Asger F
|
74dbc71535
|
JS: Change Extend steps to PreCallGraphStep
|
2023-04-17 08:20:18 +02:00 |
|
Erik Krogh Kristensen
|
cece307c60
|
Merge pull request #12802 from erik-krogh/history-xss
JS: add browser history as XSS sink
|
2023-04-14 13:35:19 +02:00 |
|
Alex Eyers-Taylor
|
c6a482819a
|
Bump all qlpacks major versions
|
2023-04-13 19:15:27 +01:00 |
|
Alex Ford
|
8c46bfd051
|
Merge pull request #12816 from github/rc/3.9
Merge `rc/3.9` into `main`
|
2023-04-13 12:35:41 +01:00 |
|
Erik Krogh Kristensen
|
cfb273ae01
|
Merge pull request #12799 from erik-krogh/oneColumn
JS: use 1-based column locations for diagnostics
|
2023-04-12 14:48:20 +02:00 |
|
Asger F
|
b819f55203
|
Merge pull request #12792 from asgerf/js/redux-model-perf
JS: add getForwardingFunction and use to sharpen useSelector model
|
2023-04-12 14:09:59 +02:00 |
|
erik-krogh
|
d3cc1d6991
|
update expected output of diagnostics test
|
2023-04-12 13:42:05 +02:00 |
|
erik-krogh
|
b1957623c1
|
add browser history as XSS sink
|
2023-04-12 13:38:18 +02:00 |
|
Erik Krogh Kristensen
|
8cb54b748b
|
Merge pull request #12787 from tyage/add-router-sink
JS: Add New XSS sink - Next.js router.push/replace
|
2023-04-12 13:30:21 +02:00 |
|
Asger F
|
aef0fa3c8a
|
JS: Expand QLDoc
|
2023-04-11 14:16:36 +02:00 |
|
Asger F
|
2c65a49d7c
|
JS: Add getForwardingFunction() to API graphs
|
2023-04-11 14:00:30 +02:00 |
|
Asger F
|
4ce03d4dc4
|
JS: Restrict useSelector steps to local callbacks
|
2023-04-11 13:33:46 +02:00 |
|
Asger F
|
3cc931306f
|
JS: Add test for selector nodes with multiple access paths
|
2023-04-11 13:33:27 +02:00 |
|
tyage
|
40d475863d
|
Add change note
|
2023-04-08 18:36:50 +09:00 |
|
tyage
|
320cb99dbf
|
Add replace method test
|
2023-04-08 18:31:48 +09:00 |
|
tyage
|
668e1accaa
|
Remove unnecessary whiteline
|
2023-04-08 18:24:31 +09:00 |
|
tyage
|
7f9b8557ac
|
Add Next.js router push as XSS sink
|
2023-04-08 18:18:34 +09:00 |
|
github-actions[bot]
|
ac426b1302
|
Post-release preparation for codeql-cli-2.12.6
|
2023-04-04 16:49:26 +00:00 |
|
Asger F
|
5cc7380bcd
|
JS: Change note
|
2023-04-04 16:49:14 +02:00 |
|
Asger F
|
53de9ae580
|
Merge pull request #12729 from asgerf/js/crypto-modernize
JS: Modernize crypto libraries
|
2023-04-03 12:16:22 +02:00 |
|
Jeroen Ketema
|
17bd9c12d7
|
JS: Fix qhelp after file rename
|
2023-04-03 09:25:19 +02:00 |
|
Erik Krogh Kristensen
|
1e1a692ee6
|
Merge pull request #12686 from erik-krogh/backtick-parse-error
JS: add backticks around the concrete parse error
|
2023-03-31 14:56:38 +02:00 |
|
Asger F
|
64cf27ab87
|
JS: Modernize crypto libraries
|
2023-03-31 14:49:23 +02:00 |
|
Asger F
|
40530ae14d
|
JS: Simplfy with set literal
|
2023-03-31 12:04:56 +02:00 |
|
Asger F
|
4a06b81429
|
JS: Use API graphs in CryptoJS
|
2023-03-31 12:03:14 +02:00 |
|
Asger F
|
dec1e4dfd6
|
Merge pull request #12666 from smiddy007/improve-insufficient-pw-hash-query
JS: Improve insufficient pw hash query
|
