:02:28 +02:00 |
|
Asger F
|
2feb00bb2e
|
Merge pull request #13303 from asgerf/js/use-server-and-client
JS: Move Directive subclasses into module and support "use client/server"
|
2024-04-02 15:13:45 +02:00 |
|
github-actions[bot]
|
8e61c6625b
|
Post-release preparation for codeql-cli-2.17.0
|
2024-04-01 15:27:42 +00:00 |
|
github-actions[bot]
|
ec97d9a304
|
Release preparation for version 2.17.0
|
2024-04-01 13:46:57 +00:00 |
|