hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-05-10 09:19:27 +02:00
Code Issues Packages Projects Releases Wiki Activity
Files
5b491313ad526c295f1cc92e5568dcf589002b89
codeql/javascript/ql/src/semmle/javascript
History
Erik Krogh Kristensen 5b491313ad add simple query for detecting sensitive files downloaded over unsecure connection
2020-06-11 23:19:28 +02:00
..
dataflow
TypeOfCheck -> TypeOfUndefinedSanitizer
2020-06-05 11:35:39 +02:00
dependencies
JS: Autoformat everything
2020-02-27 09:41:01 +00:00
explore
JS: Autoformat
2020-04-21 10:51:42 +01:00
frameworks
add simple query for detecting sensitive files downloaded over unsecure connection
2020-06-11 23:19:28 +02:00
heuristics
JS: add the NoSQL $where as a sink for js/code-injection
2020-05-13 08:30:22 +02:00
internal
Update javascript/ql/src/semmle/javascript/internal/StmtContainers.qll
2020-05-06 07:59:04 +01:00
linters
JS: Autoformat everything
2020-02-27 09:41:01 +00:00
meta
JS: address review comments
2019-09-09 10:31:40 +02:00
security
base the chaining on yargs on the methods that are NOT chained
2020-06-09 10:22:25 +02:00
Aliases.qll
JavaScript: Autoformat all QL files.
2019-01-07 10:15:45 +00:00
AMD.qll
apply the unique aggregate where trivially applicable
2020-05-18 20:37:38 +02:00
Arrays.qll
restrict precise array elements to Promise.all()
2020-05-17 15:58:59 +02:00
AST.qll
JS: Update qldoc for ValueNode
2020-05-19 15:57:07 +01:00
Base64.qll
JavaScript: Add models for many more base64 packages.
2019-03-13 12:27:23 +00:00
BasicBlocks.qll
JS: Move definition of getContainer() to a single rootdef
2020-05-06 07:59:04 +01:00
CanonicalNames.qll
JS: Include base types in TypeName
2019-09-02 14:18:48 +01:00
CFG.qll
Update javascript/ql/src/semmle/javascript/CFG.qll
2020-05-19 12:08:51 +01:00
CharacterEscapes.qll
JS: distinguishes escapes in strings and regular expression literals
2020-03-10 12:26:20 +01:00
Classes.qll
JS: Move definition of getContainer() to a single rootdef
2020-05-06 07:59:04 +01:00
Closure.qll
JS: Autoformat
2020-05-06 07:59:04 +01:00
Collections.qll
change succ in storeStep to be a SourceNode
2020-04-15 20:40:58 +02:00
Comments.qll
JavaScript: Autoformat.
2019-09-06 09:04:51 +02:00
Concepts.qll
refactor the getOptionsArg predicate into the SystemCommandExecution class
2020-02-24 12:59:20 +01:00
Constants.qll
Javascript: Autoformat qlls
2019-02-12 14:41:31 +01:00
DefensiveProgramming.qll
JavaScript: Rename sanity -> consistency
2020-05-11 13:46:12 -04:00
DefUse.qll
JS: Update Node.isIncomplete
2020-05-18 22:42:12 +01:00
DOM.qll
autoformat
2020-04-23 20:59:34 +02:00
DynamicPropertyAccess.qll
JS: Flag deep assignments in prototype pollution query
2020-02-27 12:17:55 +00:00
E4X.qll
JavaScript: Autoformat.
2019-09-06 09:04:51 +02:00
EmailClients.qll
JS: Autoformat everything
2020-02-27 09:41:01 +00:00
Errors.qll
JavaScript: Autoformat all QL files.
2019-01-07 10:15:45 +00:00
ES2015Modules.qll
JS: Remove PathExprBase and PathExprInModule
2020-05-13 16:34:28 +01:00
Expr.qll
JS: Handle exec() == undefined
2020-06-02 16:52:07 +01:00
Extend.qll
JS: Use type info and type tracking in jQuery
2019-10-07 08:29:42 +01:00
Externs.qll
JavaScript: Add concrete syntax examples to ES2015Modules, Externs, JSON, YAML.
