CodeQL CI
|
4a59e69722
|
Merge pull request #4564 from asgerf/js/react-hooks
Approved by esbena
|
2020-10-30 21:00:31 +00:00 |
|
Asger Feldthaus
|
c7667d372e
|
JS: Address review comments
|
2020-10-30 16:25:30 +00:00 |
|
Asger Feldthaus
|
6ab7846e81
|
JS: Restrict getAContextInput
|
2020-10-30 09:28:06 +00:00 |
|
CodeQL CI
|
7856e784e1
|
Merge pull request #4566 from asgerf/js/classnames
Approved by erik-krogh
|
2020-10-29 11:00:06 +00:00 |
|
Asger F
|
581441d585
|
Update javascript/ql/src/semmle/javascript/frameworks/React.qll
Co-authored-by: Erik Krogh Kristensen <erik-krogh@github.com>
|
2020-10-28 16:29:15 +00:00 |
|
Asger Feldthaus
|
f99db23e7b
|
JS: Add test and fix for contextType
|
2020-10-28 16:23:36 +00:00 |
|
Asger F
|
056ce38dad
|
Update javascript/ql/src/semmle/javascript/frameworks/Classnames.qll
Co-authored-by: Erik Krogh Kristensen <erik-krogh@github.com>
|
2020-10-28 14:35:37 +00:00 |
|
Asger Feldthaus
|
081017ea8a
|
JS: Autoformat
|
2020-10-28 13:58:02 +00:00 |
|
Asger Feldthaus
|
3d86e855f3
|
JS: Add model of classnames and clsx
|
2020-10-28 13:56:35 +00:00 |
|
Asger Feldthaus
|
7ee3846142
|
JS: Add missing qldoc
|
2020-10-28 12:43:48 +00:00 |
|
Asger Feldthaus
|
7a3f0095f6
|
JS: Autoformat
|
2020-10-28 11:57:23 +00:00 |
|
Asger Feldthaus
|
d116b424f4
|
JS: Add model of react hooks and react-router
|
2020-10-28 11:57:11 +00:00 |
|
Asger Feldthaus
|
42c03ab2fd
|
JS: Add flow steps through dynamic imports
|
2020-10-28 11:57:08 +00:00 |
|
Erik Krogh Kristensen
|
75d996a0f9
|
make promisify smaller
|
2020-10-28 11:59:21 +01:00 |
|
Erik Krogh Kristensen
|
c49d5081cc
|
Update javascript/ql/src/semmle/javascript/frameworks/NoSQL.qll
Co-authored-by: Asger F <asgerf@github.com>
|
2020-10-28 11:45:58 +01:00 |
|
Asger Feldthaus
|
a9adb2912a
|
JS: Improve lodash model
|
2020-10-28 10:09:41 +00:00 |
|
Asger Feldthaus
|
9fc5c0bdb8
|
JS: Update ComposedFunctions
|
2020-10-28 10:09:40 +00:00 |
|
Erik Krogh Kristensen
|
2e514c4d7b
|
add model for Node Redis
|
2020-10-28 09:52:54 +01:00 |
|
CodeQL CI
|
da58306f2d
|
Merge pull request #4506 from asgerf/js/separate-jquery-config
Approved by esbena
|
2020-10-21 03:13:42 -07:00 |
|
CodeQL CI
|
9faf675f1f
|
Merge pull request #4486 from erik-krogh/lessTokens
Approved by asgerf
|
2020-10-21 02:56:38 -07:00 |
|
Asger Feldthaus
|
c91cdb5194
|
JS: Address review comments
|
2020-10-20 12:00:02 +01:00 |
|
Asger Feldthaus
|
50a015c73e
|
JS: Move $() sink into separate dataflow config
|
2020-10-20 10:52:33 +01:00 |
|
Erik Krogh Kristensen
|
f47fb5ebd8
|
switch extends around to match @assignlogandexpr and @assignlogorexpr correctly
|
2020-10-20 10:38:45 +02:00 |
|
CodeQL CI
|
4c5ecb4093
|
Merge pull request #4478 from erik-krogh/homegrownCsrf
Approved by asgerf
|
2020-10-19 11:04:10 -07:00 |
|
CodeQL CI
|
502faa7d1c
|
Merge pull request #4494 from erik-krogh/callLimit
Approved by asgerf
|
2020-10-19 11:03:25 -07:00 |
|
CodeQL CI
|
5ead4244fe
|
Merge pull request #4450 from asgerf/js/angular
Approved by erik-krogh
|
2020-10-19 07:25:59 -07:00 |
|
CodeQL CI
|
d644a30b19
|
Merge pull request #4434 from erik-krogh/printAST
Approved by asgerf
|
2020-10-19 04:42:42 -07:00 |
|
CodeQL CI
|
2e52cbeb4a
|
Merge pull request #4499 from max-schaefer/js/module_compile
Approved by asgerf
|
2020-10-19 03:06:21 -07:00 |
|
Erik Krogh Kristensen
|
8f6165cd5f
|
print synthetic constructors in PrintAst.ql
|
2020-10-19 11:10:14 +02:00 |
|
Erik Krogh Kristensen
|
5b1ed97d68
|
Update javascript/ql/src/semmle/javascript/TypeScript.qll
Co-authored-by: Asger F <asgerf@github.com>
|
2020-10-19 11:01:06 +02:00 |
|
Max Schaefer
|
e1d90e90ad
|
JavaScript: Add modelling for Module.prototype._compile.
