Geoffrey White
|
123458fd21
|
Sync identical files.
|
2025-07-10 18:10:24 +01:00 |
|
github-actions[bot]
|
24a0ac1223
|
Post-release preparation for codeql-cli-2.22.2
|
2025-07-07 18:15:04 +00:00 |
|
github-actions[bot]
|
f12daefabe
|
Release preparation for version 2.22.2
|
2025-07-07 14:00:26 +00:00 |
|
Asger F
|
98319ce2ad
|
Apply suggestions from code review
Co-authored-by: Taus <tausbn@github.com>
|
2025-07-03 08:44:33 +02:00 |
|
Asger F
|
d85838477e
|
JS: Update Nest model
An external contribution added more uses of the now-deprecated getType()
predicate while this PR was open.
|
2025-07-02 14:11:31 +02:00 |
|
Asger F
|
47a90c8b32
|
Merge branch 'main' into js/no-type-extraction
|
2025-07-02 13:18:05 +02:00 |
|
Asger F
|
7c38c48fd7
|
Merge pull request #19769 from trailofbits/VF/Nest-improvements
Improve NestJS sources and dependency injection
|
2025-06-30 10:42:18 +02:00 |
|
Asger F
|
c8b2674206
|
JS: Add support for index expressions
|
2025-06-25 14:31:22 +02:00 |
|
Asger F
|
b1d4776b17
|
JS: Handle name resolution through dynamic imports
|
2025-06-25 14:31:20 +02:00 |
|
Asger F
|
92dd5bd1f4
|
JS: Add deprecation comment to qldoc
|
2025-06-25 14:31:14 +02:00 |
|
Napalys Klicius
|
3d9e2f5438
|
Merge pull request #19858 from Napalys/js/execa
JS: moved `execa` out of experimental
|
2025-06-25 10:34:52 +02:00 |
|
Napalys Klicius
|
73126fef9e
|
JS: update change note.
|
2025-06-25 09:26:26 +02:00 |
|
Asger F
|
d39b68cd41
|
Merge pull request #19849 from asgerf/js/remove-legacy-actions-queries
JS: Remove legacy actions queries
|
2025-06-25 09:18:33 +02:00 |
|
Asger F
|
853fc1a7cf
|
Merge pull request #19852 from asgerf/js/react-use-server
JS: Model React 'use' and 'use server'
|
2025-06-25 09:13:56 +02:00 |
|
github-actions[bot]
|
6972c7a872
|
Post-release preparation for codeql-cli-2.22.1
|
2025-06-24 12:55:14 +00:00 |
|
Napalys Klicius
|
79a9d7def8
|
JS: removed execa parts from SystemCommandExecutors and moved it to Execa.qll
|
2025-06-24 12:41:22 +02:00 |
|
github-actions[bot]
|
3e074b2425
|
Release preparation for version 2.22.1
|
2025-06-24 08:55:31 +00:00 |
|
Asger F
|
d428eaeef8
|
Merge pull request #19655 from GeekMasher/js-clientrests-axios
JS: ClientRequests Axios Instance support
|
2025-06-24 10:35:51 +02:00 |
|
Napalys Klicius
|
2218a981f6
|
Merge pull request #19854 from Napalys/js/sinon
JS: Explicitly Mark `Sinon` Package as Non RegExp
|
2025-06-24 10:24:13 +02:00 |
|
Napalys Klicius
|
8c345461f0
|
JS: add change note
|
2025-06-24 09:08:15 +02:00 |
|
Napalys Klicius
|
d8b5cb5862
|
JS: moved execa out of experimental
|
2025-06-24 09:07:43 +02:00 |
|
Napalys Klicius
|
33f42444d5
|
JS: add change note
|
2025-06-23 20:25:18 +02:00 |
|
Napalys Klicius
|
ef51ab172f
|
JS: exclude sinon module from regexp match calls
|
2025-06-23 20:25:17 +02:00 |
|
Asger F
|
ea0a80a06a
|
JS: Un-deprecate Actions.qll for now as we have some internal queries that use it.
