Commits

Breadcrumbs

History for

onmain

User selector

All users

All time

Commit history

Commits on Jan 25, 2023

• add note in ReDoS qhelp that Ruby 3.2 has fixed ReDoS

  erik-krogh

  committed
  54b0350View commit details

  Copy full SHA for 54b0350

  View code at this pointBrowse repository at this point

Commits on Jan 23, 2023

• Apply suggestions from code review

  Show description for 32c4cf5
  

  erik-krogh

  and

  alexrford

  authored
  32c4cf5View commit details

  Copy full SHA for 32c4cf5

  View code at this pointBrowse repository at this point

Commits on Jan 17, 2023

• add unsafe-html-construction query

  erik-krogh

  committed
  8251ad5View commit details

  Copy full SHA for 8251ad5

  View code at this pointBrowse repository at this point

Commits on Jan 16, 2023

• Merge pull request #10862 from erik-krogh/unsafeCodeConstruction

  Show description for 59a8b21
  erik-krogh

  authored
  59a8b21View commit details

  Copy full SHA for 59a8b21

  View code at this pointBrowse repository at this point

Commits on Jan 10, 2023

• Ruby: Remove omittable exists variables

  atorralba

  committed
  c9d1cd9View commit details

  Copy full SHA for c9d1cd9

  View code at this pointBrowse repository at this point

• apply suggestions from doc review

  Show description for f2658a0
  

  erik-krogh

  and

  mchammer01

  authored
  f2658a0View commit details

  Copy full SHA for f2658a0

  View code at this pointBrowse repository at this point

Commits on Jan 6, 2023

• add stdin as source for unsafe-deserialization

  erik-krogh

  committed
  0e6028aView commit details

  Copy full SHA for 0e6028a

  View code at this pointBrowse repository at this point

Commits on Jan 5, 2023

• Apply suggestions from code review

  Show description for d917654
  

  erik-krogh

  and

  alexrford

  authored
  d917654View commit details

  Copy full SHA for d917654

  View code at this pointBrowse repository at this point

Commits on Jan 2, 2023

• simplify the qhelp for unsafe-code-construction

  Show description for 3811eae
  erik-krogh

  committed
  3811eaeView commit details

  Copy full SHA for 3811eae

  View code at this pointBrowse repository at this point

• fix qhelp syntax

  erik-krogh

  committed
  3815a5aView commit details

  Copy full SHA for 3815a5a

  View code at this pointBrowse repository at this point

Commits on Dec 27, 2022

• Ruby: Include send example in qhelp

  hmac

  committed
  a6571a0View commit details

  Copy full SHA for a6571a0

  View code at this pointBrowse repository at this point

• Ruby: Add another code injection example to qhelp

  hmac

  committed
  d3812f5View commit details

  Copy full SHA for d3812f5

  View code at this pointBrowse repository at this point

Commits on Dec 19, 2022

• Merge pull request #11575 from erik-krogh/kernelLoad

  Show description for f136651
  erik-krogh

  authored
  f136651View commit details

  Copy full SHA for f136651

  View code at this pointBrowse repository at this point

• Merge branch 'main' into kernelLoad

  erik-krogh

  committed
  db49cfbView commit details

  Copy full SHA for db49cfb

  View code at this pointBrowse repository at this point

Commits on Dec 18, 2022

• move getACommonTld into a utility module without parameters

  erik-krogh

  committed
  35e8d6aView commit details

  Copy full SHA for 35e8d6a

  View code at this pointBrowse repository at this point

• share {js,rb}/regex/missing-regexp-anchor

  erik-krogh

  committed
  26c5480View commit details

  Copy full SHA for 26c5480

  View code at this pointBrowse repository at this point

Commits on Dec 17, 2022

• move `getACommonTld` to the shared pack

  erik-krogh

  committed
  355499eView commit details

  Copy full SHA for 355499e

  View code at this pointBrowse repository at this point

• put the shared HostnameRegexp code in the shared regex pack

  erik-krogh

  committed
  f67d0bcView commit details

  Copy full SHA for f67d0bc

  View code at this pointBrowse repository at this point

Commits on Dec 14, 2022

• Ruby: Model flow through `initialize` constructors

  hvitved

  committed
  5d9c64bView commit details

  Copy full SHA for 5d9c64b

  View code at this pointBrowse repository at this point

Commits on Dec 13, 2022

• add a second example of how to use module_eval without constructing a code-string