2023-03-31 11:58:41 +02:00 |
|
github-actions[bot]
|
0a3218676c
|
Release preparation for version 2.12.6
|
2023-03-30 19:25:06 +00:00 |
|
Erik Krogh Kristensen
|
b382465078
|
Merge pull request #12679 from ctbellanti/improved-certificate-validation
JS: Improved coverage for disabled certificate validation
|
2023-03-30 16:24:33 +02:00 |
|
github-actions[bot]
|
e87ce62f95
|
Post-release preparation for codeql-cli-2.12.5
|
2023-03-30 13:48:58 +00:00 |
|
erik-krogh
|
47783326c2
|
add test for https.createServer in DisablingCertificateValidation.ql
|
2023-03-30 14:15:25 +02:00 |
|
Asger F
|
43174cfe3a
|
Merge pull request #12668 from asgerf/js/jquery-callback-sinks
JS: fix handling of jQuery sinks involving callback
|
2023-03-30 12:42:53 +02:00 |
|
Jeroen Ketema
|
0acca2ba76
|
Merge pull request #12687 from jketema/unit-2
Make imports of `codeql.util.Unit` private
|
2023-03-29 13:07:12 +02:00 |
|
smiddy007
|
0eb61d39d3
|
formatting
|
2023-03-28 11:28:32 -04:00 |
|
smiddy007
|
fe3b0a56ca
|
Removed unnecessary field
|
2023-03-28 11:27:23 -04:00 |
|
smiddy007
|
8e9f2185c8
|
Merge branch 'main' into improve-insufficient-pw-hash-query
|
2023-03-28 11:15:10 -04:00 |
|
smiddy007
|
123eb1e57b
|
Update javascript/ql/lib/semmle/javascript/frameworks/CryptoLibraries.qll
Co-authored-by: Asger F <asgerf@github.com>
|
2023-03-28 11:14:28 -04:00 |
|
Erik Krogh Kristensen
|
13c0effbd2
|
change to minor change
|
2023-03-28 15:27:16 +02:00 |
|
Erik Krogh Kristensen
|
451f6f01bb
|
Merge pull request #12633 from erik-krogh/more-global-flow
JS: better callgraph support for global variables
|
2023-03-28 15:19:50 +02:00 |
|
Jeroen Ketema
|
3b8ad087eb
|
Make imports of codeql.util.Unit private
|
2023-03-28 14:14:13 +02:00 |
|
Asger F
|
61a7ee9387
|
JS: Use getABoundFunctionValue instead of type-tracking
|
2023-03-28 12:56:03 +02:00 |
|
erik-krogh
|
e5e20ab42c
|
add backticks around the concrete parse error
|
2023-03-28 10:57:13 +02:00 |
|
smiddy007
|
2caab8748e
|
Merge branch 'improve-insufficient-pw-hash-query' of https://github.com/smiddy007/codeql into improve-insufficient-pw-hash-query
|
2023-03-27 15:20:24 -04:00 |
|
smiddy007
|
57ab5a06ae
|
autoformatted
|
2023-03-27 15:20:08 -04:00 |
|
Chris Bellanti
|
6bf94e800b
|
Added check to disabling certificate validation query
|
2023-03-27 12:16:20 -04:00 |
|
smiddy007
|
64b56ef107
|
Merge branch 'main' into improve-insufficient-pw-hash-query
|
2023-03-27 12:07:21 -04:00 |
|
smiddy007
|
3ef5f3070f
|
small change
|
2023-03-27 12:02:35 -04:00 |
|
Erik Krogh Kristensen
|
d3c3f2dc90
|
Merge pull request #12628 from erik-krogh/betterReDoS
ReDoS: better super-linear algorithm
|
2023-03-27 15:26:49 +02:00 |
|
Asger F
|
32d7a80221
|
JS: Change note
|
2023-03-27 14:56:57 +02:00 |
|
Asger F
|
92a681213d
|
JS: Step through jQuery callback return values
|
2023-03-27 11:17:27 +02:00 |
|
Asger F
|
bc2a772f3b
|
JS: Add test case showing false negative
|
2023-03-27 11:08:39 +02:00 |
|