hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-01-27 21:33:03 +01:00
Code Issues Packages Projects Releases Wiki Activity
Files
022acf2de002de417cb60354b806841430c236ea
codeql/javascript/ql/lib/semmle/javascript
History
Erik Krogh Kristensen 7dd095c0d2 Merge pull request #9756 from erik-krogh/greyMatter 
JS: add model for the gray-matter library to js/code-injection
2022-07-01 12:19:12 +02:00
..
dataflow
rewrite qldoc based on review
2022-06-28 13:23:44 +02:00
dependencies
fix all other implicit-this warnings introduced by the acronym patch
2022-03-11 13:22:07 +01:00
explore
JS: fix ql/field-only-used-in-charpred within JavaScript
2022-01-20 09:41:13 +01:00
filters
fix misspellings in predicate names
2022-05-24 10:57:13 +02:00
frameworks
add model for chownr
2022-06-29 22:09:23 +02:00
heuristics
add heuristic taint-step for potentially unmodelled libraries, and meta query for counting potential unmodelled steps
2022-06-15 20:27:49 +02:00
internal
Merge pull request #9157 from alexrford/crypto-op-block-mode
2022-06-13 21:32:36 +02:00
linters
patch upper-case acronyms to be PascalCase
2022-03-11 11:10:33 +01:00
meta
Fix non-US spelling of 'behavior'
2021-12-17 15:29:31 +00:00
security
inline field into the charpred
2022-06-30 09:00:10 +02:00
Actions.qll
rename getAReferencedExpression to getASimpleReferenceExpression and add examples of what it can parse
2022-05-05 11:02:47 +02:00
Aliases.qll
JS: delete leftover comment
2022-03-10 10:25:02 +01:00
AMD.qll
Manually write out a transitive closure.
2022-05-30 12:37:50 +02:00
ApiGraphs.qll
JS: Rename Node.{getASource -> asSource, getASink -> asSink}
2022-05-24 11:57:30 +02:00
Arrays.qll
add flow step for Array.prototype.at
2022-05-24 12:41:27 +02:00
AST.qll
patch upper-case acronyms to be PascalCase
2022-03-11 11:10:33 +01:00
Base64.qll
use the new non-extending-subtypes syntax
2021-09-06 11:19:50 +02:00
BasicBlocks.qll
add explicit this to all member calls
2021-11-01 09:51:15 +01:00
CanonicalNames.qll
patch upper-case acronyms to be PascalCase
2022-03-11 11:10:33 +01:00
CFG.qll
patch upper-case acronyms to be PascalCase
2022-03-11 11:10:33 +01:00
CharacterEscapes.qll
patch upper-case acronyms to be PascalCase
2022-03-11 11:10:33 +01:00
Classes.qll
JS: Add decorator edges in API graphs and corresponding MaD tokens
2022-03-28 15:34:40 +02:00
Closure.qll
Merge pull request #5888 from erik-krogh/casting
2021-09-10 09:11:39 -07:00
Collections.qll
run the non-us patch
2021-12-20 16:24:41 +01:00
Comments.qll
Packaging: Rafactor Javascript core libraries
2021-08-25 12:15:56 -07:00
Concepts.qll
base implementation of Spanner model on models-as-data
2022-01-12 17:07:16 +01:00
Constants.qll
cache more predicates
2021-11-22 09:03:36 +01:00
DefensiveProgramming.qll
fix most ql-for-ql warnings in JS
2022-02-11 17:57:37 +01:00
DefUse.qll
Fix syntax errors in QL comments
2022-04-28 11:53:36 -07:00
DOM.qll
JS: Use Class#getAnInstanceReference
2022-04-07 10:43:29 +02:00
DynamicPropertyAccess.qll
merge hasDominatingWrite and hasDominatingAssignment
2022-03-02 11:30:05 +01:00
E4X.qll
patch upper-case acronyms to be PascalCase
2022-03-11 11:10:33 +01:00
EmailClients.qll
Packaging: Rafactor Javascript core libraries
2021-08-25 12:15:56 -07:00
Errors.qll
Packaging: Rafactor Javascript core libraries
2021-08-25 12:15:56 -07:00
ES2015Modules.qll
JS: fix typos in comments
2022-05-12 16:02:19 +01:00
Expr.qll
fix all ql/use-string-compare
2022-05-17 14:11:05 +02:00
Extend.qll
add lodash.{clone, cloneDeep} as a clone step
2022-02-21 22:27:29 +01:00
Externs.qll
Fix syntax errors in QL comments
2022-04-28 11:53:36 -07:00
Files.qll
JS: Treat d.ts as a single extension in Folder.getJavaScriptFile
