Commits

Breadcrumbs

History for

onvs2019

User selector

All users

All time

Commit History

Commits on Jul 8, 2021

• Reduce false positives. Partially revert hardcoded password analyzer. Closes #197

  JarLob

  committed
  f222b15

  Copy full SHA for f222b15

Commits on Jul 7, 2021

• Check cookiek on Set/Append. Closes #195

  JarLob

  committed
  449cbcf

  Copy full SHA for 449cbcf

Commits on Apr 9, 2021

• TcpClient and UpdClient taint sources

  JarLob

  committed
  b85d822

  Copy full SHA for b85d822

Commits on Feb 27, 2021

• Uncomment some tests

  JarLob

  committed
  da34536

  Copy full SHA for da34536

• Min password props analyzer refactor

  JarLob

  committed
  10917db

  Copy full SHA for 10917db

• Cookie analyzer refactor

  JarLob

  committed
  5b29c14

  Copy full SHA for 5b29c14

• PhysicalFileProvider sanitizer added

  JarLob

  committed
  2341b5f

  Copy full SHA for 2341b5f

• Hardcoded analyzer

  JarLob

  committed
  505254b

  Copy full SHA for 505254b

• Disable authorize analyzer by default

  JarLob

  committed
  8d5a445

  Copy full SHA for 8d5a445

• Reduce authorization bypass FP

  JarLob

  committed
  0f0a6b1

  Copy full SHA for 0f0a6b1

• Fix XXE analyzer for .NET Core

  JarLob

  committed
  cb2a988

  Copy full SHA for cb2a988

• New cookie sink

  JarLob

  committed
  adb4510

  Copy full SHA for adb4510

• Change taint tracking logic for non-strings 2

  JarLob

  committed
  b1d6a3a

  Copy full SHA for b1d6a3a

• Change taint tracking logic for non-strings

  JarLob

  committed
  46326a6

  Copy full SHA for 46326a6

• Razor pages taint entry

  JarLob

  committed
  1a1c08c

  Copy full SHA for 1a1c08c

• Disabled hardcoded IV tests

  JarLob

  committed
  28a8de7

  Copy full SHA for 28a8de7

Commits on Feb 20, 2021

• Support taint entry points derived from interface

  JarLob

  committed
  1840738

  Copy full SHA for 1840738

• XXE false positives fix

  JarLob

  committed
  0115960

  Copy full SHA for 0115960

• Consolidate roslyn to 3.8.0

  JarLob

  committed
  9a9aaed

  Copy full SHA for 9a9aaed

Commits on Feb 10, 2021

• IsLocalUrl test comment

  JarLob

  committed
  ffd9e42

  Copy full SHA for ffd9e42

• Make test compile

  JarLob

  committed
  6ee2a54

  Copy full SHA for 6ee2a54

Commits on Feb 9, 2021

• Add disabled tests from https://github.com/security-code-scan/security-code-scan/pull/180

  JarLob

  committed
  31953c6

  Copy full SHA for 31953c6

• Fix CI build error Could not locate the assembly "System.Web.Http"

  JarLob

  committed
  5fecefe

  Copy full SHA for 5fecefe

• Disabled tests for model object taint tracking

  JarLob

  committed
  0b88469

  Copy full SHA for 0b88469

Commits on Sep 19, 2020

• Taint source RouteValueDictionary

  JarLob

  committed
  7483b9f

  Copy full SHA for 7483b9f

• Taint model members tracking

  JarLob

  committed
  8222667

  Copy full SHA for 8222667

Commits on Sep 6, 2020

• Hardcoded analyzer fix

  JarLob

  committed
  1e3c605

  Copy full SHA for 1e3c605

• XSLT sinks extented + value check fix

  JarLob

  committed
  f942218

  Copy full SHA for f942218

• XSLT settings analyzer

  JarLob

  committed
  dfcd57d

  Copy full SHA for dfcd57d

• Split to separate analyzers

  JarLob

  committed
  9fe9d5f

  Copy full SHA for 9fe9d5f

Commits on Sep 1, 2020

• Test for custom authorize attribute

  JarLob

  committed
  1748a79

  Copy full SHA for 1748a79

• insecure cookie analyzer

  JarLob

  committed
  1349a72

  Copy full SHA for 1349a72

• weak password analyzer

  JarLob

  committed
  87d9c15

  Copy full SHA for 87d9c15

• hardcoded passwords analyzer

  JarLob

  committed
  4a43b90

  Copy full SHA for 4a43b90

Commits on Aug 31, 2020

• Fix audit mode assignment sinks

  JarLob

  committed
  c230dbc

  Copy full SHA for c230dbc