hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-01-10 21:20:22 +01:00
Code Issues Packages Projects Releases Wiki Activity
Files
2fb3147b7bdd910fc4da78050fa7d4370231b84e
codeql/javascript/ql/lib/semmle/javascript
History
Stephan Brandauer 2fb3147b7b Merge pull request #8430 from kaeluka/js/CVE-2022-24718 
JS: Add taint step for handlebars model
2022-04-19 15:57:58 +01:00
..
dataflow
fix mistake in inlining
2022-03-29 23:39:22 +02:00
dependencies
fix all other implicit-this warnings introduced by the acronym patch
2022-03-11 13:22:07 +01:00
explore
JS: fix ql/field-only-used-in-charpred within JavaScript
2022-01-20 09:41:13 +01:00
filters
split out predicates in ClassifyFiles to avoid unnecessary computations
2021-10-27 20:35:38 +02:00
frameworks
Merge pull request #8430 from kaeluka/js/CVE-2022-24718
2022-04-19 15:57:58 +01:00
heuristics
patch upper-case acronyms to be PascalCase
2022-03-11 11:10:33 +01:00
internal
Concepts: Minor rewrite in qldoc
2022-03-22 10:33:58 +01:00
linters
patch upper-case acronyms to be PascalCase
2022-03-11 11:10:33 +01:00
meta
Fix non-US spelling of 'behavior'
2021-12-17 15:29:31 +00:00
security
Merge pull request #8430 from kaeluka/js/CVE-2022-24718
2022-04-19 15:57:58 +01:00
Aliases.qll
JS: delete leftover comment
2022-03-10 10:25:02 +01:00
AMD.qll
delete all deprecations that are over 14 months old
2022-03-09 18:28:07 +01:00
ApiGraphs.qll
autoformat
2022-03-29 22:38:23 +02:00
Arrays.qll
JS: Improve flow through Array.prototype.reduce
2022-04-07 09:57:31 +02:00
AST.qll
patch upper-case acronyms to be PascalCase
2022-03-11 11:10:33 +01:00
Base64.qll
use the new non-extending-subtypes syntax
2021-09-06 11:19:50 +02:00
BasicBlocks.qll
add explicit this to all member calls
2021-11-01 09:51:15 +01:00
CanonicalNames.qll
patch upper-case acronyms to be PascalCase
2022-03-11 11:10:33 +01:00
CFG.qll
patch upper-case acronyms to be PascalCase
2022-03-11 11:10:33 +01:00
CharacterEscapes.qll
patch upper-case acronyms to be PascalCase
2022-03-11 11:10:33 +01:00
Classes.qll
JS: Add decorator edges in API graphs and corresponding MaD tokens
2022-03-28 15:34:40 +02:00
Closure.qll
Merge pull request #5888 from erik-krogh/casting
2021-09-10 09:11:39 -07:00
Collections.qll
run the non-us patch
2021-12-20 16:24:41 +01:00
Comments.qll
Packaging: Rafactor Javascript core libraries
2021-08-25 12:15:56 -07:00
Concepts.qll
base implementation of Spanner model on models-as-data
2022-01-12 17:07:16 +01:00
Constants.qll
cache more predicates
2021-11-22 09:03:36 +01:00
DefensiveProgramming.qll
fix most ql-for-ql warnings in JS
2022-02-11 17:57:37 +01:00
DefUse.qll
also deprecate the definitionReaches predicate, it was only used in a test
2022-03-14 10:14:15 +01:00
DOM.qll
JS: Use Class#getAnInstanceReference
2022-04-07 10:43:29 +02:00
DynamicPropertyAccess.qll
merge hasDominatingWrite and hasDominatingAssignment
2022-03-02 11:30:05 +01:00
E4X.qll
patch upper-case acronyms to be PascalCase
2022-03-11 11:10:33 +01:00
EmailClients.qll
Packaging: Rafactor Javascript core libraries
2021-08-25 12:15:56 -07:00
Errors.qll
Packaging: Rafactor Javascript core libraries
2021-08-25 12:15:56 -07:00
ES2015Modules.qll
delete all deprecations that are over 14 months old
2022-03-09 18:28:07 +01:00
Expr.qll
patch upper-case acronyms to be PascalCase
2022-03-11 11:10:33 +01:00
Extend.qll
add lodash.{clone, cloneDeep} as a clone step
2022-02-21 22:27:29 +01:00
Externs.qll
patch upper-case acronyms to be PascalCase
2022-03-11 11:10:33 +01:00
Files.qll
add explicit this to all member calls
2021-11-01 09:51:15 +01:00
Functions.qll
add explicit this to all member calls
