Commit history

1. Commits on Jul 5, 2026

   • Add SPURIOUS and MISSING tags

     owen-mc

     committed
     de7723fView commit details

     Copy full SHA for de7723f

     View code at this pointBrowse repository at this point

   • Convert qlref tests to inline expectations

     owen-mc

     committed
     5c2e5bfView commit details

     Copy full SHA for 5c2e5bf

     View code at this pointBrowse repository at this point
2. Commits on Jun 6, 2026

   • Add experimental JS query for SSRF guards missing IPv6-transition unwrap

     Show description for e93bc11
     tonghuaroot

     committed
     e93bc11View commit details

     Copy full SHA for e93bc11

     View code at this pointBrowse repository at this point
3. Commits on Sep 4, 2025

   • Merge remote-tracking branch 'origin/main' into js/move-cors-query-from-experimental

     Napalys

     committed
     c4c8dbcView commit details

     Copy full SHA for c4c8dbc

     View code at this pointBrowse repository at this point
4. Commits on Aug 29, 2025

   • JS: Update locations in expected files

     asgerf

     committed
     cc8fe10View commit details

     Copy full SHA for cc8fe10

     View code at this pointBrowse repository at this point
5. Commits on Jul 30, 2025

   • Move CORS misconfiguration query from experimental to Security

     Napalys

     committed
     358617fView commit details

     Copy full SHA for 358617f

     View code at this pointBrowse repository at this point
6. Commits on Jun 30, 2025

   • Merge pull request #19762 from trailofbits/VF/type-orm-model-improvements

     Show description for 3247bab
     asgerf

     authored
     3247babView commit details

     Copy full SHA for 3247bab

     View code at this pointBrowse repository at this point
7. Commits on Jun 25, 2025

   • Merge pull request #19858 from Napalys/js/execa

     Show description for 3d9e2f5
     Napalys

     authored
     3d9e2f5View commit details

     Copy full SHA for 3d9e2f5

     View code at this pointBrowse repository at this point
8. Commits on Jun 24, 2025

   • JS: moved `execa` test cases outside experimental

     Napalys

     committed
     d05de1bView commit details

     Copy full SHA for d05de1b

     View code at this pointBrowse repository at this point
9. Commits on Jun 23, 2025

   • JS: Remove js/actions/pull-request-target

     Show description for 3a00e8d
     asgerf

     committed
     3a00e8dView commit details

     Copy full SHA for 3a00e8d

     View code at this pointBrowse repository at this point
10. Commits on Jun 13, 2025

    • Remove unnecessary spaces

      Vasco-jofra

      committed
      ddf77a0View commit details

      Copy full SHA for ddf77a0

      View code at this pointBrowse repository at this point

    • Model the TypeORM Repository API

      Vasco-jofra

      committed
      4ea5377View commit details

      Copy full SHA for 4ea5377

      View code at this pointBrowse repository at this point
11. Commits on Dec 3, 2024

    • Remove unsupported features from PoI

      asgerf

      committed
      75ab485View commit details

      Copy full SHA for 75ab485

      View code at this pointBrowse repository at this point

    • JS: Port experimental CorsPermissiveConfiguration to ConfigSig

      Show description for 871bc3b
      asgerf

      committed
      871bc3bView commit details

      Copy full SHA for 871bc3b

      View code at this pointBrowse repository at this point

    • JS: Port experimental decodeJwtWithoutVerificationLocalSource

      asgerf

      committed
      f5a6485View commit details

      Copy full SHA for f5a6485

      View code at this pointBrowse repository at this point

    • JS: Port experimental jwtDecodeWithoutVerification to ConfigSig

      asgerf

      committed
      72e5226View commit details

      Copy full SHA for 72e5226

      View code at this pointBrowse repository at this point

    • JS: Port experimental EnvValueInjection to ConfigSig

      asgerf

      committed
      7e162f5View commit details

      Copy full SHA for 7e162f5

      View code at this pointBrowse repository at this point

    • JS: Port experimental EnvValueAndKeyInjection to ConfigSig

      asgerf

      committed
      4f83907View commit details

      Copy full SHA for 4f83907

      View code at this pointBrowse repository at this point

    • JS: Port an experimental CodeInjection variant to ConfigSig

      asgerf

      committed
      8887ca1View commit details

      Copy full SHA for 8887ca1

      View code at this pointBrowse repository at this point

    • JS: Port FormParsers test to ConfigSig

      asgerf

      committed
      1832e93View commit details

      Copy full SHA for 1832e93

      View code at this pointBrowse repository at this point
12. Commits on Nov 26, 2024

