hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-05-14 19:29:28 +02:00
Code Issues Packages Projects Releases Wiki Activity
Files
858eec390da752b624881478e2bae9764421fbb1
codeql/javascript/ql/lib/semmle/javascript
History
Asger F 9ea4410592 Merge pull request #19587 from asgerf/js/angular2-client-side 
JS: Mark AngularJS $location as client-side remote flow source
2025-06-03 13:40:01 +02:00
..
dataflow
SSA: Distinguish between has and controls branch edge.
2025-05-23 09:56:22 +02:00
dependencies
JS: Deprecate PathExpr and related classes
2025-04-29 13:23:47 +02:00
endpoints
JS: Expose InternalModuleNaming
2024-04-25 13:33:17 +02:00
explore
JS: Deprecate forward/backward exploration modules
2025-01-03 11:41:39 +01:00
filters
JS: More aggressive test file classification
2024-11-19 13:23:32 +01:00
frameworks
JS: Mark AngularJS $location as client-side remote flow source
2025-05-27 09:47:43 +02:00
heuristics
JS: Make implicit this receivers explicit
2023-05-03 15:31:00 +02:00
internal
Merge pull request #19391 from asgerf/js/typescript-path-resolution
2025-05-13 15:46:38 +02:00
linters
JS: Make implicit this receivers explicit
2023-05-11 11:50:56 +02:00
meta
JS: Make implicit this receivers explicit
2023-05-11 11:50:56 +02:00
security
JS: Add URL from url package constructor taint step for request forgery detection
2025-05-30 18:32:02 +02:00
Actions.qll
Apply suggestions from code review
2023-05-09 16:27:32 +02:00
Aliases.qll
…
AMD.qll
JS: Deprecate PathExpr and related classes
2025-04-29 13:23:47 +02:00
ApiGraphs.qll
Merge pull request #19356 from Napalys/js/merge_classes
2025-05-16 10:31:33 +02:00
Arrays.qll
Merge branch 'main' into js/shared-dataflow-merge-main
2024-12-19 10:14:38 +01:00
AST.qll
JS: Move Directive subclasses into Directive module
2024-03-26 09:39:37 +01:00
Base64.qll
JS: Make implicit this receivers explicit
2023-05-03 15:31:00 +02:00
BasicBlocks.qll
JS: Add qldoc to file
2024-10-22 12:46:09 +02:00
CanonicalNames.qll
JS: Make implicit this receivers explicit
2023-05-03 15:31:00 +02:00
CFG.qll
JS: Add DataFlow::Node.getLocation
2024-03-13 13:06:16 +01:00
CharacterEscapes.qll
…
Classes.qll
JS: Treat private-field methods as private
2024-01-15 13:00:39 +01:00
Closure.qll
JS: Make implicit this receivers explicit
2023-05-03 15:31:00 +02:00
Collections.qll
Merge branch 'main' into js/shared-dataflow-merge-main
2024-12-19 10:14:38 +01:00
Comments.qll
JS: Add DataFlow::Node.getLocation
2024-03-13 13:06:16 +01:00
Concepts.qll
JS: Add ThreatModelSource#isCilentSideSource()
2025-01-22 10:45:48 +01:00
Constants.qll
JS: Make implicit this receivers explicit
2023-05-03 15:31:00 +02:00
DefensiveProgramming.qll
Py/JS/RB: Use instanceof in more places
2022-12-12 16:06:57 +01:00
DefUse.qll
delete old deprecations
2023-06-02 11:58:08 +02:00
DOM.qll
JS: Updates to DOM model
2025-04-02 10:14:03 +02:00
DynamicPropertyAccess.qll
JS: Make implicit this receivers explicit
2023-05-03 15:31:00 +02:00
E4X.qll
delete old deprecations
2023-06-02 11:58:08 +02:00
EmailClients.qll
JS: Make implicit this receivers explicit
2023-05-03 15:31:00 +02:00
Errors.qll
JS: Add DataFlow::Node.getLocation
2024-03-13 13:06:16 +01:00
ES2015Modules.qll
JS: Deprecate PathExpr and related classes
2025-04-29 13:23:47 +02:00
Expr.qll
JS: Deprecate PathExpr and related classes
2025-04-29 13:23:47 +02:00
Extend.qll
Adapt Webix modeling to support HTML use-cases
2023-06-28 15:26:30 +02:00
Externs.qll
JS: Update some deprecated calls to getName()
2025-03-27 11:51:24 +01:00
Files.qll
JS: Add some helpers
2025-04-29 13:07:14 +02:00
Functions.qll
JS: Move Directive subclasses into Directive module