2021-11-01 09:51:15 +01:00
GeneratedCode.qll
JS: Avoid scanning individual comment lines to find generated code markers
2021-12-10 11:41:54 -08:00
Generators.qll
run the non-us patch
2021-12-20 16:24:41 +01:00
GlobalAccessPaths.qll
Merge pull request #8253 from erik-krogh/domWrite
2022-03-15 13:37:00 +01:00
HTML.qll
JS: Functionality from untrusted sources query (CWE-830)
2022-02-22 11:41:52 +01:00
HtmlSanitizers.qll
Packaging: Rafactor Javascript core libraries
2021-08-25 12:15:56 -07:00
InclusionTests.qll
add explicit this to all member calls
2021-11-01 09:51:15 +01:00
JSDoc.qll
patch upper-case acronyms to be PascalCase
2022-03-11 11:10:33 +01:00
JSON.qll
fixup getAPrimaryQlClass
2022-03-11 11:10:38 +01:00
JsonParsers.qll
add explicit this to all member calls
2021-11-01 09:51:15 +01:00
JsonSchema.qll
fix some instances of ql/pred-doc-style for JS
2022-02-21 15:02:21 +01:00
JsonStringifiers.qll
patch upper-case acronyms to be PascalCase
2022-03-11 11:10:33 +01:00
JSX.qll
fixup getAPrimaryQlClass
2022-03-11 11:10:38 +01:00
Lines.qll
Packaging: Rafactor Javascript core libraries
2021-08-25 12:15:56 -07:00
Locations.qll
add explicit this to all member calls
2021-11-01 09:51:15 +01:00
MembershipCandidates.qll
cache more predicates
2021-11-22 09:03:36 +01:00
Modules.qll
patch upper-case acronyms to be PascalCase
2022-03-11 11:10:33 +01:00
NodeJS.qll
fix performance issue by inlining a simpler version of getASourceProp
2022-02-08 00:22:01 +01:00
NodeModuleResolutionImpl.qll
patch upper-case acronyms to be PascalCase
2022-03-11 11:10:33 +01:00
NPM.qll
fix all other implicit-this warnings introduced by the acronym patch
2022-03-11 13:22:07 +01:00
PackageExports.qll
patch upper-case acronyms to be PascalCase
2022-03-11 11:10:33 +01:00
Paths.qll
patch upper-case acronyms to be PascalCase
2022-03-11 11:10:33 +01:00
PrintAst.qll
fix all other implicit-this warnings introduced by the acronym patch
2022-03-11 13:22:07 +01:00
Promises.qll
delete all deprecations that are over 14 months old
2022-03-09 18:28:07 +01:00
RangeAnalysis.qll
run the non-us patch with "modelled/modeled"
2021-12-20 17:47:15 +01:00
Regexp.qll
Merge remote-tracking branch 'upstream/main' into incomplete-hostname
2022-03-16 12:31:12 +01:00
RestrictedLocations.qll
Fix hasLocationInfo URL reference
2021-09-29 13:47:58 +02:00
Routing.qll
fix most ql-for-ql warnings in JS
2022-02-11 17:57:37 +01:00
SourceMaps.qll
patch upper-case acronyms to be PascalCase
2022-03-11 11:10:33 +01:00
SSA.qll
fix some instances of ql/pred-doc-style for JS
2022-02-21 15:02:21 +01:00
StandardLibrary.qll
add explicit this to all member calls
2021-11-01 09:51:15 +01:00
Stmt.qll
patch upper-case acronyms to be PascalCase
2022-03-11 11:10:33 +01:00
StringConcatenation.qll
Packaging: Rafactor Javascript core libraries
2021-08-25 12:15:56 -07:00
StringOps.qll
JavaScript: fix typos in documentation
2022-03-07 16:09:13 +01:00
Templates.qll
Packaging: Rafactor Javascript core libraries
2021-08-25 12:15:56 -07:00
Tokens.qll
add explicit this to all member calls
2021-11-01 09:51:15 +01:00
TypeAnnotations.qll
Packaging: Rafactor Javascript core libraries
2021-08-25 12:15:56 -07:00
TypeScript.qll
patch upper-case acronyms to be PascalCase
2022-03-11 11:10:33 +01:00
Unit.qll
Packaging: Rafactor Javascript core libraries
2021-08-25 12:15:56 -07:00
Util.qll
Packaging: Rafactor Javascript core libraries
2021-08-25 12:15:56 -07:00
Variables.qll
patch upper-case acronyms to be PascalCase
2022-03-11 11:10:33 +01:00
XML.qll
patch upper-case acronyms to be PascalCase
2022-03-11 11:10:33 +01:00
YAML.qll
add explicit this to all member calls
2021-11-01 09:51:15 +01:00