Commits

Breadcrumbs

History for

onmaster

User selector

All users

All time

Commit History

Commits on Sep 19, 2020

• Tainting RouteValueDictionary (#175)

  Show description for d4615a4
  m0sa

  authored
  d4615a4

  Copy full SHA for d4615a4

Commits on May 17, 2020

• Upgrade unit tests on Master to AspNetCore 2.1 and uncomment some open redirect tests

  JarLob

  committed
  103f273

  Copy full SHA for 103f273

• Remove *Interpolated sinks. Upgrade tests for EF 3.1 Closes #167

  JarLob

  committed
  edf5114

  Copy full SHA for edf5114

• Added configuration to exclude web.config files from the analysis

  JarLob

  committed
  632ead2

  Copy full SHA for 632ead2

Commits on Feb 25, 2020

• nHibernate SQL Injection (#155)

  indy-singh

  authored
  3886410

  Copy full SHA for 3886410

Commits on Feb 22, 2020

• Taint transfer interpolation tests extracted from open redirect tests

  JarLob

  committed
  697b14b

  Copy full SHA for 697b14b

Commits on Feb 21, 2020

• Add FileUpload.SaveAs to Path Traversal injection points (#154)

  Show description for a97ffed
  watfordgnf

  authored
  a97ffed

  Copy full SHA for a97ffed

• Add more `ToString` behaviors

  JarLob

  committed
  7b61c20

  Copy full SHA for 7b61c20

• Address false positive Open Redirects for implicit string concats and interpolated strings #152 (#153)

  watfordgnf

  authored
  192d4b4

  Copy full SHA for 192d4b4

Commits on Feb 14, 2020

• New entityframework sinks. Closes #150

  JarLob

  committed
  584603f

  Copy full SHA for 584603f

Commits on Jan 3, 2020

• Fix out of range exception.

  JarLob

  committed
  26b8f42

  Copy full SHA for 26b8f42

• Ignore unknown configuration properties to support non-breaking configuration schema changes.

  JarLob

  committed
  f49350c

  Copy full SHA for f49350c

Commits on Dec 11, 2019

• HttpUtility.HtmlEncode and AntiXssEncoder.HtmlEncode sanitizers added. Closes #147

  JarLob

  committed
  1988cb6

  Copy full SHA for 1988cb6

• StringBuilder behaviors added.

  JarLob

  committed
  e5bf2c2

  Copy full SHA for e5bf2c2

Commits on Nov 28, 2019

• More tests for `this` taint transfer added

  JarLob

  committed
  7da4c87

  Copy full SHA for 7da4c87

Commits on Nov 27, 2019

• Implement `this` taint transfer. Closes #122

  JarLob

  committed
  4726675

  Copy full SHA for 4726675

Commits on Nov 25, 2019

• Fix null reference exception on `using` node without declaration

  JarLob

  committed
  9178931

  Copy full SHA for 9178931

• More explicit syntax node handlers. Closes #84

  JarLob

  committed
  90efe17

  Copy full SHA for 90efe17

• Treat nameof as taint const.

  JarLob

  committed
  5c3549b

  Copy full SHA for 5c3549b

• Fix nullreference exception on rethrow syntax node.

  JarLob

  committed
  887ebaa

  Copy full SHA for 887ebaa

Commits on Nov 24, 2019

• XSS analyzer improvements: ignore non string tainted input and highligh exact return line.

  JarLob

  committed
  a3334fa

  Copy full SHA for a3334fa

• Additional XSS tests

  JarLob

  committed
  705cbb0

  Copy full SHA for 705cbb0

• XSS analyzer rewritten. Closes #43. Closes #144

  JarLob

  committed
  1bf6eb6

  Copy full SHA for 1bf6eb6

Commits on Oct 15, 2019

• Create property state on member access. Fixes #143

  JarLob

  committed
  730558d

  Copy full SHA for 730558d

Commits on Sep 24, 2019

• Added ReportAnalysisCompletion option

  JarLob

  committed
  792c265

  Copy full SHA for 792c265

Commits on Sep 20, 2019

• Add System.Net.Http.HttpClientHandler.ServerCertificateCustomValidationCallback check.

  JarLob

  committed
  077feef

  Copy full SHA for 077feef

Commits on Sep 12, 2019

• Enable XSS analyzer for Microsoft.AspNetCore.Mvc.ControllerBase. Closes #103

  JarLob

  committed
  232d45b

  Copy full SHA for 232d45b

Commits on Sep 11, 2019

• Merge pull request #137 from kevin-montrose/behavior-condition-injectable

  Show description for 1868095
  JarLob

  authored
  1868095

  Copy full SHA for 1868095

• Additional ConditionalConstructorOpenRedirect tests

  JarLob

  committed
  fafefc1

  Copy full SHA for fafefc1

Commits on Sep 6, 2019

• address https://github.com/security-code-scan/security-code-scan/pull/137#discussion_r315836654 ; add a test for conditionals on constructors with default parameters

  kevin-montrose

  committed
  989bd1e

  Copy full SHA for 989bd1e

Commits on Sep 1, 2019

• Taint 'Main' parameters

  JarLob

  committed
  533d0b1

  Copy full SHA for 533d0b1

• Added Console.ReadLine as taint source

  JarLob

  committed
  9a6df8b

  Copy full SHA for 9a6df8b

Commits on Aug 29, 2019

• Merge #126 "Fix awaited taint tracking" from VS2017 branch. Closes #140

  JarLob

  committed
  b306dd4

  Copy full SHA for b306dd4

Commits on Aug 19, 2019

• Adds a Condition to Behaviors that allows conditional application of InjectableArguments. Squashed equivalent of #135

  kevin-montrose

  committed
  7479986

  Copy full SHA for 7479986

Commits on Aug 18, 2019

• ExtensionMethodWithParams test

  JarLob

  committed
  88b9964

  Copy full SHA for 88b9964