2022-05-24 14:30:36 +02:00
Functions.qll
add flow step to rest parameters
2022-04-27 16:03:19 +02:00
GeneratedCode.qll
JS: Avoid scanning individual comment lines to find generated code markers
2021-12-10 11:41:54 -08:00
Generators.qll
run the non-us patch
2021-12-20 16:24:41 +01:00
GlobalAccessPaths.qll
JS: fix typos in comments
2022-05-12 16:02:19 +01:00
HTML.qll
JS: Functionality from untrusted sources query (CWE-830)
2022-02-22 11:41:52 +01:00
HtmlSanitizers.qll
Packaging: Rafactor Javascript core libraries
2021-08-25 12:15:56 -07:00
InclusionTests.qll
add explicit this to all member calls
2021-11-01 09:51:15 +01:00
JSDoc.qll
patch upper-case acronyms to be PascalCase
2022-03-11 11:10:33 +01:00
JSON.qll
fixup getAPrimaryQlClass
2022-03-11 11:10:38 +01:00
JsonParsers.qll
JS: Rename Node.{getASource -> asSource, getASink -> asSink}
2022-05-24 11:57:30 +02:00
JsonSchema.qll
JS: Rename Node.{getASource -> asSource, getASink -> asSink}
2022-05-24 11:57:30 +02:00
JsonStringifiers.qll
JS: Rename Node.{getASource -> asSource, getASink -> asSink}
2022-05-24 11:57:30 +02:00
JSX.qll
fixup getAPrimaryQlClass
2022-03-11 11:10:38 +01:00
Lines.qll
Packaging: Rafactor Javascript core libraries
2021-08-25 12:15:56 -07:00
Locations.qll
add explicit this to all member calls
2021-11-01 09:51:15 +01:00
MembershipCandidates.qll
make a model for hasOwnProperty calls and similar
2022-05-24 14:13:53 +02:00
Modules.qll
patch upper-case acronyms to be PascalCase
2022-03-11 11:10:33 +01:00
NodeJS.qll
collapse a few small stages
2022-05-27 13:19:06 +02:00
NodeModuleResolutionImpl.qll
JS: Add PackageJson.getTypingsModule
2022-06-17 14:40:22 +02:00
NPM.qll
JS: Add PackageJson.getTypingsModule
2022-06-17 14:40:22 +02:00
PackageExports.qll
recognize functions that return object of methods as library input
2022-05-12 09:56:19 +02:00
Paths.qll
patch upper-case acronyms to be PascalCase
2022-03-11 11:10:33 +01:00
PrintAst.qll
JS: fix typos in comments
2022-05-12 16:02:19 +01:00
Promises.qll
JS: Add withoutPropStep and model 'await' steps with it
2022-06-20 20:16:07 +02:00
RangeAnalysis.qll
run the non-us patch with "modelled/modeled"
2021-12-20 17:47:15 +01:00
Regexp.qll
JS: fix typos in comments
2022-05-12 16:02:19 +01:00
RestrictedLocations.qll
Fix hasLocationInfo URL reference
2021-09-29 13:47:58 +02:00
Routing.qll
Replace help.semmle.com links by codeql.github.com links
2022-04-22 20:42:11 +02:00
SourceMaps.qll
patch upper-case acronyms to be PascalCase
2022-03-11 11:10:33 +01:00
SSA.qll
fix some instances of ql/pred-doc-style for JS
2022-02-21 15:02:21 +01:00
StandardLibrary.qll
make a model for hasOwnProperty calls and similar
2022-05-24 14:13:53 +02:00
Stmt.qll
patch upper-case acronyms to be PascalCase
2022-03-11 11:10:33 +01:00
StringConcatenation.qll
Packaging: Rafactor Javascript core libraries
2021-08-25 12:15:56 -07:00
StringOps.qll
JavaScript: fix typos in documentation
2022-03-07 16:09:13 +01:00
Templates.qll
Packaging: Rafactor Javascript core libraries
2021-08-25 12:15:56 -07:00
Tokens.qll
add explicit this to all member calls
2021-11-01 09:51:15 +01:00
TypeAnnotations.qll
Packaging: Rafactor Javascript core libraries
2021-08-25 12:15:56 -07:00
TypeScript.qll
Merge branch 'main' into js/madman-prep
2022-05-30 15:03:14 +02:00
Unit.qll
Packaging: Rafactor Javascript core libraries
2021-08-25 12:15:56 -07:00
Util.qll
Packaging: Rafactor Javascript core libraries
2021-08-25 12:15:56 -07:00
Variables.qll
JS: Add getters for DeclarationSpace members
2022-05-24 14:30:36 +02:00
XML.qll
patch upper-case acronyms to be PascalCase
2022-03-11 11:10:33 +01:00
YAML.qll
move YAMLMappingLikeNode to the standard library
2022-05-05 10:22:52 +02:00