semmle-qlci
794d5bda6d
Merge pull request #2116 from erik-krogh/arrayCBRet
...
Approved by max-schaefer
2019-11-05 11:32:13 +00:00
Max Schaefer
311cbd824c
JavaScript: Recognize ":" pseudo-directive.
2019-10-31 11:39:09 +00:00
Erik Krogh Kristensen
2e0244cda6
address review feedback
2019-10-21 20:32:45 +02:00
Max Schaefer
55fb86d618
JavaScript: Remove deprecated queries.
...
These queries have all been deprecated since 1.17 (released in July 2018). I think it's time to say goodbye.
2019-10-21 14:42:02 +01:00
Erik Krogh Kristensen
592cb18bf4
add array callbacks to useOfReturnlessFunction query
2019-10-11 16:26:27 +02:00
Erik Krogh Kristensen
7fb8f8453d
fix for when the concatenation root is in parentheses
2019-09-26 16:35:38 +02:00
Erik Krogh Kristensen
69365ccd03
remove false positive in missingSpaceInAppend by requring the presence of a word-like fragment
2019-09-26 12:59:05 +02:00
Esben Sparre Andreasen
aab17850d1
JS: eliminate redundant ConstantString casts
2019-09-11 10:56:49 +02:00
Anders Schack-Mulligen
ca45fb5a60
JavaScript: Autoformat.
2019-09-06 09:04:51 +02:00
Max Schaefer
e35fde322b
JavaScript: Teach ShiftOutOfRange about BigInt.
2019-06-26 09:16:34 -07:00
Esben Sparre Andreasen
b86f43be98
JS: reformulate CallToObjectDefineProperty::getAPropertyAttribute
2019-04-10 14:03:28 +02:00
Esben Sparre Andreasen
bd7eef08e8
JS: introduce CallToObjectDefineProperty::getAPropertyAttribute
2019-03-14 11:59:27 +01:00
Max Schaefer
83e0f3bc8d
Merge pull request #946 from esben-semmle/js/captured-nodes-query-and-type-inference-1
...
JS: Captured Nodes, type inference + a query
2019-03-01 10:48:52 +00:00
Esben Sparre Andreasen
047b69a4c2
JS: address review comments
2019-02-25 15:19:00 +01:00
Esben Sparre Andreasen
91dccc3356
JS: add query js/unused-property
2019-02-21 21:44:28 +01:00
Esben Sparre Andreasen
27cae0c190
JS: model one more 'autobind' for js/unbound-event-handler-receiver
2019-02-21 08:23:54 +01:00
Anders Schack-Mulligen
1182fca665
Javascript: Autoformat qls
2019-02-12 14:38:42 +01:00
james
7cc1442ecb
Update link text
2019-01-30 09:44:07 +00:00
james
81137aa7b4
update links to locations in .ql files
2019-01-30 08:02:02 +00:00
Esben Sparre Andreasen
b35c4b2a9a
JS: support FP pattern for js/unbound-event-handler-receiver
2019-01-14 08:47:37 +01:00
Anders Schack-Mulligen
e58094c732
Javascript: Autoformat.
2019-01-11 11:02:42 +01:00
Max Schaefer
31bb39a810
JavaScript: Autoformat all QL files.
2019-01-07 10:15:45 +00:00
Max Schaefer
e7df9b8b01
JavaScript: Avoid unhelpful magic.
2018-12-10 10:40:37 +00:00
Aditya Sharad
c20b688a3f
Merge master into next.
2018-11-23 16:36:31 +00:00
Esben Sparre Andreasen
41b45352aa
JS(ql): support optional chaining
2018-11-21 08:57:10 +01:00
Max Schaefer
1b59a28be0
JavaScript: Downgrade a few "error" rules to "warning".
...
For all of these queries, the results we tend to see in practice are certainly worth investigating, but aren't crashing bugs, so making them warnings seems more appropriate.
2018-11-19 09:09:26 +00:00
semmle-qlci
4a14bef507
Merge pull request #466 from xiemaisi/js/more-data-flow-predicates
...
Approved by asger-semmle
2018-11-14 16:07:59 +00:00
Max Schaefer
6f6b3b0d5e
JavaScript: Add a convenience method to SourceNode and use it in a few places.
2018-11-14 11:58:45 +00:00
Esben Sparre Andreasen
5666deac14
JS: rename js/useless-defensive-code to js/unneeded-defensive-code
2018-11-13 08:19:38 +01:00
Esben Sparre Andreasen
8ea9fd4cca
JS: address review comments
2018-11-13 08:19:38 +01:00
Esben Sparre Andreasen
358e6188d9
JS: downgrade other alerts to js/useless-defensive-code
2018-11-13 08:19:38 +01:00
Esben Sparre Andreasen
e29c57a58e
JS: add whitelist to js/useless-defensive-code
2018-11-13 08:19:38 +01:00
Esben Sparre Andreasen
b073fcfca2
JS: add query: js/useless-defensive-code
2018-11-13 08:19:38 +01:00
semmle-qlci
29cabc0e09
Merge pull request #424 from esben-semmle/js/syntactic-nullOrUndefined
...
Approved by asger-semmle
2018-11-08 10:52:44 +00:00
Esben Sparre Andreasen
e6a190c06e
JS: replace .stripParens query uses w. .getUnderlyingReference
2018-11-07 09:32:02 +01:00
Esben Sparre Andreasen
43e215c7af
JS: replace .stripParens query uses w. .getUnderlyingValue
2018-11-07 09:32:02 +01:00
Asger F
1252cde7f3
JS: remove a comma
2018-11-06 12:24:34 +00:00
Asger F
e670919807
JS: mention @type tag in qhelp
2018-11-05 11:31:32 +00:00
Asger F
e39b0c7a75
JavaScript: address comments
2018-11-05 11:31:02 +00:00
Asger F
4f4ad2b942
JavaScript: ignore self-assignments with a JSDoc comment
2018-11-05 11:31:02 +00:00
Esben Sparre Andreasen
8f635e6493
JS: truncate js/unknown-directive message content
2018-10-26 15:21:16 +02:00
Max Schaefer
355786c2d8
Merge pull request #296 from esben-semmle/js/more-array-creation
...
JS: use DataFlow::ArrayCreationNode in additional places
2018-10-10 08:10:17 +01:00
Esben Sparre Andreasen
70cd03d3bc
JS: use DataFlow::ArrayCreationNode in additional places
2018-10-08 15:47:11 +02:00
Esben Sparre Andreasen
a668f906bc
JS: recognize binding decorators on classes
2018-10-08 07:58:12 +02:00
semmle-qlci
e9adc63d91
Merge pull request #260 from xiemaisi/js/confusing-precedence
...
Approved by esben-semmle, mc-semmle
2018-10-03 09:07:18 +01:00
Max Schaefer
768368498f
JavaScript: Introduce new query UnclearOperatorPrecedence.
2018-10-02 08:46:51 +01:00
Max Schaefer
a63b7fc215
JavaScript: Introduce new library predicate for computing whitespace around binary operators.
2018-10-02 08:46:11 +01:00
Max Schaefer
1ab943c16b
JavaScript: Fix typo in query help.
2018-10-01 08:04:45 +01:00
Esben Sparre Andreasen
fcc33ce93d
JS: whitelist auto-bind methods in js/unbound-event-handler-receiver
2018-09-13 08:41:41 +02:00
Esben Sparre Andreasen
eb10f603ab
JS: whitelist decorator-bound methods in js/unbound-event-handler-receiver
2018-09-13 08:41:41 +02:00
