aegilops
a07639f4f6
Set severity to 7.0, in line with other configuration queries
2024-06-19 17:43:41 +01:00
aegilops
26f1b36736
Fixed formatting
2024-06-19 17:41:58 +01:00
aegilops
252c9e9416
Added data extension to set defaults, updated help, added README to explain customization
2024-06-19 17:27:17 +01:00
Paul Hodgkinson
3a98edb60b
Merge branch 'main' into aegilops/js/insecure-helmet-middleware
2024-06-19 12:53:32 +01:00
aegilops
d142f830da
Change note and changed name of query in .ql file
2024-06-19 12:04:32 +01:00
aegilops
8a3cec4977
Fix formatting for check
2024-06-19 11:38:20 +01:00
Paolo Tranquilli
b7a2ea8981
CI: accept other diagnostic format related test changes
2024-06-19 11:33:50 +02:00
aegilops
de96d3951d
Renamed to helmetProperty everywhere
2024-06-19 10:15:06 +01:00
aegilops
f4691b1919
Changed to more-modern Dataflow libraries
2024-06-19 10:11:06 +01:00
aegilops
81ef255a87
Change to helmetProperty from helmetSetting variable name
2024-06-19 10:09:50 +01:00
aegilops
da9e1e61a4
Moved examples into separate files
2024-06-18 19:50:06 +01:00
Rasmus Wriedt Larsen
3fc8401370
JS: Add change-note
2024-06-14 15:37:25 +02:00
Rasmus Wriedt Larsen
3f2befc3e5
JS: Support spread arguments in array.splice
2024-06-14 15:33:17 +02:00
Rasmus Wriedt Larsen
269f8ca2cd
JS: Add splice(...arr) test
2024-06-14 15:19:56 +02:00
Rasmus Wriedt Larsen
68ccec3d43
JS: Prepare for new test
2024-06-14 15:18:47 +02:00
Rasmus Wriedt Larsen
194ef607f7
JS: Updated .expected
2024-06-14 14:49:34 +02:00
am0o0
4e1f7a930d
fix invalid js file sample in qlhelp
2024-06-14 13:47:01 +02:00
am0o0
bb03a9faba
format the query file
2024-06-13 14:54:29 +02:00
am0o0
f0a467e80b
update tests
2024-06-13 14:52:22 +02:00
am0o0
84b9d4d1ac
fix qlhelp errors
2024-06-13 14:32:41 +02:00
Maiky
8ba7ac678d
Update javascript/ql/src/experimental/Security/CWE-942/CorsPermissiveConfigurationCustomizations.qll
...
Co-authored-by: Erik Krogh Kristensen <erik-krogh@github.com >
2024-06-12 19:38:13 +02:00
Maiky
4be5cf4e78
Update javascript/ql/src/experimental/Security/CWE-942/CorsPermissiveConfigurationCustomizations.qll
...
Co-authored-by: Erik Krogh Kristensen <erik-krogh@github.com >
2024-06-12 19:38:02 +02:00
Rasmus Wriedt Larsen
ec18786488
JS: Provide better model for Array.splice
2024-06-12 16:29:21 +02:00
Rasmus Wriedt Larsen
54a0e6dc45
JS: Add new test for Array.splice
2024-06-12 16:24:33 +02:00
Rasmus Wriedt Larsen
9ed6da1072
JS: prepare to extend Array tests
...
Oh how I have enjoyed working with InlineExpectationTests for these sort
of things, not worrying about all the .expected files changing because
you add a few lines in the middle of your tests :D
2024-06-12 16:22:55 +02:00
Rasmus Wriedt Larsen
1027ca266d
JS: Allow many Array steps to be used in type-tracking
2024-06-12 16:14:13 +02:00
github-actions[bot]
8a25081a0e
Post-release preparation for codeql-cli-2.17.5
2024-06-10 15:33:08 +00:00
github-actions[bot]
877bfa2468
Release preparation for version 2.17.5
2024-06-10 13:40:39 +00:00
am0o0
9db334d02f
update select statement, update test cases
2024-06-07 21:26:20 +02:00
am0o0
2c9340331d
update test cases expected results
2024-06-07 21:16:31 +02:00
am0o0
5e0a78c4c7
make predicate for env key and value nodes, use propertyRead/Write instead of API nodes to find env key and value assignments, fix a bug thanks to @erik-krogh
2024-06-07 21:15:30 +02:00
aegilops
7ee5655f31
Merge branch 'aegilops/js/insecure-helmet-middleware' of https://github.com/aegilops/codeql into aegilops/js/insecure-helmet-middleware
2024-06-07 15:50:15 +01:00
aegilops
975811ae59
Change layout of qhelp example code
2024-06-07 15:50:06 +01:00
Paul Hodgkinson
43a140e62c
Merge branch 'main' into aegilops/js/insecure-helmet-middleware
2024-06-07 15:46:18 +01:00
aegilops
7136763c37
Formatting
2024-06-07 15:36:39 +01:00
aegilops
465d64a810
Removed br tags
2024-06-07 15:34:45 +01:00
aegilops
29322f5ff0
Merge branch 'aegilops/js/insecure-helmet-middleware' of https://github.com/aegilops/codeql into aegilops/js/insecure-helmet-middleware
2024-06-07 15:32:23 +01:00
aegilops
f5d465f08a
Added data extension to allow setting extra required Helmet features
2024-06-07 15:32:11 +01:00
Anders Schack-Mulligen
0c47203580
Javascript: Add support for pretty-printed provenace in tests.
2024-06-07 11:47:49 +02:00
am0o0
1033bf9c4c
remove unused imports from javascript test cases
2024-06-07 06:04:12 +02:00
am0o0
b9e3b3310e
update the remote flow based query thanks to @erik-krogh, update tests and separate the local and remote query tests
2024-06-07 06:01:49 +02:00
Asger F
6e0f3df573
Merge pull request #14120 from asgerf/dynamic/typemodel-istypeused
...
Dynamic: add TypeModel.isTypeUsed
2024-06-06 15:31:16 +02:00
am0o0
12df7dee17
Merge branch 'amammad-js-JWT' of https://github.com/amammad/codeql into amammad-js-JWT
2024-06-06 14:04:46 +02:00
Am
af016f9416
Merge branch 'github:main' into amammad-js-JWT
2024-06-06 15:33:26 +03:30
am0o0
8258e377dd
use PascalCase for URLConstructorLabel
2024-06-06 14:00:56 +02:00
am0o0
d27a378008
change query-id to avoid duplicate ids
2024-06-06 13:59:58 +02:00
Am
e3e59e02e5
Merge branch 'github:main' into amammad-js-CodeInjection_dynamic_import
2024-06-04 16:22:06 +04:00
Paolo Tranquilli
096a31dbef
Mark all integration tests as legacy
...
This is in preparation for the new integration test framework. Tests
marked thus will be run by the current framework and ignored by the new
one.
2024-05-31 16:04:50 +02:00
github-actions[bot]
906b65d09c
Post-release preparation for codeql-cli-2.17.4
2024-05-28 18:02:25 +00:00
github-actions[bot]
33b4ae8bbb
Release preparation for version 2.17.4
2024-05-28 15:44:32 +00:00
