hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2025-12-17 09:13:20 +01:00
Code Issues Packages Projects Releases Wiki Activity
Files
codeql-cli-2.23.0
codeql/javascript/ql/lib/semmle/javascript
History
Asger F 19fa29d527 Merge pull request #20307 from asgerf/js/overlay-extract-and-discard-only 
JS: Add overlay support to extractor
2025-09-02 11:24:11 +02:00
..
dataflow
Languages: Adapt to api changes.
2025-09-01 11:26:33 +02:00
dependencies
JS: Deprecate PathExpr and related classes
2025-04-29 13:23:47 +02:00
endpoints
JS: Expose InternalModuleNaming
2024-04-25 13:33:17 +02:00
explore
JS: Deprecate forward/backward exploration modules
2025-01-03 11:41:39 +01:00
filters
JS: More aggressive test file classification
2024-11-19 13:23:32 +01:00
frameworks
Merge pull request #20048 from Napalys/js/xml_bomb_sinks
2025-08-29 08:10:55 +02:00
heuristics
JS: Make implicit this receivers explicit
2023-05-03 15:31:00 +02:00
internal
Merge pull request #20307 from asgerf/js/overlay-extract-and-discard-only
2025-09-02 11:24:11 +02:00
linters
JS: Make implicit this receivers explicit
2023-05-11 11:50:56 +02:00
meta
JS: Make implicit this receivers explicit
2023-05-11 11:50:56 +02:00
security
Merge pull request #20148 from Napalys/js/reg-exp-env-variable-threat-model
2025-08-18 09:32:15 +02:00
Actions.qll
JS: Un-deprecate Actions.qll for now as we have some internal queries that use it.
2025-06-23 16:38:04 +02:00
Aliases.qll
…
AMD.qll
JS: Deprecate PathExpr and related classes
2025-04-29 13:23:47 +02:00
ApiGraphs.qll
JS: Remove some dependencies on type extraction
2025-05-20 13:20:14 +02:00
Arrays.qll
Merge branch 'main' into js/shared-dataflow-merge-main
2024-12-19 10:14:38 +01:00
AST.qll
JS: Remove synthetic locations
2025-08-27 11:20:24 +02:00
Base64.qll
JS: Make implicit this receivers explicit
2023-05-03 15:31:00 +02:00
BasicBlocks.qll
JS: Add qldoc to file
2024-10-22 12:46:09 +02:00
CanonicalNames.qll
JS: Deprecate everything that depends on type extraction
2025-06-23 12:55:14 +02:00
CFG.qll
JS: Add DataFlow::Node.getLocation
2024-03-13 13:06:16 +01:00
CharacterEscapes.qll
JS: fix most ql/missing-parameter-qldoc issues
2022-03-16 22:56:52 +01:00
Classes.qll
JS: Deprecate everything that depends on type extraction
2025-06-23 12:55:14 +02:00
Closure.qll
JS: Make Closure concepts based on AST instead
2025-05-20 13:19:52 +02:00
Collections.qll
Merge branch 'main' into js/shared-dataflow-merge-main
2024-12-19 10:14:38 +01:00
Comments.qll
JS: Add DataFlow::Node.getLocation
2024-03-13 13:06:16 +01:00
Concepts.qll
Shared: Use final aliases in ConcentsShared.qll
2025-08-05 14:53:52 +02:00
Constants.qll
JS: Make implicit this receivers explicit
2023-05-03 15:31:00 +02:00
DefensiveProgramming.qll
Py/JS/RB: Use instanceof in more places
2022-12-12 16:06:57 +01:00
DefUse.qll
delete old deprecations
2023-06-02 11:58:08 +02:00
DOM.qll
JS: Updates to DOM model
2025-04-02 10:14:03 +02:00
DynamicPropertyAccess.qll
JS: Make implicit this receivers explicit
2023-05-03 15:31:00 +02:00
E4X.qll
delete old deprecations
2023-06-02 11:58:08 +02:00
EmailClients.qll
JS: Make implicit this receivers explicit
2023-05-03 15:31:00 +02:00
Errors.qll
JS: Add DataFlow::Node.getLocation
2024-03-13 13:06:16 +01:00
ES2015Modules.qll
JS: Add ImportSpecifier.getImportDeclaration()
2025-05-20 13:19:50 +02:00
Expr.qll
JS: Add deprecation comment to qldoc
2025-06-25 14:31:14 +02:00
Extend.qll
Adapt Webix modeling to support HTML use-cases
2023-06-28 15:26:30 +02:00
Externs.qll
JS: Update some deprecated calls to getName()
2025-03-27 11:51:24 +01:00
Files.qll
JS: Remove synthetic locations
2025-08-27 11:20:24 +02:00
Functions.qll
JS: Deprecate everything that depends on type extraction
2025-06-23 12:55:14 +02:00
GeneratedCode.qll
