10105 Commits

Author	SHA1	Message	Date
Asger F	e907d685f4	JS: Add crypto test with AES-ECB	2023-03-16 14:52:18 +01:00
github-actions[bot]	fe4d27e8cc	Release preparation for version 2.12.5	2023-03-16 12:58:50 +00:00
erik-krogh	f718d78a9a	avoid redundant sources	2023-03-16 13:34:01 +01:00
erik-krogh	54ec047433	ReDoS: put an artificial limitation on the analysis in polynomial-redos for large regular expressions	2023-03-16 12:20:53 +01:00
erik-krogh	a72436f6f1	recognize more express URL related sources	2023-03-15 10:14:31 +01:00
Arthur Baars	fbe9823a42	Merge branch 'main' into henrymercer/polish-diagnostics	2023-03-14 23:42:33 +01:00
Henry Mercer	1394abcf98	JS: Update diagnostics IDs for consistency with rules	2023-03-14 21:44:19 +00:00
Henry Mercer	1f63c5d5e4	JS: Update parse error diagnostic name for consistency	2023-03-14 21:43:32 +00:00
Asger F	feb7c49006	Merge pull request #12382 from asgerf/js/import-assertion ... JS: Support import assertions	2023-03-14 14:56:32 +01:00
Asger F	d953ad63fe	Merge pull request #12445 from asgerf/js/react-forward-ref ... JS: Handle forwardRef in React	2023-03-14 13:21:16 +01:00
Asger F	d74da30fc7	JS: Include trap test for trailing commas	2023-03-14 13:15:12 +01:00
Asger F	8ab3f39b5e	Merge pull request #12423 from asgerf/js/trusted-types-global-flow ... JS: Track trusted types policy callbacks	2023-03-14 13:09:50 +01:00
Erik Krogh Kristensen	060c37b6a2	Merge pull request #12345 from erik-krogh/delOldDeps ... delete old deprecations	2023-03-13 12:48:24 +01:00
Asger F	5461f94c6c	Merge pull request #12424 from asgerf/js/html-sanitizer-for-sql ... JS: Add html sanitizers as a taint step in a few queries	2023-03-13 11:36:19 +01:00
Asger F	41dd63adc7	Handle forwardRef in React	2023-03-13 11:30:18 +01:00
erik-krogh	6c1ebd999e	Merge branch 'main' into delOldDeps	2023-03-13 11:00:29 +01:00
Arthur Baars	7b8ac609f7	Merge pull request #12478 from aibaars/js-fix-npe ... JS: fix NPE	2023-03-10 18:49:46 +01:00
Arthur Baars	1a70297662	JS: fix NPE	2023-03-10 12:52:41 +01:00
Anders Schack-Mulligen	8d97fe9ed3	JavaScript: Autoformat	2023-03-10 09:41:20 +01:00
Henry Mercer	079451142e	Merge branch 'main' into codeql-ci/atm/release-0.4.9	2023-03-09 16:08:22 +00:00
github-actions[bot]	a82aaea514	JS: Bump version of ML-powered library and query packs to 0.4.10	2023-03-09 15:54:49 +00:00
github-actions[bot]	f0bb25bfce	JS: Bump patch version of ML-powered library and query packs	2023-03-09 15:46:31 +00:00
Asger F	6e744093e2	Merge pull request #12398 from github/post-release-prep/codeql-cli-2.12.4 ... Post-release preparation for codeql-cli-2.12.4	2023-03-09 15:38:21 +01:00
Arthur Baars	942cd7c275	Merge pull request #12113 from erik-krogh/diagnostics ... JS: Implement diagnostics	2023-03-09 12:57:06 +01:00
Arthur Baars	7ab0f88f78	JS: add link to docs to parse error diagnostic	2023-03-08 16:47:43 +01:00
Arthur Baars	e5be8ab1e5	JS: add integration test for diagnostic messages	2023-03-08 16:04:49 +01:00
Asger F	05b5aea477	JS: Changenote	2023-03-07 13:15:44 +01:00
Asger F	856b50735d	JS: Expand test case	2023-03-07 13:04:26 +01:00
Asger F	0affd898de	JS: Track trusted type policy callbacks	2023-03-07 10:22:26 +01:00
Asger F	4f0e17bf97	JS: Add step to a few other queries	2023-03-07 09:39:40 +01:00
Arthur Baars	51599b3cae	Address review comments	2023-03-06 18:40:29 +01:00
Asger F	d4b4d22378	JS: Step through HTML sanitizers in SQL injection query	2023-03-06 15:10:26 +01:00
github-actions[bot]	af61b45785	Post-release preparation for codeql-cli-2.12.4	2023-03-04 14:16:55 +00:00
Dave Bartolomeo	b342e93989	Move change note to appropriate pack	2023-03-03 14:43:00 -05:00
github-actions[bot]	462da63970	Release preparation for version 2.12.4	2023-03-03 14:11:51 +00:00
Asger F	37999eaea0	JS: Fix implicit this	2023-03-03 13:43:17 +01:00
Asger F	f4b13e0955	JS: Update printAst expected output	2023-03-03 13:42:42 +01:00
Erik Krogh Kristensen	d94e51aaf6	Merge pull request #12377 from erik-krogh/jHtml ... JS: add the html argument to the jQuery functions as an XSS sink	2023-03-03 13:19:38 +01:00
Asger F	7f96fe725b	JS: Change note	2023-03-03 12:21:20 +01:00
Asger F	1264029282	JS: Bump extractor version string	2023-03-03 12:21:20 +01:00
Asger F	7a55b003d2	JS: Fix location of assert clause	2023-03-03 12:21:20 +01:00
Asger F	38194c6ae7	JS: Extract import assertions to DB	2023-03-03 12:21:20 +01:00
Asger F	f454151e7a	JS: Convert TypeScript import assertions	2023-03-03 12:21:20 +01:00
Asger F	3af085afcb	JS: Drive-by allow trailing commas in dynamic imports	2023-03-03 12:21:20 +01:00
Asger F	8d9060f1f9	JS: Store in the Java AST	2023-03-03 12:21:03 +01:00
Asger F	c715de2a10	JS: parse import assertions without storing in AST	2023-03-03 12:21:03 +01:00
Asger F	5fdc293d82	JS: Add trap test for import assertions	2023-03-03 12:21:03 +01:00
erik-krogh	a6c9af4182	add the html argument to the jQuery functions as an XSS sink	2023-03-03 11:09:53 +01:00
erik-krogh	94870b838f	add failing test	2023-03-03 11:08:33 +01:00
erik-krogh	a928f4c9ef	add change-notes	2023-03-03 09:23:10 +01:00