Dave Bartolomeo
|
311ba8ea1b
|
Merge from main to resolve conflicts
|
2024-03-19 10:41:31 -04:00 |
|
Rasmus Wriedt Larsen
|
d78efdb67b
|
Merge pull request #15883 from RasmusWL/js-cg-tests
JS: show test changes after #15823
|
2024-03-19 09:58:20 +01:00 |
|
Tom Hvitved
|
5ab1047b14
|
Merge pull request #15882 from hvitved/js/dataflow-node-get-location
JS: Add `DataFlow::Node.getLocation`
|
2024-03-19 09:21:00 +01:00 |
|
Rasmus Wriedt Larsen
|
c82f5dad56
|
JS: show test changes after #15823
|
2024-03-18 13:09:37 +01:00 |
|
Rasmus Wriedt Larsen
|
28c3d35e9b
|
Merge commit '7c35309732dd2aa4dc0b4e2949922272ad448854' into js-cg-tests
|
2024-03-18 13:08:46 +01:00 |
|
Rasmus Wriedt Larsen
|
f9309cec0b
|
JS: Add tests before #15823 changes
|
2024-03-18 13:08:39 +01:00 |
|
github-actions[bot]
|
0a6243d07b
|
Release preparation for version 2.16.5
|
2024-03-18 10:14:07 +00:00 |
|
Tom Hvitved
|
54fa8181da
|
Address review comment
|
2024-03-13 20:03:01 +01:00 |
|
Erik Krogh Kristensen
|
bd121b98ae
|
Merge pull request #15893 from erik-krogh/more-filter-taint
JS: allow more flow through .filter()
|
2024-03-13 16:19:28 +01:00 |
|
Erik Krogh Kristensen
|
53502a8662
|
Merge pull request #15510 from yoff/ts-54
JS: Add support for TS 5.4
|
2024-03-13 14:22:24 +01:00 |
|
Tom Hvitved
|
16cef92106
|
JS: Add DataFlow::Node.getLocation
|
2024-03-13 13:06:16 +01:00 |
|
Asger F
|
c5a02dae2b
|
Merge pull request #15768 from asgerf/js/amd-pseudo-deps
JS: Do not treat AMD pseudo-dependencies as imports
|
2024-03-13 12:49:17 +01:00 |
|
erik-krogh
|
129286aa1c
|
allow more flow through .filter()
|
2024-03-13 12:03:00 +01:00 |
|
erik-krogh
|
6be0ed1dc3
|
narrow the version specifier used for TypeScript
|
2024-03-12 13:42:58 +01:00 |
|
erik-krogh
|
95a5ec7f27
|
add test that the new Object.groupBy method has a type
|
2024-03-12 13:22:11 +01:00 |
|
erik-krogh
|
9f410eb2d6
|
Merge branch 'main' into ts-54
|
2024-03-11 18:07:52 +01:00 |
|
Rasmus Lerchedahl Petersen
|
d73f43477f
|
update ts to released version 54
|
2024-03-11 16:32:19 +01:00 |
|
Asger F
|
7c35309732
|
Merge pull request #15823 from asgerf/js/lift-cg-restriction
JS: Call graph improvements
|
2024-03-08 13:40:38 +01:00 |
|
Asger F
|
245cd5c0b5
|
Merge pull request #15760 from asgerf/js/summarised-tt-store-steps
JS: Summarise store steps for type tracking
|
2024-03-08 13:16:25 +01:00 |
|
Asger F
|
ac4601cb8f
|
Update javascript/ql/lib/semmle/javascript/dataflow/internal/CallGraphs.qll
Co-authored-by: Rasmus Wriedt Larsen <rasmuswriedtlarsen@gmail.com>
|
2024-03-08 13:01:38 +01:00 |
|
Asger F
|
fc5b9e2796
|
JS: Expand test case
|
2024-03-08 10:34:39 +01:00 |
|
Asger F
|
81b04863b2
|
JS: Change note
|
2024-03-07 13:35:50 +01:00 |
|
Asger F
|
c7295a09cd
|
JS: Benign test output update
|
2024-03-07 11:55:56 +01:00 |
|
github-actions[bot]
|
dc9092c9ec
|
Post-release preparation for codeql-cli-2.16.4
|
2024-03-06 22:19:33 +00:00 |
|
github-actions[bot]
