Napalys Klicius
|
32606584ea
|
JS: add enumeration taint flow to Remote Property Injection query
|
2025-08-27 10:23:03 +00:00 |
|
Napalys Klicius
|
c39c04cb86
|
JS: added new test case for remote prop injection via Object.keys
|
2025-08-27 10:20:57 +00:00 |
|
Napalys Klicius
|
10c10c7d30
|
JS: fixed typo in folder name
|
2025-08-27 10:17:39 +00:00 |
|
Asger F
|
4a687a1222
|
JS: Add deprecated alias
The old DbLocation class was public, hence the alias
|
2025-08-27 11:21:18 +02:00 |
|
Asger F
|
dcf63fc434
|
JS: Remove synthetic locations
|
2025-08-27 11:20:24 +02:00 |
|
Asger F
|
be32579cab
|
JS: Change pruning to not rely on Import
|
2025-08-27 10:44:23 +02:00 |
|
Asger F
|
6783456213
|
JS: Add discard predicates
|
2025-08-19 09:20:00 +02:00 |
|
Asger F
|
ba585b8af5
|
JS: Add upgrade/downgrade scripts
|
2025-08-19 09:19:58 +02:00 |
|
Asger F
|
30baf0acec
|
JS: Add overlayChangedFiles
|
2025-08-19 09:19:57 +02:00 |
|
Asger F
|
6872f51725
|
JS: Add metadata to dbscheme and stats
|
2025-08-19 09:19:54 +02:00 |
|
github-actions[bot]
|
42e3d31c49
|
Post-release preparation for codeql-cli-2.22.4
|
2025-08-18 14:42:42 +00:00 |
|
github-actions[bot]
|
90d29994c8
|
Release preparation for version 2.22.4
|
2025-08-18 14:06:09 +00:00 |
|
Napalys Klicius
|
b19d1e0f57
|
Merge pull request #20151 from Napalys/js/command-line-libs
JS: Enhance command injection detection for CLI argument parsing libraries
|
2025-08-18 09:32:29 +02:00 |
|
Napalys Klicius
|
b2346183d6
|
Merge pull request #20148 from Napalys/js/reg-exp-env-variable-threat-model
JS: Exclude environment variables from `js/regex-injection` query by default
|
2025-08-18 09:32:15 +02:00 |
|
Tom Hvitved
|
874f951727
|
Merge pull request #20172 from hvitved/shared/concepts-final-aliases
Shared: Use `final` aliases in `ConcentsShared.qll`
|
2025-08-11 10:14:55 +02:00 |
|
Tom Hvitved
|
eb3c054b0f
|
JS: Generate legacy flow steps for all flow summaries
|
2025-08-06 09:38:49 +02:00 |
|
Tom Hvitved
|
11dcd90435
|
Shared: Use final aliases in ConcentsShared.qll
|
2025-08-05 14:53:52 +02:00 |
|
github-actions[bot]
|
fb4b0aac53
|
Post-release preparation for codeql-cli-2.22.3
|
2025-08-04 17:18:08 +00:00 |
|
github-actions[bot]
|
fd82aeb1f8
|
Release preparation for version 2.22.3
|
2025-08-04 15:47:57 +00:00 |
|
Napalys Klicius
|
881ea7631e
|
Added change note
|
2025-08-01 14:34:25 +02:00 |
|
Napalys Klicius
|
ae4077db72
|
add taint flow for arg/command-line-args with custom argv option
|
2025-08-01 13:34:08 +02:00 |
|
Napalys Klicius
|
d6508f34b6
|
Add taint flow for Commander.js direct property access and action callbacks
|
2025-08-01 13:24:19 +02:00 |
|
Napalys Klicius
|
39170f327c
|
Added couple more test cases for commander js
|
2025-08-01 13:14:39 +02:00 |
|
Napalys Klicius
|
6b4e34dd39
|
Added a step from parse to opts for commander js
|
2025-08-01 13:12:43 +02:00 |
|
Napalys Klicius
|
e980798ede
|
Added step through yargs/yargs constructor and chained methods.
