37 Commits

Author	SHA1	Message	Date
erik-krogh	368f84785b	fix some more style-guide violations in the alert-messages	2022-10-07 11:22:22 +02:00
erik-krogh	afcb767f8d	Merge branch 'main' into js-followMsg	2022-09-12 13:21:16 +02:00
Erik Krogh Kristensen	9cb7522bc1	change RouteSetup to a DataFlow::Node	2022-09-05 15:45:31 +02:00
erik-krogh	aa56ca37ae	make the alert messages of taint-tracking queries more consistent	2022-09-05 14:04:52 +02:00
Erik Krogh Kristensen	ed80089d7c	fix some QL-for-QL warnings in JS	2022-07-14 09:45:44 +02:00
Erik Krogh Kristensen	daed33f5af	JS: fix more instances of ql/missing-parameter-qldoc	2022-03-16 22:58:28 +01:00
Erik Krogh Kristensen	69353bb014	patch upper-case acronyms to be PascalCase	2022-03-11 11:10:33 +01:00
Erik Krogh Kristensen	823cadecd5	add CWE-219 to js/exposure-of-private-files	2022-01-24 13:22:06 +01:00
Erik Krogh Kristensen	b936a04826	add some fitting CWEs to existing queries	2021-09-14 14:59:24 +02:00
Asger Feldthaus	f6da030572	JS: Migrate to *Query.qll convention	2021-08-12 09:30:18 +02:00
Calum Grant	771e686946	Update security-severity scores	2021-06-15 13:25:17 +01:00
Calum Grant	a594afb828	Add security-severity metadata	2021-06-10 20:11:08 +01:00
Erik Krogh Kristensen	1ad08677c2	model serve-handler in js/exposure-of-private-files	2021-06-08 09:52:56 +02:00
Erik Krogh Kristensen	f03429a4b8	change description for source root folder	2020-11-23 23:46:44 +01:00
Erik Krogh Kristensen	f7f9beeefd	avoid reporting empty names in js/exposure-of-private-files	2020-11-23 14:24:42 +01:00
Erik Krogh Kristensen	02d5fbf46b	remove superfluous space	2020-11-23 14:22:16 +01:00
Erik Krogh Kristensen	6b0adf18d1	rewrite sentence in private-file-exposure qhelp	2020-06-18 16:51:15 +02:00
Erik Krogh Kristensen	9ba2c98ec0	Apply suggestions from doc review ... Co-authored-by: mc <42146119+mchammer01@users.noreply.github.com>	2020-06-18 16:38:52 +02:00
Erik Krogh Kristensen	b0be0eb805	fix qhelp links	2020-06-17 11:50:44 +02:00
Erik Krogh Kristensen	b42824640d	add qhelp for js/exposure-of-private-files	2020-06-17 11:29:24 +02:00
Erik Krogh Kristensen	639907967f	add home/rootdir as leaking folders	2020-06-17 10:46:42 +02:00
Erik Krogh Kristensen	6675ddae12	add more libraries that serve static files to js/exposure-of-private-files	2020-06-17 10:00:59 +02:00
Erik Krogh Kristensen	167239e745	add query to detect accidential leak of private files	2020-06-08 23:41:14 +02:00
Max Schaefer	447a1db616	JavaScript: Assign FileAccessToHttp and HttpToFileAccess a precision. ... They will now be run on LGTM, but their results won't be displayed by default.	2019-02-07 09:48:05 +00:00
Max Schaefer	31bb39a810	JavaScript: Autoformat all QL files.	2019-01-07 10:15:45 +00:00
Max Schaefer	a1f210df67	JavaScript: Address review comments.	2018-12-05 14:10:06 +00:00
Max Schaefer	22502e7a10	JavaScript: Add query help for FileAccessToHttp query.	2018-12-05 13:12:52 +00:00
Max Schaefer	3fcd02ab0e	JavaScript: Rename hasPathFlow to hasFlowPath for consistency with other languages.	2018-11-14 11:23:17 +00:00
Max Schaefer	52ae757279	JavaScript: Select Nodes (instead of PathNodes) everywhere.	2018-11-14 09:16:40 +00:00
Max Schaefer	e365b722ee	JavaScript: Select source and sink in all path queries.	2018-11-14 09:16:40 +00:00
Max Schaefer	11d6259dbf	JavaScript: Move from Node to PathNode.	2018-11-14 09:16:40 +00:00
Max Schaefer	8d87f556e1	JavaScript: Add import DataFlow::PathGraph.	2018-11-14 09:16:40 +00:00
Max Schaefer	60a1357092	JavaScript: Make all taint-based security queries have @kind path-problem.	2018-11-14 09:16:40 +00:00
Max Schaefer	65bcf0f526	JavaScript: Refactor security queries for uniformity.	2018-11-14 09:16:40 +00:00
Esben Sparre Andreasen	358b6c3413	JS: change "remote request" to "network request"	2018-10-10 15:34:39 +02:00
Esben Sparre Andreasen	d261915598	JS: polish FileAccessToHttp.ql	2018-10-10 12:12:54 +02:00
Denis Levin	8152cefa60	Squished changes for HttpToFileAccess commint	2018-09-21 16:44:01 -07:00