Napalys Klicius
40903a9643
Merge pull request #18975 from Napalys/js/tanstack_angular
...
JS: Update Angular Client Request's with API graph and `Tanstack` Angular modeling
2025-03-12 15:30:26 +01:00
Napalys
f867e0fae8
Added angular-query so when it is released it would be still modeled.
2025-03-12 14:00:44 +01:00
Napalys Klicius
bf24f7794f
Update javascript/ql/lib/change-notes/2025-03-11-tanstack-angular.md
...
Co-authored-by: Asger F <asgerf@github.com >
2025-03-12 13:58:09 +01:00
Napalys Klicius
86bd3b8d26
Merge pull request #18986 from Napalys/js/remove_dedundant_stats
...
JS: Removed auto generated stats file
2025-03-12 12:51:26 +01:00
Napalys
8a8defd48f
Removed redundant stats file genarated from check-db-upgrades-javascript
2025-03-12 11:57:27 +01:00
Napalys
09986bc26c
Added change note.
2025-03-12 11:54:57 +01:00
Napalys
770920e738
Add new model configuration for @tanstack/angular-query-experimental.
2025-03-12 11:54:55 +01:00
Asger F
b4016c144b
Merge pull request #18973 from asgerf/js/vue-fix
...
JS: Fix attributes nodes missing an enclosing callable
2025-03-12 11:23:25 +01:00
Napalys
979a5b4587
Updated stats file with intersection, subtraction and quoted_string.
2025-03-12 09:02:53 +01:00
Asger F
8599ab2503
JS: Fix attributes nodes missing an enclosing callable
2025-03-11 16:47:48 +01:00
Asger F
e8c5e4d006
Merge branch 'main' into js/test-suite
2025-03-11 13:17:08 +01:00
Napalys Klicius
a4f2264f17
Merge pull request #18899 from Napalys/js/ecma-2024-regex
...
JS: Add ECMAScript 2024 `v` Flag Operators for Regex Parsing
2025-03-11 12:50:44 +01:00
Napalys
c001435258
Refactor Angular2 API to use httpClientApiNode for HttpClient method calls
2025-03-11 12:32:24 +01:00
Napalys Klicius
a900f2cea4
Update javascript/ql/lib/change-notes/2025-03-03-regex-v.md
...
Co-authored-by: Asger F <asgerf@github.com >
2025-03-11 11:57:28 +01:00
Napalys Klicius
7c9edff33c
Merge pull request #18964 from Napalys/js/mark_down_table
...
JS: Refactor `markdown-table` library modeling
2025-03-11 09:02:56 +01:00
Asger F
b583e52a87
Merge pull request #18962 from asgerf/js/local-type-indirection
...
JS: Unfold local type aliases in getAnUnderlyingType
2025-03-11 08:54:03 +01:00
Napalys
08c07f815f
Improved documentation, removed union fram change note.
2025-03-11 08:30:17 +01:00
Napalys Klicius
1ad8b4677d
Update javascript/ql/lib/change-notes/2025-03-10-js-refactor-markdown-table.md
...
Co-authored-by: Asger F <asgerf@github.com >
2025-03-11 08:07:49 +01:00
Erik Krogh Kristensen
e6884cf705
Merge pull request #18959 from erik-krogh/faster-routing
...
JS: ensure the result from getPathFromFork is unique (to avoid a blowup)
2025-03-10 21:45:14 +01:00
Napalys
4a365857f1
Added change note.
2025-03-10 19:40:41 +01:00
Napalys
13c701948a
Refactor Markdown taint steps and update expected results for reflected XSS tests
2025-03-10 19:27:36 +01:00
Erik Krogh Kristensen
b945466b9f
Merge pull request #18892 from asgerf/js/membership-regexp-test
...
JS: Sharpen up EnumerationRegExp
2025-03-10 16:21:54 +01:00
Asger F
f7d2abf3e3
JS: Unfold local type aliases in getAnUnderlyingType
2025-03-10 16:09:16 +01:00
Asger F
08c9f6fa1e
Merge pull request #18798 from erik-krogh/ts58
...
