hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-03-11 18:16:47 +01:00
Code Issues Packages Projects Releases Wiki Activity
Files
90c174de4e62deffe534a2e904cb390d10050150
codeql/javascript/ql/lib/semmle/javascript
History
Asger F 67afbee06d Merge pull request #12825 from smiddy007/JS-Allow-Truncated-Hash-Forge-NonKeyCipher 
JS: Allow NonKeyCiphers to include truncated SHA-512 MDs in Forge JS libr…
2023-05-02 13:59:30 +02:00
..
dataflow
JS: Add implied receiver steps
2023-04-17 08:20:18 +02:00
dependencies
JavaScript: Autoformat
2023-03-10 09:41:20 +01:00
explore
JS: fix ql/field-only-used-in-charpred within JavaScript
2022-01-20 09:41:13 +01:00
filters
fix misspellings in predicate names
2022-05-24 10:57:13 +02:00
frameworks
Merge pull request #12825 from smiddy007/JS-Allow-Truncated-Hash-Forge-NonKeyCipher
2023-05-02 13:59:30 +02:00
heuristics
JavaScript: Autoformat
2023-03-10 09:41:20 +01:00
internal
JS: Add getForwardingFunction() to API graphs
2023-04-11 14:00:30 +02:00
linters
Apply suggestions from code review
2023-04-13 11:11:55 +02:00
meta
Fix non-US spelling of 'behavior'
2021-12-17 15:29:31 +00:00
security
Merge pull request #12887 from asgerf/js/unsafe-yaml-deserialization
2023-05-01 09:57:20 +02:00
Actions.qll
Js/Yaml: add getFile() predicate
2023-04-11 16:01:44 +01:00
Aliases.qll
JS: delete leftover comment
2022-03-10 10:25:02 +01:00
AMD.qll
Manually write out a transitive closure.
2022-05-30 12:37:50 +02:00
ApiGraphs.qll
JS: Update model of js-yaml
2023-04-20 12:47:13 +02:00
Arrays.qll
simplify getALibraryInputParameter by adding more general dataflow for the arguments object
2022-08-22 08:32:43 +02:00
AST.qll
patch upper-case acronyms to be PascalCase
2022-03-11 11:10:33 +01:00
Base64.qll
use the new non-extending-subtypes syntax
2021-09-06 11:19:50 +02:00
BasicBlocks.qll
JS: fix most ql/missing-parameter-qldoc issues
2022-03-16 22:56:52 +01:00
CanonicalNames.qll
patch upper-case acronyms to be PascalCase
2022-03-11 11:10:33 +01:00
CFG.qll
patch upper-case acronyms to be PascalCase
2022-03-11 11:10:33 +01:00
CharacterEscapes.qll
JS: fix most ql/missing-parameter-qldoc issues
2022-03-16 22:56:52 +01:00
Classes.qll
JS: Use explicit this
2022-08-29 12:39:53 +02:00
Closure.qll
JavaScript: Autoformat
2023-03-10 09:41:20 +01:00
Collections.qll
delete old deprecations
2022-08-16 22:27:15 +02:00
Comments.qll
Packaging: Rafactor Javascript core libraries
2021-08-25 12:15:56 -07:00
Concepts.qll
JavaScript: Autoformat
2023-03-10 09:41:20 +01:00
Constants.qll
cache more predicates
2021-11-22 09:03:36 +01:00
DefensiveProgramming.qll
Py/JS/RB: Use instanceof in more places
2022-12-12 16:06:57 +01:00
DefUse.qll
JavaScript: Remove omittable exists variables
2023-01-10 13:37:21 +01:00
DOM.qll
JS: Track DOM elements out of collections
2023-04-26 14:55:34 +02:00
DynamicPropertyAccess.qll
merge hasDominatingWrite and hasDominatingAssignment
2022-03-02 11:30:05 +01:00
E4X.qll
patch upper-case acronyms to be PascalCase
2022-03-11 11:10:33 +01:00
EmailClients.qll
Packaging: Rafactor Javascript core libraries
2021-08-25 12:15:56 -07:00
Errors.qll
Packaging: Rafactor Javascript core libraries
2021-08-25 12:15:56 -07:00
ES2015Modules.qll
JS: Fix implicit this
2023-03-03 13:43:17 +01:00
Expr.qll
JS: Extract import assertions to DB
2023-03-03 12:21:20 +01:00
Extend.qll
JS: Change Extend steps to PreCallGraphStep
2023-04-17 08:20:18 +02:00
Externs.qll
Fix syntax errors in QL comments
2022-04-28 11:53:36 -07:00
Files.qll
Remove redundant overrides
2022-08-19 13:57:41 +02:00
