Napalys Klicius b19d1e0f57 Merge pull request #20151 from Napalys/js/command-line-libs ...

JS: Enhance command injection detection for CLI argument parsing libraries

2025-08-18 09:32:29 +02:00

..

dataflow

SSA: Update data flow integration and BarrierGuard interface to use GuardValue.

2025-07-28 11:29:12 +02:00

dependencies

JS: Deprecate PathExpr and related classes

2025-04-29 13:23:47 +02:00

endpoints

JS: Expose InternalModuleNaming

2024-04-25 13:33:17 +02:00

explore

JS: Deprecate forward/backward exploration modules

2025-01-03 11:41:39 +01:00

filters

JS: More aggressive test file classification

2024-11-19 13:23:32 +01:00

frameworks

Merge pull request #20151 from Napalys/js/command-line-libs

2025-08-18 09:32:29 +02:00

heuristics

…

internal

Properly share ConceptsShared.qll

2025-07-14 16:30:45 +02:00

linters

…

meta

…

security

Merge pull request #20148 from Napalys/js/reg-exp-env-variable-threat-model

2025-08-18 09:32:15 +02:00

Actions.qll

JS: Un-deprecate Actions.qll for now as we have some internal queries that use it.

2025-06-23 16:38:04 +02:00

Aliases.qll

…

AMD.qll

JS: Deprecate PathExpr and related classes

2025-04-29 13:23:47 +02:00

ApiGraphs.qll

JS: Remove some dependencies on type extraction

2025-05-20 13:20:14 +02:00

Arrays.qll

Merge branch 'main' into js/shared-dataflow-merge-main

2024-12-19 10:14:38 +01:00

AST.qll

JS: Add public API

2025-06-23 12:54:56 +02:00

Base64.qll

…

BasicBlocks.qll

JS: Add qldoc to file

2024-10-22 12:46:09 +02:00

CanonicalNames.qll

JS: Deprecate everything that depends on type extraction

2025-06-23 12:55:14 +02:00

CFG.qll

…

CharacterEscapes.qll

…

Classes.qll

JS: Deprecate everything that depends on type extraction

2025-06-23 12:55:14 +02:00

Closure.qll

JS: Make Closure concepts based on AST instead

2025-05-20 13:19:52 +02:00

Collections.qll

Merge branch 'main' into js/shared-dataflow-merge-main

2024-12-19 10:14:38 +01:00

Comments.qll

…

Concepts.qll

Shared: Use final aliases in ConcentsShared.qll

2025-08-05 14:53:52 +02:00

Constants.qll

…

DefensiveProgramming.qll

…

DefUse.qll

…

DOM.qll

JS: Updates to DOM model

2025-04-02 10:14:03 +02:00

DynamicPropertyAccess.qll

…

E4X.qll

…

EmailClients.qll

…

Errors.qll

…

ES2015Modules.qll

JS: Add ImportSpecifier.getImportDeclaration()

2025-05-20 13:19:50 +02:00

Expr.qll

JS: Add deprecation comment to qldoc

2025-06-25 14:31:14 +02:00

Extend.qll

…

Externs.qll

JS: Update some deprecated calls to getName()

2025-03-27 11:51:24 +01:00

Files.qll

JS: Add some helpers

2025-04-29 13:07:14 +02:00

Functions.qll

JS: Deprecate everything that depends on type extraction

2025-06-23 12:55:14 +02:00

GeneratedCode.qll

…

Generators.qll

…

GlobalAccessPaths.qll

JS: Make Closure concepts based on AST instead

2025-05-20 13:19:52 +02:00

HTML.qll

JS: Deprecate PathExpr and related classes

2025-04-29 13:23:47 +02:00

HtmlSanitizers.qll

…

InclusionTests.qll

…

JSDoc.qll

JS: Use in TypeAnnotation.getClass and hasUnderlyingType predicates

2025-05-20 13:20:06 +02:00

JSON.qll

…

JsonParsers.qll

JS: remove serialize-javascript from JsonParsers.qll as it is not a parser

2025-06-16 12:59:36 +02:00

JsonSchema.qll

…

JsonStringifiers.qll

JS: track taint through serialize-javascript calls with object arguments

2025-06-16 10:38:20 +02:00

JSX.qll

use my script to delete outdated deprecations

2024-09-03 20:30:58 +02:00

Lines.qll

…

Locations.qll

…

MembershipCandidates.qll

JS: Sharpen up EnumerationRegExp

2025-02-28 13:58:11 +01:00

Modules.qll

JS: Rename getTargetFile to getImportedFile and remove its deprecated name clash

2025-04-29 16:06:36 +02:00

NodeJS.qll

JS: Rename getTargetFile to getImportedFile and remove its deprecated name clash

2025-04-29 16:06:36 +02:00

NodeModuleResolutionImpl.qll

JS: Deprecate PathExpr and related classes

2025-04-29 13:23:47 +02:00

NPM.qll

JS: More efficient nested package naming

2025-05-19 12:53:18 +02:00

PackageExports.qll

JS: Use PackageJsonEx instead of resolveMainModule

2025-04-29 13:23:45 +02:00

Paths.qll

JS: Deprecate PathExpr and related classes

2025-04-29 13:23:47 +02:00

PrintAst.qll

…

Promises.qll

JS: Move some promise-related store steps into PromiseFlow::storeStep

2025-03-13 12:53:04 +01:00

RangeAnalysis.qll

…

Regexp.qll

JS: exclude sinon module from regexp match calls

2025-06-23 20:25:17 +02:00

RestrictedLocations.qll

…

Routing.qll

JS: enchance middleware taint tracking via local source

2025-06-17 08:30:19 +02:00

SourceMaps.qll

use my script to delete outdated deprecations

2024-09-03 20:30:58 +02:00

SSA.qll

…

StandardLibrary.qll

Merge branch 'main' into js/shared-dataflow-merge-main

2024-12-19 10:14:38 +01:00

Stmt.qll

use my script to delete outdated deprecations

2024-09-03 20:30:58 +02:00

StringConcatenation.qll

…

StringOps.qll

Added support for matchAll in CWE-020 including new test cases

2024-11-05 08:51:24 +01:00

Templates.qll

…

Tokens.qll

…

TSConfig.qll

Apply suggestions from code review

2025-05-02 12:41:29 +02:00

TypeAnnotations.qll

JS: Deprecate everything that depends on type extraction

2025-06-23 12:55:14 +02:00

TypeScript.qll

JS: Add deprecation comment to qldoc

2025-06-25 14:31:14 +02:00

Unit.qll

…

Util.qll

…

Variables.qll

JS: Fix regression from global declare vars

2025-05-20 13:20:35 +02:00

ViewComponentInput.qll

JS: Update API usage in ViewComponentInput

2025-06-23 12:55:08 +02:00

XML.qll

…

YAML.qll

use my script to delete outdated deprecations

2024-09-03 20:30:58 +02:00