  erik-krogh

  committed
  d95a4a7View commit details

  Copy full SHA for d95a4a7

  View code at this pointBrowse repository at this point

• Merge branch 'main' into unsafeCodeConstruction

  erik-krogh

  committed
  ccf520aView commit details

  Copy full SHA for ccf520a

  View code at this pointBrowse repository at this point

Commits on Dec 12, 2022

• filter out string literals from the taint-sink meta query

  erik-krogh

  committed
  e0045d2View commit details

  Copy full SHA for e0045d2

  View code at this pointBrowse repository at this point

Commits on Dec 6, 2022

• drive-by: simplify the imports in PathInjection.ql

  erik-krogh

  committed
  5849b2cView commit details

  Copy full SHA for 5849b2c

  View code at this pointBrowse repository at this point

Commits on Nov 29, 2022

• remove two more claseses of FPs in rb/non-constant-kernel-open

  erik-krogh

  committed
  7dcb813View commit details

  Copy full SHA for 7dcb813

  View code at this pointBrowse repository at this point

• Merge branch 'main' into p--ruby-kernel-open-addition

  p-

  authored
  6b1865dView commit details

  Copy full SHA for 6b1865d

  View code at this pointBrowse repository at this point

• Add changes for NonConstantKernelOpenQuery

  p-

  committed
  5b6dd78View commit details

  Copy full SHA for 5b6dd78

  View code at this pointBrowse repository at this point

• Fix KernelOpen qhelp

  p-

  committed
  3154808View commit details

  Copy full SHA for 3154808

  View code at this pointBrowse repository at this point

• Add additional sinks to the `rb/kernel-open` query

  p-

  committed
  d8752a0View commit details

  Copy full SHA for d8752a0

  View code at this pointBrowse repository at this point

Commits on Nov 28, 2022

• Merge pull request #11250 from github/nickrolfe/stack-trace-exposure

  Show description for 8a94cab
  nickrolfe

  authored
  8a94cabView commit details

  Copy full SHA for 8a94cab

  View code at this pointBrowse repository at this point

Commits on Nov 25, 2022

• add a `rb/unsafe-code-construction` query

  Show description for f166880
  erik-krogh

  committed
  f166880View commit details

  Copy full SHA for f166880

  View code at this pointBrowse repository at this point

Commits on Nov 24, 2022

• Apply suggestions from code review

  Show description for 1c407a2
  

  nickrolfe

  and

  hmac

  committed
  1c407a2View commit details

  Copy full SHA for 1c407a2

  View code at this pointBrowse repository at this point

Commits on Nov 14, 2022

• Merge branch 'main' into rb-redosMod

  erik-krogh

  committed
  10fff4eView commit details

  Copy full SHA for 10fff4e

  View code at this pointBrowse repository at this point

• Ruby: add stacktrace exposure query

  nickrolfe

  committed
  b39e2efView commit details

  Copy full SHA for b39e2ef

  View code at this pointBrowse repository at this point

Commits on Nov 10, 2022

• Ruby: use the 'customizations' pattern for the SQL injection query

  nickrolfe

  committed
  4a98ef0View commit details

  Copy full SHA for 4a98ef0

  View code at this pointBrowse repository at this point

Commits on Nov 9, 2022

• Merge pull request #11024 from asgerf/rb/data-flow-layer-capture2

  Show description for 859dc7b
  asgerf

  authored
  859dc7bView commit details

  Copy full SHA for 859dc7b

  View code at this pointBrowse repository at this point