2976 Commits

Author	SHA1	Message	Date
github-actions[bot]	18fa6799ce	Release preparation for version 2.23.6	2025-11-17 16:38:07 +00:00
github-actions[bot]	4014df9a6e	Post-release preparation for codeql-cli-2.23.4	2025-11-04 17:57:52 +00:00
github-actions[bot]	64fcdd1f2f	Release preparation for version 2.23.4	2025-11-03 14:52:23 +00:00
Asger F	c583b480af	JS: Add pragma[nomagic] just to be safe ... The DIL is unchanged	2025-10-30 15:31:51 +01:00
Asger F	a5819a14be	JS: Fix bad join order in getNextToken()	2025-10-30 15:31:51 +01:00
Asger F	39f74d808b	JS: Add compileForOverlayEval	2025-10-30 15:31:51 +01:00
Nora Dimitrijević	a0975e7e19	Constrain location overrides to actual sources/sinks	2025-10-28 09:42:20 +01:00
Nora Dimitrijević	bcdbe0b50a	JS/PolynomialReDoSQuery ... javascript/ql/src/Performance/PolynomialReDoS.ql	2025-10-28 09:40:16 +01:00
Nora Dimitrijević	94343254e3	JS/ShellCommandInjectionFromEnvironmentQuery ... javascript/ql/src/Security/CWE-078/ShellCommandInjectionFromEnvironment.ql	2025-10-28 09:40:14 +01:00
Nora Dimitrijević	71cf042607	JS/IndirectCommandInjectionQuery ... javascript/ql/src/Security/CWE-078/IndirectCommandInjection.ql	2025-10-28 09:40:11 +01:00
Nora Dimitrijević	2a30ea923a	JS/CommandInjectionQuery ... javascript/ql/src/experimental/heuristics/ql/src/Security/CWE-078/CommandInjection.ql javascript/ql/src/Security/CWE-078/CommandInjection.ql	2025-10-28 09:40:09 +01:00
Asger F	8d49f26f3d	Merge pull request #20397 from asgerf/js/build-artifact-leak-fp ... JS: Fix FP in js/build-artifact-leak when keys come from an array of constants	2025-10-28 06:40:13 +01:00
Asger F	d7cf5ef645	Merge pull request #20647 from asgerf/js/type-resolution-cache ... JS: Avoid magic and improve a join in type resolution	2025-10-20 11:50:23 +02:00
Asger F	c6577c8590	JS: Avoid magic and improve a join in type resolution	2025-10-15 11:54:28 +02:00
github-actions[bot]	6dd07790ac	Post-release preparation for codeql-cli-2.23.3	2025-10-14 11:16:33 +00:00
github-actions[bot]	33542f7d40	Release preparation for version 2.23.3	2025-10-14 09:30:24 +00:00
Asger F	10c9b747a5	Merge pull request #20586 from asgerf/js/api-graphs-block-this ... JS: Restrict receiver-flow in API graphs	2025-10-08 08:41:56 +02:00
Asger F	587ad5c600	JS: Refine criteria so that explicit this-passing is not affected	2025-10-06 11:43:18 +02:00
Asger F	4d33190241	JS: Restrict this-argument passing in API graphs	2025-10-06 11:42:36 +02:00
github-actions[bot]	a7a4e43991	Post-release preparation for codeql-cli-2.23.2	2025-09-29 15:10:19 +00:00
github-actions[bot]	d2130a589b	Release preparation for version 2.23.2	2025-09-29 10:28:45 +00:00
Simon Friis Vindum	26aa938acc	Merge pull request #20452 from paldepind/rust/mad-source-parameter ... Rust, shared: Support `Parameter` in source MaD models	2025-09-24 09:37:25 +02:00
Asger F	2e8091f0fb	Merge pull request #20419 from asgerf/js/express-json-send ... JS: Model Express json and jsonp methods	2025-09-24 09:25:32 +02:00
