Asger F
ee10702e73
JS: Another provanance test output update
2024-06-27 11:56:01 +02:00
Asger F
df0488a470
Ensure Member tokens from flow summaries are seen in PropertyName
2024-06-27 10:22:14 +02:00
Asger F
c52a4b0621
JS: Provide RenderSummarizedCallable
2024-06-27 09:44:45 +02:00
Asger F
e53c0cdce7
Fix unknown Parameter/Argument decoding
2024-06-27 09:39:06 +02:00
Asger F
2473274681
JS: Benign test output changes
2024-06-27 09:06:45 +02:00
Asger F
af7b4e3063
Accept flow difference due to added test cases
...
New library gets FN for spread arguments in a call to splice(), which
was added to the old version in this PR:
https://github.com/github/codeql/pull/16739
2024-06-26 13:52:27 +02:00
Asger F
53efb5837b
JS: Update some tests with provenance columns
...
Only includes the changes that purely contain the new provenance columns
2024-06-26 13:51:44 +02:00
Asger F
88edc06517
Avoid bad join in compatibleTypesCached
...
This is identical to the code in Ruby and seems to prevent a bad join ordering
in a cached version of this predicate in DataFlowCommon
2024-06-26 13:51:41 +02:00
Asger F
fc7c2c5b17
Remove unused code
2024-06-26 13:51:40 +02:00
Asger F
e67e89dd70
Implement decodeUnknownArgument/ParameterPosition
2024-06-26 13:51:39 +02:00
Asger F
3bebd709b3
Handle AnyMemberDeep and ArrayElementDeep in encodeContent
2024-06-26 13:51:38 +02:00
Asger F
6c0c67dce4
Implement encodeWith/WithoutContent
2024-06-26 13:51:37 +02:00
Asger F
b0ea81276b
Implement encodeReturn
2024-06-26 13:51:36 +02:00
Asger F
5811a3c5a6
Port getMadStringFromContentSet -> encodeContent
2024-06-26 13:51:35 +02:00
Asger F
8c4e5e8876
Boilerplate implementation of default predicates from FlowSummaryImpl.qll
2024-06-26 13:51:34 +02:00
Asger F
6b35a766a6
Migrate to shared FlowSummary library
2024-06-25 14:43:29 +02:00
Asger F
dd7aff555d
Instantiate shared FlowSummary library
2024-06-25 13:35:49 +02:00
Asger F
f0d7c3a7f0
Remove bindingsets
2024-06-25 13:33:06 +02:00
Asger F
6e32f27652
Rename predicates to be consistent with qlpack
...
In preparation for migrating to the FlowSummary module in the qlpack,
rename predicates to be consistent with the qlpack.
2024-06-25 13:30:33 +02:00
Asger F
6c8fb61f60
Js: Update FlowSummaryImpl.qll to make things compile
2024-06-25 13:10:24 +02:00
Asger F
64a9598b89
JS: Update interface for isUnreachableInCall
2024-06-25 13:01:23 +02:00
Asger F
505c532af7
JS: Implement totalorder()
2024-06-25 12:58:35 +02:00
Asger F
102ca77acf
Switch to getLocation() in DataFlowCall
2024-06-25 11:49:19 +02:00
Asger F
ecf418b8f6
Merge branch 'main' into js/shared-dataflow
2024-06-25 11:48:41 +02:00
Asger F
bd3fccd1a8
JS: Update test output with provenance column
2024-06-25 10:30:56 +02:00
Asger F
f43a189f06
JS: Make CaptureNode.toString() more explicit
2024-06-25 09:56:39 +02:00
Erik Krogh Kristensen
db768960f4
Merge pull request #15060 from am0o0/amammad-js-envinjection
...
JS: Env Injection query
2024-06-20 21:27:21 +02:00
Erik Krogh Kristensen
555d7e5958
Merge pull request #14293 from am0o0/amammad-js-CodeInjection_dynamic_import
...
JS: Dynamic import as code injection sink
2024-06-20 21:19:57 +02:00
Erik Krogh Kristensen
e84028d01e
Merge pull request #14088 from am0o0/amammad-js-JWT
...
JS: decoding JWT without signature verification
2024-06-20 20:13:40 +02:00
Asger F
a36e39359f
Merge pull request #16739 from RasmusWL/js-array-steps
...
JS: Allow many Array steps to be used in type-tracking
2024-06-20 11:39:46 +02:00
Rasmus Wriedt Larsen
596102d3fb
Update javascript/ql/lib/change-notes/2024-06-14-type-tracking-array-steps.md
...
Co-authored-by: Asger F <asgerf@github.com >
2024-06-20 10:07:49 +02:00
Paolo Tranquilli
b7a2ea8981
CI: accept other diagnostic format related test changes
2024-06-19 11:33:50 +02:00
Rasmus Wriedt Larsen
3fc8401370
JS: Add change-note
2024-06-14 15:37:25 +02:00
Rasmus Wriedt Larsen
3f2befc3e5
JS: Support spread arguments in array.splice
2024-06-14 15:33:17 +02:00
Rasmus Wriedt Larsen
269f8ca2cd
JS: Add splice(...arr) test
2024-06-14 15:19:56 +02:00
Rasmus Wriedt Larsen
68ccec3d43
JS: Prepare for new test
2024-06-14 15:18:47 +02:00
Rasmus Wriedt Larsen
194ef607f7
JS: Updated .expected
2024-06-14 14:49:34 +02:00
am0o0
4e1f7a930d
fix invalid js file sample in qlhelp
2024-06-14 13:47:01 +02:00
am0o0
bb03a9faba
format the query file
2024-06-13 14:54:29 +02:00
am0o0
f0a467e80b
update tests
2024-06-13 14:52:22 +02:00
am0o0
84b9d4d1ac
fix qlhelp errors
2024-06-13 14:32:41 +02:00
Rasmus Wriedt Larsen
ec18786488
JS: Provide better model for Array.splice
2024-06-12 16:29:21 +02:00
Rasmus Wriedt Larsen
54a0e6dc45
JS: Add new test for Array.splice
2024-06-12 16:24:33 +02:00
Rasmus Wriedt Larsen
9ed6da1072
JS: prepare to extend Array tests
...
Oh how I have enjoyed working with InlineExpectationTests for these sort
of things, not worrying about all the .expected files changing because
you add a few lines in the middle of your tests :D
2024-06-12 16:22:55 +02:00
Rasmus Wriedt Larsen
1027ca266d
JS: Allow many Array steps to be used in type-tracking
2024-06-12 16:14:13 +02:00
github-actions[bot]
8a25081a0e
Post-release preparation for codeql-cli-2.17.5
2024-06-10 15:33:08 +00:00
github-actions[bot]
877bfa2468
Release preparation for version 2.17.5
2024-06-10 13:40:39 +00:00
am0o0
9db334d02f
update select statement, update test cases
2024-06-07 21:26:20 +02:00
am0o0
2c9340331d
update test cases expected results
2024-06-07 21:16:31 +02:00
am0o0
5e0a78c4c7
make predicate for env key and value nodes, use propertyRead/Write instead of API nodes to find env key and value assignments, fix a bug thanks to @erik-krogh
2024-06-07 21:15:30 +02:00