    • JS: Benign test output changes

      asgerf

      committed
      8818fccView commit details

      Copy full SHA for 8818fcc

      View code at this pointBrowse repository at this point
13. Commits on Nov 20, 2024

    • Merge branch 'main' into js/shared-dataflow-merge-main

      asgerf

      committed
      d52bc97View commit details

      Copy full SHA for d52bc97

      View code at this pointBrowse repository at this point
14. Commits on Nov 11, 2024

    • Update javascript/ql/test/experimental/Security/CWE-918/check-regex.js

      Show description for 1eabb6c
      

      Napalys

      and

      erik-krogh

      authored
      1eabb6cView commit details

      Copy full SHA for 1eabb6c

      View code at this pointBrowse repository at this point
15. Commits on Nov 7, 2024

    • Fixes false positives from commit 42600c93ffad33fce4975542e11f32d45fd25747

      Napalys

      committed
      514375dView commit details

      Copy full SHA for 514375d

      View code at this pointBrowse repository at this point

    • Added tests which shows false positive SSRF via matchAll

      Napalys

      committed
      42600c9View commit details

      Copy full SHA for 42600c9

      View code at this pointBrowse repository at this point

    • Fixes false positives from commit 445552d3b53ec9592e8e3892cb337d1004b6a432

      Napalys

      committed
      449cee9View commit details

      Copy full SHA for 449cee9

      View code at this pointBrowse repository at this point

    • Added tests for regex sanitization to identify false positives matchAll

      Napalys

      committed
      4106663View commit details

      Copy full SHA for 4106663

      View code at this pointBrowse repository at this point
16. Commits on Aug 2, 2024

    • Merge branch 'main' into js/shared-dataflow-merge-main

      asgerf

      committed
      df64388View commit details

      Copy full SHA for df64388

      View code at this pointBrowse repository at this point
17. Commits on Jun 27, 2024

    • Merge branch 'main' into maikypedia/javascript-cors

      maikypedia

      authored
      d0cf2a9View commit details

      Copy full SHA for d0cf2a9

      View code at this pointBrowse repository at this point
18. Commits on Jun 26, 2024

    • JS: Update some tests with provenance columns

      Show description for 53efb58
      asgerf

      committed
      53efb58View commit details

      Copy full SHA for 53efb58

      View code at this pointBrowse repository at this point
19. Commits on Jun 25, 2024

    • Merge branch 'main' into js/shared-dataflow

      asgerf

      committed
      ecf418bView commit details

      Copy full SHA for ecf418b

      View code at this pointBrowse repository at this point
20. Commits on Jun 20, 2024

    • Merge pull request #15060 from am0o0/amammad-js-envinjection

      Show description for db76896
      erik-krogh

      authored
      db76896View commit details

      Copy full SHA for db76896

      View code at this pointBrowse repository at this point

    • Merge pull request #14293 from am0o0/amammad-js-CodeInjection_dynamic_import

      Show description for 555d7e5
      erik-krogh

      authored
      555d7e5View commit details

      Copy full SHA for 555d7e5

      View code at this pointBrowse repository at this point
21. Commits on Jun 13, 2024

    • update tests

      am0o0

      committed
      f0a467eView commit details

      Copy full SHA for f0a467e

      View code at this pointBrowse repository at this point
22. Commits on Jun 7, 2024

    • update select statement, update test cases

      am0o0

      committed
      9db334dView commit details

      Copy full SHA for 9db334d

      View code at this pointBrowse repository at this point