Asger F
|
18f9133715
|
JS: Rename and clarify comment for trackFunctionType
|
2025-06-10 16:14:46 +02:00 |
|
Asger F
|
a6488cbad9
|
Update javascript/ql/lib/semmle/javascript/internal/NameResolution.qll
Co-authored-by: Erik Krogh Kristensen <erik-krogh@github.com>
|
2025-06-10 16:06:42 +02:00 |
|
Napalys Klicius
|
51b83dbce5
|
Merge pull request #19579 from Napalys/js/dom_property_access
JS: Improve `useless-expression` query to avoid duplicate alerts on compound expressions
|
2025-06-10 15:17:13 +02:00 |
|
Napalys Klicius
|
e46581163a
|
Update javascript/ql/lib/Expressions/ExprHasNoEffect.qll
Co-Authored-By: Asger F <316427+asgerf@users.noreply.github.com>
|
2025-06-10 13:23:31 +02:00 |
|
Napalys Klicius
|
496d8d44eb
|
Update javascript/ql/lib/Expressions/ExprHasNoEffect.qll
Co-authored-by: Asger F <asgerf@github.com>
|
2025-06-10 13:19:48 +02:00 |
|
Napalys Klicius
|
e6f071ce46
|
Update javascript/ql/lib/Expressions/ExprHasNoEffect.qll
Co-authored-by: Asger F <asgerf@github.com>
|
2025-06-10 13:18:48 +02:00 |
|
Napalys Klicius
|
c97da2eda5
|
Exclude expressions that are part of a conditional expression
|
2025-06-10 10:56:11 +02:00 |
|
github-actions[bot]
|
21463a9653
|
Post-release preparation for codeql-cli-2.22.0
|
2025-06-09 18:50:20 +00:00 |
|
github-actions[bot]
|
88ba02edf8
|
Release preparation for version 2.22.0
|
2025-06-09 18:14:51 +00:00 |
|
Chuan-kai Lin
|
631502e129
|
Merge branch 'main' into cklin/rc-3.18-mergeback
|
2025-06-09 07:19:40 -07:00 |
|
Taus
|
b8772bc736
|
JavaScript: Add change note
|
2025-06-05 15:06:40 +00:00 |
|
GeekMasher
|
302097ec85
|
docs(js): Add AxiosInstanceRequest docs
|
2025-06-05 09:52:25 +01:00 |
|
Asger F
|
691fdb106e
|
JS: Nicer jump-to-def for function declarations
|
2025-06-04 22:17:42 +02:00 |
|
Asger F
|
57fad7e6c9
|
JS: Add SatisfiesExpr
|
2025-06-04 22:17:40 +02:00 |
|
Asger F
|
853ba49212
|
Update javascript/ql/lib/semmle/javascript/internal/TypeResolution.qll
Co-authored-by: Napalys Klicius <napalys@github.com>
|
2025-06-04 10:17:25 +02:00 |
|
GeekMasher
|
3b64bd48ab
|
style(js): Update Formatting
|
2025-06-03 15:59:32 +01:00 |
|
GeekMasher
|
2eb5f10850
|
feat(js): Add Axios instance support change notes
|
2025-06-03 15:58:49 +01:00 |
|
GeekMasher
|
6a1cfb6aef
|
feat(js): Add Axios Instance support and add tests
|
2025-06-03 15:55:23 +01:00 |
|
Napalys Klicius
|
aac56e089a
|
JavaScript: Fix false positive on Flow type annotations in ExprHasNoEffect
|
2025-06-03 15:26:22 +02:00 |
|
Napalys Klicius
|
46b5ded862
|
JS: Enhance void context propagation
|
2025-06-03 15:20:55 +02:00 |
|
Napalys Klicius
|
bf48b59874
|
JS: Removed exclusion of FunctionExpr from compound statements.
