Asger F
a1c3dca5de
JS: Convert OK-style to $-style expectations in one test
2025-02-11 12:58:44 +01:00
Asger F
45242977a4
JS: Model query-string parsers that strip off ? or #
2025-02-11 10:41:23 +01:00
Asger F
b123a3c57a
JS: Add test
2025-02-11 10:40:04 +01:00
Anders Schack-Mulligen
0b5270979d
SSA: Remove the need for ExitBasicBlock in SSA.
2025-02-10 14:36:18 +01:00
Asger F
7f4facc864
Merge pull request #18661 from asgerf/js/hoist-in-block
...
JS: Hoist function declarations to the top of a block statement
2025-02-06 12:38:51 +01:00
Asger F
6ae06aed9e
Update javascript/extractor/src/com/semmle/js/extractor/CFGExtractor.java
...
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com >
2025-02-06 10:03:28 +01:00
Asger F
6207e39b5f
JS: Change note
2025-02-06 09:58:24 +01:00
Remco Vermeulen
7619f1dac9
Merge pull request #18679 from rvermeulen/rvermeulen/ccr-suites
...
Add CCR suites
2025-02-05 09:35:48 -08:00
Anders Schack-Mulligen
bcec7ee234
Merge pull request #18633 from aschackmull/dataflow/refactor-flowstate
...
Dataflow: Refactor FlowState to be paired with Node
2025-02-05 09:43:25 +01:00
Remco Vermeulen
9894e9ef9f
Add CCR suites
2025-02-05 01:58:34 +00:00
Arthur Baars
2a32e8865d
Merge pull request #18668 from github/post-release-prep/codeql-cli-2.20.4
...
Post-release preparation for codeql-cli-2.20.4
2025-02-04 14:22:53 +01:00
Asger F
5613661a48
JS: Update another TRAP file
2025-02-04 14:02:51 +01:00
Asger F
f0afd6aa5f
Merge branch 'main' into js/hoist-in-block
2025-02-04 14:01:57 +01:00
Asger F
80824cfdc7
JS: Benign test output changes
2025-02-04 12:12:41 +01:00
Asger F
294fd0a7a7
Merge pull request #18653 from asgerf/js/source-on-same-line
...
Test: Don't expect 'Source' tag when source and alert are on the same same
2025-02-04 11:01:46 +01:00
Asger F
d22268e119
JS: Update TRAP again
...
The extra successor edge was due to visiting hoisted function declaration IDs multiple times,
which has now been fixed.
2025-02-04 10:47:08 +01:00
Anders Schack-Mulligen
db1ed67e52
JS: Simplify config in PrototypePollutingFunction.ql.
2025-02-04 10:47:01 +01:00
Asger F
5e109ff457
JS: Update test output
2025-02-04 10:45:37 +01:00
Asger F
1e5885ea1e
JS: Remove hoisting code from functions
...
'buildFunctionBody' no longer needs to handle hoisting, because hoisting now happens when visiting the block statement that is the body of the function.
Note that curly-brace functions contain a block statement as their body, not a list of statements.
2025-02-04 10:41:47 +01:00
github-actions[bot]
f1b05a79a4
Post-release preparation for codeql-cli-2.20.4
2025-02-04 09:25:09 +00:00
Asger F
09270f4e20
JS: Change note
2025-02-04 09:36:46 +01:00
github-actions[bot]
573e53e454
Release preparation for version 2.20.4
2025-02-03 15:19:35 +00:00
Asger F
427e329363
JS: Bump extractor version string
2025-02-03 15:21:41 +01:00
Asger F
7eebe468ee
JS: Update TRAP output
...
This seems to have reordered the TRAP lines but without semantic change.
2025-02-03 15:21:09 +01:00
Asger F
be082578d4
JS: Hoist function decls in a block to the top of the block
2025-02-03 15:21:08 +01:00
Asger F
29879297ee
JS: Add test showing missed call to later-defined function in block
2025-02-03 14:56:11 +01:00
Asger F
2d36a5d478
JS: Use JSX syntax in first attempt when extension is .jsx
2025-02-03 13:17:15 +01:00
Asger F
78a7f2670a
JS: Update a JS test case
2025-02-03 11:31:03 +01:00
Asger F
a0af4c9a84
Merge pull request #18622 from asgerf/js/typescript-tsconfig-names
...
JS: Treat more file patterns as tsconfig-like files
2025-01-31 09:42:50 +01:00
Asger F
2e65fe9597
JS: Change note
2025-01-30 20:46:30 +01:00
Asger F
d23c198072
JS: Change note
2025-01-30 20:41:20 +01:00
Asger F
16f7373712
JS: Model dependency injection in Nest
2025-01-29 13:49:46 +01:00
Asger F
89ad737b2a
JS: Add internal extension points sources of class objects/instances
2025-01-29 13:49:44 +01:00
Asger F
b07c5c6ee0
JS: Add test
2025-01-29 13:49:43 +01:00
Asger F
6d04425790
JS: Add test
2025-01-29 11:14:21 +01:00
Asger F
d66d1a79d6
JS: Also update legacy entry point used by qltest
2025-01-29 11:14:10 +01:00
Asger F
8182190120
JS: Remove trailing whitespace
2025-01-29 10:53:26 +01:00
Asger F
bf80f0798b
JS: Treat more file patterns as as tsconfig.json-like
2025-01-29 10:53:18 +01:00
Asger F
f8694a34e5
Merge pull request #18397 from aegilops/angular-sources-sinks
...
JavaScript CodeQL library updates: new Angular sink(s)
2025-01-29 09:09:23 +01:00
Erik Krogh Kristensen
87ad09bcdf
Merge pull request #18595 from erik-krogh/erik-krogh/clear-text-example
...
JS: fix example in clear-text-logging qhelp to actually be bad
2025-01-27 11:45:50 +01:00
erik-krogh
37a1727043
fix example in clear-text-logging qhelp to actually be bad
2025-01-27 11:31:28 +01:00
aegilops
5a191d42bd
Merge branch 'angular-sources-sinks' of https://github.com/aegilops/codeql into angular-sources-sinks
2025-01-24 16:52:19 +00:00
aegilops
76da479550
Updated tests
2025-01-24 16:52:11 +00:00
Paul Hodgkinson
f033f179f7
Merge branch 'main' into angular-sources-sinks
2025-01-24 15:46:48 +00:00
aegilops
d248551e88
Updated expected test result files using HEAD version of codeql
2025-01-24 15:46:09 +00:00
Asger F
1b7977bf90
Merge pull request #18466 from asgerf/js/view-component-inputs
...
JS: Add view-component-input threat model
2025-01-24 10:59:25 +01:00
Asger F
60f9160822
Merge pull request #18574 from asgerf/js/diff-informed2
...
JS: fix and improve diff-informed queries
2025-01-24 10:58:22 +01:00
aegilops
c9a775d737
Merge branch 'angular-sources-sinks' of https://github.com/aegilops/codeql into angular-sources-sinks
2025-01-23 17:07:02 +00:00
aegilops
522f3d1337
Merge
2025-01-23 17:00:56 +00:00
Paul Hodgkinson
eacc322d4f
Update Angular Renderer2 XSS sink details in change note
2025-01-23 16:39:18 +00:00
