Asger F
|
0df893e280
|
JS: Remove blank lines and add trailing newline
|
2025-03-10 14:23:40 +01:00 |
|
Asger F
|
6fe3a368eb
|
JS: Remove blank line and add trailing newline to file
|
2025-03-10 14:23:39 +01:00 |
|
Asger F
|
b9dd594d69
|
JS: Remove blank lines
|
2025-03-10 14:23:38 +01:00 |
|
Asger F
|
f7532c09e6
|
JS: Remove blank line
|
2025-03-10 14:23:37 +01:00 |
|
Asger F
|
122f68e525
|
Update javascript/ql/test/query-tests/Security/CWE-400/ReDoS/polynomial-redos.js
Co-authored-by: Napalys Klicius <napalys@github.com>
|
2025-03-10 14:22:22 +01:00 |
|
Asger F
|
8ee5b237e2
|
Update javascript/ql/test/query-tests/Security/CWE-730/server-crash.js
Co-authored-by: Napalys Klicius <napalys@github.com>
|
2025-03-10 14:21:46 +01:00 |
|
Asger F
|
92dfdc8194
|
Update javascript/ql/test/query-tests/Security/CWE-116/IncompleteSanitization/UnsafeHtmlExpansion.js
Co-authored-by: Napalys Klicius <napalys@github.com>
|
2025-03-10 14:19:33 +01:00 |
|
Asger F
|
21d42bcd21
|
Update javascript/ql/test/query-tests/Security/CWE-079/ExceptionXss/exception-xss.js
Co-authored-by: Napalys Klicius <napalys@github.com>
|
2025-03-10 14:19:01 +01:00 |
|
Asger F
|
dad4838d3b
|
Update javascript/ql/test/query-tests/Security/CWE-079/DomBasedXss/tst.js
Co-authored-by: Napalys Klicius <napalys@github.com>
|
2025-03-10 14:18:42 +01:00 |
|
Asger F
|
017f458534
|
Update javascript/ql/test/query-tests/Security/CWE-078/UselessUseOfCat/uselesscat.js
Co-authored-by: Napalys Klicius <napalys@github.com>
|
2025-03-10 14:18:22 +01:00 |
|
Asger F
|
24c9b2ef9b
|
Update javascript/ql/test/query-tests/Security/CWE-078/UselessUseOfCat/uselesscat.js
Co-authored-by: Napalys Klicius <napalys@github.com>
|
2025-03-10 14:18:02 +01:00 |
|
Napalys
|
9c8e0a5537
|
Applied changes from comments.
Co-authored-by: Asgerf <asgerf@github.com>
|
2025-03-10 13:29:05 +01:00 |
|
erik-krogh
|
b70643b1a1
|
ensure the result from getPathFromFork is unique (to avoid a blowup)
|
2025-03-10 12:53:51 +01:00 |
|
Napalys
|
d077d6807a
|
Applied changes from comments
Co-authored-by: Asgerf <asgerf@github.com>
|
2025-03-10 12:24:45 +01:00 |
|
Napalys
|
f48eab903f
|
Add RegExpSubtraction class to support subtraction terms in regex
|
2025-03-10 11:18:10 +01:00 |
|
Napalys
|
8cbc0aea05
|
Add RegExpQuotedString class to support quoted string escapes in regex
|
2025-03-10 11:18:03 +01:00 |
|
Erik Krogh Kristensen
|
8eb69079b7
|
fix typo from copy-pasted change-note
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
|
2025-03-10 09:41:48 +01:00 |
|
erik-krogh
|
752fc64f42
|
bump to stable 5.8 release
|
2025-03-10 09:21:25 +01:00 |
|
erik-krogh
|
b641caa508
|
update TypeScript version to 5.8.1-RC
|
2025-03-10 09:20:29 +01:00 |
|
Napalys
|
e0f20b2bd1
|
Add RegExpIntersection class to support intersection terms in regex
|
2025-03-07 08:58:19 +01:00 |
|
Napalys
|
9cc26208d4
|
Add test cases for v flag operators in RegExp library-tests.
|
2025-03-07 08:32:10 +01:00 |
|
Napalys
|
c12c12c416
|
Added modeling for react-relay functions that retrieve data.