JavaScript: Autoformat
2023-03-10 09:41:20 +01:00
Generators.qll
JS: Summary/steps for iterators and generators
2023-10-13 12:42:41 +02:00
GlobalAccessPaths.qll
JS: Make Closure concepts based on AST instead
2025-05-20 13:19:52 +02:00
HTML.qll
JS: Deprecate PathExpr and related classes
2025-04-29 13:23:47 +02:00
HtmlSanitizers.qll
JS: Make implicit this receivers explicit
2023-05-03 15:31:00 +02:00
InclusionTests.qll
Remove pragma[assume_small_delta]
2023-06-30 11:09:29 -07:00
JSDoc.qll
JS: Use in TypeAnnotation.getClass and hasUnderlyingType predicates
2025-05-20 13:20:06 +02:00
JSON.qll
JS: Remove synthetic locations
2025-08-27 11:20:24 +02:00
JsonParsers.qll
JS: remove serialize-javascript from JsonParsers.qll as it is not a parser
2025-06-16 12:59:36 +02:00
JsonSchema.qll
JS: Rename Node.{getASource -> asSource, getASink -> asSink}
2022-05-24 11:57:30 +02:00
JsonStringifiers.qll
JS: track taint through serialize-javascript calls with object arguments
2025-06-16 10:38:20 +02:00
JSX.qll
use my script to delete outdated deprecations
2024-09-03 20:30:58 +02:00
Lines.qll
JS: Add DataFlow::Node.getLocation
2024-03-13 13:06:16 +01:00
Locations.qll
JS: Add deprecated alias
2025-08-27 11:21:18 +02:00
MembershipCandidates.qll
JS: Sharpen up EnumerationRegExp
2025-02-28 13:58:11 +01:00
Modules.qll
JS: Rename getTargetFile to getImportedFile and remove its deprecated name clash
2025-04-29 16:06:36 +02:00
NodeJS.qll
JS: Rename getTargetFile to getImportedFile and remove its deprecated name clash
2025-04-29 16:06:36 +02:00
NodeModuleResolutionImpl.qll
JS: Deprecate PathExpr and related classes
2025-04-29 13:23:47 +02:00
NPM.qll
JS: More efficient nested package naming
2025-05-19 12:53:18 +02:00
PackageExports.qll
JS: Use PackageJsonEx instead of resolveMainModule
2025-04-29 13:23:45 +02:00
Paths.qll
JS: Deprecate PathExpr and related classes
2025-04-29 13:23:47 +02:00
PrintAst.qll
Add support for XML attributes in the data flow graph
2023-12-14 11:33:53 -08:00
Promises.qll
JS: Move some promise-related store steps into PromiseFlow::storeStep
2025-03-13 12:53:04 +01:00
RangeAnalysis.qll
ensure consistent casing of names
2022-09-09 10:34:14 +02:00
Regexp.qll
JS: exclude sinon module from regexp match calls
2025-06-23 20:25:17 +02:00
RestrictedLocations.qll
JS: Remove synthetic locations
2025-08-27 11:20:24 +02:00
Routing.qll
JS: enchance middleware taint tracking via local source
2025-06-17 08:30:19 +02:00
SourceMaps.qll
use my script to delete outdated deprecations
2024-09-03 20:30:58 +02:00
SSA.qll
JS: Use the LHS as the location for SsaExplicitDefinition
2025-08-28 11:35:15 +02:00
StandardLibrary.qll
Merge branch 'main' into js/shared-dataflow-merge-main
2024-12-19 10:14:38 +01:00
Stmt.qll
use my script to delete outdated deprecations
2024-09-03 20:30:58 +02:00
StringConcatenation.qll
…
StringOps.qll
Added support for matchAll in CWE-020 including new test cases
2024-11-05 08:51:24 +01:00
Templates.qll
JS: Make implicit this receivers explicit
2023-05-03 15:31:00 +02:00
Tokens.qll
JS: Add DataFlow::Node.getLocation
2024-03-13 13:06:16 +01:00
TSConfig.qll
Apply suggestions from code review
2025-05-02 12:41:29 +02:00
TypeAnnotations.qll
JS: Deprecate everything that depends on type extraction
2025-06-23 12:55:14 +02:00
TypeScript.qll
JS: Add deprecation comment to qldoc
2025-06-25 14:31:14 +02:00
Unit.qll
Replace all definitions of Unit by import codeql.util.Unit
2023-03-24 10:39:34 +01:00
Util.qll
…
Variables.qll
JS: Remove synthetic locations
2025-08-27 11:20:24 +02:00
ViewComponentInput.qll
JS: Update API usage in ViewComponentInput
2025-06-23 12:55:08 +02:00
XML.qll
JS: Remove synthetic locations
2025-08-27 11:20:24 +02:00
YAML.qll
JS: Remove synthetic locations
2025-08-27 11:20:24 +02:00