11950 Commits

Author	SHA1	Message	Date
Asger F	6ac35f1c66	JS: Use in MissingAwait	2025-05-20 13:20:13 +02:00
Asger F	4e44fdaa7b	JS: Use hasUnderlyingStringOrAnyType in Nest model	2025-05-20 13:20:12 +02:00
Asger F	6fdd7feed4	JS: Use sanitizing primitive type in Nest model	2025-05-20 13:20:10 +02:00
Asger F	2d21074598	JS: Use sanitizing primitive types in ViewComponentInput	2025-05-20 13:20:09 +02:00
Asger F	9fd85c9688	JS: Update jQuery model	2025-05-20 13:20:07 +02:00
Asger F	cca48c09b9	JS: Use in TypeAnnotation.getClass and hasUnderlyingType predicates	2025-05-20 13:20:06 +02:00
Asger F	b923eac9be	JS: Use underlying types in DataFlow::Node	2025-05-20 13:20:04 +02:00
Asger F	fc580a5f78	JS: Add TypeResolution.qll	2025-05-20 13:20:03 +02:00
Asger F	d61f576324	JS: Add UnderlyingTypes.qll	2025-05-20 13:20:01 +02:00
Asger F	1533e134a5	JS: Add NameResolution.qll	2025-05-20 13:20:00 +02:00
Asger F	1051136c07	JS: Add test	2025-05-20 13:19:58 +02:00
Asger F	4bfb0483a8	JS: Resolve JSDocLocalTypeAccess to a variable in scope	2025-05-20 13:19:57 +02:00
Asger F	9566265356	JS: Add helper for getting local type names	2025-05-20 13:19:56 +02:00
Asger F	4cd6f45572	JS: Avoid accidental recursion with API graphs	2025-05-20 13:19:54 +02:00
Asger F	b5a4fc0041	JS: Make Closure concepts based on AST instead	2025-05-20 13:19:52 +02:00
Asger F	50e4ac8298	JS: Do not ignore variables from ambient declarations	2025-05-20 13:19:51 +02:00
Asger F	9fc0b8c9cc	JS: Add ImportSpecifier.getImportDeclaration()	2025-05-20 13:19:50 +02:00
Asger F	5064cd5d94	JS: Exclude externs from CallGraph meta-query	2025-05-20 13:19:48 +02:00
Asger F	317e61d370	JS: Update UnresolvableImports to handle nested packages	2025-05-19 12:53:19 +02:00
Asger F	1e8a49f311	JS: More efficient nested package naming	2025-05-19 12:53:18 +02:00
Michael Nebel	dabeddb62d	Add change-notes.	2025-05-19 09:26:49 +02:00
Michael Nebel	530025b7ae	Update integration tests expected output.	2025-05-19 09:26:47 +02:00
Michael Nebel	03ecd24469	Lower the precision of a range of harcoded password queries to remove them from query suites.	2025-05-19 09:26:45 +02:00
Napalys Klicius	f6a8909bfe	Merge pull request #19356 from Napalys/js/merge_classes ... JS: Merge `ES6Class` to `FunctionStyleClass`	2025-05-16 10:31:33 +02:00
github-actions[bot]	5f9dd75d7d	Post-release preparation for codeql-cli-2.21.3	2025-05-13 21:49:43 +00:00
github-actions[bot]	2de4a01c86	Release preparation for version 2.21.3	2025-05-13 21:14:27 +00:00
Asger F	169ae19015	Merge pull request #19391 from asgerf/js/typescript-path-resolution ... JS: Overhaul import resolution	2025-05-13 15:46:38 +02:00
Asger F	aea676df3c	Merge pull request #19445 from asgerf/js/summaries-with-fallback ... JS: Generate flow summaries from summaryModels; only generate steps as a fallback	2025-05-13 14:49:38 +02:00
Napalys Klicius	d1e769ba54	Merge pull request #19422 from Napalys/js/shelljs ... JS: Modeling of `ShellJS` functions	2025-05-02 14:18:44 +02:00
Napalys Klicius	30694c11d6	Removed code duplication	2025-05-02 13:44:07 +02:00
Asger F	b8be1bcee8	JS: Avoid duplication with constructor body	2025-05-02 13:44:03 +02:00
Napalys Klicius	871e93d9fe	Update javascript/ql/lib/semmle/javascript/frameworks/ShellJS.qll ... Co-authored-by: Asger F <asgerf@github.com>	2025-05-02 13:39:46 +02:00
Asger F	1f308ee47a	JS: Explain use of monotonicAggregates	2025-05-02 13:22:27 +02:00
Asger F	5c9218fe5a	JS: Add comment about 'path' heuristic	2025-05-02 13:22:25 +02:00
Asger F	f3e0cfd947	Apply suggestions from code review ... Co-authored-by: Erik Krogh Kristensen <erik-krogh@github.com>	2025-05-02 12:41:29 +02:00
Asger F	16fc8c3d9e	JS: Benign test updates	2025-05-02 11:09:19 +02:00
Tamás Vajk	cb1c3736fe	Merge pull request #19413 from tamasvajk/quality/query-suite-selector ... Add code quality suite selector and use that in the code quality suites	2025-05-02 08:18:48 +02:00
Napalys Klicius	c430a36b4c	Refactored merge StandardClassNode into ClassNode	2025-05-01 19:12:12 +02:00
Asger F	a44bdf3be2	JS: Generate summaries from summaryModel, and only generate steps as a fallback	2025-05-01 15:22:47 +02:00
Asger F	ca5f8b0c1d	JS: Move some code into ModelsAsData.qll	2025-05-01 15:17:07 +02:00
Owen Mansel-Chan	e0549483fd	Merge pull request #19429 from owen-mc/fix-cwe-tags-missing-leading-zero ... Fix cwe tags to include leading zero	2025-05-01 14:09:54 +01:00
Owen Mansel-Chan	0863c87572	Add change notes	2025-05-01 10:33:24 +01:00
Napalys Klicius	68a9dd9f9e	Address comments	2025-05-01 11:19:41 +02:00
Napalys Klicius	c7d764f666	Brought back FunctionStyleClass marked as deprecated	2025-05-01 11:16:04 +02:00
Napalys Klicius	d4b5ef6a66	Refactor process.env handling in CleartextLogging and IndirectCommandInjection modules to use ThreatModelSource	2025-05-01 11:14:15 +02:00
Napalys Klicius	33d8ffa83e	Added test cases for shelljs.env	2025-05-01 11:11:29 +02:00
Napalys Klicius	602500e280	Added change note	2025-05-01 11:09:56 +02:00
Napalys Klicius	40d176a770	Added model for shelljs.env	2025-05-01 11:09:47 +02:00
Napalys Klicius	9bab59363c	Fix class instance method detection in constructor receiver	2025-05-01 09:14:39 +02:00
Napalys Klicius	7430d0e5e0	Added failing test with method as field	2025-05-01 09:14:37 +02:00