|
2025-08-01 12:01:30 +02:00 |
|
Napalys Klicius
|
e8eb9be3f6
|
Add command injection tests for CLI argument parsing libraries
|
2025-08-01 11:02:59 +02:00 |
|
Napalys Klicius
|
3f9061abdb
|
Added change note
|
2025-07-31 13:20:38 +02:00 |
|
Napalys Klicius
|
d28a6e6352
|
Added new test cases for regexp injection with enviromental variable threat model enabled
|
2025-07-31 13:20:37 +02:00 |
|
Napalys Klicius
|
8583257574
|
Created new folder for test with threat models disabled
|
2025-07-31 13:20:30 +02:00 |
|
Napalys Klicius
|
021aa13ee2
|
Added change note
|
2025-07-31 12:45:34 +02:00 |
|
Napalys Klicius
|
5f538209c9
|
Exlucde environmental variables from default detection in regexp injection
|
2025-07-31 12:09:30 +02:00 |
|
Napalys Klicius
|
791a7e242e
|
Updated qhelp for cors permissive configuration
|
2025-07-31 11:31:10 +02:00 |
|
Napalys Klicius
|
2baca58b27
|
Removed deprecations from cors as it was moved out experimental
|
2025-07-31 11:08:22 +02:00 |
|
Napalys Klicius
|
fd4233e30e
|
Moved apollo modeling to MaD
|
2025-07-31 10:58:38 +02:00 |
|
Napalys Klicius
|
84ffbbec33
|
Added missing doc strings
|
2025-07-30 10:51:38 +00:00 |
|
Napalys Klicius
|
95743d7109
|
Added inline test expectations for cors permissive config
|
2025-07-30 10:42:55 +00:00 |
|
Napalys Klicius
|
92daa7d42c
|
Updated suite expectations
|
2025-07-30 10:32:11 +00:00 |
|
Napalys Klicius
|
358617f533
|
Move CORS misconfiguration query from experimental to Security
|
2025-07-30 10:22:59 +00:00 |
|
Anders Schack-Mulligen
|
3b8234ecec
|
SSA: Update data flow integration and BarrierGuard interface to use GuardValue.
|
2025-07-28 11:29:12 +02:00 |
|
Geoffrey White
|
4f6b698ca3
|
Merge branch 'main' into moresensitive2
|
2025-07-23 08:50:25 +01:00 |
|
github-actions[bot]
|
37cc78255a
|
Post-release preparation for codeql-cli-2.22.2
|
2025-07-22 14:22:20 +00:00 |
|
github-actions[bot]
|
997547b8ef
|
Release preparation for version 2.22.2
|
2025-07-22 14:04:14 +00:00 |
|
Nick Rolfe
|
825c813095
|
Revert "Release preparation for version 2.22.2"
|
2025-07-22 14:33:45 +01:00 |
|
github-actions[bot]
|
c8632b70b7
|
Release preparation for version 2.22.2
|
2025-07-21 16:45:45 +00:00 |
|
Nick Rolfe
|
ad9b637bec
|
Revert "Merge pull request #19994 from github/post-release-prep/codeql-cli-2.22.2"
This reverts commit e5b4a15e35, reversing
changes made to 33e63109bb.
|
2025-07-21 15:18:59 +01:00 |
|
Michael Nebel
|
2f29459cda
|
Merge pull request #19931 from michaelnebel/ql4ql/qualitytagcheck
Ql4ql: Quality query tagging.
|
2025-07-17 14:53:14 +02:00 |
|
Jeroen Ketema
|
acc66c7b58
|
Merge pull request #19984 from jketema/jketema/sec-shared
Make a proper shared library out of the concept related libraries
|
2025-07-17 13:25:33 +02:00 |
|
Jeroen Ketema
|
1990438376
|
JS: Fix import
The import should not have been private, because we want users to still be
able to import this file and have access to the crypto algorithms.
|
2025-07-16 14:41:50 +02:00 |
|
Napalys Klicius
|
887d80f49f
|
Added change note
|
2025-07-15 09:37:34 +02:00 |
|
Napalys Klicius
|
1851deb929
|
Removed libxmljs from being marked as sink for xml-bomb.
|
2025-07-15 09:33:11 +02:00 |
|