2928 Commits

Author	SHA1	Message	Date
Asger F	7df3e647d1	JS: Use US spelling	2025-02-14 10:28:55 +01:00
Asger F	26dcbf7a2a	JS: Migrate URLSearchParams model to flow summaries	2025-02-13 11:51:33 +01:00
Kevin Stubbings	253882c3d1	Update javascript/ql/lib/change-notes/2025-02-12-express-download.md ... Co-authored-by: Asger F <asgerf@github.com>	2025-02-12 11:01:29 -08:00
Kevin Stubbings	f5521ca1b8	Formatting	2025-02-12 00:15:27 -08:00
Kevin Stubbings	d0ed0fdeb3	Add download to Express	2025-02-12 00:10:09 -08:00
Asger F	7e3f89842d	JS: Provide more precise related locations	2025-02-11 14:12:03 +01:00
Asger F	45242977a4	JS: Model query-string parsers that strip off ? or #	2025-02-11 10:41:23 +01:00
Anders Schack-Mulligen	0b5270979d	SSA: Remove the need for ExitBasicBlock in SSA.	2025-02-10 14:36:18 +01:00
github-actions[bot]	f1b05a79a4	Post-release preparation for codeql-cli-2.20.4	2025-02-04 09:25:09 +00:00
github-actions[bot]	573e53e454	Release preparation for version 2.20.4	2025-02-03 15:19:35 +00:00
Asger F	16f7373712	JS: Model dependency injection in Nest	2025-01-29 13:49:46 +01:00
Asger F	89ad737b2a	JS: Add internal extension points sources of class objects/instances	2025-01-29 13:49:44 +01:00
Paul Hodgkinson	f033f179f7	Merge branch 'main' into angular-sources-sinks	2025-01-24 15:46:48 +00:00
Asger F	1b7977bf90	Merge pull request #18466 from asgerf/js/view-component-inputs ... JS: Add view-component-input threat model	2025-01-24 10:59:25 +01:00
aegilops	c9a775d737	Merge branch 'angular-sources-sinks' of https://github.com/aegilops/codeql into angular-sources-sinks	2025-01-23 17:07:02 +00:00
aegilops	522f3d1337	Merge	2025-01-23 17:00:56 +00:00
Paul Hodgkinson	eacc322d4f	Update Angular Renderer2 XSS sink details in change note	2025-01-23 16:39:18 +00:00
Asger F	6423033db6	JS: Resolve inserted TODOs	2025-01-23 13:02:52 +01:00
Asger F	dba76a0e4d	JS: Rerun patch query after bugfix	2025-01-23 10:31:32 +01:00
Asger F	4161f455b8	Revert "Add view-component-input for testing" ... This reverts commit 6954039a6d106e3611a0892972a979fd45310d1a.	2025-01-22 10:45:52 +01:00
Asger F	e5c0390972	Add view-component-input for testing	2025-01-22 10:45:50 +01:00
Asger F	d647c7b14d	JS: Replace 'instanceof ClientSideRemoteFlowSource'	2025-01-22 10:45:49 +01:00
Asger F	3061d51b20	JS: Add ThreatModelSource#isCilentSideSource()	2025-01-22 10:45:48 +01:00
Asger F	327bdc0b02	JS: Use TypeScript types to restrict ViewComponentInputs in general	2025-01-22 10:45:47 +01:00
Asger F	b015c88c79	JS: Add view-component-input threat model	2025-01-22 10:45:46 +01:00
github-actions[bot]	fbb7f0a0c6	Post-release preparation for codeql-cli-2.20.2	2025-01-20 21:11:14 +00:00
github-actions[bot]	a0512a50f2	Release preparation for version 2.20.2	2025-01-20 21:11:12 +00:00
Asger F	683ebcaf16	Revert "JS: Add dummy extension with an empty diff" ... This reverts commit 6e9b95d4e85f4829e788400575570bdb65eda6f6.	2025-01-20 11:20:35 +01:00
Asger F	a948915bb0	JS: Add dummy extension with an empty diff	2025-01-20 11:20:33 +01:00
Asger F	7c29ea9dda	JS: Update ExternalAPIUsedwithUntrustedData	2025-01-20 11:20:32 +01:00
Asger F	ecbd7983ba	JS: Update DifferentKindsComparisonBypassQuery.qll	2025-01-20 11:20:31 +01:00
Asger F	29da1fb6c8	JS: Update ConditionalBypassQuery.qll	2025-01-20 11:20:30 +01:00
Asger F	fd763a0883	JS: Auto-patch diff informed queries	2025-01-20 11:20:27 +01:00
Asger F	859783c08b	JS: Support [(ngModel)]	2025-01-17 10:26:57 +01:00
Asger F	97f5559e64	JS: Recognise form input from NgForm	2025-01-17 10:22:20 +01:00
Asger F	d4daa21318	JS: Add DOM event sources in Angular2 model	2025-01-17 10:20:22 +01:00
Asger F	6f46a34873	JS: Refactor domEventSource() into a Range class	2025-01-17 10:12:40 +01:00
Asger F	bd2febcf00	JS: Implementing new signature members in StepInputSig	2025-01-16 13:38:08 +01:00
Asger F	6cd9752289	Merge pull request #18467 from github/js/shared-dataflow-branch ... JS: Migrate to shared data flow library (targeting main!) 🚀	2025-01-16 11:28:57 +01:00
Geoffrey White	90faab456d	Merge pull request #18473 from geoffw0/sensitive2 ... Improve shared sensitive data library handling of snake_case variable names	2025-01-15 18:02:33 +00:00
Geoffrey White	5ef5b04aac	Add change notes.	2025-01-10 11:16:53 +00:00
Geoffrey White	f8659c0a4e	Sync identical files.	2025-01-10 10:26:13 +00:00
Paul Hodgkinson	1ada51130f	Merge branch 'main' into angular-sources-sinks	2025-01-09 18:03:04 +00:00
aegilops	e7881a8c7f	Fix typo	2025-01-09 17:11:06 +00:00
aegilops	62599b2a12	Formatted	2025-01-09 17:02:37 +00:00
aegilops	98b4c35844	Set doc string on getElementNode predicate	2025-01-09 17:00:01 +00:00
Asger F	9c4d378a1d	JS: Remove TODO comment ... It is not subsumed by the other case, both cases are needed	2025-01-09 10:17:16 +01:00
Asger F	3f2882e1c6	JS: Remove an obsolete comment ... The RHS of an assignment actually has a post-update node now	2025-01-09 09:59:23 +01:00
Asger F	b2d62a080b	JS: Move a test failure explanation into the test suite ... We have an issue for fixing the underlying problem	2025-01-09 09:57:44 +01:00
Asger F	d9da9444fa	JS: Rephrase TODO ... This is useful info, but not something that can be fixed locally in this query, so a TODO comment isn't helping	2025-01-09 09:45:39 +01:00