Simon Friis Vindum	7d6e2060e5	Adapt all languages to changes in shared library	2025-09-22 14:18:58 +02:00
Napalys Klicius	3a6a537986	JS: Add change note	2025-09-19 14:47:58 +02:00
Napalys Klicius	6cfc950159	JS: Model GraphQLObjectType resolve params as sources	2025-09-19 14:39:36 +02:00
Napalys Klicius	4f8166a661	Merge pull request #20450 from Napalys/js/graph-ql-ench ... JS: Improve graphql flow	2025-09-17 16:32:01 +02:00
Ian Lynagh	c653d939d9	Merge pull request #20451 from github/post-release-prep/codeql-cli-2.23.1 ... Post-release preparation for codeql-cli-2.23.1	2025-09-17 13:00:14 +01:00
Napalys Klicius	7affcf40c2	JS: Add variableValues to the previous summaryModel to enchance the flow.	2025-09-17 12:24:14 +02:00
github-actions[bot]	4e8343664f	Post-release preparation for codeql-cli-2.23.1	2025-09-17 10:13:40 +00:00
Napalys Klicius	6d461d6b50	JS: Add change note	2025-09-17 11:48:49 +02:00
Napalys Klicius	4282005e32	JS: Add summary model for graphql's rootValue	2025-09-17 11:48:44 +02:00
Napalys Klicius	4df8db0d7e	Renamed AWS-V3-Common to @aws-sdk/client.Client	2025-09-17 10:21:29 +02:00
Napalys Klicius	10f3a83fcb	Fixed model type names ... Co-authored-by: asgerf <asgerf@users.noreply.github.com>	2025-09-17 10:21:23 +02:00
Napalys Klicius	9ca4773227	Added modeling for CreatePreparedStatementCommand	2025-09-17 10:21:10 +02:00
Napalys Klicius	801a34f6a1	Moved typeModel at the start of the file	2025-09-17 10:20:24 +02:00
Napalys Klicius	9beac51586	Unified aws-db modeling into singular file	2025-09-17 10:20:10 +02:00
Napalys Klicius	5b31350e83	Added tests and modeling of database-access-result	2025-09-17 10:20:01 +02:00
Napalys Klicius	93d9ae73b7	Updated change note	2025-09-17 10:19:52 +02:00
Napalys Klicius	e5f02852e1	Added modeling of rds v2 and v3 for sql injections	2025-09-17 10:19:22 +02:00
Napalys Klicius	0e6bac73a7	Added modeling of athena v2 and v3 for sql injections	2025-09-17 10:18:58 +02:00
Napalys Klicius	ee1af432fe	Added modeling of client-s3 v2 and v3	2025-09-17 10:16:25 +02:00
Napalys Klicius	1149617f7b	Added change note	2025-09-17 10:15:32 +02:00
Napalys Klicius	06ab918985	Added modeling for V2 of dynamoDB	2025-09-17 10:15:19 +02:00
Napalys Klicius	ae2e8b1292	Added modeling of dynamodb v3 for sql injections	2025-09-17 10:13:24 +02:00
github-actions[bot]	02a1b1efcb	Release preparation for version 2.23.1	2025-09-16 14:14:42 +00:00
Asger F	7670a2bd77	Merge pull request #20375 from asgerf/js/promise-try ... JS: Support Promise.try and Array.prototype.with	2025-09-16 14:44:07 +02:00
Napalys Klicius	97a11de1e3	Merge pull request #20435 from Napalys/js/promisification_modeling ... JS: Promisification library modeling and enhance flow	2025-09-16 14:07:53 +02:00
Asger F	0b900711bf	Update javascript/ql/lib/semmle/javascript/frameworks/Express.qll ... Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>	2025-09-16 13:48:26 +02:00
Napalys Klicius	49ccb8ce2b	JS: Simplify exist clause to use Promisify::PromisifyAllCall instead of DataFlow::SourceNode	2025-09-16 13:13:15 +02:00