10776 Commits

Author	SHA1	Message	Date
Asger F	27c7d5004a	JS: Do the same for additional taint steps	2023-10-13 12:42:40 +02:00
Asger F	1afe06e3a5	JS: Add "additional" and "legacy" steps ... See the comment at the top of AdditionalFlowSteps.qll	2023-10-13 12:42:40 +02:00
Asger F	c24a0e00f5	JS: Move SharedTaintStep to AdditionalTaintSteps.qll ... NOTE that this commit only moves around code. There are no changes.	2023-10-13 12:42:40 +02:00
Asger F	5bccc652c8	JS: Move SharedFlowStep to AdditionalFlowSteps.qll ... NOTE that this commit only moves around code. There are no changes.	2023-10-13 12:42:40 +02:00
Asger F	293899d648	JS: Add 'Awaited' token	2023-10-13 12:42:40 +02:00
Asger F	32070abb27	JS: Implicitly treat array steps as taint steps	2023-10-13 12:42:40 +02:00
Asger F	60101f5e6a	JS: Instantiate flow summary library	2023-10-13 12:42:40 +02:00
Asger F	8dc0800526	JS: Add the shared FlowSummaryImpl.qll file	2023-10-13 12:42:40 +02:00
Asger F	f316da78d2	JS: Add FunctionSelfReferenceNode	2023-10-13 12:42:40 +02:00
Asger F	760873c01c	JS: Basic instantiation of shared library	2023-10-13 12:42:40 +02:00
Asger F	3455463e71	JS: Add instantiation boilerplate ... Note that this commit won't compile on its own, but putting the boilerplate in its own commit	2023-10-13 12:42:40 +02:00
Asger F	c839822eb9	JS: Add PostUpdateNode	2023-10-13 12:42:40 +02:00
Asger F	01952f17bf	JS: Add some missing getContainer() predicates	2023-10-13 12:42:40 +02:00
Asger F	21300eef4c	JS:Add ConstructorThisArgumentNode	2023-10-13 12:42:40 +02:00
Asger F	b499c6075a	JS: Add Contents.qll	2023-10-13 12:42:40 +02:00
Asger F	79e7aae9f6	JS: Add TEarlyStageNode	2023-10-13 12:42:39 +02:00
Asger F	51ef0e5836	JS: Move TNode into a cached module	2023-10-13 12:42:39 +02:00
erik-krogh	9080e84fc9	add support for extracting .jsp files	2023-10-13 12:09:27 +02:00
Arthur Baars	a4d0ef6350	Add changenote	2023-10-12 13:04:00 +02:00
Arthur Baars	a9a21aa313	Rename DynamicImportExpr::getImport{Attributes => Options}	2023-10-12 13:00:39 +02:00
Arthur Baars	1f4fcf1f31	Rename test files	2023-10-12 13:00:39 +02:00
Arthur Baars	a1c1f7b910	Add tests for deprecated 'assert' syntax	2023-10-12 13:00:39 +02:00
Arthur Baars	f38d2e1b89	Replace 'assert' with 'with' in QL test files	2023-10-12 13:00:39 +02:00
Arthur Baars	c28004f2a6	Rename 'getImportAssertion()' to 'getImportAttributes()' in QL library	2023-10-12 13:00:39 +02:00
Arthur Baars	07172da1bc	Add tests for deprecated 'assert' syntax	2023-10-12 12:51:13 +02:00
Arthur Baars	f7b02c01dd	Rename getAssertion() to getAttributes() in the extractor	2023-10-12 12:51:13 +02:00
Arthur Baars	1d9ee5da3c	Rename 'assertions' to 'attributes' in JS extractor	2023-10-12 12:49:25 +02:00
Arthur Baars	b936e91fe9	Support JS import attributes (previously import assertions)	2023-10-12 11:43:42 +02:00
amammad	3899f2cdf3	upgrade execa scripts	2023-10-12 10:44:57 +02:00
Henry Mercer	1a370bfbbe	Merge pull request #14443 from github/post-release-prep/codeql-cli-2.15.0 ... Post-release preparation for codeql-cli-2.15.0	2023-10-11 17:39:04 +01:00
amammad	261cabde67	better comments	2023-10-11 17:44:12 +02:00
amammad	b24c6fd579	for demonstration	2023-10-11 17:34:33 +02:00
github-actions[bot]	ae6af17c74	Post-release preparation for codeql-cli-2.15.0	2023-10-11 14:19:20 +00:00
amammad	de2ee4d289	stash I can't especify the argument and command differences with new API	2023-10-11 14:36:56 +02:00
amammad	4cd3618dcd	Merge branch 'main' into amammad-js-CodeInjection_execa	2023-10-11 13:27:26 +02:00
Maiky	c0e6d7c049	Merge branch 'github:main' into maikypedia/javascript-cors	2023-10-11 12:20:42 +02:00
Erik Krogh Kristensen	85bb14f04f	Merge pull request #14405 from erik-krogh/tagCall ... JS: recognize tagged template literals as `DataFlow::CallNode`	2023-10-11 11:25:34 +02:00
Erik Krogh Kristensen	6377e92067	Update javascript/ql/lib/semmle/javascript/dataflow/DataFlow.qll ... Co-authored-by: Asger F <asgerf@github.com>	2023-10-11 09:52:48 +02:00
amammad	32859eb057	move to experimental	2023-10-10 22:46:44 +02:00
amammad	4198f61c16	fix a qldoc isuse	2023-10-10 22:21:43 +02:00
amammad	6f73e9c3ba	revert for in additional steps	2023-10-10 22:12:37 +02:00
amammad	9053ceb3b7	revert a unexpected test file	2023-10-10 21:37:59 +02:00
amammad	e13050b64e	revert a unexpected test file	2023-10-10 21:35:52 +02:00
erik-krogh	ccd06c78b9	delete an .expected file outside the test directories	2023-10-10 21:35:19 +02:00
amammad	242f7e1c53	update pg :)	2023-10-10 11:42:32 +02:00
amammad	18edef6ea4	add better-sqlite3 tests	2023-10-10 11:20:17 +02:00
amammad	bbeb7b39d7	add better-sqlite3	2023-10-10 11:17:04 +02:00
Remco Vermeulen	76e56cdac7	Adjust query severities	2023-10-09 12:52:09 -07:00
erik-krogh	a7ab9fd93b	add change-notes	2023-10-09 09:43:06 +02:00
erik-krogh	f48b47c656	JavaScript: add import that populate the shared abstract classes	2023-10-09 09:14:55 +02:00