mirror of
https://github.com/github/codeql.git
synced 2025-12-19 02:13:17 +01:00
Previously heuristic sinks were always included, to avoid us filtering them out due to not being an argument to an external library call. In this commit we move the argument to an external library call filtering to the query-specific endpoint filters. This lets us filter out heuristic sinks if they match one of the other endpoint filters, reducing FPs.
[Internal only] Adaptive Threat Modeling for JavaScript
This directory contains CodeQL libraries and queries that power adaptive threat modeling for JavaScript. All APIs are experimental and may change in the future.
These queries can only be run by internal users; for external users they will return no results.