hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-01-25 12:22:57 +01:00
Code Issues Packages Projects Releases Wiki Activity
Files
0df2b64355d385e4de12b53b909dfe1918107aea
codeql/javascript/ql/lib/semmle/javascript
History
Erik Krogh Kristensen 818601b612 Merge pull request #10285 from erik-krogh/paramClass 
ReDoS: convert RelevantState to a class in the PrefixConstruction module
2022-09-12 15:23:19 +02:00
..
dataflow
Merge pull request #8604 from erik-krogh/httpNode
2022-09-09 10:04:17 +02:00
dependencies
rename more acronyms
2022-08-25 20:52:27 +02:00
explore
JS: fix ql/field-only-used-in-charpred within JavaScript
2022-01-20 09:41:13 +01:00
filters
fix misspellings in predicate names
2022-05-24 10:57:13 +02:00
frameworks
Merge pull request #8604 from erik-krogh/httpNode
2022-09-09 10:04:17 +02:00
heuristics
update the predicates on Express::RouteHandler to use dataflow nodes
2022-09-05 16:11:54 +02:00
internal
Sync ConceptsShared
2022-08-18 13:42:52 +02:00
linters
rename more acronyms
2022-08-25 20:52:27 +02:00
meta
Fix non-US spelling of 'behavior'
2021-12-17 15:29:31 +00:00
security
Merge pull request #10285 from erik-krogh/paramClass
2022-09-12 15:23:19 +02:00
Actions.qll
rename more acronyms
2022-08-25 20:52:27 +02:00
Aliases.qll
JS: delete leftover comment
2022-03-10 10:25:02 +01:00
AMD.qll
Manually write out a transitive closure.
2022-05-30 12:37:50 +02:00
ApiGraphs.qll
Ruby+JS: change LabelEntryPoint.toString()
2022-09-03 13:24:45 +02:00
Arrays.qll
simplify getALibraryInputParameter by adding more general dataflow for the arguments object
2022-08-22 08:32:43 +02:00
AST.qll
patch upper-case acronyms to be PascalCase
2022-03-11 11:10:33 +01:00
Base64.qll
use the new non-extending-subtypes syntax
2021-09-06 11:19:50 +02:00
BasicBlocks.qll
JS: fix most ql/missing-parameter-qldoc issues
2022-03-16 22:56:52 +01:00
CanonicalNames.qll
patch upper-case acronyms to be PascalCase
2022-03-11 11:10:33 +01:00
CFG.qll
patch upper-case acronyms to be PascalCase
2022-03-11 11:10:33 +01:00
CharacterEscapes.qll
JS: fix most ql/missing-parameter-qldoc issues
2022-03-16 22:56:52 +01:00
Classes.qll
JS: Use explicit this
2022-08-29 12:39:53 +02:00
Closure.qll
Merge pull request #5888 from erik-krogh/casting
2021-09-10 09:11:39 -07:00
Collections.qll
delete old deprecations
2022-08-16 22:27:15 +02:00
Comments.qll
Packaging: Rafactor Javascript core libraries
2021-08-25 12:15:56 -07:00
Concepts.qll
base implementation of Spanner model on models-as-data
2022-01-12 17:07:16 +01:00
Constants.qll
cache more predicates
2021-11-22 09:03:36 +01:00
DefensiveProgramming.qll
fix most ql-for-ql warnings in JS
2022-02-11 17:57:37 +01:00
DefUse.qll
Fix syntax errors in QL comments
2022-04-28 11:53:36 -07:00
DOM.qll
JS: Use Class#getAnInstanceReference
2022-04-07 10:43:29 +02:00
DynamicPropertyAccess.qll
merge hasDominatingWrite and hasDominatingAssignment
2022-03-02 11:30:05 +01:00
E4X.qll
patch upper-case acronyms to be PascalCase
2022-03-11 11:10:33 +01:00
EmailClients.qll
Packaging: Rafactor Javascript core libraries
2021-08-25 12:15:56 -07:00
Errors.qll
Packaging: Rafactor Javascript core libraries
2021-08-25 12:15:56 -07:00
ES2015Modules.qll
Merge branch 'main' into missDocParam
2022-07-13 09:58:04 +02:00
Expr.qll
convert the AngularJS model to use DataFlow nodes
2022-09-05 16:11:54 +02:00
Extend.qll
add lodash.{clone, cloneDeep} as a clone step
2022-02-21 22:27:29 +01:00
Externs.qll
Fix syntax errors in QL comments
2022-04-28 11:53:36 -07:00
Files.qll
Remove redundant overrides
2022-08-19 13:57:41 +02:00
