Tom Hvitved 7a48409e38 JS: Recognize Fastify per-route rate limiting

2026-04-13 11:31:34 +02:00

..

dataflow

JS: Recognize Fastify per-route rate limiting

2026-04-13 11:31:34 +02:00

domains

Moved new query to 'experimental'

2024-07-09 16:38:01 +01:00

regexp

JS/PolynomialReDoSQuery

2025-10-28 09:40:16 +01:00

CommonFlowState.qll

JS: Migrate TaintedObject to a CommonFlowState

2024-12-13 10:08:08 +01:00

CorsPermissiveConfigurationCustomizations.qll

Accept MaD sanitizers for queries with MaD sinks

2026-02-17 12:45:24 +00:00

CorsPermissiveConfigurationQuery.qll

Merged config classes

2025-09-04 12:31:24 +00:00

CryptoAlgorithms.qll

JS: Fix import

2025-07-16 14:41:50 +02:00

FunctionalityFromUntrustedSource.qll

Formatting of QLL

2024-07-09 18:16:37 +01:00

IncompleteBlacklistSanitizer.qll

JS: Now BadHtmlSanitizers new RegExp with unknown flags is also flagged.

2024-11-28 11:26:36 +01:00

IncompleteMultiCharacterSanitizationQuery.qll

…

IncompleteMultiCharacterSanitizationSpecific.qll

…

PasswordInConfigurationFileQuery.qll

…

SensitiveActions.qll

Use shared SensitiveDataHeuristics

2025-07-14 11:38:47 +02:00

TaintedObject.qll

JS: Mass rename to node1,state1,node2,state2 naming convention

2024-12-16 15:35:46 +01:00

TaintedObjectCustomizations.qll

JS: Migrate TaintedObject to a CommonFlowState

2024-12-13 10:08:08 +01:00

TaintedUrlSuffix.qll

JS: Use flow state in barrier and step relations

2024-12-13 10:08:02 +01:00

TaintedUrlSuffixCustomizations.qll

JS: Fix some Ql4Ql violations.

2025-09-01 15:17:53 +02:00

UselessUseOfCat.qll

…