Erik Krogh Kristensen d67235b3c1 Merge pull request #11071 from erik-krogh/fixCanon ...

ReDoS: fix canonicalization in NfaUtils

2022-11-07 14:10:50 +01:00

..

dataflow

expand the explanation to include with arguments make the commands vulnerable

2022-11-01 14:24:23 +01:00

internal

delete old deprecations

2022-08-16 22:27:15 +02:00

performance

add deprecated aliases in the old locations, and use the Query.qll pattern for js/polynomial-redos

2022-06-23 14:36:25 +02:00

regexp

fix getCanonicalCharClass in NfaUtils

2022-11-01 21:35:07 +01:00

BadTagFilterQuery.qll

spelling: predicates

2022-10-13 10:56:41 -04:00

CryptoAlgorithms.qll

Add missing qldoc

2022-05-17 15:01:28 +01:00

IncompleteBlacklistSanitizer.qll

JS/Python/Ruby: s/a HTML/an HTML/

2022-09-30 10:37:52 +01:00

IncompleteMultiCharacterSanitizationQuery.qll

JS/Python/Ruby: s/a HTML/an HTML/

2022-09-30 10:37:52 +01:00

IncompleteMultiCharacterSanitizationSpecific.qll

Update for rename of ReDoSUtil to NfaUtils

2022-08-17 16:03:49 +12:00

OverlyLargeRangeQuery.qll

don't report every non-ascii range in js/overly-large-range

2022-09-13 20:43:52 +02:00

PasswordInConfigurationFileQuery.qll

rename more acronyms

2022-08-25 20:52:27 +02:00

SensitiveActions.qll

recognize another kind of dummy passwords to fix an FP in hardcoded-credentials

2022-09-29 21:25:40 +02:00

TaintedObject.qll

ensure consistent casing of names

2022-09-09 10:34:14 +02:00

TaintedObjectCustomizations.qll

Packaging: Rafactor Javascript core libraries

2021-08-25 12:15:56 -07:00

TaintedUrlSuffix.qll

simplify TaintedUrlSuffix::source() to only consider window.location based sources

2022-03-16 22:32:09 +01:00

UselessUseOfCat.qll

ensure consistent casing of names

2022-09-09 10:34:14 +02:00