hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-07-14 07:48:16 +02:00
Code Issues Packages Projects Releases Wiki Activity
Files
3ea1134cc15a95439427ef015f2ee4098f3f0dca
codeql/javascript/ql/lib/semmle/javascript
History
Asger F 3fcf4ef7a1 JS: More precise model of .shift() 
Array.prototype.shift only returns the first array element.

The mutation of Argument[this] is not yet modelled, and is better handled when we have use-use flow.
2024-09-12 13:42:15 +02:00
..
dataflow
JS: Convert 'split' taint step to legacy taint step
2024-09-12 13:42:05 +02:00
dependencies
delete old deprecations
2023-06-02 11:58:08 +02:00
endpoints
JS: Expose InternalModuleNaming
2024-04-25 13:33:17 +02:00
explore
JS: Make implicit this receivers explicit
2023-05-03 15:31:00 +02:00
filters
JS: delete various outdated deprecations
2023-10-09 09:14:55 +02:00
frameworks
JS: Update test output and add related TODO in model of 'async'
2024-08-27 11:35:35 +02:00
heuristics
JS: Make implicit this receivers explicit
2023-05-03 15:31:00 +02:00
internal
JS: More precise model of .shift()
2024-09-12 13:42:15 +02:00
linters
JS: Make implicit this receivers explicit
2023-05-11 11:50:56 +02:00
meta
JS: Make implicit this receivers explicit
2023-05-11 11:50:56 +02:00
security
JS: Add missing qldoc
2024-09-12 13:42:14 +02:00
Actions.qll
Apply suggestions from code review
2023-05-09 16:27:32 +02:00
Aliases.qll
JS: delete leftover comment
2022-03-10 10:25:02 +01:00
AMD.qll
Merge branch 'main' into js/shared-dataflow-merged
2024-03-13 14:27:16 +01:00
ApiGraphs.qll
Merge pull request #16241 from asgerf/js/re-export
2024-04-19 10:03:17 +02:00
Arrays.qll
Merge branch 'main' into js/shared-dataflow
2024-06-25 11:48:41 +02:00
AST.qll
JS: Move Directive subclasses into Directive module
2024-03-26 09:39:37 +01:00
Base64.qll
JS: Make implicit this receivers explicit
2023-05-03 15:31:00 +02:00
BasicBlocks.qll
JS: fix most ql/missing-parameter-qldoc issues
2022-03-16 22:56:52 +01:00
CanonicalNames.qll
JS: Make implicit this receivers explicit
2023-05-03 15:31:00 +02:00
CFG.qll
JS: Add DataFlow::Node.getLocation
2024-03-13 13:06:16 +01:00
CharacterEscapes.qll
JS: fix most ql/missing-parameter-qldoc issues
2022-03-16 22:56:52 +01:00
Classes.qll
JS: Treat private-field methods as private
2024-01-15 13:00:39 +01:00
Closure.qll
JS: Make implicit this receivers explicit
2023-05-03 15:31:00 +02:00
Collections.qll
JS: Add flow summaries for maps and sets
2023-10-13 12:42:40 +02:00
Comments.qll
JS: Add DataFlow::Node.getLocation
2024-03-13 13:06:16 +01:00
Concepts.qll
delete outdated deprecations
2024-04-25 22:19:28 +02:00
Constants.qll
JS: Make implicit this receivers explicit
2023-05-03 15:31:00 +02:00
DefensiveProgramming.qll
Py/JS/RB: Use instanceof in more places
2022-12-12 16:06:57 +01:00
DefUse.qll
delete old deprecations
2023-06-02 11:58:08 +02:00
DOM.qll
JS: Track DOM elements out of collections
2023-04-26 14:55:34 +02:00
DynamicPropertyAccess.qll
JS: Make implicit this receivers explicit
2023-05-03 15:31:00 +02:00
E4X.qll
delete old deprecations
2023-06-02 11:58:08 +02:00
EmailClients.qll
JS: Make implicit this receivers explicit
2023-05-03 15:31:00 +02:00
Errors.qll
JS: Add DataFlow::Node.getLocation
2024-03-13 13:06:16 +01:00
ES2015Modules.qll
JS: Add store step into namespace re-export specifier
2024-04-17 14:14:12 +02:00
Expr.qll
Rename DynamicImportExpr::getImport{Attributes => Options}
2023-10-12 13:00:39 +02:00
Extend.qll
Adapt Webix modeling to support HTML use-cases
