mirror of
https://github.com/github/codeql.git
synced 2025-12-18 01:33:15 +01:00
2.0 KiB
2.0 KiB
Improvements to JavaScript analysis
General improvements
- Support for the following frameworks and libraries has been improved:
- Imports with the
.jsextension can now be resolved to a TypeScript file, when the import refers to a file generated by TypeScript.
New queries
| Query | Tags | Purpose |
|---|
Changes to existing queries
| Query | Expected impact | Change |
|---|---|---|
Clear-text logging of sensitive information (js/clear-text-logging) |
More results | More results involving process.env and indirect calls to logging methods are recognized. |
Incomplete string escaping or encoding (js/incomplete-sanitization) |
Fewer false positive results | This query now recognizes additional cases where a single replacement is likely to be intentional. |
Unbound event handler receiver (js/unbound-event-handler-receiver) |
Fewer false positive results | This query now recognizes additional ways event handler receivers can be bound. |