Asger F
|
621e2e71c8
|
JS: Don't try to parse "get=" as a method prop
|
2023-04-04 16:37:28 +02:00 |
|
Asger F
|
eb8046daef
|
JS: Add trap test showing parse error
|
2023-04-04 16:33:13 +02:00 |
|
jarlob
|
39ff3c72a2
|
Remove label sanitizer because it is prone to race conditions
|
2023-04-03 23:28:31 +02:00 |
|
jarlob
|
8ea418216c
|
Look for script injections in actions/github-script
|
2023-04-03 23:13:28 +02:00 |
|
jarlob
|
e941218e30
|
change notes added
|
2023-04-03 15:15:00 +02:00 |
|
jarlob
|
ba5747dff3
|
fix formatting
|
2023-04-03 15:10:27 +02:00 |
|
jarlob
|
c6eaf194a5
|
Remove empty.js as it is not needed anymore
|
2023-04-03 15:09:40 +02:00 |
|
jarlob
|
99d634c8a4
|
Add more sources, more unit tests, fixes to the GitHub Actions injection query
|
2023-04-03 15:02:02 +02:00 |
|
erik-krogh
|
0b4f239ab5
|
only set the file in the diagnostics message if the file is within the source root
|
2023-04-03 13:49:29 +01:00 |
|
erik-krogh
|
a7c2892af4
|
only set the file in the diagnostics message if the file is within the source root
|
2023-04-03 12:38:10 +02:00 |
|
Asger F
|
53de9ae580
|
Merge pull request #12729 from asgerf/js/crypto-modernize
JS: Modernize crypto libraries
|
2023-04-03 12:16:22 +02:00 |
|
Jeroen Ketema
|
17bd9c12d7
|
JS: Fix qhelp after file rename
|
2023-04-03 09:25:19 +02:00 |
|
Erik Krogh Kristensen
|
1e1a692ee6
|
Merge pull request #12686 from erik-krogh/backtick-parse-error
JS: add backticks around the concrete parse error
|
2023-03-31 14:56:38 +02:00 |
|
Asger F
|
64cf27ab87
|
JS: Modernize crypto libraries
|
2023-03-31 14:49:23 +02:00 |
|
Asger F
|
40530ae14d
|
JS: Simplfy with set literal
|
2023-03-31 12:04:56 +02:00 |
|
Asger F
|
4a06b81429
|
JS: Use API graphs in CryptoJS
|
2023-03-31 12:03:14 +02:00 |
|
Asger F
|
dec1e4dfd6
|
Merge pull request #12666 from smiddy007/improve-insufficient-pw-hash-query
JS: Improve insufficient pw hash query
|
2023-03-31 11:58:41 +02:00 |
|
github-actions[bot]
|
0a3218676c
|
Release preparation for version 2.12.6
|
2023-03-30 19:25:06 +00:00 |
|
Alex Ford
|
62fcea030a
|
Merge pull request #12718 from github/post-release-prep/codeql-cli-2.12.5
Post-release preparation for codeql-cli-2.12.5
|
2023-03-30 15:50:56 +01:00 |
|
Erik Krogh Kristensen
|
b382465078
|
Merge pull request #12679 from ctbellanti/improved-certificate-validation
JS: Improved coverage for disabled certificate validation
|
2023-03-30 16:24:33 +02:00 |
|
github-actions[bot]
|
e87ce62f95
|
Post-release preparation for codeql-cli-2.12.5
|
2023-03-30 13:48:58 +00:00 |
|
erik-krogh
|
47783326c2
|
add test for https.createServer in DisablingCertificateValidation.ql
|
2023-03-30 14:15:25 +02:00 |
|
Asger F
|
43174cfe3a
|
Merge pull request #12668 from asgerf/js/jquery-callback-sinks
JS: fix handling of jQuery sinks involving callback
|
2023-03-30 12:42:53 +02:00 |
|
Jeroen Ketema
|
0acca2ba76
|
Merge pull request #12687 from jketema/unit-2
Make imports of `codeql.util.Unit` private
|
2023-03-29 13:07:12 +02:00 |
|