|
2025-03-06 18:30:21 +01:00 |
|
Napalys
|
5a1991bb69
|
Added test cases for react-relay functions that retrieve data
|
2025-03-06 18:10:27 +01:00 |
|
Napalys
|
0166e76cca
|
Add change note
|
2025-03-06 18:10:24 +01:00 |
|
Napalys
|
1443f314a1
|
Added react-relay useFragment as threat model source.
|
2025-03-06 18:10:23 +01:00 |
|
Napalys
|
1e3b8625e6
|
Added a test case where useFragment from react-relay should be marked as a source but isn't
|
2025-03-06 18:10:21 +01:00 |
|
Anders Schack-Mulligen
|
c6761db2fc
|
SSA: Replace the Guards interface in the SSA data flow integration.
|
2025-03-05 13:29:31 +01:00 |
|
Napalys
|
d884e5fe6b
|
Upgraded javascrip database schema
|
2025-03-05 11:06:56 +01:00 |
|
Napalys
|
95d05ceab8
|
Now store vFlagEnabled instead of each time searching for it.
Added `uFlagEnabled` for checking how should `\p{}` be treated. And small optimization.
|
2025-03-05 10:34:38 +01:00 |
|
Napalys
|
8086c25abe
|
Removed Union as standard character class is already an union.
|
2025-03-05 10:07:20 +01:00 |
|
Napalys
|
8099423b6d
|
Renamed character class operators lists to elements.
|
2025-03-05 09:34:21 +01:00 |
|
Napalys
|
9ea89cd63f
|
Added a test case from #18854
|
2025-03-05 09:34:20 +01:00 |
|
Napalys
|
c7f03df1eb
|
Added change note
|
2025-03-05 09:34:18 +01:00 |
|
github-actions[bot]
|
58f355ae5a
|
Post-release preparation for codeql-cli-2.20.6
|
2025-03-03 18:18:15 +00:00 |
|
Chuan-kai Lin
|
17acb31f65
|
JS: Fix changelog formatting
|
2025-03-03 09:19:01 -08:00 |
|
github-actions[bot]
|
fa850cccb1
|
Release preparation for version 2.20.6
|
2025-03-03 17:13:19 +00:00 |
|
Napalys
|
c0202f6085
|
Updated dbscheme
|
2025-03-03 14:37:47 +01:00 |
|
Napalys
|
fe6de2f672
|
Added support for character class union in regex processing
|
2025-03-03 14:37:46 +01:00 |
|
Napalys
|
1e05f327d6
|
Added test cases for union.
|
2025-03-03 14:37:44 +01:00 |
|
Napalys
|
3664d50772
|
Added support for -- subtraction opetor.
|
2025-03-03 14:37:43 +01:00 |
|
Napalys
|
ee83c42b71
|
Added test cases for subtraction --.
|
2025-03-03 14:37:42 +01:00 |
|
Napalys
|
381b5ebe8a
|
Added intersection support
|
2025-03-03 14:37:40 +01:00 |
|
Napalys
|
fa5093f6ad
|
Added test cases for intersection
|
2025-03-03 14:37:39 +01:00 |
|
Napalys
|
2333c538d9
|
Added ability to parse nested character classes while using v flag.
|
2025-03-03 14:37:38 +01:00 |
|
Napalys
|
de6f3b1d04
|
Add additional test cases.
|
2025-03-03 14:37:37 +01:00 |
|
Napalys
|
ab7e08f40f
|
Added test cases for nested character class.
|
2025-03-03 14:37:35 +01:00 |
|
Napalys
|
ed418be97a
|
Add support for '\q{}' escape sequence in regular expressions.
|
2025-03-03 14:37:20 +01:00 |
|
Napalys
|
d162acf02c
|
Added quoted string \q parser test cases
|
2025-03-02 17:09:01 +01:00 |
|
Napalys
|
cb448db3ce
|
Exposed flags to the regex parser
|
2025-03-02 17:08:52 +01:00 |
|
Asger F
|
2e32e441b8
|
Update javascript/ql/src/change-notes/2025-02-28-membership-regexp-test.md
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
|
2025-02-28 14:25:56 +01:00 |
|