hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-07-31 07:22:56 +02:00
Code Issues Packages Projects Releases Wiki Activity
Files
a342fa36c6d953cef4e1760cb249e044b306e39b
codeql/change-notes/1.20/analysis-javascript.md
semmle-qlci b58c263fd0 Merge pull request #602 from esben-semmle/js/additional-route-handlers-from-context 
Approved by xiemaisi
2018-12-03 14:31:10 +00:00

2.0 KiB
Raw Blame History

Improvements to JavaScript analysis

General improvements

  • Support for popular libraries has been improved. Consequently, queries may produce more results on code bases that use the following features:
    • servers, for example hapi

New queries

Query Tags Purpose
Double escaping or unescaping (js/double-escaping) correctness, security, external/cwe/cwe-116 Highlights potential double escaping or unescaping of special characters, indicating a possible violation of CWE-116. Results are shown on LGTM by default.
Useless comparison test (js/useless-comparison-test) correctness Highlights code that is unreachable due to a numeric comparison that is always true or always false.

Changes to existing queries

Query Expected impact Change
Unused variable, import, function or class Fewer false-positive results This rule now flags fewer variables that are implictly used by JSX elements.

Changes to QL libraries