hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2025-12-18 09:43:15 +01:00
Code Issues Packages Projects Releases Wiki Activity
Files
aeisenberg/add-immutable-actions
codeql/javascript/ql/test/query-tests/Security/CWE-094/CodeInjection
History
Asger F d79f429978 JS: Update changes to nodes/edges/subpaths 
No changes in actual alerts
2025-02-17 10:36:05 +01:00
..
lib
expand localFieldStep to use access-paths, and build access-paths in more cases
2022-09-13 21:43:06 +02:00
webix
Adapt Webix modeling to support HTML use-cases
2023-06-28 15:26:30 +02:00
actions.js
JS: Restrict getInput to indirect command injection query
2023-05-03 16:10:03 +02:00
angularjs.js
Merge remote-tracking branch 'upstream/next' into qlucie/master
2019-01-04 10:35:57 +00:00
bad-code-sanitization.js
add qhelp for js/bad-code-sanitization
2020-06-16 16:23:41 +02:00
CodeInjection.expected
JS: Update some tests with provenance columns
2024-06-26 13:51:44 +02:00
CodeInjection.qlref
JS: move CodeInjection tests into subfolder
2018-11-20 14:24:37 +00:00
eslint-escope-build.js
JS: move CodeInjection tests into subfolder
2018-11-20 14:24:37 +00:00
express.js
add test for express-ws as a source
2023-02-13 15:26:50 +01:00
externs.js
JS: move CodeInjection tests into subfolder
2018-11-20 14:24:37 +00:00
HeuristicSourceCodeInjection.expected
JS: Update some tests with provenance columns
2024-06-26 13:51:44 +02:00
HeuristicSourceCodeInjection.ql
JS: Update HeuristicSoruceCodeInjection test
2023-10-13 13:15:08 +02:00
ImproperCodeSanitization.expected
JS: Update changes to nodes/edges/subpaths
2025-02-17 10:36:05 +01:00
ImproperCodeSanitization.qlref
add query to detect improperly sanitized code
2020-06-10 19:50:12 +02:00
module.js
JavaScript: Improve modelling of Module.prototype._compile sink.
2021-07-12 15:32:21 +01:00
NoSQLCodeInjection.js
type-track objects where the "$where" property has been written
2020-09-24 20:55:25 +02:00
react-native.js
JS: move CodeInjection tests into subfolder
2018-11-20 14:24:37 +00:00
react.js
add js/code-injection sink for script tags in React
2021-01-29 12:50:17 +01:00
template-sinks.js
Adapt Webix modeling to support HTML use-cases
2023-06-28 15:26:30 +02:00
tst.js
recognize calls to Function where spread arguments are used
2022-09-07 22:55:51 +02:00
UnsafeCodeConstruction.expected
JS: Update some tests with provenance columns
2024-06-26 13:51:44 +02:00
UnsafeCodeConstruction.qlref
add test for unsafe-code-construction query
2022-02-07 13:34:18 +01:00