|
2025-06-23 16:38:04 +02:00 |
|
Asger F
|
cc1a28ac7e
|
JS: Add parameters of server functions as remote flow sources
|
2025-06-23 16:03:39 +02:00 |
|
Asger F
|
980d0f46fa
|
JS: Add model for react 'use'
|
2025-06-23 15:27:21 +02:00 |
|
Asger F
|
0d3bb89195
|
JS: Deprecate Actions.qll
|
2025-06-23 14:36:15 +02:00 |
|
Asger F
|
e323833bc3
|
JS: Fix qldoc coverage
|
2025-06-23 12:55:19 +02:00 |
|
Asger F
|
07f84a5add
|
JS: Remove an unnecessary import
|
2025-06-23 12:55:18 +02:00 |
|
Asger F
|
ee9c4fa763
|
JS: Deprecate everything that depends on type extraction
|
2025-06-23 12:55:14 +02:00 |
|
Asger F
|
6d389c31c7
|
JS: Update an outdated QLDoc comment
|
2025-06-23 12:55:11 +02:00 |
|
Asger F
|
fcb6882f16
|
JS: Update API usage in MissingAwait
|
2025-06-23 12:55:09 +02:00 |
|
Asger F
|
e459884b69
|
JS: Update API usage in ViewComponentInput
|
2025-06-23 12:55:08 +02:00 |
|
Asger F
|
8b2a424fb0
|
JS: Update type usage use in Express model
|
2025-06-23 12:55:05 +02:00 |
|
Asger F
|
b71d09630a
|
JS: Update type usage in Electron model
|
2025-06-23 12:55:03 +02:00 |
|
Asger F
|
ace8b09a36
|
JS: Update type usage in ClassValidator.qll
|
2025-06-23 12:55:01 +02:00 |
|
Asger F
|
9d4c38b5f1
|
JS: Update type usage in definitions.qll
|
2025-06-23 12:54:59 +02:00 |
|
Asger F
|
17a687b38f
|
JS: Update type usage in Nest library model
|
2025-06-23 12:54:57 +02:00 |
|
Asger F
|
b82e84930c
|
JS: Add public API
|
2025-06-23 12:54:56 +02:00 |
|
Asger F
|
2a0c7c8801
|
JS: Add classHasGlobalName into NameResolution
|
2025-06-23 12:54:55 +02:00 |
|
Asger F
|
de9dab9ba3
|
JS: Move some predicates into NameResolution
|
2025-06-23 12:54:53 +02:00 |
|
Asger F
|
93c891a987
|
Merge pull request #19822 from Fdawgs/patch-1
JS: Update Fastify tld
|
2025-06-23 12:49:42 +02:00 |
|
Taus
|
ac8b41a5da
|
Merge pull request #19680 from github/tausbn/javascript-exclude-obviously-generated-files
JavaScript: Don't extract obviously generated files
|
2025-06-20 15:52:39 +02:00 |
|
Napalys Klicius
|
3fbe348f99
|
Merge pull request #19784 from Napalys/js/express_middleware
JS: Improve Express middleware taint tracking
|
2025-06-20 15:36:26 +02:00 |
|
Napalys Klicius
|
c1b2fd86b2
|
Update javascript/ql/lib/semmle/javascript/frameworks/Express.qll
Co-authored-by: Taus <tausbn@github.com>
|
2025-06-20 14:29:51 +02:00 |
|
Frazer Smith
|
094b67f88c
|
JS: Update Fastify tld
|
2025-06-19 16:22:46 +01:00 |
|
Napalys Klicius
|
f80651e78a
|
Merge pull request #19750 from Napalys/js/remove_encodeURI
JS: remove `encodeURI` from sanitizer list of request forgery
|
2025-06-19 14:12:52 +02:00 |
|
Napalys Klicius
|
72528749f2
|
JS: add change note
|
2025-06-17 08:34:34 +02:00 |
|
Napalys Klicius
|
060b98d36c
|
JS: enchance middleware taint tracking via local source
|
2025-06-17 08:30:19 +02:00 |
|
Napalys Klicius
|
fc0c8a8f5a
|
JS: update change note
|
2025-06-17 08:20:35 +02:00 |
|