hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-02-13 05:31:22 +01:00
Code Issues Packages Projects Releases Wiki Activity
Files
8b03608a4fa978c9efcb50981e7b0d02436bab24
codeql/javascript/ql/lib/semmle/javascript/frameworks
History
Tom Hvitved b974a84bef Merge pull request #21051 from hvitved/shared/flow-summary-provenance-filtering 
Shared: Provenance-based filtering of flow summaries
2026-01-26 17:24:34 +01:00
..
AngularJS
JS: Use question-mark variant in all overlay annotations
2025-12-08 13:13:09 +01:00
data
Merge pull request #21051 from hvitved/shared/flow-summary-provenance-filtering
2026-01-26 17:24:34 +01:00
helmet
Update javascript/ql/lib/semmle/javascript/frameworks/helmet/Helmet.qll
2024-08-16 09:44:53 +02:00
minimongo
JS: Remove MaD models from .qll files
2022-12-07 11:35:13 +01:00
mongodb
JS: Remove MaD models from .qll files
2022-12-07 11:35:13 +01:00
mssql
JS: Remove MaD models from .qll files
2022-12-07 11:35:13 +01:00
mysql
JS: Remove MaD models from .qll files
2022-12-07 11:35:13 +01:00
pg
JS: Remove MaD models from .qll files
2022-12-07 11:35:13 +01:00
sequelize
JS: update 'credentials[%]' sink kind to 'credentials-%'
2023-05-16 15:45:55 -04:00
spanner
JS: Remove MaD models from .qll files
2022-12-07 11:35:13 +01:00
sqlite3
JS: Remove MaD models from .qll files
2022-12-07 11:35:13 +01:00
ActionsLib.qll
implement isShellInterpreted on ExecActionsCall
2023-05-17 11:07:48 +02:00
Angular2.qll
JS: Resolve Angular2 templateUrl with ResolveExpr instead of PathExpr
2025-04-29 13:23:42 +02:00
AngularJS.qll
Packaging: Rafactor Javascript core libraries
2021-08-25 12:15:56 -07:00
Anser.qll
Packaging: Rafactor Javascript core libraries
2021-08-25 12:15:56 -07:00
AsyncPackage.qll
JS: Adapt to changes in FlowSummaryImpl
2026-01-26 12:40:21 +01:00
AWS.qll
Revert "stash"
2024-05-25 12:03:00 +02:00
Azure.qll
Revert "stash"
2024-05-25 12:03:00 +02:00
Babel.qll
JS: Fix some Ql4Ql violations.
2025-09-01 15:17:53 +02:00
Bundling.qll
JS: Move Directive subclasses into Directive module
2024-03-26 09:39:37 +01:00
Cheerio.qll
JS: Rename getAnImmediateUse -> getASource
2022-05-24 11:57:30 +02:00
Classnames.qll
Packaging: Rafactor Javascript core libraries
2021-08-25 12:15:56 -07:00
ClassValidator.qll
JS: Update type usage in ClassValidator.qll
2025-06-23 12:55:01 +02:00
ClientRequests.qll
JS: Localize charpred of API::EntryPoint
2026-01-07 11:05:41 +01:00
ClosureLibrary.qll
use more set literals instead of big disjunctions
2022-05-24 11:09:10 +02:00
CommandLineArguments.qll
add taint flow for arg/command-line-args with custom argv option
2025-08-01 13:34:08 +02:00
ComposedFunctions.qll
JS: Make implicit this receivers explicit
2023-05-03 15:31:00 +02:00
Connect.qll
use my script to delete outdated deprecations
2024-09-03 20:30:58 +02:00
ConnectExpressShared.qll
ensure consistent casing of names
2022-09-09 10:34:14 +02:00
CookieLibraries.qll
JavaScript: Autoformat
2023-03-10 09:41:20 +01:00
Credentials.qll
python: add machinery for MaD barriers
2026-01-22 17:30:24 +01:00
CryptoLibraries.qll
Properly share CryptoAlgorithms and CryptoAlgorithmNames
2025-07-14 11:39:00 +02:00
D3.qll
JS: Localize charpred of API::EntryPoint
2026-01-07 11:05:41 +01:00
DateFunctions.qll
run the non-us patch
2021-12-20 16:24:41 +01:00
DigitalOcean.qll
Revert "stash"
2024-05-25 12:03:00 +02:00
DomEvents.qll
have getSourceType() depend on which kind of event it is
2022-04-25 11:32:52 +02:00
Electron.qll
JS: Localize charpred of API::EntryPoint
2026-01-07 11:05:41 +01:00
Emscripten.qll
delete outdated deprecations
2024-01-22 09:11:35 +01:00
EventEmitter.qll
JS: Add overlay[global] to abstract classes with fields
2026-01-07 11:05:41 +01:00
Execa.qll
JS: removed execa parts from SystemCommandExecutors and moved it to Execa.qll
2025-06-24 12:41:22 +02:00
Express.qll
Update javascript/ql/lib/semmle/javascript/frameworks/Express.qll
2025-09-16 13:48:26 +02:00
ExpressModules.qll
JS: Make implicit this receivers explicit
2023-05-03 15:31:00 +02:00
Fastify.qll
JS: Update Fastify tld
2025-06-19 16:22:46 +01:00
Files.qll
Removed old mkdirp modeling and replaced it with MaD.
