Max Schaefer
|
d81d80430e
|
JavaScript: Add a regression test for DeadStoreOfProperty.
|
2020-09-02 19:45:27 +01:00 |
|
Max Schaefer
|
e3a9906071
|
JavaScript: Switch MissingRateLimiting.qll to API graphs.
The added test shows how this helps us avoid false positives.
|
2020-09-02 17:35:47 +01:00 |
|
Max Schaefer
|
6d68036d85
|
JavaScript: Add test demonstrating more SQL flow.
|
2020-09-02 17:35:47 +01:00 |
|
Asger F
|
2c0e9f0c86
|
Merge pull request #4186 from github/rc/1.25
Mergeback: 1.25 -> main
|
2020-09-02 15:12:25 +01:00 |
|
CodeQL CI
|
c017308505
|
Merge pull request #4134 from erik-krogh/genCalls
Approved by asgerf
|
2020-09-02 14:23:39 +01:00 |
|
Erik Krogh Kristensen
|
a24db09418
|
only flag unused array-destructs if it is the last variable
|
2020-09-02 11:40:35 +02:00 |
|
CodeQL CI
|
48a1ee6233
|
Merge pull request #4130 from erik-krogh/bbFix
Approved by asgerf
|
2020-09-02 10:38:50 +01:00 |
|
Erik Krogh Kristensen
|
f0a0f41c3c
|
allow urls that are prefixed with # or ? in js/unsafe-external-link
|
2020-09-02 10:19:42 +02:00 |
|
Erik Krogh Kristensen
|
f7edf28d0d
|
allow mailto links in js/unsafe-external-link
|
2020-08-31 16:01:28 +02:00 |
|
Erik Krogh Kristensen
|
038cca814a
|
Merge branch 'main' into ts4
|
2020-08-28 10:27:49 +02:00 |
|
CodeQL CI
|
ac94869978
|
Merge pull request #3978 from dellalibera/js/insecure-cookies
Approved by esbena
|
2020-08-28 08:31:38 +01:00 |
|
ubuntu
|
cd1d50b637
|
Update expected output
|
2020-08-26 23:50:15 +02:00 |
|
Erik Krogh Kristensen
|
e6bfffaed3
|
update basic-block on ExceptionalFunctionReturnNode and FunctionReturnNode
|
2020-08-25 20:09:41 +02:00 |
|
Erik Krogh Kristensen
|
840f30f7bc
|
add basic-block test to dataflow tests
|
2020-08-25 20:09:36 +02:00 |
|
Erik Krogh Kristensen
|
90422fe705
|
add support for delegating yield
|
2020-08-25 20:05:53 +02:00 |
|
Erik Krogh Kristensen
|
6a07e1e82b
|
add more passing tests
|
2020-08-25 20:04:35 +02:00 |
|
Erik Krogh Kristensen
|
afaaea8922
|
support basic generators
|
2020-08-25 20:04:30 +02:00 |
|
Erik Krogh Kristensen
|
592ed8a3a1
|
remove ordinary return flow from generator functions
|
2020-08-25 14:02:57 +02:00 |
|
CodeQL CI
|
722b1a24f6
|
Merge pull request #4087 from erik-krogh/thisJsx
Approved by asgerf
|
2020-08-25 10:20:32 +01:00 |
|
CodeQL CI
|
844abc51e8
|
Merge pull request #4108 from erik-krogh/packType
Approved by asgerf
|
2020-08-25 10:17:28 +01:00 |
|
CodeQL CI
|
e2c6a01c00
|
Merge pull request #4097 from erik-krogh/createRequire
Approved by esbena
|
2020-08-24 15:57:10 +01:00 |
|
Erik Krogh Kristensen
|
309346841a
|
Merge branch 'main' into packType
|
2020-08-24 12:44:24 +02:00 |
|
Erik Krogh Kristensen
|
eb84f97e7f
|
Merge branch 'main' into ts4
|
2020-08-24 12:20:48 +02:00 |
|
Erik Krogh Kristensen
|
db57f3661e
|
Merge branch 'main' into ts4
|
2020-08-21 15:08:30 +02:00 |
|
Erik Krogh Kristensen
|
65a1769d43
|
Merge branch 'main' into asyncCalls