Functions.qll
add flow step to rest parameters
2022-04-27 16:03:19 +02:00
GeneratedCode.qll
rename more acronyms
2022-08-25 20:52:27 +02:00
Generators.qll
run the non-us patch
2021-12-20 16:24:41 +01:00
GlobalAccessPaths.qll
JS: fix typos in comments
2022-05-12 16:02:19 +01:00
HTML.qll
JS: Functionality from untrusted sources query (CWE-830)
2022-02-22 11:41:52 +01:00
HtmlSanitizers.qll
Packaging: Rafactor Javascript core libraries
2021-08-25 12:15:56 -07:00
InclusionTests.qll
add explicit this to all member calls
2021-11-01 09:51:15 +01:00
JSDoc.qll
patch upper-case acronyms to be PascalCase
2022-03-11 11:10:33 +01:00
JSON.qll
bind the result in JsonValue::getBooleanValue
2022-06-14 13:22:09 +02:00
JsonParsers.qll
JS: Rename Node.{getASource -> asSource, getASink -> asSink}
2022-05-24 11:57:30 +02:00
JsonSchema.qll
JS: Rename Node.{getASource -> asSource, getASink -> asSink}
2022-05-24 11:57:30 +02:00
JsonStringifiers.qll
rename more acronyms
2022-08-25 20:52:27 +02:00
JSX.qll
fixup getAPrimaryQlClass
2022-03-11 11:10:38 +01:00
Lines.qll
Packaging: Rafactor Javascript core libraries
2021-08-25 12:15:56 -07:00
Locations.qll
add explicit this to all member calls
2021-11-01 09:51:15 +01:00
MembershipCandidates.qll
make a model for hasOwnProperty calls and similar
2022-05-24 14:13:53 +02:00
Modules.qll
patch upper-case acronyms to be PascalCase
2022-03-11 11:10:33 +01:00
NodeJS.qll
collapse a few small stages
2022-05-27 13:19:06 +02:00
NodeModuleResolutionImpl.qll
move resolveMainPath into a separate helper predicate
2022-09-09 14:26:07 +02:00
NPM.qll
rename more acronyms
2022-08-25 20:52:27 +02:00
PackageExports.qll
simplify getALibraryInputParameter by adding more general dataflow for the arguments object
2022-08-22 08:32:43 +02:00
Paths.qll
JS: fix most ql/missing-parameter-qldoc issues
2022-03-16 22:56:52 +01:00
PrintAst.qll
rename more acronyms
2022-08-25 20:52:27 +02:00
Promises.qll
JS: Add withoutPropStep and model 'await' steps with it
2022-06-20 20:16:07 +02:00
RangeAnalysis.qll
JS: fix most ql/missing-parameter-qldoc issues
2022-03-16 22:56:52 +01:00
Regexp.qll
rename more acronyms
2022-08-25 20:52:27 +02:00
RestrictedLocations.qll
Fix hasLocationInfo URL reference
2021-09-29 13:47:58 +02:00
Routing.qll
fix common misspellings throughout github/codeql
2022-08-10 23:21:41 +02:00
SourceMaps.qll
patch upper-case acronyms to be PascalCase
2022-03-11 11:10:33 +01:00
SSA.qll
JS: fix most ql/missing-parameter-qldoc issues
2022-03-16 22:56:52 +01:00
StandardLibrary.qll
make a model for hasOwnProperty calls and similar
2022-05-24 14:13:53 +02:00
Stmt.qll
rename more acronyms
2022-08-25 20:52:27 +02:00
StringConcatenation.qll
Packaging: Rafactor Javascript core libraries
2021-08-25 12:15:56 -07:00
StringOps.qll
JavaScript: fix typos in documentation
2022-03-07 16:09:13 +01:00
Templates.qll
Packaging: Rafactor Javascript core libraries
2021-08-25 12:15:56 -07:00
Tokens.qll
add explicit this to all member calls
2021-11-01 09:51:15 +01:00
TypeAnnotations.qll
Packaging: Rafactor Javascript core libraries
2021-08-25 12:15:56 -07:00
TypeScript.qll
Merge branch 'main' into missDocParam
2022-07-13 09:58:04 +02:00
Unit.qll
Packaging: Rafactor Javascript core libraries
2021-08-25 12:15:56 -07:00
Util.qll
Packaging: Rafactor Javascript core libraries
2021-08-25 12:15:56 -07:00
Variables.qll
JS: Add getters for DeclarationSpace members
2022-05-24 14:30:36 +02:00
XML.qll
Make *.qll non-executable
2022-08-24 16:36:15 +01:00
YAML.qll
fixup getAPrimaryQlClass
2022-08-25 20:52:30 +02:00