Maiky
|
f623db461a
|
Change qldoc
|
2023-11-27 19:51:13 +02:00 |
|
Maiky
|
bb6ef72e67
|
getArgument returns Cors::Cors
|
2023-11-27 19:36:49 +02:00 |
|
Maiky
|
aa24ce5532
|
Apply suggestions from code review
Co-authored-by: Erik Krogh Kristensen <erik-krogh@github.com>
|
2023-11-27 17:48:21 +02:00 |
|
amammad
|
48a9b107b9
|
add query to detect strapi CVe too
|
2023-11-24 10:47:17 +01:00 |
|
Maiky
|
4ef4c92e2c
|
Move Customizations and Query
|
2023-11-23 21:29:09 +01:00 |
|
erik-krogh
|
abb8d65483
|
Merge branch 'main' into amammad-js-SQLI
|
2023-11-23 21:17:58 +01:00 |
|
erik-krogh
|
43c76468c9
|
add change-note
|
2023-11-23 21:17:33 +01:00 |
|
amammad
|
60b422a35c
|
fix second round of code review. improve documents, fix better-sqlite3 method
|
2023-11-23 14:01:38 +01:00 |
|
Maiky
|
abd53e98a9
|
Fix minor issues
|
2023-11-23 13:17:54 +01:00 |
|
Maiky
|
413c11171e
|
Move to /experimental
|
2023-11-23 11:00:47 +01:00 |
|
erik-krogh
|
dd1e71ace9
|
update the JS change notes to mention security severity instead of just severity
|
2023-11-23 10:28:22 +01:00 |
|
Maiky
|
d661f7f482
|
Add Flow Labels
|
2023-11-22 19:50:16 +01:00 |
|
amammad
|
5cc4206e00
|
add a temporary Query file to demonstrate unsuccessful usage of two DataFlow configs
|
2023-11-22 08:30:59 +01:00 |
|
amammad
|
eb552b7c93
|
add failingPositiveTests to inlinetests
|
2023-11-22 08:00:38 +01:00 |
|
amammad
|
0328a2986d
|
move TypeORM library file and tests to experimental
add inline tests :)
Fix TypeORM fuzzy method according to Review
|
2023-11-21 19:59:06 +01:00 |
|
amammad
|
999ec7053e
|
fix Query class docstring
|
2023-11-21 18:56:05 +01:00 |
|
Max Schaefer
|
2c5ce3216e
|
Merge pull request #14846 from github/max-schaefer/js/path-injection
Update qhelp for js/path-injection.
|
2023-11-21 13:50:41 +00:00 |
|
Max Schaefer
|
dfffa1e237
|
Apply suggestions from code review
Co-authored-by: Sam Browning <106113886+sabrowning1@users.noreply.github.com>
|
2023-11-21 10:07:11 +00:00 |
|
erik-krogh
|
5611a3e417
|
use exact version
|
2023-11-20 20:48:51 +01:00 |
|
erik-krogh
|
10b3efa667
|
update to the stable version of TypeScript 5.3
|
2023-11-20 20:32:24 +01:00 |
|
erik-krogh
|
dde9a7cd7e
|
Merge branch 'main' into ts53-ts
|
2023-11-20 20:31:00 +01:00 |
|
Max Schaefer
|
d147faba4e
|
Update qhelp for js/path-injection.
|
2023-11-20 11:58:00 +00:00 |
|
github-actions[bot]
|
bad499e360
|
Post-release preparation for codeql-cli-2.15.3
|
2023-11-17 14:35:41 +00:00 |
|
github-actions[bot]
|
6ec9b95072
|
Release preparation for version 2.15.3
|
2023-11-16 13:07:16 +00:00 |
|
Henry Mercer
|
de83929a60
|
Remove LoC metrics from the analysis summary
|
2023-11-16 11:36:44 +00:00 |
|
Remco Vermeulen
|
52540b42fc
|
Merge branch 'main' into rvermeulen/javascript-adjust-security-severity
|
2023-11-14 11:21:38 -08:00 |
|
Remco Vermeulen
|
6bd7047e41
|
Restore XssThroughDom.ql's severity
|
2023-11-14 11:20:51 -08:00 |
|
Cornelius Riemenschneider
|
97fd2033f1
|
Take our node, not the one that comes first on the PATH.
