mirror of
https://github.com/github/codeql.git
synced 2025-12-16 16:53:25 +01:00
escaping
This commit is contained in:
@@ -79,4 +79,4 @@ JavaScript/TypeScript
|
|||||||
* Added taint-steps for :code:`Array.prototype.toReversed`.
|
* Added taint-steps for :code:`Array.prototype.toReversed`.
|
||||||
* Added taint-steps for :code:`Array.prototype.toSorted`.
|
* Added taint-steps for :code:`Array.prototype.toSorted`.
|
||||||
* Added support for :code:`String.prototype.matchAll`.
|
* Added support for :code:`String.prototype.matchAll`.
|
||||||
* Added taint-steps for :code:`Array.prototype.reverse`\
|
* Added taint-steps for :code:`Array.prototype.reverse`.
|
||||||
|
|||||||
@@ -117,8 +117,8 @@ Java/Kotlin
|
|||||||
* Deleted the deprecated :code:`isLValue` and :code:`isRValue` predicates from the :code:`VarAccess` class, use :code:`isVarWrite` and :code:`isVarRead` respectively instead.
|
* Deleted the deprecated :code:`isLValue` and :code:`isRValue` predicates from the :code:`VarAccess` class, use :code:`isVarWrite` and :code:`isVarRead` respectively instead.
|
||||||
* Deleted the deprecated :code:`getRhs` predicate from the :code:`VarWrite` class, use :code:`getASource` instead.
|
* Deleted the deprecated :code:`getRhs` predicate from the :code:`VarWrite` class, use :code:`getASource` instead.
|
||||||
* Deleted the deprecated :code:`LValue` and :code:`RValue` classes, use :code:`VarWrite` and :code:`VarRead` respectively instead.
|
* Deleted the deprecated :code:`LValue` and :code:`RValue` classes, use :code:`VarWrite` and :code:`VarRead` respectively instead.
|
||||||
* Deleted a lot of deprecated classes ending in :code:`*Access`, use the corresponding :code:`*Call` classes instead.
|
* Deleted a lot of deprecated classes ending in ``*Access``, use the corresponding ``*Call`` classes instead.
|
||||||
* Deleted a lot of deprecated predicates ending in :code:`*Access`, use the corresponding :code:`*Call` predicates instead.
|
* Deleted a lot of deprecated predicates ending in ``*Access``, use the corresponding ``*Call`` predicates instead.
|
||||||
* Deleted the deprecated :code:`EnvInput` and :code:`DatabaseInput` classes from :code:`FlowSources.qll`, use the threat models feature instead.
|
* Deleted the deprecated :code:`EnvInput` and :code:`DatabaseInput` classes from :code:`FlowSources.qll`, use the threat models feature instead.
|
||||||
* Deleted some deprecated API predicates from :code:`SensitiveApi.qll`, use the Sink classes from that file instead.
|
* Deleted some deprecated API predicates from :code:`SensitiveApi.qll`, use the Sink classes from that file instead.
|
||||||
|
|
||||||
@@ -144,7 +144,7 @@ Ruby
|
|||||||
* Deleted the deprecated :code:`ModelClass` and :code:`ModelInstance` classes from :code:`ActiveResource.qll`, use :code:`ModelClassNode` and :code:`ModelClassNode.getAnInstanceReference()` instead.
|
* Deleted the deprecated :code:`ModelClass` and :code:`ModelInstance` classes from :code:`ActiveResource.qll`, use :code:`ModelClassNode` and :code:`ModelClassNode.getAnInstanceReference()` instead.
|
||||||
* Deleted the deprecated :code:`Collection` class from :code:`ActiveResource.qll`, use :code:`CollectionSource` instead.
|
* Deleted the deprecated :code:`Collection` class from :code:`ActiveResource.qll`, use :code:`CollectionSource` instead.
|
||||||
* Deleted the deprecated :code:`ServiceInstantiation` and :code:`ClientInstantiation` classes from :code:`Twirp.qll`.
|
* Deleted the deprecated :code:`ServiceInstantiation` and :code:`ClientInstantiation` classes from :code:`Twirp.qll`.
|
||||||
* Deleted a lot of deprecated dataflow modules from :code:`*Query.qll` files.
|
* Deleted a lot of deprecated dataflow modules from ``*Query.qll`` files.
|
||||||
* Deleted the old deprecated TypeTracking library.
|
* Deleted the old deprecated TypeTracking library.
|
||||||
|
|
||||||
Swift
|
Swift
|
||||||
|
|||||||
@@ -207,5 +207,5 @@ JavaScript/TypeScript
|
|||||||
|
|
||||||
* Intersection :code:`&&`
|
* Intersection :code:`&&`
|
||||||
* Subtraction :code:`--`
|
* Subtraction :code:`--`
|
||||||
* :code:`\q` quoted string
|
* :code:`\\q` quoted string
|
||||||
|
|
||||||
|
|||||||
Reference in New Issue
Block a user