9802 Commits

Author	SHA1	Message	Date
Am	af016f9416	Merge branch 'github:main' into amammad-js-JWT	2024-06-06 15:33:26 +03:30
am0o0	8258e377dd	use PascalCase for URLConstructorLabel	2024-06-06 14:00:56 +02:00
am0o0	d27a378008	change query-id to avoid duplicate ids	2024-06-06 13:59:58 +02:00
Paolo Tranquilli	2d42ea0f2f	Merge pull request #16668 from github/criemen/pkg-js-fixup ... JS: Use `resources/tools` from external repo, not internal.	2024-06-06 11:50:54 +02:00
Mauro Baluda	0b9bafc9c3	Update AutoBuildTests.java	2024-06-04 21:07:57 +02:00
Mauro Baluda	168cba86c1	Add .xsaccess test data	2024-06-04 20:55:07 +02:00
Mauro Baluda	8791e67789	Add .xsaccess test data	2024-06-04 17:50:08 +02:00
Mauro Baluda	576ee7892d	Add .xsaccess test data	2024-06-04 17:36:05 +02:00
Mauro Baluda	7b3e9b4ec1	Extract .xsaccess files as JSON	2024-06-04 16:28:08 +02:00
Mauro Baluda	73b18129d9	Extract .xsaccess files as JSON	2024-06-04 16:23:05 +02:00
Am	e3e59e02e5	Merge branch 'github:main' into amammad-js-CodeInjection_dynamic_import	2024-06-04 16:22:06 +04:00
Cornelius Riemenschneider	e8c1e50276	JS: Use resources/tools from external repo, not internal. ... This was missing in https://github.com/github/codeql/pull/16656, so we couldn't actually delete the resources in the internal repo.	2024-06-04 13:54:41 +02:00
Paolo Tranquilli	7b8c11379d	Javascript: use codeql_pack for javascript extractor	2024-06-03 23:14:44 +02:00
Paolo Tranquilli	096a31dbef	Mark all integration tests as legacy ... This is in preparation for the new integration test framework. Tests marked thus will be run by the current framework and ignored by the new one.	2024-05-31 16:04:50 +02:00
github-actions[bot]	906b65d09c	Post-release preparation for codeql-cli-2.17.4	2024-05-28 18:02:25 +00:00
github-actions[bot]	33b4ae8bbb	Release preparation for version 2.17.4	2024-05-28 15:44:32 +00:00
maikypedia	e96c3a36ad	Move Apollo to experimental	2024-05-27 12:24:48 +02:00
maikypedia	cfd7c7a47c	move change-note to javascript/ql/src/change-notes	2024-05-27 11:57:05 +02:00
am0o0	2b929c4d2d	remove old expected test file	2024-05-25 20:45:34 +02:00
am0o0	1fc481ce81	v2: it is basically the first stable version :))	2024-05-25 20:43:36 +02:00
am0o0	ea05b297a3	update expected test files	2024-05-25 19:40:37 +02:00
am0o0	14daf58767	update tests, add test cases for query with local sources	2024-05-25 18:17:56 +02:00
am0o0	8fde8c2db4	change test dir name	2024-05-25 13:54:31 +02:00
am0o0	b397f57357	change queries id according to new naming	2024-05-25 13:53:33 +02:00
am0o0	300c82a8ff	use Verification instead of validation in files name	2024-05-25 13:52:32 +02:00
am0o0	76beffb04a	change dir name	2024-05-25 13:49:34 +02:00
am0o0	f1533f40b6	change query files name	2024-05-25 13:49:01 +02:00
am0o0	d2d945c66d	merge all JWT pkgs into one	2024-05-25 13:47:43 +02:00
am0o0	4af4040bd6	change duplicate query IDs	2024-05-25 13:29:16 +02:00
am0o0	f905ac10c4	add jsonWebToken library file to remove duplicate predicate declrations	2024-05-25 13:28:13 +02:00
Erik Krogh Kristensen	c743abad54	Merge pull request #14294 from am0o0/amammad-js-CodeInjection_execa ... JS: provide command execution sinks for execa package	2024-05-24 09:20:19 +02:00
Dave Bartolomeo	613ccaac1d	Add change note to all v1.0.0 packs	2024-05-23 13:01:22 -04:00
erik-krogh	c80f48b23a	Merge branch 'main' into amammad-js-CodeInjection_execa	2024-05-23 08:02:22 +02:00
Dave Bartolomeo	ffe4c8c87b	Update all pack versions to 1.0.0	2024-05-22 13:39:08 -04:00
am0o0	0895f7d971	update qlref files	2024-05-21 22:48:17 +02:00
am0o0	c470c078dc	move to experimental	2024-05-21 22:42:16 +02:00
erik-krogh	a30bac14e9	add change-note	2024-05-21 22:14:39 +02:00
erik-krogh	61c72361cd	move the "isFileTooLarge" earlier in the pipeline, so we're only doing it once	2024-05-21 20:01:24 +02:00
erik-krogh	241f977488	fix that very large TypeScript files would crash the extractor	2024-05-21 19:52:43 +02:00
Asger F	3b211089d6	JS: Remove redundant import	2024-05-21 14:40:17 +02:00
Asger F	6f19fc2fcd	JS: Add isTypeUsed to avoid overpruning	2024-05-21 14:38:52 +02:00
Asger F	632cce2c16	JS: Add failing test due to overpruning	2024-05-21 14:20:13 +02:00
Asger F	43abc72780	JS: Add TypeModel.isTypeUsed ... f	2024-05-21 14:19:56 +02:00
Joe Farebrother	01a6c5e82f	Merge pull request #16446 from joefarebrother/shared-sensitive-heuristics ... Ruby/Python/JS/Swift: Add category of Private information to shared sensitive data heuristics	2024-05-21 09:07:13 +01:00
erik-krogh	c166cb406a	Merge branch 'main' into amammad-js-CodeInjection_execa	2024-05-21 08:48:12 +02:00
Erik Krogh Kristensen	03cf9b702c	Merge pull request #14291 from am0o0/amammad-js-CodeInjection_Shelljs ... JS: Shelljs improvement	2024-05-17 11:14:11 +02:00
am0o0	42a9962519	make shellJSMember predicate private, improve predicate document	2024-05-16 14:05:06 +02:00
Asger F	499c4df79b	Merge pull request #13554 from am0o0/amammad-js-bombs ... JS: Decompression Bombs	2024-05-16 13:25:41 +02:00
erik-krogh	56dff8540f	add an example of how to get a floating point value between 0 and 1	2024-05-16 11:15:07 +02:00
erik-krogh	066f3b61a2	RandomSource is deprecated, it's crypto now	2024-05-16 11:14:50 +02:00