hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2025-12-17 09:13:20 +01:00
Code Issues Packages Projects Releases Wiki Activity
Files
b513033e0f5f176289d30ff045f7af6947b0345c
codeql/javascript/change-notes
History
Erik Krogh Kristensen b513033e0f Merge pull request #7021 from erik-krogh/cwe326 
JS: Add insufficient key size query
2021-11-11 12:17:04 +01:00
..
2020-05-17-prototype-assignment.md
fix typo in change note
2021-11-09 12:06:29 +01:00
2020-11-06-date-functions.md
JS: Add change note in new format
2020-11-06 09:14:03 +00:00
2020-11-09-jwt.md
move change note
2020-11-11 21:09:08 +01:00
2020-11-11-react-hot-loader.md
JS: Add support for react-hot-loader
2020-11-20 15:28:32 +00:00
2020-11-25-prototype-pollution.md
Apply suggestions from code review
2020-12-09 09:59:55 +00:00
2020-11-30-loginjection.md
add change note
2020-12-01 09:18:40 +01:00
2020-11-30-nosql.md
JavaScript: Add models for more Mongoose methods.
2020-11-30 16:32:13 +00:00
2020-12-02-typescript-4.1.md
JS: Change note
2020-12-03 13:58:40 +00:00
2020-12-09-external-flow-sources.md
JavaScript: Add change note.
2020-12-12 11:42:55 +00:00
2020-12-16-build-artifact-leak.md
add change note
2020-12-16 14:53:23 +01:00
2020-12-16-indirect-cmd-libraries.md
add change note
2020-12-16 15:10:03 +01:00
2020-12-22-execa.md
fix typo in execa change-note file name
2021-02-08 10:00:26 +01:00
2021-01-04-superliniar-redos.md
add change note
2021-01-04 15:23:52 +01:00
2021-01-08-js-incomplete-multi-character-sanitization.md
JS: rewrite js/incomplete-multi-character-sanitization
2021-01-11 11:26:45 +01:00
2021-01-14-polynomial-redos.md
change-note
2021-01-14 14:17:32 +01:00
2021-01-18-angular-templates.md
JS: Add change note
2021-01-18 13:46:43 +00:00
2021-01-18-server-crash.md
JS: add qhelp and changenotes for js/server-crash
2021-01-21 08:43:13 +01:00
2021-01-21-type-inference-compound.md
add change note
2021-01-21 11:08:39 +01:00
2021-01-21-unneeded-defensive-code.md
add change note
2021-02-02 22:51:03 +01:00
2021-02-08-immutable.md
add change note
2021-02-08 09:59:45 +01:00
2021-02-08-xml-parser-taint.md
Update javascript/change-notes/2021-02-08-xml-parser-taint.md
2021-02-11 13:33:42 +01:00
2021-02-08-xss-through-dom-forms.md
add change note
2021-02-10 14:17:49 +01:00
2021-02-09-form-parsers.md
Update javascript/change-notes/2021-02-09-form-parsers.md
2021-02-15 12:35:16 +01:00
2021-02-10-markdown.md
Update javascript/change-notes/2021-02-10-markdown.md
2021-02-17 18:30:31 +01:00
2021-02-11-apollo-client.md
add change note
2021-02-11 17:54:53 +01:00
2021-02-16-vue-router.md
JS: Model vue-router
2021-02-19 15:37:24 +00:00
2021-02-18-next-js.md
add change note
2021-03-02 12:25:50 +01:00
2021-02-18-typescript-4.2.md
add change note
2021-02-24 09:34:54 +01:00
2021-02-25-event-handler-receiver-is-dom-element.md
Add change note.
