hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2025-12-17 01:03:14 +01:00
Code Issues Packages Projects Releases Wiki Activity
Files
6df789d11412fd63688165d80a7a696b7299b2ed
codeql/javascript/ql/lib/semmle/javascript/frameworks
History
Asger F 4645f327a5 JS: Avoid more bad joins due to locality
2025-11-13 09:46:14 +01:00
..
AngularJS
JS: Make more general-purpose data flow things local
2025-11-13 09:46:01 +01:00
data
JS: Add more overlay[caller?] annotations
2025-11-13 09:46:06 +01:00
helmet
Update javascript/ql/lib/semmle/javascript/frameworks/helmet/Helmet.qll
2024-08-16 09:44:53 +02:00
minimongo
JS: Remove MaD models from .qll files
2022-12-07 11:35:13 +01:00
mongodb
JS: Remove MaD models from .qll files
2022-12-07 11:35:13 +01:00
mssql
JS: Remove MaD models from .qll files
2022-12-07 11:35:13 +01:00
mysql
JS: Remove MaD models from .qll files
2022-12-07 11:35:13 +01:00
pg
JS: Remove MaD models from .qll files
2022-12-07 11:35:13 +01:00
sequelize
JS: update 'credentials[%]' sink kind to 'credentials-%'
2023-05-16 15:45:55 -04:00
spanner
JS: Remove MaD models from .qll files
2022-12-07 11:35:13 +01:00
sqlite3
JS: Remove MaD models from .qll files
2022-12-07 11:35:13 +01:00
ActionsLib.qll
implement isShellInterpreted on ExecActionsCall
2023-05-17 11:07:48 +02:00
Angular2.qll
JS: Resolve Angular2 templateUrl with ResolveExpr instead of PathExpr
2025-04-29 13:23:42 +02:00
AngularJS.qll
Packaging: Rafactor Javascript core libraries
2021-08-25 12:15:56 -07:00
Anser.qll
Packaging: Rafactor Javascript core libraries
2021-08-25 12:15:56 -07:00
AsyncPackage.qll
JS: Add overlay[local?] to new summaries after rebasing
2025-11-13 09:46:00 +01:00
AWS.qll
Revert "stash"
2024-05-25 12:03:00 +02:00
Azure.qll
Revert "stash"
2024-05-25 12:03:00 +02:00
Babel.qll
JS: Fix some Ql4Ql violations.
2025-09-01 15:17:53 +02:00
Bundling.qll
JS: Move Directive subclasses into Directive module
2024-03-26 09:39:37 +01:00
Cheerio.qll
JS: Rename getAnImmediateUse -> getASource
2022-05-24 11:57:30 +02:00
Classnames.qll
Packaging: Rafactor Javascript core libraries
2021-08-25 12:15:56 -07:00
ClassValidator.qll
JS: Update type usage in ClassValidator.qll
2025-06-23 12:55:01 +02:00
ClientRequests.qll
docs(js): Add AxiosInstanceRequest docs
2025-06-05 09:52:25 +01:00
ClosureLibrary.qll
use more set literals instead of big disjunctions
2022-05-24 11:09:10 +02:00
CommandLineArguments.qll
add taint flow for arg/command-line-args with custom argv option
2025-08-01 13:34:08 +02:00
ComposedFunctions.qll
JS: Make implicit this receivers explicit
2023-05-03 15:31:00 +02:00
Connect.qll
use my script to delete outdated deprecations
2024-09-03 20:30:58 +02:00
ConnectExpressShared.qll
ensure consistent casing of names
2022-09-09 10:34:14 +02:00
CookieLibraries.qll
JavaScript: Autoformat
2023-03-10 09:41:20 +01:00
Credentials.qll
add new default cred kind
2024-07-01 14:42:34 +02:00
CryptoLibraries.qll
Properly share CryptoAlgorithms and CryptoAlgorithmNames
2025-07-14 11:39:00 +02:00
D3.qll
JS: Deprecate getUnknownMember() and replace its uses with getArrayElement()
2025-03-14 23:08:19 +01:00
DateFunctions.qll
run the non-us patch
2021-12-20 16:24:41 +01:00
DigitalOcean.qll
Revert "stash"
2024-05-25 12:03:00 +02:00
DomEvents.qll
have getSourceType() depend on which kind of event it is
2022-04-25 11:32:52 +02:00
Electron.qll
JS: Update type usage in Electron model
2025-06-23 12:55:03 +02:00
Emscripten.qll
delete outdated deprecations
2024-01-22 09:11:35 +01:00
EventEmitter.qll
use set literal instead of big disjunction of literals
2021-10-26 12:55:25 +02:00
Execa.qll
JS: removed execa parts from SystemCommandExecutors and moved it to Execa.qll
2025-06-24 12:41:22 +02:00
Express.qll
Update javascript/ql/lib/semmle/javascript/frameworks/Express.qll
2025-09-16 13:48:26 +02:00
ExpressModules.qll
JS: Make implicit this receivers explicit
2023-05-03 15:31:00 +02:00
Fastify.qll
JS: Update Fastify tld
2025-06-19 16:22:46 +01:00
Files.qll
Removed old mkdirp modeling and replaced it with MaD.
