hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-03-16 12:36:55 +01:00
Code Issues Packages Projects Releases Wiki Activity
Files
ab74898bbb490479867266a1fb8c92dfbb6d9c41
codeql/javascript/ql/lib/semmle/javascript/frameworks
History
Asger F ab74898bbb JS: Deprecate getUnknownMember() and replace its uses with getArrayElement() 
Although they mean slightly different things, every single call site
of getUnknownMember() just used it as a way to get array elements.

Since there is no known use-case for the original meaning of
getUnknownMember() I am deprecating it for now.
2025-03-14 23:08:19 +01:00
..
AngularJS
Moved def from AngularJSCore to Angular2
2025-01-08 16:36:10 +00:00
data
JS: Deprecate getUnknownMember() and replace its uses with getArrayElement()
2025-03-14 23:08:19 +01:00
helmet
Update javascript/ql/lib/semmle/javascript/frameworks/helmet/Helmet.qll
2024-08-16 09:44:53 +02:00
minimongo
JS: Remove MaD models from .qll files
2022-12-07 11:35:13 +01:00
mongodb
JS: Remove MaD models from .qll files
2022-12-07 11:35:13 +01:00
mssql
JS: Remove MaD models from .qll files
2022-12-07 11:35:13 +01:00
mysql
JS: Remove MaD models from .qll files
2022-12-07 11:35:13 +01:00
pg
JS: Remove MaD models from .qll files
2022-12-07 11:35:13 +01:00
sequelize
JS: update 'credentials[%]' sink kind to 'credentials-%'
2023-05-16 15:45:55 -04:00
spanner
JS: Remove MaD models from .qll files
2022-12-07 11:35:13 +01:00
sqlite3
JS: Remove MaD models from .qll files
2022-12-07 11:35:13 +01:00
ActionsLib.qll
implement isShellInterpreted on ExecActionsCall
2023-05-17 11:07:48 +02:00
Angular2.qll
Refactor Angular2 API to use httpClientApiNode for HttpClient method calls
2025-03-11 12:32:24 +01:00
AngularJS.qll
Packaging: Rafactor Javascript core libraries
2021-08-25 12:15:56 -07:00
Anser.qll
Packaging: Rafactor Javascript core libraries
2021-08-25 12:15:56 -07:00
AsyncPackage.qll
JS: Update test output and add related TODO in model of 'async'
2024-08-27 11:35:35 +02:00
AWS.qll
Revert "stash"
2024-05-25 12:03:00 +02:00
Azure.qll
Revert "stash"
2024-05-25 12:03:00 +02:00
Babel.qll
JS: Make implicit this receivers explicit
2023-05-03 15:31:00 +02:00
Bundling.qll
JS: Move Directive subclasses into Directive module
2024-03-26 09:39:37 +01:00
Cheerio.qll
JS: Rename getAnImmediateUse -> getASource
2022-05-24 11:57:30 +02:00
Classnames.qll
Packaging: Rafactor Javascript core libraries
2021-08-25 12:15:56 -07:00
ClassValidator.qll
JS: Autoformat
2022-05-24 11:57:30 +02:00
ClientRequests.qll
Applied comment
2025-02-25 13:57:39 +01:00
ClosureLibrary.qll
use more set literals instead of big disjunctions
2022-05-24 11:09:10 +02:00
CommandLineArguments.qll
JS: Model newer yargs command-line parsing pattern
2024-10-25 15:03:43 +02:00
ComposedFunctions.qll
JS: Make implicit this receivers explicit
2023-05-03 15:31:00 +02:00
Connect.qll
use my script to delete outdated deprecations
2024-09-03 20:30:58 +02:00
ConnectExpressShared.qll
ensure consistent casing of names
2022-09-09 10:34:14 +02:00
CookieLibraries.qll
JavaScript: Autoformat
2023-03-10 09:41:20 +01:00
Credentials.qll
add new default cred kind
2024-07-01 14:42:34 +02:00
CryptoLibraries.qll
Revert "stash"
2024-05-25 12:03:00 +02:00
D3.qll
JS: Deprecate getUnknownMember() and replace its uses with getArrayElement()
2025-03-14 23:08:19 +01:00
DateFunctions.qll
run the non-us patch
2021-12-20 16:24:41 +01:00
DigitalOcean.qll
Revert "stash"
2024-05-25 12:03:00 +02:00
DomEvents.qll
have getSourceType() depend on which kind of event it is
2022-04-25 11:32:52 +02:00
Electron.qll
delete outdated deprecations
2024-01-22 09:11:35 +01:00
Emscripten.qll
delete outdated deprecations
2024-01-22 09:11:35 +01:00
EventEmitter.qll
use set literal instead of big disjunction of literals