JS: upgrade TypeScript to 5.8
2025-03-10 14:48:03 +01:00
Asger F
d84368eb54
Merge pull request #18858 from Napalys/js/react-relay
...
JS: React-relay support
2025-03-10 14:33:23 +01:00
Napalys
9c8e0a5537
Applied changes from comments.
...
Co-authored-by: Asgerf <asgerf@github.com >
2025-03-10 13:29:05 +01:00
erik-krogh
b70643b1a1
ensure the result from getPathFromFork is unique (to avoid a blowup)
2025-03-10 12:53:51 +01:00
Napalys
d077d6807a
Applied changes from comments
...
Co-authored-by: Asgerf <asgerf@github.com >
2025-03-10 12:24:45 +01:00
Napalys
f48eab903f
Add RegExpSubtraction class to support subtraction terms in regex
2025-03-10 11:18:10 +01:00
Napalys
8cbc0aea05
Add RegExpQuotedString class to support quoted string escapes in regex
2025-03-10 11:18:03 +01:00
Erik Krogh Kristensen
8eb69079b7
fix typo from copy-pasted change-note
...
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com >
2025-03-10 09:41:48 +01:00
erik-krogh
b641caa508
update TypeScript version to 5.8.1-RC
2025-03-10 09:20:29 +01:00
Napalys
e0f20b2bd1
Add RegExpIntersection class to support intersection terms in regex
2025-03-07 08:58:19 +01:00
Napalys
c12c12c416
Added modeling for react-relay functions that retrieve data.
2025-03-06 18:30:21 +01:00
Napalys
0166e76cca
Add change note
2025-03-06 18:10:24 +01:00
Napalys
1443f314a1
Added react-relay useFragment as threat model source.
2025-03-06 18:10:23 +01:00
Anders Schack-Mulligen
c6761db2fc
SSA: Replace the Guards interface in the SSA data flow integration.
2025-03-05 13:29:31 +01:00
Napalys
d884e5fe6b
Upgraded javascrip database schema
2025-03-05 11:06:56 +01:00
Napalys
8086c25abe
Removed Union as standard character class is already an union.
2025-03-05 10:07:20 +01:00
Napalys
c7f03df1eb
Added change note
2025-03-05 09:34:18 +01:00
github-actions[bot]
58f355ae5a
Post-release preparation for codeql-cli-2.20.6
2025-03-03 18:18:15 +00:00
Chuan-kai Lin
17acb31f65
JS: Fix changelog formatting
2025-03-03 09:19:01 -08:00
github-actions[bot]
fa850cccb1
Release preparation for version 2.20.6
2025-03-03 17:13:19 +00:00
Napalys
c0202f6085
Updated dbscheme
2025-03-03 14:37:47 +01:00
Asger F
c3ad805fe8
JS: Sharpen up EnumerationRegExp
2025-02-28 13:58:11 +01:00
Asger F
29659647ea
JS: Fix barrier guards for ServerSideUrlRedirect
...
The barrier guards for ServerSideUrlRedirect were lost when it was ported to ConfigSig, and the aforementioned spurious alert was a result of that.
The query had two guards: a proper barrier guard and a heuristic one for functions named 'isLocalURL'. We should move away from the heuristic name-based sanitiser guards, so I'm only reinstating the proper barrier guard.
Therefore updating the test to test the real barrier guard.
2025-02-28 13:28:43 +01:00
Asger F
319ee2ccd5
JS: Track deep flow through qs.stringify
2025-02-28 13:28:04 +01:00
Asger F
cf33db78cc
JS: Fix the spurious flow
2025-02-28 13:28:02 +01:00
Asger F
79e2a758d7
JS: Allow more kinds of expectation comments
2025-02-28 13:27:25 +01:00
Asger F
baa7e35589
Merge pull request #18834 from Napalys/js/tanstack
...
JS: Support 'response' threat model and @tanstack/react-query
2025-02-25 16:16:06 +01:00
