CodeQL CI
|
c02c96369d
|
Merge pull request #6139 from erik-krogh/colors
Approved by esbena
|
2021-06-23 14:02:17 -07:00 |
|
Erik Krogh Kristensen
|
dbc8b9cf6a
|
autoformat
|
2021-06-23 14:21:15 +02:00 |
|
CodeQL CI
|
a86f50e091
|
Merge pull request #6135 from erik-krogh/chokidar
Approved by esbena
|
2021-06-23 05:16:06 -07:00 |
|
CodeQL CI
|
b66f4cb965
|
Merge pull request #6134 from erik-krogh/templates
Approved by asgerf, esbena
|
2021-06-23 05:09:23 -07:00 |
|
Erik Krogh Kristensen
|
6cf275bb36
|
update change-note
Co-authored-by: Esben Sparre Andreasen <esbena@github.com>
|
2021-06-23 10:42:26 +02:00 |
|
Erik Krogh Kristensen
|
700dfcc3a7
|
add comment about why colors/safe is not safe
Co-authored-by: Esben Sparre Andreasen <esbena@github.com>
|
2021-06-23 10:39:56 +02:00 |
|
Erik Krogh Kristensen
|
8b5c285ac8
|
add support for the chokidar library
|
2021-06-23 09:59:34 +02:00 |
|
Erik Krogh Kristensen
|
fa02651542
|
add taint step through the strip-ansi library
|
2021-06-23 09:13:03 +02:00 |
|
Erik Krogh Kristensen
|
fe76341820
|
add taint step through the chalk library
|
2021-06-23 09:12:48 +02:00 |
|
Erik Krogh Kristensen
|
053d9b5564
|
add taint step through the kleur library
|
2021-06-23 09:12:25 +02:00 |
|
CodeQL CI
|
37b66f9045
|
Merge pull request #6117 from asgerf/js/sharpen-match-calls
Approved by esbena
|
2021-06-22 22:52:37 -07:00 |
|
Erik Krogh Kristensen
|
6e2b92468f
|
add taint step through the slice-ansi library
|
2021-06-22 23:14:14 +02:00 |
|
Erik Krogh Kristensen
|
35c513d38a
|
add taint step through the cli-color library
|
2021-06-22 23:10:40 +02:00 |
|
Erik Krogh Kristensen
|
ec9c885908
|
add taint step through the cli-highlight library
|
2021-06-22 23:06:50 +02:00 |
|
Erik Krogh Kristensen
|
d114cdc6e5
|
add taint step through the colorette library
|
2021-06-22 23:02:01 +02:00 |
|
Erik Krogh Kristensen
|
e4427bb34a
|
add taint step through the wrap-ansi library
|
2021-06-22 22:59:03 +02:00 |
|
Erik Krogh Kristensen
|
626a653401
|
add taint step through the colors library
|
2021-06-22 22:55:15 +02:00 |
|
Erik Krogh Kristensen
|
a21ebbbe8f
|
add taint step through the ansi-colors library
|
2021-06-22 22:47:58 +02:00 |
|
CodeQL CI
|
d719a1e627
|
Merge pull request #6114 from erik-krogh/promisify
Approved by esbena
|
2021-06-22 12:19:38 -07:00 |
|
Erik Krogh Kristensen
|
2ba2642c7a
|
add more template sinks for the js/code-injection query
|
2021-06-22 20:24:42 +02:00 |
|
CodeQL CI
|
bde1bb4030
|
Merge pull request #6126 from erik-krogh/dates
Approved by esbena
|
2021-06-22 10:35:51 -07:00 |
|
Erik Krogh Kristensen
|
062502fecc
|
add back support for util-promisifyall
|
2021-06-22 15:34:51 +02:00 |
|
Asger Feldthaus
|
16e3681fd3
|
JS: Update RegExpInjection test case
|
2021-06-22 12:00:04 +02:00 |
|
Erik Krogh Kristensen
|
4360e5dcbc
|
add model of the thenify library
|
2021-06-22 11:55:58 +02:00 |
|
Erik Krogh Kristensen
