hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-25 16:55:19 +02:00
Code Issues Packages Projects Releases Wiki Activity

pre-migration tasks: address review comments

Browse Source
This commit is contained in:
mchammer01
2020-03-06 09:20:40 +00:00
parent 162a683075
commit fbe0735a5e
6 changed files with 15 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
docs/language/learn-ql/javascript/ast-class-reference.rst
View File

@@ -1,6 +1,8 @@
Abstract syntax tree classes for JavaScript and TypeScript
==========================================================
CodeQL has a large selection of classes for working with JavaScript and TypeScript statements and expressions.
Statement classes
-----------------

7
docs/language/learn-ql/javascript/dataflow.rst
View File

@@ -1,12 +1,11 @@
Analyzing data flow in JavaScript and TypeScript
================================================
This topic describes how data flow analysis is implemented in the CodeQL libraries for JavaScript/TypeScript and includes examples to help you write your own data flow queries.
Overview
--------
This topic describes how data flow analysis is implemented in the CodeQL libraries for JavaScript/TypeScript and includes examples to help you write your own data flow queries.
The following sections describe how to utilize the libraries for local data flow, global data flow, and taint tracking.
The various sections in this article describe how to utilize the libraries for local data flow, global data flow, and taint tracking.
As our running example, we will develop a query that identifies command-line arguments that are passed as a file path to the standard Node.js ``readFile`` function.
While this is not a problematic pattern as such, it is typical of the kind of reasoning that is frequently used in security queries.

5
docs/language/learn-ql/javascript/flow-labels.rst
View File

@@ -1,6 +1,11 @@
Using flow labels for precise data flow analysis
================================================
You can associate flow labels with each value tracked by the flow analysis to determine whether the flow contains potential vulnerabilities.
Overview
--------
You can use basic inter-procedural data-flow analysis and taint tracking as described in
:doc:`Analyzing data flow in JavaScript and TypeScript <dataflow>` to check whether there is a path in
the data-flow graph from some source node to a sink node that does not pass through any sanitizer

2
docs/language/learn-ql/javascript/introduce-libraries-js.rst
View File

@@ -1,7 +1,7 @@
CodeQL libraries for JavaScript
===============================
This article is an overview of the extensive libraries you can use to analyze databases generated from JavaScript codebases. Using the libraries makes it easier for you to write queries.
You can use the extensive libraries described in this article to analyze databases generated from JavaScript codebases. Using these libraries makes it easier for you to write queries.
Overview
--------

2
docs/language/learn-ql/javascript/introduce-libraries-ts.rst
View File

@@ -1,7 +1,7 @@
CodeQL libraries for TypeScript
===============================
This article is an overview of the libraries you can use to analyze databases generated from TypeScript codebases. Using the libraries makes it easier for you to write queries.
You can use libraries to analyze databases generated from TypeScript codebases. Using these libraries makes it easier for you to write queries.
Overview
--------

4
docs/language/learn-ql/javascript/type-tracking.rst
View File

@@ -1,9 +1,11 @@
Using type tracking for API modeling
====================================
This tutorial demonstrates how to build a simple model of the Firebase API
You can build a simple model of the Firebase API
using the CodeQL type-tracking library for JavaScript.
Overview
--------
The type-tracking library makes it possible to track values through properties and function calls,
usually to recognize method calls and properties accessed on a specific type of object.