Commits

Breadcrumbs

History for

onvs2017

User selector

All users

All time

Commit History

Commits on Feb 10, 2021

• Merge branch 'vs2015' into vs2017

  JarLob

  committed
  346f27a

  Copy full SHA for 346f27a

• Deprecation message

  JarLob

  committed
  eebaa49

  Copy full SHA for eebaa49

Commits on Sep 19, 2020

• Tainting RouteValueDictionary (#175)

  Show description for d4615a4
  m0sa

  authored
  d4615a4

  Copy full SHA for d4615a4

Commits on May 17, 2020

• Merge with master

  JarLob

  committed
  a1ed4c5

  Copy full SHA for a1ed4c5

• Remove *Interpolated sinks. Upgrade tests for EF 3.1 Closes #167

  JarLob

  committed
  edf5114

  Copy full SHA for edf5114

• Added configuration to exclude web.config files from the analysis

  JarLob

  committed
  632ead2

  Copy full SHA for 632ead2

Commits on Feb 25, 2020

• Merged with master

  JarLob

  committed
  aaefea8

  Copy full SHA for aaefea8

• nHibernate SQL Injection (#155)

  indy-singh

  authored
  3886410

  Copy full SHA for 3886410

Commits on Feb 21, 2020

• Add FileUpload.SaveAs to Path Traversal injection points (#154)

  Show description for a97ffed
  watfordgnf

  authored
  a97ffed

  Copy full SHA for a97ffed

• Add more `ToString` behaviors

  JarLob

  committed
  7b61c20

  Copy full SHA for 7b61c20

Commits on Feb 14, 2020

• Merge branch 'master' into vs2017

  JarLob

  committed
  4e7dd11

  Copy full SHA for 4e7dd11

• New entityframework sinks. Closes #150

  JarLob

  committed
  584603f

  Copy full SHA for 584603f

Commits on Jan 3, 2020

• Merge branch 'master' into vs2017

  JarLob

  committed
  f3c552a

  Copy full SHA for f3c552a

• Ignore unknown configuration properties to support non-breaking configuration schema changes.

  JarLob

  committed
  f49350c

  Copy full SHA for f49350c

Commits on Dec 11, 2019

• Merge branch 'master' into vs2017

  JarLob

  committed
  b366597

  Copy full SHA for b366597

• HttpUtility.HtmlEncode and AntiXssEncoder.HtmlEncode sanitizers added. Closes #147

  JarLob

  committed
  1988cb6

  Copy full SHA for 1988cb6

• StringBuilder behaviors added.

  JarLob

  committed
  e5bf2c2

  Copy full SHA for e5bf2c2

Commits on Nov 28, 2019

• Merge branch 'master' into vs2017

  JarLob

  committed
  051ce3d

  Copy full SHA for 051ce3d

Commits on Nov 27, 2019

• Implement `this` taint transfer. Closes #122

  JarLob

  committed
  4726675

  Copy full SHA for 4726675

Commits on Nov 24, 2019

• XSS analyzer rewritten. Closes #43. Closes #144

  JarLob

  committed
  1bf6eb6

  Copy full SHA for 1bf6eb6

• XSS analyzer rewritten (VS2017 version).

  JarLob

  committed
  77937ae

  Copy full SHA for 77937ae

Commits on Sep 24, 2019

• Merge with master

  JarLob

  committed
  97f5ec0

  Copy full SHA for 97f5ec0

• Added ReportAnalysisCompletion option

  JarLob

  committed
  792c265

  Copy full SHA for 792c265

Commits on Sep 12, 2019

• Merge from master

  JarLob

  committed
  f9fe630

  Copy full SHA for f9fe630

Commits on Sep 11, 2019

• Merge pull request #137 from kevin-montrose/behavior-condition-injectable

  Show description for 1868095
  JarLob

  authored
  1868095

  Copy full SHA for 1868095

• Minor attempt to optimize and get rid of unnecessary conversions. But most probably the performance of the old object.ToString and new is/as string is comparable. At least it is more explicit now t…

  Show description for f0a1220
  JarLob

  committed
  f0a1220

  Copy full SHA for f0a1220

Commits on Sep 6, 2019

• string isn't actually supported here, but the code didn't make that clear at all; addresses https://github.com/security-code-scan/security-code-scan/pull/137#discussion_r315827705

  kevin-montrose

  committed
  970c6a1

  Copy full SHA for 970c6a1

• address https://github.com/security-code-scan/security-code-scan/pull/137#discussion_r315827705 ; string support isn't needed, and force all values in the conditional dictionaries to ints or bools

  kevin-montrose

  committed
  cc3f419

  Copy full SHA for cc3f419

Commits on Sep 1, 2019

• Added Console.ReadLine as taint source

  JarLob

  committed
  9a6df8b

  Copy full SHA for 9a6df8b

Commits on Aug 19, 2019

• Adds a Condition to Behaviors that allows conditional application of InjectableArguments. Squashed equivalent of #135

  kevin-montrose

  committed
  7479986

  Copy full SHA for 7479986

Commits on Aug 14, 2019

• allow dynamic (no namespace) in ArgTypes, and add a test for it

  

  kevin-montrose

  authored and

  JarLob

  committed
  3df7988

  Copy full SHA for 3df7988

• allow dynamic (no namespace) in ArgTypes, and add a test for it

  kevin-montrose

  committed
  383ea5f

  Copy full SHA for 383ea5f

Commits on Aug 8, 2019

• More configurable CSRF diagnostic proposal (#127)

  Show description for 4a65111
  

  kevin-montrose

  authored and

  JarLob

  committed
  4a65111

  Copy full SHA for 4a65111

• More configurable CSRF diagnostic proposal (#127)

  Show description for 56857a9
  

  kevin-montrose

  authored and

  JarLob

  committed
  56857a9

  Copy full SHA for 56857a9

Commits on Aug 1, 2019

• Merge branch 'master' into vs2017

  JarLob

  committed
  40354d9

  Copy full SHA for 40354d9