2023-06-28 15:26:30 +02:00
Externs.qll
Fix syntax errors in QL comments
2022-04-28 11:53:36 -07:00
Files.qll
JS: Add DataFlow::Node.getLocation
2024-03-13 13:06:16 +01:00
Functions.qll
JS: Move Directive subclasses into Directive module
2024-03-26 09:39:37 +01:00
GeneratedCode.qll
JavaScript: Autoformat
2023-03-10 09:41:20 +01:00
Generators.qll
JS: Summary/steps for iterators and generators
2023-10-13 12:42:41 +02:00
GlobalAccessPaths.qll
stop recursive fromRhs related to getLaterBaseAccess
2023-06-01 23:16:52 +02:00
HTML.qll
JS: Add DataFlow::Node.getLocation
2024-03-13 13:06:16 +01:00
HtmlSanitizers.qll
JS: Make implicit this receivers explicit
2023-05-03 15:31:00 +02:00
InclusionTests.qll
Remove pragma[assume_small_delta]
2023-06-30 11:09:29 -07:00
JSDoc.qll
JS: Add DataFlow::Node.getLocation
2024-03-13 13:06:16 +01:00
JSON.qll
JS: Add DataFlow::Node.getLocation
2024-03-13 13:06:16 +01:00
JsonParsers.qll
JS: Rename Node.{getASource -> asSource, getASink -> asSink}
2022-05-24 11:57:30 +02:00
JsonSchema.qll
JS: Rename Node.{getASource -> asSource, getASink -> asSink}
2022-05-24 11:57:30 +02:00
JsonStringifiers.qll
delete outdated deprecations
2024-01-22 09:11:35 +01:00
JSX.qll
delete old deprecations
2023-06-02 11:58:08 +02:00
Lines.qll
JS: Add DataFlow::Node.getLocation
2024-03-13 13:06:16 +01:00
Locations.qll
JS: Add DataFlow::Node.getLocation
2024-03-13 13:06:16 +01:00
MembershipCandidates.qll
JavaScript: Autoformat
2023-03-10 09:41:20 +01:00
Modules.qll
patch upper-case acronyms to be PascalCase
2022-03-11 11:10:33 +01:00
NodeJS.qll
JS: Update new xsjs-specific code to respect TEarlyStageNode
2024-08-22 13:22:35 +02:00
NodeModuleResolutionImpl.qll
JS: fix compilation
2023-06-02 11:58:08 +02:00
NPM.qll
Merge pull request #15380 from asgerf/js/endpoint-naming
2024-02-14 10:48:13 +01:00
PackageExports.qll
also consider relative exports when finding library inputs
2023-02-14 21:08:13 +01:00
Paths.qll
JS: Add TEarlyStageNode
2023-10-13 12:42:39 +02:00
PrintAst.qll
Add support for XML attributes in the data flow graph
2023-12-14 11:33:53 -08:00
Promises.qll
JS: Port step for dynamic imports
2024-08-23 10:07:28 +02:00
RangeAnalysis.qll
ensure consistent casing of names
2022-09-09 10:34:14 +02:00
Regexp.qll
delete outdated deprecations
2024-04-25 22:19:28 +02:00
RestrictedLocations.qll
JS: Add DataFlow::Node.getLocation
2024-03-13 13:06:16 +01:00
Routing.qll
JavaScript: Autoformat
2023-03-10 09:41:20 +01:00
SourceMaps.qll
JS: Make implicit this receivers explicit
2023-05-03 15:31:00 +02:00
SSA.qll
Address review comment
2024-03-13 20:03:01 +01:00
StandardLibrary.qll
JS: Move hasWildcardReplaceRegExp to a shared place
2024-03-13 09:19:26 +01:00
Stmt.qll
JS: Add UseServer and UseClient directives
2024-03-26 09:39:39 +01:00
StringConcatenation.qll
…
StringOps.qll
Remove pragma[assume_small_delta]
2023-06-30 11:09:29 -07:00
Templates.qll
JS: Make implicit this receivers explicit
2023-05-03 15:31:00 +02:00
Tokens.qll
JS: Add DataFlow::Node.getLocation
2024-03-13 13:06:16 +01:00
TypeAnnotations.qll
…
TypeScript.qll
Merge branch 'main' into delOldDeps
2023-03-13 11:00:29 +01:00
Unit.qll
Replace all definitions of Unit by import codeql.util.Unit
2023-03-24 10:39:34 +01:00
Util.qll
…
Variables.qll
JS: Add DataFlow::Node.getLocation
2024-03-13 13:06:16 +01:00
XML.qll
JS: Switch to shared XML.qll implementation
2024-03-19 13:17:50 +01:00
YAML.qll
JS: Add DataFlow::Node.getLocation
2024-03-13 13:06:16 +01:00