2025-04-03 10:45:16 +02:00
Firebase.qll
JavaScript: Autoformat
2023-03-10 09:41:20 +01:00
FormParsers.qll
JS: Rename Node.{getASource -> asSource, getASink -> asSink}
2022-05-24 11:57:30 +02:00
GraphQL.qll
run the non-us patch
2021-12-20 16:24:41 +01:00
GWT.qll
use my script to delete outdated deprecations
2024-09-03 20:30:58 +02:00
Handlebars.qll
JavaScript: Remove omittable exists variables
2023-01-10 13:37:21 +01:00
Hapi.qll
Added support for @hapi/hapi server.
2025-03-26 11:41:11 +01:00
History.qll
Merge pull request #8606 from asgerf/js/api-graph-api
2022-05-30 10:49:14 +02:00
HTTP.qll
JS: Enable association with headers without needing a route handler
2025-04-03 11:08:10 +02:00
HttpFrameworks.qll
Add Restify/Spife support
2022-10-18 21:41:34 +02:00
HttpProxy.qll
JS: Make implicit this receivers explicit
2023-05-03 15:31:00 +02:00
Immutable.qll
spelling: implementation
2022-10-11 00:23:36 -04:00
jQuery.qll
JS: Update jQuery model
2025-05-20 13:20:07 +02:00
JWT.qll
add new default cred kind
2024-07-01 14:42:34 +02:00
Knex.qll
update the SQL/NoSQL models to use dataflow nodes
2022-09-05 16:11:54 +02:00
Koa.qll
JS: delete various outdated deprecations
2023-10-09 09:14:55 +02:00
LazyCache.qll
JS: Avoid more bad joins due to locality
2025-11-13 09:46:14 +01:00
LdapJS.qll
JS: Rename Node.{getASource -> asSource, getASink -> asSink}
2022-05-24 11:57:30 +02:00
LiveServer.qll
ensure consistent casing of names
2022-09-09 10:34:14 +02:00
LodashUnderscore.qll
JS: Make more general-purpose data flow things local
2025-11-13 09:46:01 +01:00
Logging.qll
JS: Make implicit this receivers explicit
2023-05-03 15:31:00 +02:00
Markdown.qll
Refactor Markdown taint steps and update expected results for reflected XSS tests
2025-03-10 19:27:36 +01:00
Micro.qll
JS: delete various outdated deprecations
2023-10-09 09:14:55 +02:00
MooTools.qll
C++/C#/Java/JavaScript/Python: Remove singleton set literals.