|
2025-06-03 15:12:26 +02:00 |
|
Asger F
|
9ea4410592
|
Merge pull request #19587 from asgerf/js/angular2-client-side
JS: Mark AngularJS $location as client-side remote flow source
|
2025-06-03 13:40:01 +02:00 |
|
Napalys Klicius
|
bca1bc7153
|
JS: Enhance isDomProperty to check for getAPropertyRead on DOM nodes
|
2025-06-02 14:56:45 +02:00 |
|
Napalys Klicius
|
c981c4fe30
|
Update javascript/ql/lib/change-notes/2025-05-30-url-package-taint-step.md
Co-authored-by: Asger F <asgerf@github.com>
|
2025-06-02 13:34:47 +02:00 |
|
Napalys Klicius
|
0b6a747737
|
Added change note
|
2025-05-30 18:33:59 +02:00 |
|
Napalys Klicius
|
b9b62fa1c1
|
JS: Add URL from url package constructor taint step for request forgery detection
|
2025-05-30 18:32:02 +02:00 |
|
github-actions[bot]
|
d2c6875eac
|
Post-release preparation for codeql-cli-2.21.4
|
2025-05-27 18:16:21 +00:00 |
|
github-actions[bot]
|
bfb91e95e3
|
Release preparation for version 2.21.4
|
2025-05-27 17:22:05 +00:00 |
|
Asger F
|
076e4a49d5
|
JS: Mark AngularJS $location as client-side remote flow source
|
2025-05-27 09:47:43 +02:00 |
|
Anders Schack-Mulligen
|
1d30103559
|
SSA: Distinguish between has and controls branch edge.
|
2025-05-23 09:56:22 +02:00 |
|
Asger F
|
9bcc62002d
|
JS: Fix regression from global declare vars
|
2025-05-20 13:20:35 +02:00 |
|
Asger F
|
bba872a3a4
|
JS: Make jump-to-def behave nicer
|
2025-05-20 13:20:28 +02:00 |
|
Asger F
|
b8dc1b3125
|
JS: Remove redundant casts
|
2025-05-20 13:20:27 +02:00 |
|
Asger F
|
fbafd6fff1
|
JS: Update to avoid deprecations after import resolution change
|
2025-05-20 13:20:26 +02:00 |
|
Asger F
|
e07a03619d
|
JS: Mark type-annotated nodes as SourceNode
|
2025-05-20 13:20:24 +02:00 |
|
Asger F
|
167f752301
|
JS: Also propagate through promise types
|
2025-05-20 13:20:21 +02:00 |
|
Asger F
|
500291dd54
|
JS: Hide shadowed inherited members
|
2025-05-20 13:20:20 +02:00 |
|
Asger F
|
307715a5cd
|
JS: Use type resolution for CG augmentation
|
2025-05-20 13:20:17 +02:00 |
|
Asger F
|
989402d7b7
|
JS: Remove some dependencies on type extraction
|
2025-05-20 13:20:14 +02:00 |
|
Asger F
|
4e44fdaa7b
|
JS: Use hasUnderlyingStringOrAnyType in Nest model
|
2025-05-20 13:20:12 +02:00 |
|
Asger F
|
6fdd7feed4
|
JS: Use sanitizing primitive type in Nest model
|
2025-05-20 13:20:10 +02:00 |
|
Asger F
|
2d21074598
|
JS: Use sanitizing primitive types in ViewComponentInput
|
2025-05-20 13:20:09 +02:00 |
|
Asger F
|
9fd85c9688
|
JS: Update jQuery model
|
2025-05-20 13:20:07 +02:00 |
|
Asger F
|
cca48c09b9
|
JS: Use in TypeAnnotation.getClass and hasUnderlyingType predicates
|
2025-05-20 13:20:06 +02:00 |
|
Asger F
|
b923eac9be
|
JS: Use underlying types in DataFlow::Node
|
2025-05-20 13:20:04 +02:00 |
|
Asger F
|
fc580a5f78
|
JS: Add TypeResolution.qll
|
2025-05-20 13:20:03 +02:00 |
|
Asger F
|
d61f576324
|
JS: Add UnderlyingTypes.qll
|
2025-05-20 13:20:01 +02:00 |
|
Asger F
|
1533e134a5
|
JS: Add NameResolution.qll
|
2025-05-20 13:20:00 +02:00 |
|
Asger F
|
4bfb0483a8
|
JS: Resolve JSDocLocalTypeAccess to a variable in scope
|
2025-05-20 13:19:57 +02:00 |
|
Asger F
|
9566265356
|
JS: Add helper for getting local type names
|
2025-05-20 13:19:56 +02:00 |
|