2024-03-26 09:39:37 +01:00
GeneratedCode.qll
JavaScript: Autoformat
2023-03-10 09:41:20 +01:00
Generators.qll
JS: Summary/steps for iterators and generators
2023-10-13 12:42:41 +02:00
GlobalAccessPaths.qll
stop recursive fromRhs related to getLaterBaseAccess
2023-06-01 23:16:52 +02:00
HTML.qll
JS: Deprecate PathExpr and related classes
2025-04-29 13:23:47 +02:00
HtmlSanitizers.qll
JS: Make implicit this receivers explicit
2023-05-03 15:31:00 +02:00
InclusionTests.qll
Remove pragma[assume_small_delta]
2023-06-30 11:09:29 -07:00
JSDoc.qll
JS: Restrict size of hasNameParts
2025-03-27 11:51:20 +01:00
JSON.qll
JS: Add DataFlow::Node.getLocation
2024-03-13 13:06:16 +01:00
JsonParsers.qll
JS: Rename Node.{getASource -> asSource, getASink -> asSink}
2022-05-24 11:57:30 +02:00
JsonSchema.qll
JS: Rename Node.{getASource -> asSource, getASink -> asSink}
2022-05-24 11:57:30 +02:00
JsonStringifiers.qll
delete outdated deprecations
2024-01-22 09:11:35 +01:00
JSX.qll
use my script to delete outdated deprecations
2024-09-03 20:30:58 +02:00
Lines.qll
JS: Add DataFlow::Node.getLocation
2024-03-13 13:06:16 +01:00
Locations.qll
JS: Add DataFlow::Node.getLocation
2024-03-13 13:06:16 +01:00
MembershipCandidates.qll
JS: Sharpen up EnumerationRegExp
2025-02-28 13:58:11 +01:00
Modules.qll
JS: Rename getTargetFile to getImportedFile and remove its deprecated name clash
2025-04-29 16:06:36 +02:00
NodeJS.qll
JS: Rename getTargetFile to getImportedFile and remove its deprecated name clash
2025-04-29 16:06:36 +02:00
NodeModuleResolutionImpl.qll
JS: Deprecate PathExpr and related classes
2025-04-29 13:23:47 +02:00
NPM.qll
JS: More efficient nested package naming
2025-05-19 12:53:18 +02:00
PackageExports.qll
JS: Use PackageJsonEx instead of resolveMainModule
2025-04-29 13:23:45 +02:00
Paths.qll
JS: Deprecate PathExpr and related classes
2025-04-29 13:23:47 +02:00
PrintAst.qll
Add support for XML attributes in the data flow graph
2023-12-14 11:33:53 -08:00
Promises.qll
JS: Move some promise-related store steps into PromiseFlow::storeStep
2025-03-13 12:53:04 +01:00
RangeAnalysis.qll
ensure consistent casing of names
2022-09-09 10:34:14 +02:00
Regexp.qll
Applied changes from comments.
2025-03-10 13:29:05 +01:00
RestrictedLocations.qll
JS: Add DataFlow::Node.getLocation
2024-03-13 13:06:16 +01:00
Routing.qll
JS: Add isMiddlewareSetup() hook to Routing model
2025-04-22 12:00:02 +02:00
SourceMaps.qll
use my script to delete outdated deprecations
2024-09-03 20:30:58 +02:00
SSA.qll
Address review comment
2024-03-13 20:03:01 +01:00
StandardLibrary.qll
Merge branch 'main' into js/shared-dataflow-merge-main
2024-12-19 10:14:38 +01:00
Stmt.qll
use my script to delete outdated deprecations
2024-09-03 20:30:58 +02:00
StringConcatenation.qll
…
StringOps.qll
Added support for matchAll in CWE-020 including new test cases
2024-11-05 08:51:24 +01:00
Templates.qll
JS: Make implicit this receivers explicit
2023-05-03 15:31:00 +02:00
Tokens.qll
JS: Add DataFlow::Node.getLocation
2024-03-13 13:06:16 +01:00
TSConfig.qll
Apply suggestions from code review
2025-05-02 12:41:29 +02:00
TypeAnnotations.qll
…
TypeScript.qll
JS: Deprecate PathExpr and related classes
2025-04-29 13:23:47 +02:00
Unit.qll
Replace all definitions of Unit by import codeql.util.Unit
2023-03-24 10:39:34 +01:00
Util.qll
…
Variables.qll
JS: Add DataFlow::Node.getLocation
2024-03-13 13:06:16 +01:00
ViewComponentInput.qll
JS: Use TypeScript types to restrict ViewComponentInputs in general
2025-01-22 10:45:47 +01:00
XML.qll
JS: Switch to shared XML.qll implementation
2024-03-19 13:17:50 +01:00
YAML.qll
use my script to delete outdated deprecations
2024-09-03 20:30:58 +02:00