|
2020-10-19 09:42:17 +01:00 |
|
Erik Krogh Kristensen
|
8cf21e3b2b
|
autoformat
|
2020-10-16 16:56:35 +02:00 |
|
Erik Krogh Kristensen
|
c2338b218f
|
Update javascript/ql/src/semmle/javascript/dataflow/Nodes.qll
Co-authored-by: Asger F <asgerf@github.com>
|
2020-10-16 14:12:36 +02:00 |
|
CodeQL CI
|
1d9b0ce059
|
Merge pull request #4460 from max-schaefer/js/unsafe-shell-command-construction-infeasible-paths
Approved by asgerf
|
2020-10-16 05:05:29 -07:00 |
|
Erik Krogh Kristensen
|
b3d5f9c4dd
|
support throttle like calls as partial calls
|
2020-10-16 13:33:02 +02:00 |
|
Asger Feldthaus
|
583f3d7fd9
|
JS: Also materialize labels in ZipSlip
|
2020-10-16 07:12:30 +01:00 |
|
Asger Feldthaus
|
4337c5adaf
|
JS: Workaround ascii PR check
|
2020-10-16 07:12:29 +01:00 |
|
Asger Feldthaus
|
b3d8b95433
|
JS: Autoformat
|
2020-10-16 07:12:29 +01:00 |
|
Asger Feldthaus
|
42fc4ff78c
|
JS: Don't create new flow labels in *Customizations.qll files
|
2020-10-16 07:12:29 +01:00 |
|
Asger Feldthaus
|
28b449226c
|
JS: Do not import UrlConcatenation from customizations libraries
|
2020-10-16 07:12:29 +01:00 |
|
Asger Feldthaus
|
afd82e202d
|
JS: Add Angular2 model
|
2020-10-16 07:12:29 +01:00 |
|
Erik Krogh Kristensen
|
9112d417e4
|
avoid using getFirstToken for sorting
|
2020-10-15 20:57:29 +02:00 |
|
Erik Krogh Kristensen
|
4d1a9740f0
|
add support for home made CSRF protection middlewares in js/missing-token-validation
|
2020-10-15 14:50:59 +02:00 |
|
Erik Krogh Kristensen
|
f9f29f53cf
|
remove locations where we have no exact location
|
2020-10-15 11:59:51 +02:00 |
|
Erik Krogh Kristensen
|
2bb8b78a29
|
remove "</>" from the end when printing HTML
|
2020-10-15 11:56:00 +02:00 |
|
Erik Krogh Kristensen
|
a019312953
|
improve printing of JS object literals
|
2020-10-15 11:47:45 +02:00 |
|
Erik Krogh Kristensen
|
ab7542c0d2
|
improve printing of JSON values
|
2020-10-15 11:05:22 +02:00 |
|
Erik Krogh Kristensen
|
1ebd49b0eb
|
remove location from "mapping i" print node
|
2020-10-15 10:51:34 +02:00 |
|
Erik Krogh Kristensen
|
3e2d266343
|
improve YAMLMapping printing
|
2020-10-15 10:49:37 +02:00 |
|
Erik Krogh Kristensen
|
1b908ce030
|
improve printing of DeclStmt, and remove escaped whitespace chars from printed output
|
2020-10-15 10:43:32 +02:00 |
|