Commits

History for

oncodeql-cli/latest

Commits on Aug 5, 2026

Merge pull request #22268 from theinfosecguy/js-response-threat-promise-chain
asgerf
authored
bfc7a8b

Commits on Aug 3, 2026

JS: Fix confusing qldoc
asgerf
committed
b453630
Potential fix for pull request finding

asgerf
and
Copilot
authored
10f3d90

Commits on Aug 1, 2026

JS: Track response data through promises
theinfosecguy
committed
cbdc74e

Commits on Jul 31, 2026

JS: Support MaD targeting specific files
asgerf
committed
3cd2f91

Commits on Jul 28, 2026

Merge branch 'main' into js-sails-action2-inputs
theinfosecguy
authored
7fc695f
Update javascript/ql/lib/semmle/javascript/frameworks/Sails.qll

theinfosecguy
and
asgerf
authored
a6d696a

Commits on Jul 22, 2026

JS: Recognize @fastify/rate-limit as a rate limiter
cysp
committed
c644854

Commits on Jul 9, 2026

JS: Model Sails Action2 inputs as remote sources
theinfosecguy
committed
a06a72c

Commits on Jun 30, 2026

Merge branch 'main' into mad-write-through-model
MathiasVP
committed
b7b731b

Commits on Jun 23, 2026

JS: Fixes after changes to the flow summary API.
MathiasVP
committed
be56df7
Address review: restrict @HostListener handler to window/document message targets

felickz
and
Copilot
committed
d1d9df7
JavaScript: Recognize Angular @HostListener('window:message') as a postMessage handler

felickz
and
Copilot
committed
9bffcf8

Commits on Jun 17, 2026

Merge branch 'main' into bazookamusic/cwe-1427
BazookaMusic
authored
57f2006
Merge branch 'main' into add-yaml-comments
MathiasVP
committed
c12cf88

Commits on Jun 15, 2026

Merge branch 'main' into bazookamusic/cwe-1427
BazookaMusic
authored
7c11f19

Commits on Jun 11, 2026

Promote user prompt injection query to stable security
BazookaMusic
committed
e612db2

Commits on Jun 8, 2026

Commits on Jun 4, 2026

JS: Support YAML comments.
MathiasVP
committed
58b1a05
add openrouter support
BazookaMusic
committed
078d15e

Commits on May 20, 2026

move system prompt injection to non-experimental
BazookaMusic
committed
6c5c8e1

Commits on May 5, 2026

Add UseMemoDirective and UseNoMemoDirective classes
mattcosta7
authored
640b17e

Commits on Apr 30, 2026

JS: Add prompt injection detection (CWE-1427) for OpenAI, Anthropic, and Google GenAI SDKs
BazookaMusic
committed
0b7133c

Commits on Apr 28, 2026

Model res.json and res.jsonp as Vercel response sinks

murderteeth
and
claude
committed
18b06f1

Commits on Apr 25, 2026

Merge branch 'main' into js/vercel-node-framework
murderteeth
authored
a6dba9e

Commits on Apr 14, 2026

Merge pull request #21584 from owen-mc/shared/update-mad-comments
owen-mc
authored
7458674

Commits on Apr 13, 2026

Address Copilot review nits

murderteeth
and
claude
committed
4791532
Recognize legacy @now/node type aliases

murderteeth
and
claude
committed
cff0734
JS: Recognize Fastify per-route rate limiting
hvitved
committed
7a48409

Commits on Apr 12, 2026

JS: Add support for @vercel/node serverless functions

murderteeth
and
claude
committed
dfe0559

Commits on Mar 27, 2026

Replace `branch` with `acceptingValue`
owen-mc
committed
37aac05
Add barriers and barrier guards to MaD format explanations
owen-mc
committed
10fddc7