|
2023-11-09 22:00:00 +01:00 |
|
Cornelius Riemenschneider
|
b4ec13235d
|
Address review.
|
2023-11-09 09:40:29 +01:00 |
|
Cornelius Riemenschneider
|
6b37d2009b
|
Merge branch 'main' into criemen/js-bazel
|
2023-11-08 16:11:47 +01:00 |
|
Rasmus Wriedt Larsen
|
43d9d2ceb7
|
Merge pull request #14603 from github/max-schaefer/broken-crypto-algorithm-link
JavaScript/Python/Ruby: Improve alert message for `*/weak-cryptographic-algorithm`.
|
2023-11-08 14:29:24 +01:00 |
|
Erik Krogh Kristensen
|
f643fd7d74
|
Merge pull request #14716 from erik-krogh/invalid-main
JS: catch when the main: path is invalid on Windows
|
2023-11-08 08:33:58 +01:00 |
|
Geoffrey White
|
b63294764b
|
Merge pull request #14705 from geoffw0/qhelplink
Fix a dead ReDoS link in docs
|
2023-11-07 17:40:19 +00:00 |
|
erik-krogh
|
ae577d1e44
|
catch when the main: path is invalid on Windows
|
2023-11-07 17:42:21 +01:00 |
|
Geoffrey White
|
e8a466a02c
|
Update dead link.
|
2023-11-07 09:26:07 +00:00 |
|
amammad
|
0652afced3
|
update tests, updated qldoc and examples, upgrade all libraries to path-problem, update jsonwebtoken source and sinks
|
2023-11-07 08:25:25 +01:00 |
|
Jorge
|
b08d57a85f
|
Add {{! to TEMPLATE_EXPR_OPENING_TAG
|
2023-11-06 20:40:00 +00:00 |
|
Cornelius Riemenschneider
|
be02512dfe
|
Add a build system for the junit tests.
This is a bit more complicated than our usual setup, as we both need to
unzip the typescript parser wrapper, and make node accessible on the path.
|
2023-11-06 17:58:28 +01:00 |
|
amammad
|
36f0a78450
|
fix typeorm test.ts according to Review
|
2023-11-06 16:23:35 +01:00 |
|
amammad
|
d7f1e19d40
|
fix sqlite.js test according to Review
|
2023-11-06 15:22:36 +01:00 |
|
amammad
|
cc5dd3180a
|
fix better-sqlite3 tests according to Review
|
2023-11-06 15:18:55 +01:00 |
|
amammad
|
c858e4974d
|
fix Sqlite and BetterSqlite3 issues according to Review
|
2023-11-06 14:57:40 +01:00 |
|
Cornelius Riemenschneider
|
52fcc5f435
|
Export test data directories.
|
2023-11-06 13:47:56 +01:00 |
|
Cornelius Riemenschneider
|
63854e36b4
|
Use the TestPaths helper to lookup files.
|
2023-11-06 13:47:56 +01:00 |
|
Cornelius Riemenschneider
|
a773532d07
|
Refactor JS test suite to be more in line with other Java projects.
Therefore, we move the test suite out of the `src` directory.
|
2023-11-06 13:47:56 +01:00 |
|
Cornelius Riemenschneider
|
6c7ea86a12
|
Introduce a bazel-based build for the entire JS pack.
|
2023-11-06 13:47:56 +01:00 |
|
Cornelius Riemenschneider
|
465eb00228
|
More fine-grained dependency on internal extractors.
|
2023-11-06 13:44:28 +01:00 |
|
Arthur Baars
|
01e7d57dba
|
Add changenote
|
2023-11-06 13:38:33 +01:00 |
|
Arthur Baars
|
7f4bcdfa64
|
Rename test files
|
2023-11-06 13:38:33 +01:00 |
|
Arthur Baars
|
eecf32db4d
|
Add tests for deprecated 'assert' syntax
|
2023-11-06 13:38:33 +01:00 |
|