2019-07-24 11:56:11 +01:00
Files.qll
JS: Autoformat everything
2020-02-27 09:41:01 +00:00
Functions.qll
JS: Refactor isAmbient computation
2020-04-19 22:45:19 +01:00
GeneratedCode.qll
JS: Autoformat everything
2020-02-27 09:41:01 +00:00
GlobalAccessPaths.qll
JS: Autoformat everything
2020-02-27 09:41:01 +00:00
HTML.qll
JavaScript: Add syntax examples to Comments.qll, E4X.qll, Functions.qll, HTML.qll and NodeJS.qll.
2019-07-17 13:03:45 +01:00
HtmlSanitizers.qll
recognize DOMPurify.sanitize as a HTML sanitizer
2020-05-26 13:34:33 +02:00
InclusionTests.qll
Merge branch 'master' into js/membershiptest
2020-06-02 08:54:44 +02:00
JSDoc.qll
JS: Move definition of getContainer() to a single rootdef
2020-05-06 07:59:04 +01:00
JSON.qll
JS: Avoid materializing JSONValue.getFile()
2019-08-30 16:02:42 +01:00
JsonParsers.qll
JS: Add angular.fromJson as JSON parser
2019-09-04 16:14:51 +01:00
JSX.qll
JS: Avoid string coercion in JSXName.getValue
2020-05-26 12:03:02 +01:00
Lines.qll
JavaScript: Autoformat all QL files.
2019-01-07 10:15:45 +00:00
Locations.qll
JS: Autoformat everything
2020-02-27 09:41:01 +00:00
MembershipCandidates.qll
JS: typo fixups
2020-05-18 12:19:46 +02:00
Modules.qll
JS: Autoformat
2020-05-14 13:29:33 +01:00
NodeJS.qll
JavaScript: Track require through local data flow.
2020-05-24 20:00:10 +01:00
NodeModuleResolutionImpl.qll
JS: Factor out overridden part of PathExpr.getSearchRoot
2020-05-13 16:34:43 +01:00
NPM.qll
JS: Rename other uses of getURL
2020-04-14 19:45:09 +01:00
PackageExports.qll
refactor package export into a library, and add tests for the library
2020-05-18 21:06:14 +02:00
Paths.qll
revert change to import
2020-05-18 21:06:19 +02:00
Promises.qll
more precise taint-tracking for Promise.all
2020-05-15 22:02:41 +02:00
RangeAnalysis.qll
JS: Update range analysis to use getImmediatePredecessor
2019-08-02 20:35:22 +01:00
Regexp.qll
JS: Autoformat everything
2020-02-27 09:41:01 +00:00
RestrictedLocations.qll
JS: Autoformat everything
2020-02-27 09:41:01 +00:00
SourceMaps.qll
JavaScript: Autoformat all QL files.
2019-01-07 10:15:45 +00:00
SSA.qll
JS: Autoformat everything
2020-02-27 09:41:01 +00:00
StandardLibrary.qll
autoformat
2020-05-05 22:33:53 +02:00
Stmt.qll
JS: Move definition of getContainer() to a single rootdef
2020-05-06 07:59:04 +01:00
StringConcatenation.qll
JS: Ignore obvious Array.prototype.concat calls
2020-02-04 16:36:41 +00:00
StringOps.qll
JS: Fix 'match' call in StringOps::RegExpTest
2020-06-09 10:07:36 +01:00
Templates.qll
TS: Extract type args to tagged template exprs
2019-08-22 18:07:29 +01:00
Tokens.qll
JavaScript: Add concrete syntax examples to JSDoc, RegExp, Tokens, Variables and XML.
2019-07-29 12:17:25 +01:00
TypeAnnotations.qll
JS: Move definition of getContainer() to a single rootdef
2020-05-06 07:59:04 +01:00
TypeScript.qll
JS: Remove PathExprBase and PathExprInModule
2020-05-13 16:34:28 +01:00
Util.qll
Javascript: Autoformat qlls
2019-02-12 14:41:31 +01:00
Variables.qll
JS: Move definition of getContainer() to a single rootdef
2020-05-06 07:59:04 +01:00
XML.qll
Sync identical files.
2020-05-05 09:18:05 +01:00
YAML.qll
Merge pull request #1642 from xiemaisi/json_locations
2019-07-29 14:55:33 +01:00