6853 Commits

Author	SHA1	Message	Date
Erik Krogh Kristensen	d114cdc6e5	add taint step through the colorette library	2021-06-22 23:02:01 +02:00
Erik Krogh Kristensen	e4427bb34a	add taint step through the wrap-ansi library	2021-06-22 22:59:03 +02:00
Erik Krogh Kristensen	626a653401	add taint step through the colors library	2021-06-22 22:55:15 +02:00
Erik Krogh Kristensen	a21ebbbe8f	add taint step through the ansi-colors library	2021-06-22 22:47:58 +02:00
CodeQL CI	d719a1e627	Merge pull request #6114 from erik-krogh/promisify ... Approved by esbena	2021-06-22 12:19:38 -07:00
Erik Krogh Kristensen	2ba2642c7a	add more template sinks for the js/code-injection query	2021-06-22 20:24:42 +02:00
CodeQL CI	bde1bb4030	Merge pull request #6126 from erik-krogh/dates ... Approved by esbena	2021-06-22 10:35:51 -07:00
Erik Krogh Kristensen	062502fecc	add back support for util-promisifyall	2021-06-22 15:34:51 +02:00
Asger Feldthaus	16e3681fd3	JS: Update RegExpInjection test case	2021-06-22 12:00:04 +02:00
Erik Krogh Kristensen	4360e5dcbc	add model of the thenify library	2021-06-22 11:55:58 +02:00
Erik Krogh Kristensen	61cc415a32	add model of the util.promisify library	2021-06-22 11:55:58 +02:00
Erik Krogh Kristensen	2f3ea4412f	add model of the pify library	2021-06-22 11:55:54 +02:00
Erik Krogh Kristensen	c736606695	add support for moment/dayjs/luxon instances returned by @date-io adapters	2021-06-22 10:42:24 +02:00
Erik Krogh Kristensen	f2ca2134d1	refactor promisify models into a module	2021-06-22 10:40:22 +02:00
Erik Krogh Kristensen	f53955fb5e	add support for the promise.allsettled library	2021-06-22 10:30:33 +02:00
Erik Krogh Kristensen	95a7b16315	add support for the lie polyfill	2021-06-22 10:30:33 +02:00
Erik Krogh Kristensen	085efe5d20	add support for the any-promise polyfill	2021-06-22 10:30:33 +02:00
Erik Krogh Kristensen	cb82cdf6e9	add support for the synchronous-promise library	2021-06-22 10:30:33 +02:00
Erik Krogh Kristensen	5cb3c2c650	add support for the pinkie polyfill	2021-06-22 10:30:33 +02:00
Erik Krogh Kristensen	b574292dab	add support for the pinkie-promise polyfill	2021-06-22 10:30:33 +02:00
Erik Krogh Kristensen	bb1c971348	add support for the when polyfill, and expand the defition of ES2015PromiseDefinition	2021-06-22 10:30:32 +02:00
Erik Krogh Kristensen	e467ea2ea6	add support for the native-promise-only polyfill	2021-06-22 10:30:32 +02:00
Erik Krogh Kristensen	ebde9015d8	add support for the rsvp and es6-promise polyfill	2021-06-22 10:30:32 +02:00
Erik Krogh Kristensen	d7a47e8fbd	add support for the promise-polyfill polyfill	2021-06-22 10:30:32 +02:00
Erik Krogh Kristensen	f095e190a9	add support for the promise polyfill	2021-06-22 10:30:32 +02:00
Erik Krogh Kristensen	967ccfef0c	add support for kew	2021-06-22 10:30:28 +02:00
Erik Krogh Kristensen	a4303bc81d	add CWE-1333 to the JS ReDoS queries	2021-06-22 10:24:56 +02:00
Erik Krogh Kristensen	227f61b954	add model for the luxon library	2021-06-21 23:29:12 +02:00
Erik Krogh Kristensen	cdf3cdcf71	add model for the formatByString and formatByNumber functions in @date-io	2021-06-21 23:29:01 +02:00
Erik Krogh Kristensen	2a4570eaaa	add model for the dayjs library	2021-06-21 23:28:45 +02:00
Asger Feldthaus	0754ed2b5c	JS: Change note	2021-06-21 11:46:44 +02:00
CodeQL CI	081fd28090	Merge pull request #6102 from RasmusWL/js-qhelp-fixup ... Approved by erik-krogh	2021-06-18 04:52:48 -07:00
Rasmus Wriedt Larsen	968a0921d4	JS: Fix secure example inclusion in InsecureDownload.qhelp	2021-06-18 12:12:06 +02:00
CodeQL CI	1ffd9c9ba7	Merge pull request #6086 from asgerf/js/knex ... Approved by esbena	2021-06-18 01:58:21 -07:00
Calum Grant	32f6a465b0	Merge pull request #6080 from github/calumgrant/security-severities ... Update security-severity scores	2021-06-18 09:40:40 +01:00
CodeQL CI	9b84a8e146	Merge pull request #6048 from erik-krogh/graphql ... Approved by esbena	2021-06-16 06:35:42 -07:00
Asger Feldthaus	5838e54a46	JS: Sharpen recognition of string 'match' calls	2021-06-16 09:27:02 +02:00
Asger Feldthaus	af9cc07066	JS: Change note	2021-06-15 17:19:39 +02:00
Asger Feldthaus	9f052a2ecd	JS: Add Knex model	2021-06-15 17:19:39 +02:00
CodeQL CI	847faf536d	Merge pull request #6070 from asgerf/js/script-with-tsx-lang ... Approved by erik-krogh	2021-06-15 08:17:53 -07:00
Calum Grant	771e686946	Update security-severity scores	2021-06-15 13:25:17 +01:00
Erik Krogh Kristensen	60920c1ecc	require that the URL refers to graphql in some way	2021-06-15 09:53:32 +02:00
Erik Krogh Kristensen	416c986cbc	add support for graphql in @actions/github	2021-06-15 09:43:11 +02:00
Asger Feldthaus	53bef94b75	JS: Extractor version bump	2021-06-15 09:34:54 +02:00
Asger Feldthaus	c58942092f	JS: Add change note	2021-06-14 13:43:11 +02:00
Asger Feldthaus	bc375196d1	JS: Extract script tags with lang=tsx	2021-06-14 13:40:53 +02:00
Calum Grant	a594afb828	Add security-severity metadata	2021-06-10 20:11:08 +01:00
Erik Krogh Kristensen	50d574d20d	add graphql injection to the sql-injection query	2021-06-10 21:01:54 +02:00
CodeQL CI	d65e6bbfa1	Merge pull request #6035 from erik-krogh/joi ... Approved by asgerf	2021-06-09 04:42:54 -07:00
Erik Krogh Kristensen	3e171adaab	update qldoc ... Co-authored-by: Asger F <asgerf@github.com>	2021-06-09 10:45:55 +02:00