Commits

Breadcrumbs

History for

oncodeql-cli/latest

User selector

All users

All time

Commit History

Commits on Oct 22, 2025

• CWE-020: Lower security-severity for OverlyLargeRange queries to 4.0

  Napalys

  committed
  fa47174

  Copy full SHA for fa47174

Commits on Apr 30, 2025

• Fix cwe tags to include leading zero

  owen-mc

  committed
  cf614a5

  Copy full SHA for cf614a5

Commits on Jan 21, 2025

• remove redundant cast

  erik-krogh

  committed
  2f1bd75

  Copy full SHA for 2f1bd75

• support that two `indexOf()` calls use the same string-concatenation in `getAnEquivalentIndexOfCall()`

  erik-krogh

  committed
  17afab7

  Copy full SHA for 17afab7

• ensure an `indexOf` call is equivalent with itself. (`getAUse()` is used later to find matching `indexOf` calls)

  erik-krogh

  committed
  d5529e3

  Copy full SHA for d5529e3

Commits on Nov 20, 2024

• Merge branch 'main' into js/shared-dataflow-merge-main

  asgerf

  committed
  d52bc97

  Copy full SHA for d52bc97

Commits on Nov 5, 2024

• Update javascript/ql/src/Security/CWE-020/MissingRegExpAnchor.ql

  Show description for 5e8b1b0
  

  Napalys

  and

  erik-krogh

  authored
  5e8b1b0

  Copy full SHA for 5e8b1b0

• Added support for matchAll in CWE-020 including new test cases

  Napalys

  committed
  ccee34d

  Copy full SHA for ccee34d

Commits on May 2, 2024

• Merge branch 'main' into js/shared-dataflow

  asgerf

  committed
  c408ab9

  Copy full SHA for c408ab9

Commits on Apr 25, 2024

• delete outdated deprecations

  erik-krogh

  committed
  baa31e1

  Copy full SHA for baa31e1

Commits on Oct 13, 2023

• JS: Port UntrustedDataToExternalAPI

  asgerf

  committed
  8e95a90

  Copy full SHA for 8e95a90

Commits on May 3, 2023

• JS: Make implicit this receivers explicit

  kaspersv

  committed
  67950c8

  Copy full SHA for 67950c8

Commits on Mar 10, 2023

• JavaScript: Autoformat

  aschackmull

  committed
  8d97fe9

  Copy full SHA for 8d97fe9

Commits on Jan 4, 2023

• Merge pull request #11582 from erik-krogh/heuristics

  Show description for cedc9c0
  erik-krogh

  authored
  cedc9c0

  Copy full SHA for cedc9c0

Commits on Dec 19, 2022

• JS: add heuristic variants of queries that use RemoteFlowSource

  erik-krogh

  committed
  442749b

  Copy full SHA for 442749b

Commits on Dec 18, 2022

• move getACommonTld into a utility module without parameters

  erik-krogh

  committed
  35e8d6a

  Copy full SHA for 35e8d6a

• share {js,rb}/regex/missing-regexp-anchor

  erik-krogh

  committed
  26c5480

  Copy full SHA for 26c5480

Commits on Dec 17, 2022

• move `getACommonTld` to the shared pack

  erik-krogh

  committed
  355499e

  Copy full SHA for 355499e

• put the shared HostnameRegexp code in the shared regex pack

  erik-krogh

  committed
  f67d0bc

  Copy full SHA for f67d0bc

Commits on Nov 22, 2022

• use RegExpTreeView insteaed of RegexTreeView in JS

  erik-krogh

  committed
  6b5cd9a

  Copy full SHA for 6b5cd9a

Commits on Nov 15, 2022

• port the JS regex/redos queries to use the shared pack

  erik-krogh

  committed
  e18ceba

  Copy full SHA for e18ceba

Commits on Aug 15, 2022

• Merge pull request #9712 from erik-krogh/badRange

  Show description for 0adb588
  erik-krogh

  authored
  0adb588

  Copy full SHA for 0adb588

Commits on Aug 9, 2022

• apply changes based on docs review

  erik-krogh

  committed
  0abbd50

  Copy full SHA for 0abbd50

Commits on Jul 13, 2022

• add some more references to the overly-large-range qhelp

  erik-krogh

  committed
  a4262f8

  Copy full SHA for a4262f8

• Merge branch 'main' into missDocParam

  erik-krogh

  committed
  a49d34c

  Copy full SHA for a49d34c

Commits on Jul 12, 2022

• convert tabs to spaces in qhelp

  erik-krogh

  committed
  220ff3c

  Copy full SHA for 220ff3c

• rename query to overly-large-range, and rewrite the @description

  erik-krogh

  committed
  ff25451

  Copy full SHA for ff25451

Commits on Jun 28, 2022

• add suspicious-regexp-range query

  erik-krogh

  committed
  a343cea

  Copy full SHA for a343cea

Commits on May 25, 2022

• add CWE-940 to js/missing-origin-check

  erik-krogh

  committed
  ed907f6

  Copy full SHA for ed907f6

Commits on May 24, 2022

• add explicit this

  erik-krogh

  committed
  d58fe8e

  Copy full SHA for d58fe8e

Commits on May 5, 2022

• add missing word in qhelp

  erik-krogh

  authored
  58db922

  Copy full SHA for 58db922

• apply suggestions from doc review

  Show description for 2d7c7ff
  

  erik-krogh

  and

  mchammer01

  authored
  2d7c7ff

  Copy full SHA for 2d7c7ff

Commits on Apr 25, 2022

• include startsWith/endsWith checks in js/missing-origin-check

  erik-krogh

  committed
  0a26e89

  Copy full SHA for 0a26e89

• fix qhelp: the window, not the origin, is sending the message

  Show description for fe3d71e
  

  erik-krogh

  and

  esbena

  authored
  fe3d71e

  Copy full SHA for fe3d71e

Commits on Apr 12, 2022

• rename files

  erik-krogh

  committed
  bca4d14

  Copy full SHA for bca4d14

Pagination

Previous

Next