2021-02-25 10:51:01 +00:00
2021-02-25-http-proxy.md
add change note
2021-02-26 17:18:30 +01:00
2021-02-26-form-data.md
add model for form-data
2021-02-26 10:54:46 +01:00
2021-03-01-ajv.md
JS: Change note
2021-03-02 12:39:05 +00:00
2021-03-09-template-object-injection.md
Apply suggestions from code review
2021-03-15 12:39:56 +01:00
2021-03-10-d3.md
JS: Add model of d3
2021-03-11 10:05:05 +00:00
2021-03-15-client-side-remote-flow-sources.md
JS: Fix typo in change note
2021-03-17 10:17:56 +00:00
2021-03-17-koa-route.md
add change note
2021-03-17 19:17:23 +01:00
2021-03-17-precise-regex-replace.md
JS: Add change note
2021-03-17 15:24:10 +00:00
2021-03-17-puppeteer.md
add change note
2021-03-17 10:06:41 +01:00
2021-03-19-async-execute.md
add change-note
2021-03-19 10:10:56 +01:00
2021-03-23-accessor-calls.md
JS: Add change note
2021-03-23 12:51:14 +00:00
2021-03-25-remove-legacy-code-duplication-library.md
JS: Add change note for code duplication library removal
2021-03-25 15:21:48 +00:00
2021-03-25-remove-legacy-filter-queries.md
JS: Add change note for filter query removal
2021-03-25 15:13:51 +00:00
2021-03-29-misc-steps.md
JS: Add change note
2021-03-29 11:21:03 +01:00
2021-03-29-pg-promise.md
JS: Add change note
2021-03-29 11:25:28 +01:00
2021-03-30-sql-models.md
JS: Change note
2021-03-30 13:54:01 +01:00
2021-04-01-tsconfig-file-inclusion-handling.md
JS: Add another change note
2021-04-07 12:29:06 +01:00
2021-04-08-redux.md
JS: Rename change note file
2021-04-08 12:52:23 +01:00
2021-04-12-disabling-certificate-validation.md
add change note
2021-04-12 15:09:13 +02:00
2021-04-15-fs-promises.md
JS: Add change notes
2021-04-23 13:15:35 +01:00
2021-04-15-markdownit.md
add change note
2021-04-20 14:39:54 +02:00
2021-04-15-nestjs.md
JS: Add change notes
2021-04-23 13:15:35 +01:00
2021-04-15-typescript-template-literal-type-crash.md
JS: Change note
2021-04-15 09:37:57 +01:00
2021-04-21-rate-limiting-fixes.md
JS: Change note
2021-04-21 21:20:12 +01:00
2021-04-26-unsafe-html-construction.md
add change note
2021-05-06 11:05:02 +02:00
2021-04-27-anser.md
add support for the anser library
2021-04-27 15:57:17 +02:00
2021-05-10-sqlite3-chaining.md
JavaScript: Model chaining calls in sqlite3.
2021-05-10 10:58:58 +01:00
2021-05-18-clone.md
add support for the clone library
2021-05-18 12:46:34 +02:00
2021-05-31-typescript-4.3.md
add change-note for TypeScript 4.3
2021-05-31 13:08:52 +02:00
2021-06-02-debug.md
add support for the debug library
2021-06-02 23:11:15 +02:00
2021-06-02-prettier.md
add change note
2021-06-02 15:34:01 +02:00
2021-06-02-webpack-merge.md
add change note
2021-06-02 23:48:29 +02:00
2021-06-03-history.md
add change note
2021-06-03 12:35:39 +02:00
2021-06-04-resolve.md
add the resolve library as a sink to js/path-injection
2021-06-06 22:04:32 +02:00
2021-06-04-whatwg-fetch.md
add model for whatwg-fetch
2021-06-04 13:13:13 +02:00
2021-06-06-serialize-javascript.md
add taint-step for serialize-javascript
2021-06-06 22:48:53 +02:00
2021-06-06-serve-handler.md
model serve-handler in js/exposure-of-private-files
2021-06-08 09:52:56 +02:00
2021-06-07-joi.md
add model for the joi library
2021-06-07 20:04:17 +02:00
2021-06-07-serverless.md
add change note
2021-06-07 17:25:18 +02:00
2021-06-09-graphql.md
add support for graphql in @actions/github
2021-06-15 09:43:11 +02:00
2021-06-11-knex.md
JS: Change note
2021-06-15 17:19:39 +02:00
