1989 Commits

Author	SHA1	Message	Date
Dilan	2e6d9e7ca5	Merge tag 'codeql-cli/latest' ... Compatible with the latest released version of the CodeQL CLI	2024-12-10 18:26:05 +00:00
Henry Mercer	92d614dbcd	Add periods for consistency	2024-12-06 19:13:05 +00:00
github-actions[bot]	8c64648520	Release preparation for version 2.20.0	2024-12-06 19:10:28 +00:00
Henry Mercer	a6a4ad6400	Revert "Release preparation for version 2.20.0"	2024-12-06 19:00:27 +00:00
Henry Mercer	e0e82ad7ad	Add periods for consistency	2024-12-04 16:05:15 +00:00
github-actions[bot]	96564b7128	Release preparation for version 2.20.0	2024-12-04 16:01:14 +00:00
Henry Mercer	963f084d87	Merge branch 'main' into henrymercer/merge-back-rc-3.16	2024-12-04 13:39:10 +00:00
Dilan	0e25de1af0	Merge tag 'codeql-cli/latest' ... Compatible with the latest released version of the CodeQL CLI	2024-12-02 13:59:17 +00:00
Napalys Klicius	08ef0dc1f2	Update javascript/ql/lib/change-notes/2024-11-28-regexp-unknown-flags.md ... Co-authored-by: Asger F <asgerf@github.com>	2024-12-02 13:35:52 +01:00
Napalys Klicius	13afd6310b	Update javascript/ql/lib/change-notes/2024-11-28-regexp-unknown-flags.md ... Co-authored-by: Erik Krogh Kristensen <erik-krogh@github.com>	2024-11-29 08:26:04 +01:00
Alex Eyers-Taylor	dbe9f22034	Fix broken changelog.	2024-11-28 19:31:25 +00:00
github-actions[bot]	b36f3f97ee	Release preparation for version 2.19.4	2024-11-28 19:28:05 +00:00
Alexander Eyers-Taylor	6f18d69925	Revert "Release preparation for version 2.19.4"	2024-11-28 19:19:56 +00:00
Napalys	d2de9a2238	Fixed change notes	2024-11-28 14:24:27 +01:00
Napalys Klicius	9ca0fe4cbf	Update RegExp handling and add test case ... Co-authored-by: erik-krogh <erik-krogh@github.com>	2024-11-28 14:13:40 +01:00
Napalys	fd773603e6	Added change notes	2024-11-28 12:04:09 +01:00
Napalys	9a1c1f4be3	JS: Added in RegExpCreationNode maybeGlobal predicate for more convenience.	2024-11-28 12:03:51 +01:00
Napalys	1d2e08a3b6	JS: now Reg Exp injection treats unknownFlags as sanitization, MetacharEscapeSanitizer	2024-11-28 11:26:58 +01:00
Napalys	e673348ed3	JS: now RegExp with unknown flags is not flagged as an issue within password Clear text storage of sensitive information	2024-11-28 11:26:56 +01:00
Napalys	a2c46749c6	JS: fixed issue where MaskingReplacer would work only with regexp literals but not objects	2024-11-28 11:26:55 +01:00
Napalys	c71778f1aa	JS: xss does not flag anymore replace with RegExp unknown flags	2024-11-28 11:26:53 +01:00
Napalys	875478c1c6	JS: Fixed path query not flagging new RegExp with DotRemovingReplaceCall	2024-11-28 11:26:45 +01:00
Napalys	a0df33c3ac	JS: UnsafeShellCommand Using unknown flags in the RegExp object is no longer flagged as bad sanitization to reduce false positives.	2024-11-28 11:26:43 +01:00
Napalys	23b18aeca9	JS: Now unknown flags are not flagged in taint paths	2024-11-28 11:26:41 +01:00
Napalys	eca7a88615	JS: Fixed docs description	2024-11-28 11:26:40 +01:00
