Napalys Klicius
|
e9dff4d68f
|
Merge pull request #17953 from Napalys/napalys/ts57
JS: upgrade TypeScript to 5.7
|
2024-11-25 14:16:40 +01:00 |
|
Napalys Klicius
|
d6372aebc7
|
Update javascript/ql/src/Security/CWE-178/CaseSensitiveMiddlewarePath.ql
Co-authored-by: Erik Krogh Kristensen <erik-krogh@github.com>
|
2024-11-25 12:12:12 +01:00 |
|
Napalys
|
e38b63ebcd
|
JS: previously js/case-sensitive-middleware-path was not taking into consideration unknown flags
|
2024-11-25 11:56:06 +01:00 |
|
Napalys
|
178da21fb8
|
JS: Added test case for CWE-178 RegExp with unknown flags
|
2024-11-25 11:53:00 +01:00 |
|
Napalys
|
f8d623e905
|
JS: Bumped TS version to 5.7.2
|
2024-11-25 09:08:51 +01:00 |
|
Napalys Klicius
|
61e00861e5
|
Merge pull request #18008 from Napalys/napalys/ES2024-group-functions
JS: Added support for [Object, Map].groupBy ES2024 feature
|
2024-11-21 19:03:57 +01:00 |
|
Alexander Eyers-Taylor
|
c0474c4e45
|
Revert "Revert "Post-release preparation for codeql-cli-2.19.4""
|
2024-11-21 15:37:52 +00:00 |
|
Alexander Eyers-Taylor
|
4effe9e364
|
Revert "Post-release preparation for codeql-cli-2.19.4"
|
2024-11-21 14:43:15 +00:00 |
|
Napalys Klicius
|
7ee0a7b398
|
Update javascript/ql/lib/semmle/javascript/Collections.qll
Co-authored-by: Erik Krogh Kristensen <erik-krogh@github.com>
|
2024-11-21 14:02:42 +01:00 |
|
Napalys Klicius
|
edb9b47111
|
Merge pull request #18047 from Napalys/napalys/ES2023-string-protytpe-toWellFormed
JS: Added taint-step String.prototype.toWellFormed ES2023 feature
|
2024-11-21 14:01:21 +01:00 |
|
Napalys Klicius
|
82ca369dce
|
Merge pull request #18005 from Napalys/napalys/ES2022-find-functions
JS: Added support for Array.prototype.[findLastIndex, findLast] ES2022 feature
|
2024-11-21 08:01:19 +01:00 |
|
Napalys
|
43eda58f83
|
Added change notes
|
2024-11-20 17:44:36 +01:00 |
|
Napalys
|
afc2d3e6d2
|
JS: Add: String.protytpe.toWellFormed to StringManipulationTaintStep
|
2024-11-20 17:42:25 +01:00 |
|
Napalys
|
09f73d8d6f
|
JS: Add: test cases for toWellFormed
|
2024-11-20 17:36:43 +01:00 |
|
Napalys
|
64c45debdb
|
JS: removed unnecessary getALocalSource from ArrayCallBackDataFlowStep
|
2024-11-20 14:57:00 +01:00 |
|
Napalys
|
9dbf7d1828
|
JS: removed unnecessary getALocalSource from ArrayCallBackDataTaintStep
|
2024-11-20 14:54:06 +01:00 |
|
Napalys
|
cdf43f7118
|
Added change notes
|
2024-11-20 14:06:44 +01:00 |
|
Napalys Klicius
|
a957e00fe5
|
Merge branch 'main' into napalys/ES2024-group-functions
|
2024-11-20 14:03:31 +01:00 |
|
Napalys
|
58faa2d71e
|
JS: Add: dataflow step for static method of groupBy from Map.
|
2024-11-20 13:34:11 +01:00 |
|
Napalys
|
6344f83e4b
|
JS: Add: tests for taint tracking in groupBy functions
|
2024-11-20 13:22:53 +01:00 |
|
github-actions[bot]
|
3909df75dc
|
Post-release preparation for codeql-cli-2.19.4
|
2024-11-19 17:54:03 +00:00 |
|
Alex Eyers-Taylor
|
ef3fc5e29f
|
Fix broken changelog.
