Napalys
7cc0634f57
Added createProcStatement as potential sql sink.
2025-03-25 14:50:38 +01:00
Napalys
0285cb6c7a
Added @sap/hdbext.loadProccedure as sql sink.
2025-03-25 14:48:40 +01:00
Napalys
e595def8b0
Modeled execute as potential hana's sink.
2025-03-25 14:44:37 +01:00
Napalys
d28af9508a
Added sink models for hana's client prepare function.
2025-03-25 14:42:27 +01:00
Napalys
9229962096
Add sink model for SQL injection detection in exec clients.
2025-03-25 14:36:13 +01:00
Napalys
032cfc134f
Added test cases for hana clients.
2025-03-25 14:29:06 +01:00
Anders Schack-Mulligen
d5d0274ce7
Java/SSA: Keep proper distinction between cached stages.
2025-03-25 13:43:55 +01:00
Napalys Klicius
0689cf7f5e
Update javascript/ql/lib/ext/axios.model.yml
...
Co-authored-by: Asger F <asgerf@github.com >
2025-03-25 10:56:01 +01:00
Napalys
9dcfe0e709
Added change note.
2025-03-25 10:55:44 +01:00
Napalys
1ee3fde214
Added support for axios.interceptors.response.
2025-03-25 10:55:34 +01:00
Napalys
20bb831ce9
Added test case for axios.interceptors.response with missing alert.
2025-03-25 10:55:14 +01:00
Napalys
10498bbaa4
Added support for axios.interceptors.request.
2025-03-25 10:54:56 +01:00
Napalys
ea181e4173
Added test case for axios.interceptors.request
2025-03-25 10:54:17 +01:00
Napalys
a3c84d9feb
Added support for axios.create.
2025-03-25 10:45:09 +01:00
Napalys
8f2adb6543
Added test case for create.
2025-03-25 10:44:15 +01:00
Napalys
c0d848cdf1
Added support for getUri.
2025-03-25 10:43:54 +01:00
Napalys
f48a362d71
Added support for patchForm.
2025-03-25 10:42:57 +01:00
Napalys
7fe943d8b2
Added support for putForm.
2025-03-25 10:42:04 +01:00
Napalys
69fe251eac
Add support for axios.postForm in ClientRequest.
2025-03-25 10:41:08 +01:00
Napalys
e79f4602b5
Added test for axios methods.
...
In particular for `postForm` `putForm` `patchForm` `getUri`.
2025-03-25 10:40:00 +01:00
Napalys
cb14b4381e
Applied copilot suggestions.
2025-03-24 14:05:28 +01:00
Napalys
240b42bb76
Added change note.
2025-03-24 13:24:40 +01:00
Napalys
2d6f5d1da4
Refactor ClientRequest to introduce GotInstance classes for improved handling of got instances and options retrieval.
2025-03-24 13:20:09 +01:00
Napalys
f43510c9aa
Added support for paginate.
2025-03-21 15:03:23 +01:00
Napalys
63193fa91c
Improve URL handling in ClientRequest for extend() and Options
2025-03-21 15:02:34 +01:00
Napalys
99efb610d4
Enhance URL handling in ClientRequest for got Options
2025-03-21 15:01:43 +01:00
Napalys
b33f760765
Manage chain calls of extend.
2025-03-21 15:00:39 +01:00
Napalys
a58c4eb652
Added additional test cases for got package.
2025-03-21 15:00:35 +01:00
Napalys Klicius
7bd1c4d2ae
Merge pull request #19060 from Napalys/js/apollo-server
...
JS: model `ApolloServer`
2025-03-21 10:00:31 +01:00
Napalys Klicius
803aacf9f0
Merge pull request #19068 from Napalys/js/superagent
...
JS: `superagent` modeling
2025-03-21 09:15:31 +01:00
Napalys Klicius
57f6225140
Update javascript/ql/lib/change-notes/2025-03-20-apollo-server.md
...
Co-authored-by: Asger F <asgerf@github.com >
2025-03-21 09:11:25 +01:00
Napalys Klicius
730580a59b
Merge pull request #19049 from Napalys/js/underscore-string
...
JS: Modeling of `underscore.string` package
2025-03-20 19:11:24 +01:00
Napalys
7d40e449db
Added change note.
2025-03-20 19:08:24 +01:00
Napalys
d61d038b9b
Refactored SuperAgentUrlRequest to use API graph.
2025-03-20 18:17:28 +01:00
Napalys
401c6ea0f6
Added test case which is not detected by dataflow.
2025-03-20 18:17:27 +01:00
Asger F
d9c158923a
Merge pull request #19069 from asgerf/js/jsdoc-parser
...
JS: Use StringBuilder when building up type name in JSDoc
2025-03-20 16:17:58 +01:00
Napalys Klicius
13e90c1606
Update javascript/ql/lib/change-notes/2025-03-20-superagent.md
...
Co-authored-by: Asger F <asgerf@github.com >
2025-03-20 13:48:40 +01:00
Napalys
9e787555df
Fixed typo in the test cases.
2025-03-20 13:25:36 +01:00
Napalys
3a243d221d
Added aliases for @apollo/server.
2025-03-20 13:09:42 +01:00
Napalys
056bf4fde7
Added test case with inheretence.
2025-03-20 13:08:56 +01:00
Napalys
ca53e97de4
Adressed comments.
2025-03-20 12:37:06 +01:00
Napalys Klicius
221cc1977d
Merge branch 'main' into js/underscore-string
2025-03-20 12:26:00 +01:00
Napalys
f4ca2dc1f3
Restricted taint to array elements.
2025-03-20 12:24:49 +01:00
Napalys
752f02f04d
Fixed map modeling and added test cases.
2025-03-20 12:18:28 +01:00
Napalys
38624a0d78
Added change note
2025-03-20 12:13:32 +01:00
Napalys
af567b49fb
Simplified SuperAgentUrlRequest.
2025-03-20 12:10:37 +01:00
Napalys
539e2ef558
Added support for superagent.agent().
2025-03-20 12:09:31 +01:00
Napalys
cdf4f5395f
Enhance SuperAgent URL request handling for both method calls and direct calls
2025-03-20 12:09:26 +01:00
Napalys
2e1734eeba
Added support for del function in superagent
2025-03-20 12:01:18 +01:00
Asger F
bf9d7484e4
JS: Use StringBuilder when building up type name
...
This code was a bit of a performance cringe. It copied every character
into a temporary array, copied that into a String, and slow-appended
that onto another String.
Note that the call to Characters.toChars is redundant here as advance()
doesn't return a code point; it returns -1 or a UTF-16 char. The -1 case
is checked for before reaching the call, so we can just cast it to
a char and use it directly.
We use a StringBuilder to accumulate the string. Normally it's faster
to track the start/end indices and do a substring(), but that won't
work in the JSDoc extractor because of the star-skipping logic in
advance().
2025-03-20 09:43:10 +01:00
