github-actions[bot]
2f058ffb4d
Release preparation for version 2.16.4
2024-03-06 20:56:51 +00:00
Angela P Wen
ce31f8641a
Revert "Release preparation for version 2.16.4"
2024-03-06 12:07:33 -08:00
github-actions[bot]
661e68dab5
Release preparation for version 2.16.4
2024-03-05 18:13:58 +00:00
Angela P Wen
967963a653
Revert "Release preparation for version 2.16.4"
2024-03-05 08:53:33 -08:00
github-actions[bot]
a67218a027
Release preparation for version 2.16.4
2024-03-04 17:42:08 +00:00
github-actions[bot]
37f8fa3413
Post-release preparation for codeql-cli-2.16.3
2024-02-20 16:50:47 +00:00
github-actions[bot]
6d061fbc35
Release preparation for version 2.16.3
2024-02-20 14:26:23 +00:00
Asger F
75a95ffcd1
Merge pull request #15602 from asgerf/js/block-logical-and-flow
...
JS: Fix flow through &&
2024-02-14 12:29:40 +01:00
Asger F
9a08c27ad4
JS: Change note
2024-02-13 22:43:41 +01:00
Erik Krogh Kristensen
1520305ae1
Merge pull request #15523 from erik-krogh/exclude-tagged
...
JS: exclude tagged template literals from `js/superfluous-trailing-arguments`
2024-02-12 11:31:18 +01:00
github-actions[bot]
b5139078d0
Post-release preparation for codeql-cli-2.16.2
2024-02-06 19:22:35 +00:00
erik-krogh
94b7bda3dc
exclude tagged template literals from js/superfluous-trailing-arguments
2024-02-06 09:36:30 +01:00
github-actions[bot]
c1b35fbf47
Release preparation for version 2.16.2
2024-02-05 17:58:57 +00:00
Sid Shankar
b1d7a635f5
Renames diagnostic query files and tests
...
This commit renames the files relating to the diagnostic query that produces information on the number of files extracted. The files have been renamed from "SuccessfullExtractedFiles.*" to "ExtractedFiles.*". All related tests and test files have been renamed too.
The `@tags` and `@id` attributes of the queries have been left untouched, consistent with the `@tags` and `@id` for similar queries in other languages.
2024-01-29 20:19:20 +00:00
GitHub Security Lab
df10a7e7f0
Merge branch 'main' into amammad-js-bombs
2024-01-25 11:23:38 +01:00
github-actions[bot]
d0b74c00fe
Post-release preparation for codeql-cli-2.16.1
2024-01-23 23:02:29 +00:00
github-actions[bot]
7ef611e6dc
Release preparation for version 2.16.1
2024-01-23 19:45:16 +00:00
erik-krogh
8be7eadace
delete outdated deprecations
2024-01-22 09:11:35 +01:00
Sid Shankar
59098be8c4
Merge branch 'main' into change/adjust-extracted-files-diagnostics
2024-01-16 21:51:41 -05:00
Alexander Eyers-Taylor
934474681d
Merge pull request #15254 from github/post-release-prep/codeql-cli-2.16.0
...
Post-release preparation for codeql-cli-2.16.0
2024-01-16 14:50:40 +00:00
github-actions[bot]
57df8b92df
Post-release preparation for codeql-cli-2.16.0
2024-01-15 15:00:50 +00:00
Erik Krogh Kristensen
d782bd9b1f
Merge pull request #13624 from jorgectf/seclab/dotjs
...
