Asger F
|
b321151a28
|
JS: Restrict ExtendCall flow in proto pollution query
|
2023-04-17 08:20:18 +02:00 |
|
Asger F
|
efb582b661
|
JS: Drive-by fix to newly gained FPs
|
2023-04-17 08:20:18 +02:00 |
|
Asger F
|
869c6d27fe
|
JS: Add implied receiver steps
|
2023-04-17 08:20:18 +02:00 |
|
Asger F
|
74dbc71535
|
JS: Change Extend steps to PreCallGraphStep
|
2023-04-17 08:20:18 +02:00 |
|
github-actions[bot]
|
075d063370
|
Release preparation for version 2.13.0
|
2023-04-14 13:31:30 +00:00 |
|
Erik Krogh Kristensen
|
cece307c60
|
Merge pull request #12802 from erik-krogh/history-xss
JS: add browser history as XSS sink
|
2023-04-14 13:35:19 +02:00 |
|
smiddy007
|
ec97cdc8a0
|
Allow NonKeyCiphers to include truncated SHA-512 MDs in Forge JS library.
|
2023-04-13 23:16:20 -04:00 |
|
Alex Eyers-Taylor
|
c6a482819a
|
Bump all qlpacks major versions
|
2023-04-13 19:15:27 +01:00 |
|
Alex Ford
|
8c46bfd051
|
Merge pull request #12816 from github/rc/3.9
Merge `rc/3.9` into `main`
|
2023-04-13 12:35:41 +01:00 |
|
Tom Hvitved
|
3cc9dec9c8
|
Remove all queries.xml files
|
2023-04-13 11:18:58 +02:00 |
|
Arthur Baars
|
ead8108aed
|
Apply suggestions from code review
Co-authored-by: Erik Krogh Kristensen <erik-krogh@github.com>
|
2023-04-13 11:11:55 +02:00 |
|
Erik Krogh Kristensen
|
cfb273ae01
|
Merge pull request #12799 from erik-krogh/oneColumn
JS: use 1-based column locations for diagnostics
|
2023-04-12 14:48:20 +02:00 |
|
Asger F
|
b819f55203
|
Merge pull request #12792 from asgerf/js/redux-model-perf
JS: add getForwardingFunction and use to sharpen useSelector model
|
2023-04-12 14:09:59 +02:00 |
|
erik-krogh
|
d3cc1d6991
|
update expected output of diagnostics test
|
2023-04-12 13:42:05 +02:00 |
|
erik-krogh
|
b1957623c1
|
add browser history as XSS sink
|
2023-04-12 13:38:18 +02:00 |
|
Erik Krogh Kristensen
|
8cb54b748b
|
Merge pull request #12787 from tyage/add-router-sink
JS: Add New XSS sink - Next.js router.push/replace
|
2023-04-12 13:30:21 +02:00 |
|
erik-krogh
|
fe5e4845b1
|
use 1-based column locations for diagnostics
|
2023-04-12 08:14:15 +02:00 |
|
Arthur Baars
|
83cd55cb29
|
Js/Yaml: add getFile() predicate
|
2023-04-11 16:01:44 +01:00 |
|
erik-krogh
|
3c4bd5b6a7
|
forward toString() etc. predicates from YamlNode to Locatable
|
2023-04-11 15:37:01 +02:00 |
|
erik-krogh
|
b5e90483f5
|
improve the ESLint model to avoid overriding Yaml classes
|
2023-04-11 15:36:18 +02:00 |
|
Asger F
|
aef0fa3c8a
|
JS: Expand QLDoc
|
2023-04-11 14:16:36 +02:00 |
|
Asger F
|
d702c7b990
|
Merge pull request #12759 from asgerf/js/getset-in-pattern
JS: Fix parsing of 'get' or 'set' pattern with a default value
|
2023-04-11 14:03:00 +02:00 |
|
Asger F
|
2c65a49d7c
|
JS: Add getForwardingFunction() to API graphs
|
2023-04-11 14:00:30 +02:00 |
|
Asger F
|
4ce03d4dc4
|
JS: Restrict useSelector steps to local callbacks
|
2023-04-11 13:33:46 +02:00 |
|
Asger F
|
3cc931306f
|
JS: Add test for selector nodes with multiple access paths
