Merge branch 'main' into js/type-confusion-parmaeter-tampering-barrier

2026-04-30 11:15:13 +02:00 · 2022-05-27 15:55:42 +02:00
parent 468a4df215 2dcd7e16b1
commit 7e76e9a23b
208 changed files with 7176 additions and 4702 deletions
--- a/javascript/ql/experimental/adaptivethreatmodeling/lib/qlpack.yml
+++ b/javascript/ql/experimental/adaptivethreatmodeling/lib/qlpack.yml
@@ -1,5 +1,5 @@
 name: codeql/javascript-experimental-atm-lib
-version: 0.2.1
+version: 0.3.1
 extractor: javascript
 library: true
 groups:
--- a/javascript/ql/experimental/adaptivethreatmodeling/model/qlpack.yml
+++ b/javascript/ql/experimental/adaptivethreatmodeling/model/qlpack.yml
@@ -1,5 +1,5 @@
 name: codeql/javascript-experimental-atm-model
-version: 0.1.1
+version: 0.2.1
 groups:
    - javascript
    - experimental
--- a/javascript/ql/experimental/adaptivethreatmodeling/modelbuilding/codeql-pack.lock.yml
+++ b/javascript/ql/experimental/adaptivethreatmodeling/modelbuilding/codeql-pack.lock.yml
@@ -1,6 +1,6 @@
 ---
 dependencies:
  codeql/javascript-experimental-atm-model:
-    version: 0.1.0
+    version: 0.2.0
 compiled: false
 lockVersion: 1.0.0
--- a/javascript/ql/experimental/adaptivethreatmodeling/modelbuilding/qlpack.yml
+++ b/javascript/ql/experimental/adaptivethreatmodeling/modelbuilding/qlpack.yml
@@ -6,4 +6,4 @@ groups:
    - experimental
 dependencies:
    codeql/javascript-experimental-atm-lib: "*"
-    codeql/javascript-experimental-atm-model: "0.1.0"
+    codeql/javascript-experimental-atm-model: "0.2.0"
--- a/javascript/ql/experimental/adaptivethreatmodeling/src/codeql-pack.lock.yml
+++ b/javascript/ql/experimental/adaptivethreatmodeling/src/codeql-pack.lock.yml
@@ -1,6 +1,6 @@
 ---
 dependencies:
  codeql/javascript-experimental-atm-model:
-    version: 0.1.0
+    version: 0.2.0
 compiled: false
 lockVersion: 1.0.0
--- a/javascript/ql/experimental/adaptivethreatmodeling/src/qlpack.yml
+++ b/javascript/ql/experimental/adaptivethreatmodeling/src/qlpack.yml
@@ -1,6 +1,6 @@
 name: codeql/javascript-experimental-atm-queries
 language: javascript
-version: 0.2.1
+version: 0.3.1
 suites: codeql-suites
 defaultSuiteFile: codeql-suites/javascript-atm-code-scanning.qls
 groups:
@@ -8,4 +8,4 @@ groups:
    - experimental
 dependencies:
    codeql/javascript-experimental-atm-lib: "*"
-    codeql/javascript-experimental-atm-model: "0.1.0"
+    codeql/javascript-experimental-atm-model: "0.2.0"
--- a/javascript/ql/experimental/adaptivethreatmodeling/test/codeql-pack.lock.yml
+++ b/javascript/ql/experimental/adaptivethreatmodeling/test/codeql-pack.lock.yml
@@ -1,6 +1,6 @@
 ---
 dependencies:
  codeql/javascript-experimental-atm-model:
-    version: 0.1.0
+    version: 0.2.0
 compiled: false
 lockVersion: 1.0.0
--- a/javascript/ql/src/Security/CWE-020/MissingOriginCheck.ql
+++ b/javascript/ql/src/Security/CWE-020/MissingOriginCheck.ql
@@ -9,6 +9,7 @@
 * @tags correctness
 *       security
 *       external/cwe/cwe-020
+ *       external/cwe/cwe-940
 */

 import javascript