JS: Add `dot.js` support
2024-01-11 14:57:19 +01:00
maikypedia
78e7793e01
Move to experimental
2024-01-09 01:11:58 +01:00
Sid Shankar
e30a0d1e83
JS: Report any extracted file as successfully extracted
2024-01-08 22:19:33 +00:00
github-actions[bot]
a6c8cc9551
Release preparation for version 2.16.0
2024-01-08 13:11:26 +00:00
Aditya Sharad
b1803d0ac2
Merge rc/3.12 into main
2023-12-21 16:40:51 -08:00
github-actions[bot]
8f72b0e4f7
Post-release preparation for codeql-cli-2.15.5
2023-12-19 10:32:57 +00:00
Jorge
f8cfd698fa
Merge branch 'main' into seclab/dotjs
2023-12-19 10:44:52 +01:00
github-actions[bot]
19af35b29a
Release preparation for version 2.15.5
2023-12-18 21:22:44 +00:00
Jorge
b81fbd7669
Add change note
2023-12-18 12:55:30 +01:00
Maiky
191766a47b
Use config.getCorsConfiguration().getOrigin())
...
Co-authored-by: Erik Krogh Kristensen <erik-krogh@github.com >
2023-12-18 12:38:39 +01:00
Jeroen Ketema
99e65df6ce
Merge remote-tracking branch 'upstream/rc/3.12' into mb12
2023-12-13 15:43:39 +01:00
amammad
18d0b28024
v1
2023-12-10 20:27:21 +01:00
erik-krogh
e8f9e366d5
remove redundant imports for JS
2023-12-08 16:56:54 +01:00
github-actions[bot]
92af5f5386
Post-release preparation for codeql-cli-2.15.4
2023-12-06 22:59:22 +00:00
github-actions[bot]
c04457e9e7
Release preparation for version 2.15.4
2023-12-06 21:11:50 +00:00
amammad
1547cd0546
added inline tests, move to experimental dir
2023-12-05 18:59:46 +01:00
Felicity Chapman
4cb2f53223
Remove unwanted period from query name
...
Our style guide states that names should not end in a period. I'm updating this now to allow us to automate a process for GitHub docs, see: https://github.com/github/codeql/blob/main/docs/query-metadata-style-guide.md#query-name-name
2023-11-30 14:31:17 +00:00
Rafael
0a74a3a765
Update javascript/ql/src/change-notes/2023-11-28-django-urls.md
...
Co-authored-by: Erik Krogh Kristensen <erik-krogh@github.com >
2023-11-29 08:23:02 +01:00
Rafael
0b0c9e3e48
Create 2023-11-28-django-urls.md
2023-11-28 22:29:53 +01:00
Rafael
286e3951bf
Detect Django template URLs
...
Django URLs are currently not detected, but flask and nunjucks URL are. (See https://github.com/github/codeql/issues/12267 )
2023-11-28 22:22:07 +01:00
amammad
48a9b107b9
add query to detect strapi CVe too
2023-11-24 10:47:17 +01:00
Maiky
4ef4c92e2c
Move Customizations and Query
2023-11-23 21:29:09 +01:00
erik-krogh
abb8d65483
Merge branch 'main' into amammad-js-SQLI
2023-11-23 21:17:58 +01:00
amammad
60b422a35c
fix second round of code review. improve documents, fix better-sqlite3 method
2023-11-23 14:01:38 +01:00
erik-krogh
dd1e71ace9
update the JS change notes to mention security severity instead of just severity
2023-11-23 10:28:22 +01:00
amammad
5cc4206e00
add a temporary Query file to demonstrate unsuccessful usage of two DataFlow configs
2023-11-22 08:30:59 +01:00
amammad
0328a2986d
move TypeORM library file and tests to experimental
...
add inline tests :)
Fix TypeORM fuzzy method according to Review
2023-11-21 19:59:06 +01:00
Max Schaefer
2c5ce3216e
Merge pull request #14846 from github/max-schaefer/js/path-injection
...
Update qhelp for js/path-injection.
2023-11-21 13:50:41 +00:00
Max Schaefer
dfffa1e237
Apply suggestions from code review
...
Co-authored-by: Sam Browning <106113886+sabrowning1@users.noreply.github.com >
2023-11-21 10:07:11 +00:00