2025-04-03 10:45:16 +02:00
Firebase.qll
JavaScript: Autoformat
2023-03-10 09:41:20 +01:00
FormParsers.qll
JS: Rename Node.{getASource -> asSource, getASink -> asSink}
2022-05-24 11:57:30 +02:00
GraphQL.qll
run the non-us patch
2021-12-20 16:24:41 +01:00
GWT.qll
use my script to delete outdated deprecations
2024-09-03 20:30:58 +02:00
Handlebars.qll
JavaScript: Remove omittable exists variables
2023-01-10 13:37:21 +01:00
Hapi.qll
Added support for @hapi/hapi server.
2025-03-26 11:41:11 +01:00
History.qll
JS: Localize charpred of API::EntryPoint
2026-01-07 11:05:41 +01:00
HTTP.qll
JS: Enable association with headers without needing a route handler
2025-04-03 11:08:10 +02:00
HttpFrameworks.qll
Add Restify/Spife support
2022-10-18 21:41:34 +02:00
HttpProxy.qll
JS: Make implicit this receivers explicit
2023-05-03 15:31:00 +02:00
Immutable.qll
JS: Localize charpred of API::EntryPoint
2026-01-07 11:05:41 +01:00
jQuery.qll
JS: Update jQuery model
2025-05-20 13:20:07 +02:00
JWT.qll
add new default cred kind
2024-07-01 14:42:34 +02:00
Knex.qll
update the SQL/NoSQL models to use dataflow nodes
2022-09-05 16:11:54 +02:00
Koa.qll
JS: delete various outdated deprecations
2023-10-09 09:14:55 +02:00
LazyCache.qll
JS: Use question-mark variant in all overlay annotations
2025-12-08 13:13:09 +01:00
LdapJS.qll
JS: Rename Node.{getASource -> asSource, getASink -> asSink}
2022-05-24 11:57:30 +02:00
LiveServer.qll
ensure consistent casing of names
2022-09-09 10:34:14 +02:00
LodashUnderscore.qll
JS: Adapt to changes in FlowSummaryImpl
2026-01-26 12:40:21 +01:00
Logging.qll
JS: Localize charpred of API::EntryPoint
2026-01-07 11:05:41 +01:00
Markdown.qll
Refactor Markdown taint steps and update expected results for reflected XSS tests
2025-03-10 19:27:36 +01:00
Micro.qll
JS: delete various outdated deprecations
2023-10-09 09:14:55 +02:00
MooTools.qll
C++/C#/Java/JavaScript/Python: Remove singleton set literals.