|
2f058ffb4d
|
Release preparation for version 2.16.4
|
2024-03-06 20:56:51 +00:00 |
|
Angela P Wen
|
ce31f8641a
|
Revert "Release preparation for version 2.16.4"
|
2024-03-06 12:07:33 -08:00 |
|
Asger F
|
a54a73c9a2
|
JS: Detect more FunctionStyleClasses
|
2024-03-06 11:37:20 +01:00 |
|
github-actions[bot]
|
661e68dab5
|
Release preparation for version 2.16.4
|
2024-03-05 18:13:58 +00:00 |
|
Angela P Wen
|
967963a653
|
Revert "Release preparation for version 2.16.4"
|
2024-03-05 08:53:33 -08:00 |
|
github-actions[bot]
|
a67218a027
|
Release preparation for version 2.16.4
|
2024-03-04 17:42:08 +00:00 |
|
Asger F
|
4ab7acedb6
|
JS: Do not track instance methods
|
2024-03-04 10:36:13 +01:00 |
|
Asger F
|
f5d014baa5
|
JS: Remove allocation site restriction in CG
|
2024-03-01 23:20:35 +01:00 |
|
Asger F
|
13e3a5158e
|
JS: Fix qldoc
|
2024-02-29 13:59:25 +01:00 |
|
Asger F
|
6a0adff1dc
|
JS: More precise detection of classes with escaping instances
|
2024-02-29 11:15:37 +01:00 |
|
Asger F
|
eeaa2bcc55
|
JS: Add test for class instance escaping into dependency
|
2024-02-29 11:14:23 +01:00 |
|
Asger F
|
853397361f
|
JS: Do not treat AMD pseudo-dependencies as file paths
|
2024-02-29 10:23:28 +01:00 |
|
Asger F
|
052a8e7f81
|
JS: Avoid spurious recursion in AMD
|
2024-02-29 10:23:28 +01:00 |
|
Asger F
|
f384afbaf6
|
JS: Also summarize loadStore steps
|
2024-02-29 10:11:16 +01:00 |
|
Asger F
|
3ad83cc098
|
JS: Summarise store steps for type tracking
|
2024-02-29 10:10:39 +01:00 |
|
Asger F
|
7cd84c8f0a
|
JS: Add type-tracking test
|
2024-02-29 10:10:07 +01:00 |
|
Cornelius Riemenschneider
|
e9b5394cd5
|
JS: Remove empty build target.
The `resources` folder never existed, this was probably introduced
as a copy-paste mistake. Remove the rule.
|
2024-02-26 15:26:44 +01:00 |
|
erik-krogh
|
0056067a17
|
Merge branch 'main' into ts-54
|
2024-02-25 21:20:43 +01:00 |
|
erik-krogh
|
083f56921c
|
update to 5.4.1-rc
|
2024-02-25 21:20:41 +01:00 |
|
Tom Hvitved
|
2683e40038
|
Merge pull request #15708 from hvitved/share-ide-contextual
Share `getFileBySourceArchiveName` implementation
|
2024-02-23 19:56:33 +01:00 |
|
Erik Krogh Kristensen
|
a0f91fbc15
|
Merge pull request #15706 from erik-krogh/pol-reg
ReDoS: Restrict some edges related to upper/lower-case when constructing possible attack strings for polynomial-redos.
|
2024-02-23 12:06:17 +01:00 |
|
Tom Hvitved
|
62b16c0fa3
|
Share getFileBySourceArchiveName implementation
|
2024-02-23 11:25:49 +01:00 |
|
erik-krogh
|
bf22f4a870
|
update expected output
|
2024-02-22 13:21:11 +01:00 |
|
Paolo Tranquilli
|
c15d3ab08a
|
Merge branch 'main' into redsun82/bzlmod
|
2024-02-22 06:05:37 +01:00 |
|
Asger F
|
db10c229de
|
Merge pull request #15663 from asgerf/js/endpoint-naming2
JS: Improvements to endpoint naming
|
2024-02-21 19:36:57 +01:00 |
|
Paolo Tranquilli
|
61bfe7e520
|
Bazel: rename internal module to semmle_code
|
2024-02-21 16:51:39 +01:00 |
|