|
2020-08-21 14:58:27 +02:00 |
|
CodeQL CI
|
29183fa0a1
|
Merge pull request #4067 from erik-krogh/noBin
Approved by esbena
|
2020-08-20 23:07:02 +01:00 |
|
Erik Krogh Kristensen
|
68f7942820
|
Merge branch 'main' into noBin
|
2020-08-20 15:58:15 +02:00 |
|
Erik Krogh Kristensen
|
372e1a3d84
|
support the "type" field on package.json files while extracting
|
2020-08-20 14:26:15 +02:00 |
|
Erik Krogh Kristensen
|
8f68f512df
|
deprecate TrackedNodes.qll
|
2020-08-20 11:26:22 +02:00 |
|
Erik Krogh Kristensen
|
3d5c1560e4
|
basic support for .cjs files
|
2020-08-19 10:53:57 +02:00 |
|
Erik Krogh Kristensen
|
103f739d16
|
add test for types of modules
|
2020-08-19 10:52:38 +02:00 |
|
Erik Krogh Kristensen
|
1e65ed2228
|
support module.createRequire
|
2020-08-18 14:43:03 +02:00 |
|
Erik Krogh Kristensen
|
d1b3963e2d
|
correctly treat ES2015 modules as being in strict-mode in the extractor
|
2020-08-18 10:13:20 +02:00 |
|
Erik Krogh Kristensen
|
eb5dfe8438
|
autoformat
|
2020-08-17 22:46:20 +02:00 |
|
Erik Krogh Kristensen
|
73d1fac88e
|
support named tuples where not all tuple elements are named
|
2020-08-17 16:20:26 +02:00 |
|
Erik Krogh Kristensen
|
c28889225a
|
skip binary files when extracting JavaScript
|
2020-08-17 15:21:15 +02:00 |
|
CodeQL CI
|
c917cd02bd
|
Merge pull request #4054 from erik-krogh/urlIncludes
Approved by esbena
|
2020-08-17 13:54:25 +01:00 |
|
CodeQL CI
|
a19963e9b7
|
Merge pull request #3930 from erik-krogh/fastProp
Approved by esbena
|
2020-08-17 13:42:12 +01:00 |
|
Erik Krogh Kristensen
|
6f28ddf1f8
|
proper support for this inside a JSX-name
|
2020-08-17 14:23:42 +02:00 |
|
ubuntu
|
5d6e6be4e4
|
Add query-tests
|
2020-08-16 15:02:52 +02:00 |
|
Erik Krogh Kristensen
|
15a74493e0
|
more permissive path elements in js/incomplete-url-substring-sanitization
|
2020-08-13 11:46:13 +02:00 |
|
Erik Krogh Kristensen
|
3fb9c28806
|
adjust comment about slash position
|
2020-08-13 11:46:13 +02:00 |
|
Erik Krogh Kristensen
|
d35d3f4271
|
add test for catch with type unknown
|
2020-08-13 09:37:55 +02:00 |
|
Erik Krogh Kristensen
|
d95d427c5b
|
better support for the &&=, ||=, and ??= operators
|
2020-08-13 09:22:32 +02:00 |
|
Erik Krogh Kristensen
|
fd9eb1d40b
|
use Identifier instead of just a plain string when getting tuple-element-names
|
2020-08-12 16:55:55 +02:00 |
|
CodeQL CI
|
66541f260b
|
Merge pull request #4012 from erik-krogh/getId
Approved by asgerf, esbena
|
2020-08-12 13:28:18 +01:00 |
|
Erik Krogh Kristensen
|
1d111c3e1f
|
expand what urls are detected by js/incomplete-url-substring-sanitization
|
2020-08-12 14:25:35 +02:00 |
|
Erik Krogh Kristensen
|
a7a016c5df
|
update expected output
|
2020-08-12 13:29:43 +02:00 |
|
Erik Krogh Kristensen
|
0e33eae960
|
add dbscheme upgrade script
|
2020-08-12 11:50:32 +02:00 |
|
Erik Krogh Kristensen
|
26dcd2faae
|
add support for getting the name from named tuple elements
|
2020-08-12 10:33:49 +02:00 |
|