Files
codeql/javascript/ql/test
Rasmus Wriedt Larsen 3448751b4c JS: Consolidate command-line argument modeling
Such that we can reuse the existing modeling, but have it globally
applied as a threat-model as well.

I Basically just moved the modeling. One important aspect is that this
changes is that the previously query-specific `argsParseStep` is now a
globally applied taint-step. This seems reasonable, if someone applied
the argument parsing to any user-controlled string, it seems correct to
propagate that taint for _any_ query.
2024-10-25 15:03:43 +02:00
..
2024-04-17 14:46:00 +02:00
2024-10-04 08:35:33 +02:00
2024-01-30 13:20:57 +01:00