2021-10-14 11:34:22 +02:00
Nest.qll
JS: Update Nest model
2025-07-02 14:11:31 +02:00
Next.qll
Now nextUrl is of type parameter and loosen the restriction for NextAppRouteHandler
2025-04-11 11:19:12 +02:00
NodeJSLib.model.yml
JS: Remove dummy comment
2024-11-01 10:24:22 +01:00
NodeJSLib.qll
JS: Overlay annotations for AST layer
2025-11-13 09:45:56 +01:00
NoSQL.model.yml
JS: No longer use models-as-data CSV interface
2024-04-12 13:40:15 +02:00
NoSQL.qll
Revert "stash"
2024-05-25 12:03:00 +02:00
PkgCloud.qll
Revert "stash"
2024-05-25 12:03:00 +02:00
Prettier.qll
JS: Rename Node.{getASource -> asSource, getASink -> asSink}
2022-05-24 11:57:30 +02:00
PropertyProjection.qll
JS: Make more general-purpose data flow things local
2025-11-13 09:46:01 +01:00
Puppeteer.qll
JS: Deprecate getUnknownMember() and replace its uses with getArrayElement()
2025-03-14 23:08:19 +01:00
React.qll
Update javascript/ql/lib/semmle/javascript/frameworks/React.qll
2025-09-09 08:36:25 +02:00
ReactNative.qll
patch upper-case acronyms to be PascalCase
2022-03-11 11:10:33 +01:00
Redux.qll
JS: Make implicit this receivers explicit
2023-05-03 15:31:00 +02:00
Request.qll
Revert "stash"
2024-05-25 12:03:00 +02:00
Restify.qll
JS: delete various outdated deprecations
2023-10-09 09:14:55 +02:00
RxJS.qll
JS: fix typos in comments
2022-05-12 16:02:19 +01:00
ServerLess.qll
JS: Switch to shared XML.qll implementation
2024-03-19 13:17:50 +01:00
ShellJS.qll
Update javascript/ql/lib/semmle/javascript/frameworks/ShellJS.qll
2025-05-02 13:39:46 +02:00
Snapdragon.qll
JS: Rename Node.{getASource -> asSource, getASink -> asSink}
2022-05-24 11:57:30 +02:00
SocketIO.qll
delete old deprecations
2023-03-03 09:23:02 +01:00
Spife.qll
JavaScript: Autoformat
2023-03-10 09:41:20 +01:00
SQL.model.yml
JS: No longer use models-as-data CSV interface
2024-04-12 13:40:15 +02:00
SQL.qll
JS: Fix the spurious flow
2025-02-28 13:28:02 +01:00
StringFormatters.qll
JS: Make implicit this receivers explicit
2023-05-03 15:31:00 +02:00
SystemCommandExecutors.qll
JS: removed execa parts from SystemCommandExecutors and moved it to Execa.qll
2025-06-24 12:41:22 +02:00
Templating.qll
JS: Overlay annotations for AST layer
2025-11-13 09:45:56 +01:00
Testing.qll
delete outdated deprecations
2024-01-22 09:11:35 +01:00
TestingCustomizations.qll
Packaging: Rafactor Javascript core libraries
2021-08-25 12:15:56 -07:00
TorrentLibraries.qll
JS: Rename Node.{getASource -> asSource, getASink -> asSink}
2022-05-24 11:57:30 +02:00
TrustedTypes.qll
JS: Make implicit this receivers explicit
2023-05-03 15:31:00 +02:00
Typeahead.qll
add explicit this to all member calls
2021-11-01 09:51:15 +01:00
UnderscoreDotString.qll
Adressed comments.
2025-03-20 12:37:06 +01:00
UriLibraries.qll
JS: Overlay annotations for AST layer
2025-11-13 09:45:56 +01:00
Vue.qll
JS: Rename getTargetFile to getImportedFile and remove its deprecated name clash
2025-04-29 16:06:36 +02:00
Vuex.qll
JS: Deprecate getUnknownMember() and replace its uses with getArrayElement()
2025-03-14 23:08:19 +01:00
Webix.qll
Apply suggestions from code review
2023-06-29 16:06:34 +02:00
WebResponse.qll
Added NextResponse to the ResponseCall class it models similar near idential behaviour.
2025-04-10 15:06:44 +02:00
WebSocket.qll
Brought back old methods and marked them as deprecated
2025-04-09 14:56:24 +02:00
XmlParsers.qll
Removed libxmljs from being marked as sink for xml-bomb.
2025-07-15 09:33:11 +02:00
xUnit.qll
JS: Avoid overriding Expr predicates in xUnit.qll
2025-08-29 13:06:05 +02:00