Asger F
7c29ea9dda
JS: Update ExternalAPIUsedwithUntrustedData
2025-01-20 11:20:32 +01:00
Asger F
ecbd7983ba
JS: Update DifferentKindsComparisonBypassQuery.qll
2025-01-20 11:20:31 +01:00
Asger F
29da1fb6c8
JS: Update ConditionalBypassQuery.qll
2025-01-20 11:20:30 +01:00
Asger F
fd763a0883
JS: Auto-patch diff informed queries
2025-01-20 11:20:27 +01:00
Asger F
859783c08b
JS: Support [(ngModel)]
2025-01-17 10:26:57 +01:00
Asger F
97f5559e64
JS: Recognise form input from NgForm
2025-01-17 10:22:20 +01:00
Asger F
d4daa21318
JS: Add DOM event sources in Angular2 model
2025-01-17 10:20:22 +01:00
Asger F
6f46a34873
JS: Refactor domEventSource() into a Range class
2025-01-17 10:12:40 +01:00
Asger F
bd2febcf00
JS: Implementing new signature members in StepInputSig
2025-01-16 13:38:08 +01:00
Asger F
6cd9752289
Merge pull request #18467 from github/js/shared-dataflow-branch
...
JS: Migrate to shared data flow library (targeting main!) 🚀
2025-01-16 11:28:57 +01:00
Geoffrey White
f8659c0a4e
Sync identical files.
2025-01-10 10:26:13 +00:00
Asger F
9c4d378a1d
JS: Remove TODO comment
...
It is not subsumed by the other case, both cases are needed
2025-01-09 10:17:16 +01:00
Asger F
3f2882e1c6
JS: Remove an obsolete comment
...
The RHS of an assignment actually has a post-update node now
2025-01-09 09:59:23 +01:00
Asger F
b2d62a080b
JS: Move a test failure explanation into the test suite
...
We have an issue for fixing the underlying problem
2025-01-09 09:57:44 +01:00
Asger F
d9da9444fa
JS: Rephrase TODO
...
This is useful info, but not something that can be fixed locally in this query, so a TODO comment isn't helping
2025-01-09 09:45:39 +01:00
Asger F
3def8ecdee
JS: Remove unimportant TODO
2025-01-09 09:43:03 +01:00
Asger F
388dd871e1
JS: Remove TODO tracked by an issue.
...
This requires changes to the shared data flow library, not something we should track with a TODO in the JS codebase
2025-01-09 09:41:40 +01:00
Asger F
8b060c4294
JS: Remove TODO about evaluating legacy steps
...
There is an issue for tracking this. It's not a small fix.
2025-01-09 09:40:29 +01:00
Asger F
a8f93cac05
JS: Remove obsolete comment
...
The test case actually has the correct result now
2025-01-09 09:39:32 +01:00
Asger F
dd37c474d8
JS: Remove mention of results from comments
2025-01-09 09:39:30 +01:00
Asger F
fb54a3bde8
JS: Remove obsolete TODO comment
2025-01-09 09:39:29 +01:00
Asger F
b29ee2acde
JS: Remove references to localFieldStep
...
These are tracked in https://github.com/github/codeql-javascript-team/issues/456
2025-01-09 09:39:27 +01:00
Asger F
7766f97232
JS: Remove obsolete TODO
2025-01-09 09:39:26 +01:00
Asger F
8ac08db5c2
JS: Remove TODOs about WithArrayElement not being a taint step
...
This isn't going to become a taint step, the workaround is the permanent solution
2025-01-09 09:39:23 +01:00
Asger F
3cc1525985
JS: Remove obsolete TODOs
2025-01-09 09:19:30 +01:00
Asger F
1997e0a7b6
Merge pull request #18427 from asgerf/jss/change-note
...
JS: Add migration guide and change note
2025-01-09 09:13:16 +01:00
Asger F
b6b93dcead
Merge pull request #18392 from asgerf/jss/deprecate-modules
...
JS: Deprecate some .qll files
2025-01-08 11:10:28 +01:00
Asger F
062391334e
JS: Remove notes about changing API in the future
2025-01-08 09:15:13 +01:00
Asger F
df9b95575e
JS: Add deprecation qldoc to Configuration classes
2025-01-08 09:15:12 +01:00
Asger F
36f0d2f63e
JS: Move VarAccessBarrier outside the deprecated Configuration.qll file
2025-01-08 08:56:53 +01:00
Asger F
c47419e66d
JS: Remove an obsolete TODO comment (this has been fixed)
2025-01-08 08:54:41 +01:00
Asger F
f17cc5af15
JS: Move all hidden node definitions into DataFlowPrivate
2025-01-07 10:44:09 +01:00
Asger F
47cc3c09f5
JS: Deprecate an import
2025-01-07 10:43:40 +01:00
Asger F
7ccb476b1b
JS: Restrict AP length in ExceptionXss
2025-01-06 14:28:58 +01:00
Asger F
23d7420cec
JS: Hide default exceptional return node
2025-01-06 14:27:20 +01:00
Asger F
e2af19b946
JS: Restrict "get" step to Map objects
2025-01-06 13:17:32 +01:00
Asger F
4c9f406e34
JS: Exclude some sinks in UnvalidatedDynamicMethodCall
2025-01-06 10:32:11 +01:00
Asger F
25f5ecba25
JS: Deprecate the Configuration.qll file
2025-01-03 11:41:41 +01:00
Asger F
0339bd0f3e
JS: Deprecate forward/backward exploration modules
2025-01-03 11:41:39 +01:00
Asger F
dc2f39c399
JS: Add model of Map#groupBy
2024-12-19 15:25:43 +01:00
Asger F
3acd4814de
Merge branch 'main' into js/shared-dataflow-merge-main
2024-12-19 10:14:38 +01:00
Asger F
e5ae7e0231
JS: Fix bad join in isOptionallySanitizedEdgeInternal
...
This was previously called from isBarrier(node, state) but without restricting the state. The call was therefore moved to isBarrier(node), but this caused some optimisation changes resulting in a bad join.
2024-12-16 15:35:54 +01:00
Asger F
947b785d47
JS: Remove reference to deprecated step relation that's empty anyway
2024-12-16 15:35:53 +01:00
Asger F
0b2914ff13
JS: A few more deprecation updates
2024-12-16 15:35:50 +01:00
Asger F
079294e55f
JS: Mass rename to node1,state1,node2,state2 naming convention
2024-12-16 15:35:46 +01:00
Asger F
ac6da6c2b1
JS: Add some missing qldoc
2024-12-16 15:35:44 +01:00
Asger F
d993c888b1
JS: Deprecate the FlowLabel class
2024-12-16 15:35:43 +01:00
Asger F
c951a29e2a
JS: Migrate UnvalidatedDynamicMethodCall
2024-12-16 15:35:34 +01:00
Asger F
820f81fc10
JS: Migrate UnsafeDynamicMethodAccess
2024-12-13 11:32:25 +01:00
Asger F
a9e89ed8e3
JS: Migrate PrototypePollutingAssignment
2024-12-13 11:23:31 +01:00
