9971 Commits

Author	SHA1	Message	Date
Erik Krogh Kristensen	f562d5319f	Merge pull request #14539 from flyboss/main ... fix typo ('Configration' to ‘Configuration’)	2023-10-20 14:10:42 +02:00
flyboss	ee813c1e61	Update UnsafeHtmlConstructionQuery.qll ... add a deprecated alias in case anyone depends on the misspelled name.	2023-10-20 17:57:23 +08:00
amammad	ee4d87bd96	remove hardcoded JWT secret-key query	2023-10-19 11:57:53 +02:00
amammad	8e0f52cebc	remove noverification query	2023-10-19 11:57:06 +02:00
flyboss	86336565eb	fix typo	2023-10-19 02:34:31 +00:00
github-actions[bot]	8dcd8b9e5b	Post-release preparation for codeql-cli-2.15.1	2023-10-17 20:24:00 +00:00
amammad	7891e64d3e	add sanitizers to hardcoded query	2023-10-17 10:37:27 +02:00
github-actions[bot]	3b3c036626	Release preparation for version 2.15.1	2023-10-16 17:49:39 +00:00
Maiky	acac534ed0	Forgot .js	2023-10-16 19:29:57 +02:00
Maiky	07ad596f77	Add coverage for express	2023-10-16 16:48:32 +02:00
Arthur Baars	0e3369f93f	Merge pull request #14484 from aibaars/ts53-js ... JS: Support import attributes	2023-10-16 10:47:49 +02:00
erik-krogh	69c3e62965	add change-note	2023-10-13 15:16:39 +02:00
erik-krogh	9080e84fc9	add support for extracting .jsp files	2023-10-13 12:09:27 +02:00
Arthur Baars	a4d0ef6350	Add changenote	2023-10-12 13:04:00 +02:00
Arthur Baars	a9a21aa313	Rename DynamicImportExpr::getImport{Attributes => Options}	2023-10-12 13:00:39 +02:00
Arthur Baars	1f4fcf1f31	Rename test files	2023-10-12 13:00:39 +02:00
Arthur Baars	a1c1f7b910	Add tests for deprecated 'assert' syntax	2023-10-12 13:00:39 +02:00
Arthur Baars	f38d2e1b89	Replace 'assert' with 'with' in QL test files	2023-10-12 13:00:39 +02:00
Arthur Baars	c28004f2a6	Rename 'getImportAssertion()' to 'getImportAttributes()' in QL library	2023-10-12 13:00:39 +02:00
Arthur Baars	07172da1bc	Add tests for deprecated 'assert' syntax	2023-10-12 12:51:13 +02:00
Arthur Baars	f7b02c01dd	Rename getAssertion() to getAttributes() in the extractor	2023-10-12 12:51:13 +02:00
Arthur Baars	1d9ee5da3c	Rename 'assertions' to 'attributes' in JS extractor	2023-10-12 12:49:25 +02:00
Arthur Baars	b936e91fe9	Support JS import attributes (previously import assertions)	2023-10-12 11:43:42 +02:00
amammad	3899f2cdf3	upgrade execa scripts	2023-10-12 10:44:57 +02:00
Henry Mercer	1a370bfbbe	Merge pull request #14443 from github/post-release-prep/codeql-cli-2.15.0 ... Post-release preparation for codeql-cli-2.15.0	2023-10-11 17:39:04 +01:00
amammad	261cabde67	better comments	2023-10-11 17:44:12 +02:00
amammad	b24c6fd579	for demonstration	2023-10-11 17:34:33 +02:00
github-actions[bot]	ae6af17c74	Post-release preparation for codeql-cli-2.15.0	2023-10-11 14:19:20 +00:00
amammad	de2ee4d289	stash I can't especify the argument and command differences with new API	2023-10-11 14:36:56 +02:00
amammad	4cd3618dcd	Merge branch 'main' into amammad-js-CodeInjection_execa	2023-10-11 13:27:26 +02:00
Maiky	c0e6d7c049	Merge branch 'github:main' into maikypedia/javascript-cors	2023-10-11 12:20:42 +02:00
Erik Krogh Kristensen	85bb14f04f	Merge pull request #14405 from erik-krogh/tagCall ... JS: recognize tagged template literals as `DataFlow::CallNode`	2023-10-11 11:25:34 +02:00
Erik Krogh Kristensen	6377e92067	Update javascript/ql/lib/semmle/javascript/dataflow/DataFlow.qll ... Co-authored-by: Asger F <asgerf@github.com>	2023-10-11 09:52:48 +02:00
amammad	32859eb057	move to experimental	2023-10-10 22:46:44 +02:00
amammad	4198f61c16	fix a qldoc isuse	2023-10-10 22:21:43 +02:00
amammad	6f73e9c3ba	revert for in additional steps	2023-10-10 22:12:37 +02:00
amammad	9053ceb3b7	revert a unexpected test file	2023-10-10 21:37:59 +02:00
amammad	e13050b64e	revert a unexpected test file	2023-10-10 21:35:52 +02:00
erik-krogh	ccd06c78b9	delete an .expected file outside the test directories	2023-10-10 21:35:19 +02:00
amammad	242f7e1c53	update pg :)	2023-10-10 11:42:32 +02:00
amammad	18edef6ea4	add better-sqlite3 tests	2023-10-10 11:20:17 +02:00
amammad	bbeb7b39d7	add better-sqlite3	2023-10-10 11:17:04 +02:00
Remco Vermeulen	76e56cdac7	Adjust query severities	2023-10-09 12:52:09 -07:00
erik-krogh	a7ab9fd93b	add change-notes	2023-10-09 09:43:06 +02:00
erik-krogh	f48b47c656	JavaScript: add import that populate the shared abstract classes	2023-10-09 09:14:55 +02:00
erik-krogh	c2942b37a7	JS: delete various outdated deprecations	2023-10-09 09:14:55 +02:00
erik-krogh	0d992a3d1f	delete old deprecated aliases of various regex libraries	2023-10-09 09:14:54 +02:00
amammad	3f41a42c38	remove unused classes	2023-10-08 11:08:05 +02:00
amammad	15671682c5	remove unused flowLable, update path query alert message	2023-10-08 11:06:13 +02:00
amammad	00b6e1f0b0	fix tests	2023-10-08 11:03:19 +02:00