|
2024-11-19 16:34:30 +00:00 |
|
github-actions[bot]
|
9783a11565
|
Release preparation for version 2.19.4
|
2024-11-19 16:21:37 +00:00 |
|
Napalys
|
28ead4011a
|
JS: Add: taint step to handle propagation of data flow from the array to callback
|
2024-11-19 14:15:15 +01:00 |
|
Napalys
|
f1e95a8a1d
|
JS: Add: taint step test cases for findLastIndex, findLast, find
|
2024-11-19 14:09:58 +01:00 |
|
Napalys
|
c03d69af1e
|
JS: Add: dataflow step for find, findLast, findLastIndex callback functions
|
2024-11-19 09:42:11 +01:00 |
|
Napalys
|
b64b837db3
|
JS: Add: test cases for find, findLast, findLastIndex with callbacks
|
2024-11-19 09:35:43 +01:00 |
|
Napalys
|
1b0f8aa657
|
JS: removed unnecessary findlast module import
|
2024-11-19 09:30:05 +01:00 |
|
Napalys
|
72a69cfa17
|
Added change notes
|
2024-11-19 08:24:36 +01:00 |
|
Napalys
|
213ce225e0
|
JS: Add: taint step for Object.groupBy function, fixed test cases from 8ae05d8be4
|
2024-11-18 12:58:07 +01:00 |
|
Napalys
|
8ae05d8be4
|
JS: Add: test case for Object.groupBy
|
2024-11-18 12:55:17 +01:00 |
|
Napalys
|
c02ad65fdc
|
JS: Add: taint step for Map.groupBy function
|
2024-11-18 12:50:06 +01:00 |
|
Napalys
|
3786ad4277
|
JS: Add: test case for Map.groupBy
|
2024-11-18 12:44:49 +01:00 |
|
Napalys
|
1304ab7065
|
Added change notes
|
2024-11-18 08:05:51 +01:00 |
|
Napalys
|
a28fc8e772
|
JS: Add: Use of returnless function support for findLast and findLastIndex
|
2024-11-15 14:44:25 +01:00 |
|
Napalys
|
7250099f6c
|
JS: Add: Test cases use of returnless function in findLast and findLastIndex
|
2024-11-15 14:42:11 +01:00 |
|
Napalys
|
fcb65534a8
|
JS: Add: Array.protype.findLast as taint step
|
2024-11-15 14:10:01 +01:00 |
|
Napalys
|
ea90698fc1
|
JS: Add: Test case taint step for findLast
|
2024-11-15 13:35:28 +01:00 |
|
Napalys
|
bed1f25b3f
|
JS: Fix: Now Array.prototype.with is properly flagged as taint step
|
2024-11-15 10:35:34 +01:00 |
|
Napalys
|
f04fd5cdcc
|
JS: Add: Test case for Array.protype.with taint step
|
2024-11-15 10:27:44 +01:00 |
|
Napalys
|
631a3770ec
|
JS: Add: change notes
|
2024-11-15 09:16:21 +01:00 |
|
Napalys Klicius
|
6fa3ff39a0
|
Merge branch 'main' into napalys/toSpliced-support
|
2024-11-14 16:56:32 +01:00 |
|
Napalys Klicius
|
c8c15a0899
|
Merge pull request #17910 from Napalys/napalys/matchAll-support
JS: Support for matchAll
|
2024-11-14 15:36:20 +01:00 |
|
Napalys
|
b333f523df
|
JS: Fix: now one can determine regex via Array.prototype.toSpliced function call.
|
2024-11-14 15:35:03 +01:00 |
|
Napalys
|
2b0def1ed3
|
JS: Add: Test case for checking if regex via using toSpliced
|
2024-11-14 15:31:38 +01:00 |
|
Napalys
|
52330e834c
|
JS: Add: Test case for checking if regex via using splice
|
2024-11-14 15:29:05 +01:00 |
|
Napalys
|
84234d59b9
|
JS: Fix: Ensure toSpliced with spread operator is flagged
|
2024-11-13 17:21:34 +01:00 |
|
Napalys
|
8512cb44ff
|
JS: Add: Test cases for toSpliced with spread operator
|
2024-11-13 17:18:09 +01:00 |
|
Napalys
|
cf90430ec0
|
JS: Add: Missing test case for splice spread operator
|
2024-11-13 17:07:17 +01:00 |
|
Napalys
|
2df3d1b251
|
JS: Fix: Ensure toSpliced is flagged by taint tracking in test suite (ed44358143)
|
2024-11-13 15:58:20 +01:00 |
|