|
2023-04-11 13:33:27 +02:00 |
|
Nate Johnson
|
a0f4a5100f
|
Insecure HTTP parser query for JavaScript
|
2023-04-09 20:38:55 -04:00 |
|
tyage
|
40d475863d
|
Add change note
|
2023-04-08 18:36:50 +09:00 |
|
tyage
|
320cb99dbf
|
Add replace method test
|
2023-04-08 18:31:48 +09:00 |
|
tyage
|
668e1accaa
|
Remove unnecessary whiteline
|
2023-04-08 18:24:31 +09:00 |
|
tyage
|
7f9b8557ac
|
Add Next.js router push as XSS sink
|
2023-04-08 18:18:34 +09:00 |
|
Arthur Baars
|
4fca4b668c
|
JS: use shared YAML library
|
2023-04-06 15:11:35 +02:00 |
|
Henry Mercer
|
e1b3807dfc
|
Merge remote-tracking branch 'origin/rc/3.9' into henrymercer/merge-back-3.9
|
2023-04-05 14:57:57 +01:00 |
|
github-actions[bot]
|
ac426b1302
|
Post-release preparation for codeql-cli-2.12.6
|
2023-04-04 16:49:26 +00:00 |
|
Asger F
|
5cc7380bcd
|
JS: Change note
|
2023-04-04 16:49:14 +02:00 |
|
Asger F
|
621e2e71c8
|
JS: Don't try to parse "get=" as a method prop
|
2023-04-04 16:37:28 +02:00 |
|
Asger F
|
eb8046daef
|
JS: Add trap test showing parse error
|
2023-04-04 16:33:13 +02:00 |
|
erik-krogh
|
0b4f239ab5
|
only set the file in the diagnostics message if the file is within the source root
|
2023-04-03 13:49:29 +01:00 |
|
erik-krogh
|
a7c2892af4
|
only set the file in the diagnostics message if the file is within the source root
|
2023-04-03 12:38:10 +02:00 |
|
Asger F
|
53de9ae580
|
Merge pull request #12729 from asgerf/js/crypto-modernize
JS: Modernize crypto libraries
|
2023-04-03 12:16:22 +02:00 |
|
Jeroen Ketema
|
17bd9c12d7
|
JS: Fix qhelp after file rename
|
2023-04-03 09:25:19 +02:00 |
|
Erik Krogh Kristensen
|
1e1a692ee6
|
Merge pull request #12686 from erik-krogh/backtick-parse-error
JS: add backticks around the concrete parse error
|
2023-03-31 14:56:38 +02:00 |
|
Asger F
|
64cf27ab87
|
JS: Modernize crypto libraries
|
2023-03-31 14:49:23 +02:00 |
|
Asger F
|
40530ae14d
|
JS: Simplfy with set literal
|
2023-03-31 12:04:56 +02:00 |
|
Asger F
|
4a06b81429
|
JS: Use API graphs in CryptoJS
|
2023-03-31 12:03:14 +02:00 |
|
Asger F
|
dec1e4dfd6
|
Merge pull request #12666 from smiddy007/improve-insufficient-pw-hash-query
JS: Improve insufficient pw hash query
|
2023-03-31 11:58:41 +02:00 |
|
github-actions[bot]
|
0a3218676c
|
Release preparation for version 2.12.6
|
2023-03-30 19:25:06 +00:00 |
|
Alex Ford
|
62fcea030a
|
Merge pull request #12718 from github/post-release-prep/codeql-cli-2.12.5
Post-release preparation for codeql-cli-2.12.5
|
2023-03-30 15:50:56 +01:00 |
|
Erik Krogh Kristensen
|
b382465078
|
Merge pull request #12679 from ctbellanti/improved-certificate-validation
JS: Improved coverage for disabled certificate validation
|
2023-03-30 16:24:33 +02:00 |
|
github-actions[bot]
|
e87ce62f95
|
Post-release preparation for codeql-cli-2.12.5
|
2023-03-30 13:48:58 +00:00 |
|
erik-krogh
|
47783326c2
|
add test for https.createServer in DisablingCertificateValidation.ql
|
2023-03-30 14:15:25 +02:00 |
|