Napalys	7db6f7c721	JS: Added test cases with new RegExp for Tainted paths, currently works only with literals	2024-11-28 11:26:39 +01:00
Napalys	faef9dd877	JS: protyte poluting now treats unknownFlags as potentially good sanitization.	2024-11-28 11:26:38 +01:00
Napalys	18c7b18f82	JS: Now BadHtmlSanitizers new RegExp with unknown flags is also flagged.	2024-11-28 11:26:36 +01:00
Napalys	38be0e4c0a	JS: Now BadHtmlSanitizers also flags new RegExp as potential issue	2024-11-28 11:26:34 +01:00
Josh Brown	e60df2c50e	Merge branch 'main' into jb1/isLibraryFile-nomagic	2024-11-22 14:56:11 +11:00
Josh Brown	15f92fcda8	No magic isLibraryFile	2024-11-21 19:52:03 -08:00
Napalys Klicius	61e00861e5	Merge pull request #18008 from Napalys/napalys/ES2024-group-functions ... JS: Added support for [Object, Map].groupBy ES2024 feature	2024-11-21 19:03:57 +01:00
Alex Eyers-Taylor	602f52f09b	Fix broken changelog.	2024-11-21 16:57:41 +00:00
github-actions[bot]	f7448f5b43	Release preparation for version 2.19.4	2024-11-21 16:55:07 +00:00
Alex Eyers-Taylor	50ec400fe4	Revert "Merge pull request #18036 from github/release-prep/2.19.4" ... This reverts commit aa4cc72f30, reversing changes made to e5951516b8.	2024-11-21 15:41:08 +00:00
Alexander Eyers-Taylor	c0474c4e45	Revert "Revert "Post-release preparation for codeql-cli-2.19.4""	2024-11-21 15:37:52 +00:00
Alexander Eyers-Taylor	4effe9e364	Revert "Post-release preparation for codeql-cli-2.19.4"	2024-11-21 14:43:15 +00:00
Napalys Klicius	7ee0a7b398	Update javascript/ql/lib/semmle/javascript/Collections.qll ... Co-authored-by: Erik Krogh Kristensen <erik-krogh@github.com>	2024-11-21 14:02:42 +01:00
Napalys Klicius	edb9b47111	Merge pull request #18047 from Napalys/napalys/ES2023-string-protytpe-toWellFormed ... JS: Added taint-step String.prototype.toWellFormed ES2023 feature	2024-11-21 14:01:21 +01:00
Napalys Klicius	82ca369dce	Merge pull request #18005 from Napalys/napalys/ES2022-find-functions ... JS: Added support for Array.prototype.[findLastIndex, findLast] ES2022 feature	2024-11-21 08:01:19 +01:00
Napalys	43eda58f83	Added change notes	2024-11-20 17:44:36 +01:00
Napalys	afc2d3e6d2	JS: Add: String.protytpe.toWellFormed to StringManipulationTaintStep	2024-11-20 17:42:25 +01:00
Napalys	64c45debdb	JS: removed unnecessary getALocalSource from ArrayCallBackDataFlowStep	2024-11-20 14:57:00 +01:00
Napalys	9dbf7d1828	JS: removed unnecessary getALocalSource from ArrayCallBackDataTaintStep	2024-11-20 14:54:06 +01:00
Napalys	cdf43f7118	Added change notes	2024-11-20 14:06:44 +01:00
Napalys Klicius	a957e00fe5	Merge branch 'main' into napalys/ES2024-group-functions	2024-11-20 14:03:31 +01:00
Napalys	58faa2d71e	JS: Add: dataflow step for static method of groupBy from Map.	2024-11-20 13:34:11 +01:00
github-actions[bot]	3909df75dc	Post-release preparation for codeql-cli-2.19.4	2024-11-19 17:54:03 +00:00
Alex Eyers-Taylor	ef3fc5e29f	Fix broken changelog.	2024-11-19 16:34:30 +00:00
github-actions[bot]	9783a11565	Release preparation for version 2.19.4	2024-11-19 16:21:37 +00:00