2021-06-14-script-with-tsx-lang.md
JS: Add change note
2021-06-14 13:43:11 +02:00
2021-06-18-promises.md
add support for the promise.allsettled library
2021-06-22 10:30:33 +02:00
2021-06-21-dates.md
add support for moment/dayjs/luxon instances returned by @date-io adapters
2021-06-22 10:42:24 +02:00
2021-06-21-promisify.md
add model of the thenify library
2021-06-22 11:55:58 +02:00
2021-06-21-sharpen-match-calls.md
JS: Change note
2021-06-21 11:46:44 +02:00
2021-06-22-chokidar.md
update change-note
2021-06-23 10:42:26 +02:00
2021-06-22-colors.md
add taint step through the strip-ansi library
2021-06-23 09:13:03 +02:00
2021-06-22-templates.md
add more template sinks for the js/code-injection query
2021-06-22 20:24:42 +02:00
2021-06-24-json.md
add support for the fast-json-stringify library
2021-07-12 11:13:01 +02:00
2021-06-30-mootools.md
JS: add Mootools XSS sinks
2021-07-01 09:17:27 +02:00
2021-06-30-recompose.md
JS: Change note
2021-06-30 15:10:52 +02:00
2021-06-30-vuex.md
JS: Change note
2021-07-02 12:47:55 +02:00
2021-07-12-case.md
add support for many more case changing libraries
2021-07-12 14:09:34 +02:00
2021-07-12-logs.md
add basic support for the pino library
2021-07-13 14:00:01 +02:00
2021-07-12-more-precise-capture-steps.md
JS: Add change note
2021-07-12 10:53:41 +02:00
2021-07-12-read-pkg.md
add the cwd option from read-pkg as sink for path-injection
2021-07-12 23:43:15 +02:00
2021-07-12-slash.md
add support for the slash library
2021-07-12 16:36:54 +02:00
2021-07-14-mkdirp.md
add mkdirp as a sink for tainted-path
2021-07-14 19:32:22 +02:00
2021-07-14-querystring.md
add taint through the parseqs library
2021-07-14 17:22:35 +02:00
2021-07-14-react-tooltip.md
add xss sink for react-tooltip
2021-07-14 20:03:50 +02:00
2021-07-15-ansi-to-html.md
add a taint step through the ansi-to-html library
2021-07-15 14:04:16 +02:00
2021-07-15-array-libs.md
add taint step through flatten libraries
2021-07-15 12:36:07 +02:00
2021-07-15-sort-keys.md
add sort-keys as a clone call
2021-07-15 13:16:17 +02:00
2021-07-16-dom-element-methods.md
JS: Change note
2021-08-04 16:25:59 +02:00
2021-08-02-handlebars-extraction.md
JS: Add change note
2021-08-11 12:54:19 +02:00
2021-08-03-hardcoded-auth-headers.md
add change-note
2021-08-03 09:11:27 +02:00
2021-08-05-tainted-url-suffix.md
JS: Change note
2021-08-10 08:55:03 +02:00
2021-08-16-query-suffix-convention2.md
JS: Add change note
2021-08-16 13:22:43 +02:00
2021-08-17-incomplete-multi-char-sanitization.md
add change-note
2021-08-17 15:12:15 +02:00
2021-08-17-vue-component-renaming.md
JS: Change note
2021-08-18 15:36:41 +02:00
2021-08-23-getPrimaryQlClasses.md
All languages: Add getPrimaryQlClasses()
2021-08-23 15:49:10 +01:00
2021-08-24-tainted-path-cwd.md
add change note
2021-08-24 12:35:20 +02:00
2021-08-30-live-server.md
change note
2021-08-31 14:23:23 +02:00
2021-09-01-clipboard-data.md
add change note
2021-09-13 20:45:35 +02:00
2021-09-01-typescript-4.4.md
add basic support for TypeScript 4.4
2021-09-14 20:40:45 +02:00
2021-09-07-static-initializer.md
add JS support for static initializers
2021-09-14 20:40:46 +02:00
2021-10-01-ldap.md
add change note
2021-10-01 11:13:41 +02:00
2021-10-26-cookie-queries.md
add change-note
2021-10-26 14:13:56 +02:00
2021-11-02-insufficient-key-size.md
add change note
2021-11-02 14:45:33 +01:00
2021-11-02-session-fixation.md
add js/session-fixation query
2021-11-03 13:04:41 +01:00