Henry Mercer
56e5f01ce0
Merge branch 'main' into codeql-ci/atm/release-0.4.2
2022-11-24 14:41:49 +00:00
github-actions[bot]
78d49e44b1
JS: Bump version of ML-powered library and query packs to 0.4.3
2022-11-24 14:22:14 +00:00
github-actions[bot]
8d96bfe973
JS: Bump patch version of ML-powered library and query packs
2022-11-24 14:18:13 +00:00
Erik Krogh Kristensen
1eec067474
Merge pull request #11294 from erik-krogh/fileDoc
...
QL: improve the "this block-comment should have been a QLDoc"-query
2022-11-23 22:23:36 +01:00
Erik Krogh Kristensen
efdfc361be
Merge pull request #11396 from erik-krogh/jsTypo
...
JS: fix two typos
2022-11-23 22:18:43 +01:00
erik-krogh
2eb6b1adb3
JS: fix two typos
2022-11-23 14:38:12 +01:00
Henry Mercer
3b69821630
ATM: Add descriptions to ML-powered packs
2022-11-23 10:46:23 +00:00
Erik Krogh Kristensen
f67219965e
Merge pull request #11082 from erik-krogh/shellArr
...
JS: treat arrays that gets executed with shell:true as a sink for `js/shell-command-constructed-from-input`
2022-11-22 13:03:50 +01:00
Erik Krogh Kristensen
b2267c0e49
Merge pull request #11343 from erik-krogh/redundantAssignment
...
QL: add redundant-assignment query
2022-11-22 13:03:14 +01:00
Erik Krogh Kristensen
06386b2cdd
Merge pull request #11072 from erik-krogh/slicing
...
JS: poly-redos: don't sanitize calls through substring calls that just remove the start
2022-11-22 13:02:09 +01:00
Edoardo Pirovano
6c33ddcd47
Merge pull request #11349 from github/edoardo/2.11.4-mergeback
...
Merge `rc/3.8` into `main`
2022-11-21 18:08:27 +00:00
erik-krogh
64707f4f7b
remove redundant assignments
2022-11-21 17:45:05 +01:00
github-actions[bot]
5b14ebf22a
Post-release preparation for codeql-cli-2.11.4
2022-11-18 11:26:00 +00:00
erik-krogh
ba2734909f
JS: don't use deprecated files in tests
2022-11-17 22:12:50 +01:00
erik-krogh
3635db8244
JS: delete the deprecated [queryName].qll files
2022-11-17 22:12:50 +01:00
erik-krogh
635b8772d7
JS: delete old deprecations
2022-11-17 22:12:50 +01:00
Chris Smowton
0219c2b02b
Copyedit Javascript changelog
2022-11-17 17:02:01 +00:00
Chris Smowton
80b2f0d3cd
Coopyedit Javascript changelog
2022-11-17 17:01:43 +00:00
github-actions[bot]
e105c13e77
Release preparation for version 2.11.4
2022-11-17 16:40:45 +00:00
Mauro Baluda
a7dc29bad4
Merge branch 'main' into main
2022-11-16 23:53:16 +01:00
Mauro Baluda
49f476d3b4
Update javascript/ql/lib/semmle/javascript/frameworks/Hapi.qll
...
Co-authored-by: Erik Krogh Kristensen <erik-krogh@github.com >
2022-11-16 23:53:07 +01:00
erik-krogh
76c6943159
add stats for @satisfies_expr
2022-11-16 13:48:41 +01:00
erik-krogh
fe49e41d7b
JS: convert some block-comments that could be QLDoc to QLDoc
2022-11-16 13:45:35 +01:00
erik-krogh
9eaeaf7322
ATM: convert some block-comments that could be QLDoc to QLDoc
2022-11-16 13:41:52 +01:00
Mauro Baluda
8bf0bbb715
code generalization
...
Co-authored-by: Erik Krogh Kristensen <erik-krogh@github.com >
2022-11-16 12:06:23 +01:00
Mauro Baluda
798b03f29d
code generalization
...
Co-authored-by: Erik Krogh Kristensen <erik-krogh@github.com >
2022-11-16 12:06:07 +01:00
Mauro Baluda
784475dd66
Merge branch 'main' into main
2022-11-16 11:06:27 +01:00
Mauro Baluda
84cb59b942
Create 2022-11-08-hapi-glue.md
2022-11-16 11:05:23 +01:00
Mauro Baluda
ec04f0c88f
hapi/glue tests
2022-11-15 23:45:27 +01:00
erik-krogh
1f90f7dd4d
add upgrade script
2022-11-15 22:07:25 +01:00
erik-krogh
d4c6f873af
add test for auto-accessors
2022-11-15 22:07:25 +01:00
erik-krogh
65567fa1ce
add test for the more precise type-narrowing with the in operator
2022-11-15 22:07:25 +01:00
erik-krogh
e98d1df5f4
add dataflow support
2022-11-15 22:07:25 +01:00
erik-krogh
a8973c1147
add test for dataflow
2022-11-15 22:07:24 +01:00
erik-krogh
75ef5b1b0b
add support for satisfies-expressions
2022-11-15 22:07:24 +01:00
erik-krogh
30c66303ba
initial skeleton for TypeScript 4.9
2022-11-15 22:07:24 +01:00
Tiferet Gazit
710b215c38
Merge pull request #11263 from github/tiferet/extract-training-data
...
ATM: Extract training data
2022-11-15 12:08:13 -08:00
tiferet
fc078a47fd
Apply suggestion from code review
2022-11-15 11:14:01 -08:00
Tiferet Gazit
092e019de9
Apply suggestions from code review
...
Co-authored-by: Stephan Brandauer <kaeluka@github.com >
2022-11-15 10:48:32 -08:00
Andrew Eisenberg
88750a7000
Add more information about ATM queries for external users
2022-11-15 10:17:56 -08:00
Mauro Baluda
8109a7b67a
Update javascript/ql/lib/semmle/javascript/frameworks/Hapi.qll
...
Co-authored-by: Erik Krogh Kristensen <erik-krogh@github.com >
2022-11-15 16:27:21 +01:00
Mauro Baluda
e5e3bb3705
Generalize the server definition in plugin registration
2022-11-15 16:27:14 +01:00
Mauro Baluda
563a56af9d
Update Hapi.qll
2022-11-15 15:46:34 +01:00
Asger F
dc440aaee6
Merge pull request #11255 from asgerf/js/dynamic-import-type-expr
...
JS: Handle DynamicImport in the context of a type
2022-11-15 13:31:08 +01:00
Stephan Brandauer
ec3578364e
remove superfluous class in EndpointCharacteristics hierarchy
2022-11-15 10:17:38 +01:00
tiferet
9ecff0723c
Fix non-ascii character in docs
2022-11-14 16:34:24 -08:00
tiferet
6b7612fed7
Fix import errors in DebugResultInclusion.ql
2022-11-14 15:33:46 -08:00
tiferet
b47723d607
Delete ExtractEndpointData.
...
Also remove the associated test files.
2022-11-14 14:57:59 -08:00
tiferet
9d7e7735d5
Extract training data:
...
Implement the new query that selects data for training. For now we include clauses that implement logic that is identical to the old queries.
Include a temporary wrapper query that converts the resulting data into the format expected by the endpoint pipeline.
Move the small pieces of `ExtractEndpointData` that are still needed into `ExtractEndpointDataTraining.qll`.
2022-11-14 14:33:08 -08:00
Mauro Baluda
3260c81397
Merge branch 'github:main' into main
2022-11-14 22:59:06 +01:00
