11357 Commits

Author	SHA1	Message	Date
Napalys Klicius	261d28a591	Merge pull request #19099 from Napalys/js/axios_missing_methods ... JS: Added support for missing `axios` methods	2025-03-27 12:03:11 +01:00
Asger F	441ca1c862	JS: Change compatibility of upgrade script to partial	2025-03-27 11:54:01 +01:00
Asger F	86ae8012be	Expand downgrade script	2025-03-27 11:52:11 +01:00
Asger F	cccea919b4	JS: Update stats file	2025-03-27 11:52:10 +01:00
Asger F	ab1f929228	JS: Add downgrade script	2025-03-27 11:52:08 +01:00
Asger F	02ee8cfe2d	JS: Add upgrade script	2025-03-27 11:51:27 +01:00
Asger F	da269c6fb1	JS: More test updates	2025-03-27 11:51:25 +01:00
Asger F	50202d574f	JS: Update some deprecated calls to getName()	2025-03-27 11:51:24 +01:00
Asger F	c8817d9667	JS: Parse with proper locations	2025-03-27 11:51:23 +01:00
Asger F	cc2bec0808	JS: Ensure correct value is used in parseNameExpression() ... The call to expect() below here updates 'token' and 'value' to that of the NEXT token (not the name). The code happened to work because the 'value' field is only updated if a token with a relevant value is found. E.g. if a name token could be followed by another name, then we would have seen the wrong name here.	2025-03-27 11:51:21 +01:00
Asger F	6868f66108	JS: Restrict size of hasNameParts ... Test updates look OK. Some intermediate results are omitted but the qualified name of the final type names are still present.	2025-03-27 11:51:20 +01:00
Asger F	b1554443d8	JS: Update TRAP output	2025-03-27 11:51:19 +01:00
Asger F	328bf753b4	JS: Benign test updates	2025-03-27 11:51:17 +01:00
Asger F	fa53ff9f3e	JS: Update extractor version string	2025-03-27 11:51:16 +01:00
Asger F	3a6089740e	JS: Separate JSDoc qualified names into individual identifiers	2025-03-27 11:51:14 +01:00
Asger F	c61454b5ca	JS: Remove unused 'spec' field	2025-03-27 11:51:13 +01:00
Napalys Klicius	d771a91c9c	Update javascript/ql/lib/change-notes/2025-03-26-async-fileRead.md ... Co-authored-by: Erik Krogh Kristensen <erik-krogh@github.com>	2025-03-27 10:21:23 +01:00
Tamas Vajk	34e8318797	Rename the CCR query suite to code-quality	2025-03-27 08:36:53 +01:00
Napalys	bf9a21fce2	Added change note	2025-03-26 14:27:13 +01:00
Napalys	200bf391ce	Enhance NodeJSLib data flow handling through await.	2025-03-26 14:24:52 +01:00
Napalys	762ca2f8f5	Added test case with async readFile, currently not flagged.	2025-03-26 14:21:44 +01:00
Napalys	a78e0e914f	Added change note.	2025-03-26 11:45:25 +01:00
Napalys	ae645e49ba	Added support for @hapi/hapi server.	2025-03-26 11:41:11 +01:00
Napalys	649b4e07e2	Added test cases for @hapi/hapi	2025-03-26 11:35:58 +01:00
Napalys	62ab7f50d6	Added change note.	2025-03-26 09:33:59 +01:00
Erik Krogh Kristensen	14989f1cc6	Merge branch 'main' into lcartey/support-sap-json-formats	2025-03-26 09:07:21 +01:00
Napalys	4cdc40d115	Added SQL injection detection for exec method embeded Express client from hdbext.	2025-03-25 18:39:54 +01:00
Luke Cartey	8814077c76	Add support for additional SAP JSON formats.	2025-03-25 17:01:37 +00:00
Napalys	7cc0634f57	Added createProcStatement as potential sql sink.	2025-03-25 14:50:38 +01:00
Napalys	0285cb6c7a	Added @sap/hdbext.loadProccedure as sql sink.	2025-03-25 14:48:40 +01:00
Napalys	e595def8b0	Modeled execute as potential hana's sink.	2025-03-25 14:44:37 +01:00
Napalys	d28af9508a	Added sink models for hana's client prepare function.	2025-03-25 14:42:27 +01:00
Napalys	9229962096	Add sink model for SQL injection detection in exec clients.	2025-03-25 14:36:13 +01:00
Napalys	032cfc134f	Added test cases for hana clients.	2025-03-25 14:29:06 +01:00
Anders Schack-Mulligen	d5d0274ce7	Java/SSA: Keep proper distinction between cached stages.	2025-03-25 13:43:55 +01:00
Napalys Klicius	0689cf7f5e	Update javascript/ql/lib/ext/axios.model.yml ... Co-authored-by: Asger F <asgerf@github.com>	2025-03-25 10:56:01 +01:00
Napalys	9dcfe0e709	Added change note.	2025-03-25 10:55:44 +01:00
Napalys	1ee3fde214	Added support for axios.interceptors.response.	2025-03-25 10:55:34 +01:00
Napalys	20bb831ce9	Added test case for axios.interceptors.response with missing alert.	2025-03-25 10:55:14 +01:00
Napalys	10498bbaa4	Added support for axios.interceptors.request.	2025-03-25 10:54:56 +01:00
Napalys	ea181e4173	Added test case for axios.interceptors.request	2025-03-25 10:54:17 +01:00
Napalys	a3c84d9feb	Added support for axios.create.	2025-03-25 10:45:09 +01:00
Napalys	8f2adb6543	Added test case for create.	2025-03-25 10:44:15 +01:00
Napalys	c0d848cdf1	Added support for getUri.	2025-03-25 10:43:54 +01:00
Napalys	f48a362d71	Added support for patchForm.	2025-03-25 10:42:57 +01:00
Napalys	7fe943d8b2	Added support for putForm.	2025-03-25 10:42:04 +01:00
Napalys	69fe251eac	Add support for axios.postForm in ClientRequest.	2025-03-25 10:41:08 +01:00
Napalys	e79f4602b5	Added test for axios methods. ... In particular for `postForm` `putForm` `patchForm` `getUri`.	2025-03-25 10:40:00 +01:00
Napalys	cb14b4381e	Applied copilot suggestions.	2025-03-24 14:05:28 +01:00
Napalys	240b42bb76	Added change note.	2025-03-24 13:24:40 +01:00