Asger F
|
2ef1743bf4
|
Merge pull request #11615 from asgerf/js/extension-docs
JS: docs for customizing library models with data extensions
|
2023-03-29 10:20:53 +02:00 |
|
smiddy007
|
0eb61d39d3
|
formatting
|
2023-03-28 11:28:32 -04:00 |
|
smiddy007
|
fe3b0a56ca
|
Removed unnecessary field
|
2023-03-28 11:27:23 -04:00 |
|
smiddy007
|
8e9f2185c8
|
Merge branch 'main' into improve-insufficient-pw-hash-query
|
2023-03-28 11:15:10 -04:00 |
|
smiddy007
|
123eb1e57b
|
Update javascript/ql/lib/semmle/javascript/frameworks/CryptoLibraries.qll
Co-authored-by: Asger F <asgerf@github.com>
|
2023-03-28 11:14:28 -04:00 |
|
Erik Krogh Kristensen
|
13c0effbd2
|
change to minor change
|
2023-03-28 15:27:16 +02:00 |
|
erik-krogh
|
4b3a419509
|
just use quoteWithBackticks
|
2023-03-28 15:23:15 +02:00 |
|
Erik Krogh Kristensen
|
451f6f01bb
|
Merge pull request #12633 from erik-krogh/more-global-flow
JS: better callgraph support for global variables
|
2023-03-28 15:19:50 +02:00 |
|
Jeroen Ketema
|
3b8ad087eb
|
Make imports of codeql.util.Unit private
|
2023-03-28 14:14:13 +02:00 |
|
Asger F
|
61a7ee9387
|
JS: Use getABoundFunctionValue instead of type-tracking
|
2023-03-28 12:56:03 +02:00 |
|
erik-krogh
|
70dfa6e15c
|
use StringUtil.quoteWithBackticks instead of manually quoting with a single backtick
|
2023-03-28 12:34:44 +02:00 |
|
erik-krogh
|
e5e20ab42c
|
add backticks around the concrete parse error
|
2023-03-28 10:57:13 +02:00 |
|
Asger F
|
04b28c5118
|
Merge branch 'main' into js/extension-docs
|
2023-03-28 10:12:22 +02:00 |
|
smiddy007
|
2caab8748e
|
Merge branch 'improve-insufficient-pw-hash-query' of https://github.com/smiddy007/codeql into improve-insufficient-pw-hash-query
|
2023-03-27 15:20:24 -04:00 |
|
smiddy007
|
57ab5a06ae
|
autoformatted
|
2023-03-27 15:20:08 -04:00 |
|
Chris Bellanti
|
6bf94e800b
|
Added check to disabling certificate validation query
|
2023-03-27 12:16:20 -04:00 |
|
smiddy007
|
64b56ef107
|
Merge branch 'main' into improve-insufficient-pw-hash-query
|
2023-03-27 12:07:21 -04:00 |
|
smiddy007
|
3ef5f3070f
|
small change
|
2023-03-27 12:02:35 -04:00 |
|
Erik Krogh Kristensen
|
d3c3f2dc90
|
Merge pull request #12628 from erik-krogh/betterReDoS
ReDoS: better super-linear algorithm
|
2023-03-27 15:26:49 +02:00 |
|
Asger F
|
32d7a80221
|
JS: Change note
|
2023-03-27 14:56:57 +02:00 |
|
Asger F
|
92a681213d
|
JS: Step through jQuery callback return values
|
2023-03-27 11:17:27 +02:00 |
|
Asger F
|
bc2a772f3b
|
JS: Add test case showing false negative
|
2023-03-27 11:08:39 +02:00 |
|
Jeroen Ketema
|
977f15f8a4
|
Merge pull request #12649 from jketema/unit
Replace all definitions of `Unit` by `import codeql.util.Unit`
|
2023-03-27 08:49:50 +02:00 |
|
smiddy007
|
4980948613
|
changenote
|
2023-03-26 23:07:32 -04:00 |
|
smiddy007
|
cef6b95b15
|
Fixed Conflicts due to recent changes to file
|
2023-03-26 22:32:34 -04:00 |
|
smiddy007
|
ad527b8f69
|
Added new example files and renamed existing ones
|
2023-03-26 21:53:22 -04:00 |
|