Functions.qll
Merge branch 'main' into delOldDeps
2023-03-13 11:00:29 +01:00
GeneratedCode.qll
JavaScript: Autoformat
2023-03-10 09:41:20 +01:00
Generators.qll
run the non-us patch
2021-12-20 16:24:41 +01:00
GlobalAccessPaths.qll
better callgraph support for global variables
2023-03-22 13:49:33 +01:00
HTML.qll
JS: Functionality from untrusted sources query (CWE-830)
2022-02-22 11:41:52 +01:00
HtmlSanitizers.qll
Packaging: Rafactor Javascript core libraries
2021-08-25 12:15:56 -07:00
InclusionTests.qll
Prevent JS join order regression
2023-04-17 13:24:19 +02:00
JSDoc.qll
patch upper-case acronyms to be PascalCase
2022-03-11 11:10:33 +01:00
JSON.qll
bind the result in JsonValue::getBooleanValue
2022-06-14 13:22:09 +02:00
JsonParsers.qll
JS: Rename Node.{getASource -> asSource, getASink -> asSink}
2022-05-24 11:57:30 +02:00
JsonSchema.qll
JS: Rename Node.{getASource -> asSource, getASink -> asSink}
2022-05-24 11:57:30 +02:00
JsonStringifiers.qll
rename more acronyms
2022-08-25 20:52:27 +02:00
JSX.qll
JS/Python/Ruby: s/a HTML/an HTML/
2022-09-30 10:37:52 +01:00
Lines.qll
Packaging: Rafactor Javascript core libraries
2021-08-25 12:15:56 -07:00
Locations.qll
add explicit this to all member calls
2021-11-01 09:51:15 +01:00
MembershipCandidates.qll
JavaScript: Autoformat
2023-03-10 09:41:20 +01:00
Modules.qll
patch upper-case acronyms to be PascalCase
2022-03-11 11:10:33 +01:00
NodeJS.qll
JavaScript: Remove omittable exists variables
2023-01-10 13:37:21 +01:00
NodeModuleResolutionImpl.qll
also consider relative exports when finding library inputs
2023-02-14 21:08:13 +01:00
NPM.qll
add explicit this
2023-02-15 10:44:57 +01:00
PackageExports.qll
also consider relative exports when finding library inputs
2023-02-14 21:08:13 +01:00
Paths.qll
JS: fix most ql/missing-parameter-qldoc issues
2022-03-16 22:56:52 +01:00
PrintAst.qll
forward toString() etc. predicates from YamlNode to Locatable
2023-04-11 15:37:01 +02:00
Promises.qll
JavaScript: Autoformat
2023-03-10 09:41:20 +01:00
RangeAnalysis.qll
ensure consistent casing of names
2022-09-09 10:34:14 +02:00
Regexp.qll
share {js,rb}/regex/missing-regexp-anchor
2022-12-18 17:23:41 +01:00
RestrictedLocations.qll
Fix hasLocationInfo URL reference
2021-09-29 13:47:58 +02:00
Routing.qll
JavaScript: Autoformat
2023-03-10 09:41:20 +01:00
SourceMaps.qll
patch upper-case acronyms to be PascalCase
2022-03-11 11:10:33 +01:00
SSA.qll
ensure consistent casing of names
2022-09-09 10:34:14 +02:00
StandardLibrary.qll
JavaScript: Autoformat
2023-03-10 09:41:20 +01:00
Stmt.qll
rename more acronyms
2022-08-25 20:52:27 +02:00
StringConcatenation.qll
Packaging: Rafactor Javascript core libraries
2021-08-25 12:15:56 -07:00
StringOps.qll
Prevent JS join order regression
2023-04-17 13:24:19 +02:00
Templates.qll
Packaging: Rafactor Javascript core libraries
2021-08-25 12:15:56 -07:00
Tokens.qll
add explicit this to all member calls
2021-11-01 09:51:15 +01:00
TypeAnnotations.qll
Packaging: Rafactor Javascript core libraries
2021-08-25 12:15:56 -07:00
TypeScript.qll
Merge branch 'main' into delOldDeps
2023-03-13 11:00:29 +01:00
Unit.qll
Replace all definitions of Unit by import codeql.util.Unit
2023-03-24 10:39:34 +01:00
Util.qll
Packaging: Rafactor Javascript core libraries
2021-08-25 12:15:56 -07:00
Variables.qll
JS: Add getters for DeclarationSpace members
2022-05-24 14:30:36 +02:00
XML.qll
delete old deprecations
2023-03-03 09:23:02 +01:00
YAML.qll
forward toString() etc. predicates from YamlNode to Locatable
2023-04-11 15:37:01 +02:00