|
61cc415a32
|
add model of the util.promisify library
|
2021-06-22 11:55:58 +02:00 |
|
Erik Krogh Kristensen
|
2f3ea4412f
|
add model of the pify library
|
2021-06-22 11:55:54 +02:00 |
|
Erik Krogh Kristensen
|
c736606695
|
add support for moment/dayjs/luxon instances returned by @date-io adapters
|
2021-06-22 10:42:24 +02:00 |
|
Erik Krogh Kristensen
|
f2ca2134d1
|
refactor promisify models into a module
|
2021-06-22 10:40:22 +02:00 |
|
Erik Krogh Kristensen
|
a4303bc81d
|
add CWE-1333 to the JS ReDoS queries
|
2021-06-22 10:24:56 +02:00 |
|
Erik Krogh Kristensen
|
227f61b954
|
add model for the luxon library
|
2021-06-21 23:29:12 +02:00 |
|
Erik Krogh Kristensen
|
cdf3cdcf71
|
add model for the formatByString and formatByNumber functions in @date-io
|
2021-06-21 23:29:01 +02:00 |
|
Erik Krogh Kristensen
|
2a4570eaaa
|
add model for the dayjs library
|
2021-06-21 23:28:45 +02:00 |
|
Asger Feldthaus
|
0754ed2b5c
|
JS: Change note
|
2021-06-21 11:46:44 +02:00 |
|
CodeQL CI
|
081fd28090
|
Merge pull request #6102 from RasmusWL/js-qhelp-fixup
Approved by erik-krogh
|
2021-06-18 04:52:48 -07:00 |
|
Rasmus Wriedt Larsen
|
968a0921d4
|
JS: Fix secure example inclusion in InsecureDownload.qhelp
|
2021-06-18 12:12:06 +02:00 |
|
CodeQL CI
|
1ffd9c9ba7
|
Merge pull request #6086 from asgerf/js/knex
Approved by esbena
|
2021-06-18 01:58:21 -07:00 |
|
Calum Grant
|
32f6a465b0
|
Merge pull request #6080 from github/calumgrant/security-severities
Update security-severity scores
|
2021-06-18 09:40:40 +01:00 |
|
CodeQL CI
|
9b84a8e146
|
Merge pull request #6048 from erik-krogh/graphql
Approved by esbena
|
2021-06-16 06:35:42 -07:00 |
|
Asger Feldthaus
|
5838e54a46
|
JS: Sharpen recognition of string 'match' calls
|
2021-06-16 09:27:02 +02:00 |
|
Asger Feldthaus
|
af9cc07066
|
JS: Change note
|
2021-06-15 17:19:39 +02:00 |
|
Asger Feldthaus
|
9f052a2ecd
|
JS: Add Knex model
|
2021-06-15 17:19:39 +02:00 |
|
CodeQL CI
|
847faf536d
|
Merge pull request #6070 from asgerf/js/script-with-tsx-lang
Approved by erik-krogh
|
2021-06-15 08:17:53 -07:00 |
|
Calum Grant
|
771e686946
|
Update security-severity scores
|
2021-06-15 13:25:17 +01:00 |
|
Erik Krogh Kristensen
|
60920c1ecc
|
require that the URL refers to graphql in some way
|
2021-06-15 09:53:32 +02:00 |
|
Erik Krogh Kristensen
|
416c986cbc
|
add support for graphql in @actions/github
|
2021-06-15 09:43:11 +02:00 |
|
Asger Feldthaus
|
53bef94b75
|
JS: Extractor version bump
|
2021-06-15 09:34:54 +02:00 |
|
Asger Feldthaus
|
c58942092f
|
JS: Add change note
|
2021-06-14 13:43:11 +02:00 |
|
Asger Feldthaus
|
bc375196d1
|
JS: Extract script tags with lang=tsx
|
2021-06-14 13:40:53 +02:00 |
|
Calum Grant
|
a594afb828
|
Add security-severity metadata
|
2021-06-10 20:11:08 +01:00 |
|
Erik Krogh Kristensen
|
50d574d20d
|
add graphql injection to the sql-injection query
|
2021-06-10 21:01:54 +02:00 |
|