2021-10-14 11:34:22 +02:00
Nest.qll
JS: Localize charpred of API::EntryPoint
2026-01-07 11:05:41 +01:00
Next.qll
Update javascript/ql/lib/semmle/javascript/frameworks/Next.qll
2026-01-13 10:34:25 +01:00
NodeJSLib.model.yml
javascript: add MaD model
2026-01-22 17:30:24 +01:00
NodeJSLib.qll
JS: Add overlay[global] to abstract classes with fields
2026-01-07 11:05:41 +01:00
NoSQL.model.yml
JS: No longer use models-as-data CSV interface
2024-04-12 13:40:15 +02:00
NoSQL.qll
python: add machinery for MaD barriers
2026-01-22 17:30:24 +01:00
PkgCloud.qll
Revert "stash"
2024-05-25 12:03:00 +02:00
Prettier.qll
JS: Rename Node.{getASource -> asSource, getASink -> asSink}
2022-05-24 11:57:30 +02:00
PropertyProjection.qll
JS: Use question-mark variant in all overlay annotations
2025-12-08 13:13:09 +01:00
Puppeteer.qll
JS: Deprecate getUnknownMember() and replace its uses with getArrayElement()
2025-03-14 23:08:19 +01:00
React.qll
Update javascript/ql/lib/semmle/javascript/frameworks/React.qll
2025-11-13 15:38:41 +01:00
ReactNative.qll
patch upper-case acronyms to be PascalCase
2022-03-11 11:10:33 +01:00
Redux.qll
JS: Localize charpred of API::EntryPoint
2026-01-07 11:05:41 +01:00
Request.qll
Revert "stash"
2024-05-25 12:03:00 +02:00
Restify.qll
JS: delete various outdated deprecations
2023-10-09 09:14:55 +02:00
RxJS.qll
JS: fix typos in comments
2022-05-12 16:02:19 +01:00
ServerLess.qll
JS: Switch to shared XML.qll implementation
2024-03-19 13:17:50 +01:00
ShellJS.qll
Update javascript/ql/lib/semmle/javascript/frameworks/ShellJS.qll
2025-05-02 13:39:46 +02:00
Snapdragon.qll
JS: Rename Node.{getASource -> asSource, getASink -> asSink}
2022-05-24 11:57:30 +02:00
SocketIO.qll
delete old deprecations
2023-03-03 09:23:02 +01:00
Spife.qll
JavaScript: Autoformat
2023-03-10 09:41:20 +01:00
SQL.model.yml
JS: No longer use models-as-data CSV interface
2024-04-12 13:40:15 +02:00
SQL.qll
python: add machinery for MaD barriers
2026-01-22 17:30:24 +01:00
StringFormatters.qll
JS: Make implicit this receivers explicit
2023-05-03 15:31:00 +02:00
SystemCommandExecutors.qll
JS: removed execa parts from SystemCommandExecutors and moved it to Execa.qll
2025-06-24 12:41:22 +02:00
Templating.qll
JS: Work around an issue with overlay-invariance
2026-01-07 11:05:41 +01:00
Testing.qll
delete outdated deprecations
2024-01-22 09:11:35 +01:00
TestingCustomizations.qll
Packaging: Rafactor Javascript core libraries
2021-08-25 12:15:56 -07:00
TorrentLibraries.qll
JS: Rename Node.{getASource -> asSource, getASink -> asSink}
2022-05-24 11:57:30 +02:00
TrustedTypes.qll
JS: Localize charpred of API::EntryPoint
2026-01-07 11:05:41 +01:00
Typeahead.qll
add explicit this to all member calls
2021-11-01 09:51:15 +01:00
UnderscoreDotString.qll
Adressed comments.
2025-03-20 12:37:06 +01:00
UriLibraries.qll
JS: Adapt to changes in FlowSummaryImpl
2026-01-26 12:40:21 +01:00
Vue.qll
Merge pull request #21159 from asgerf/js/vue-prop-function
2026-01-19 10:13:49 +01:00
Vuex.qll
JS: Deprecate getUnknownMember() and replace its uses with getArrayElement()
2025-03-14 23:08:19 +01:00
Webix.qll
JS: Localize charpred of API::EntryPoint
2026-01-07 11:05:41 +01:00
WebResponse.qll
Merge pull request #20733 from asgerf/js/incremental-api-graphs
2026-01-14 12:49:41 +01:00
WebSocket.qll
JS: Localize charpred of API::EntryPoint
2026-01-07 11:05:41 +01:00
XmlParsers.qll
Removed libxmljs from being marked as sink for xml-bomb.
2025-07-15 09:33:11 +02:00
xUnit.qll
JS: Avoid overriding Expr predicates in xUnit.qll
2025-08-29 13:06:05 +02:00