Merge branch 'main' into redundantImport

This commit is contained in:
Erik Krogh Kristensen
2022-04-26 14:24:51 +02:00
889 changed files with 9741 additions and 3014 deletions

View File

@@ -1,3 +1,15 @@
## 0.1.0
### New Queries
* The `js/resource-exhaustion` query has been added. It highlights locations where an attacker can cause a large amount of resources to be consumed.
The query previously existed as an experimental query.
### Minor Analysis Improvements
* Improved handling of custom DOM elements, potentially leading to more alerts for the XSS queries.
* Improved taint tracking through calls to the `Array.prototype.reduce` function.
## 0.0.14
## 0.0.13

View File

@@ -1,5 +0,0 @@
---
category: minorAnalysis
---
* Improved handling of custom DOM elements, potentially leading to more alerts for the XSS queries.
* Improved taint tracking through calls to the `Array.prototype.reduce` function.

View File

@@ -1,5 +0,0 @@
---
category: newQuery
---
* The `js/resource-exhaustion` query has been added. It highlights locations where an attacker can cause a large amount of resources to be consumed.
The query previously existed as an experimental query.

View File

@@ -0,0 +1,6 @@
---
category: minorAnalysis
---
* The call graph now deals more precisely with calls to accessors (getters and setters).
Previously, calls to static accessors were not resolved, and some method calls were
incorrectly seen as calls to an accessor. Both issues have been fixed.

View File

@@ -0,0 +1,11 @@
## 0.1.0
### New Queries
* The `js/resource-exhaustion` query has been added. It highlights locations where an attacker can cause a large amount of resources to be consumed.
The query previously existed as an experimental query.
### Minor Analysis Improvements
* Improved handling of custom DOM elements, potentially leading to more alerts for the XSS queries.
* Improved taint tracking through calls to the `Array.prototype.reduce` function.

View File

@@ -1,2 +1,2 @@
---
lastReleaseVersion: 0.0.14
lastReleaseVersion: 0.1.0

View File

@@ -1,5 +1,5 @@
name: codeql/javascript-queries
version: 0.1.0-dev
version: 0.1.1-dev
groups:
- javascript
- queries