2021-10-26 12:55:25 +02:00
Express.qll
Formatting
2025-02-12 00:15:27 -08:00
ExpressModules.qll
JS: Make implicit this receivers explicit
2023-05-03 15:31:00 +02:00
Fastify.qll
JS: delete various outdated deprecations
2023-10-09 09:14:55 +02:00
Files.qll
delete old deprecations
2023-06-02 11:58:08 +02:00
Firebase.qll
JavaScript: Autoformat
2023-03-10 09:41:20 +01:00
FormParsers.qll
JS: Rename Node.{getASource -> asSource, getASink -> asSink}
2022-05-24 11:57:30 +02:00
GraphQL.qll
run the non-us patch
2021-12-20 16:24:41 +01:00
GWT.qll
use my script to delete outdated deprecations
2024-09-03 20:30:58 +02:00
Handlebars.qll
JavaScript: Remove omittable exists variables
2023-01-10 13:37:21 +01:00
Hapi.qll
JS: delete various outdated deprecations
2023-10-09 09:14:55 +02:00
History.qll
Merge pull request #8606 from asgerf/js/api-graph-api
2022-05-30 10:49:14 +02:00
HTTP.qll
delete outdated deprecations
2024-01-22 09:11:35 +01:00
HttpFrameworks.qll
Add Restify/Spife support
2022-10-18 21:41:34 +02:00
HttpProxy.qll
JS: Make implicit this receivers explicit
2023-05-03 15:31:00 +02:00
Immutable.qll
spelling: implementation
2022-10-11 00:23:36 -04:00
jQuery.qll
add the html argument to the jQuery functions as an XSS sink
2023-03-03 11:09:53 +01:00
JWT.qll
add new default cred kind
2024-07-01 14:42:34 +02:00
Knex.qll
update the SQL/NoSQL models to use dataflow nodes
2022-09-05 16:11:54 +02:00
Koa.qll
JS: delete various outdated deprecations
2023-10-09 09:14:55 +02:00
LazyCache.qll
delete all deprecations that are over 14 months old
2022-03-09 18:28:07 +01:00
LdapJS.qll
JS: Rename Node.{getASource -> asSource, getASink -> asSink}
2022-05-24 11:57:30 +02:00
LiveServer.qll
ensure consistent casing of names
2022-09-09 10:34:14 +02:00
LodashUnderscore.qll
JS: Handle array of sorting criteria
2025-02-18 16:58:04 +01:00
Logging.qll
JS: Make implicit this receivers explicit
2023-05-03 15:31:00 +02:00
Markdown.qll
Refactor Markdown taint steps and update expected results for reflected XSS tests
2025-03-10 19:27:36 +01:00
Micro.qll
JS: delete various outdated deprecations
2023-10-09 09:14:55 +02:00
MooTools.qll
C++/C#/Java/JavaScript/Python: Remove singleton set literals.
2021-10-14 11:34:22 +02:00
Nest.qll
JS: Model dependency injection in Nest
2025-01-29 13:49:46 +01:00
Next.qll
add new default cred kind
2024-07-01 14:42:34 +02:00
NodeJSLib.model.yml
JS: Remove dummy comment
2024-11-01 10:24:22 +01:00
NodeJSLib.qll
JS: Add environment threat-model source
2024-10-25 15:03:43 +02:00
NoSQL.model.yml
JS: No longer use models-as-data CSV interface
2024-04-12 13:40:15 +02:00
NoSQL.qll
Revert "stash"
2024-05-25 12:03:00 +02:00
PkgCloud.qll
Revert "stash"
2024-05-25 12:03:00 +02:00
Prettier.qll
JS: Rename Node.{getASource -> asSource, getASink -> asSink}
2022-05-24 11:57:30 +02:00
PropertyProjection.qll
JS: Make implicit this receivers explicit
2023-05-03 15:31:00 +02:00
Puppeteer.qll
JS: Deprecate getUnknownMember() and replace its uses with getArrayElement()
2025-03-14 23:08:19 +01:00
React.qll
JS: Add view-component-input threat model
2025-01-22 10:45:46 +01:00
ReactNative.qll
patch upper-case acronyms to be PascalCase
2022-03-11 11:10:33 +01:00
Redux.qll
JS: Make implicit this receivers explicit
2023-05-03 15:31:00 +02:00
Request.qll
Revert "stash"
2024-05-25 12:03:00 +02:00
Restify.qll
JS: delete various outdated deprecations
2023-10-09 09:14:55 +02:00
RxJS.qll
JS: fix typos in comments
2022-05-12 16:02:19 +01:00
ServerLess.qll
JS: Switch to shared XML.qll implementation
2024-03-19 13:17:50 +01:00
ShellJS.qll
make shellJSMember predicate private, improve predicate document
2024-05-16 14:05:06 +02:00
Snapdragon.qll
JS: Rename Node.{getASource -> asSource, getASink -> asSink}
2022-05-24 11:57:30 +02:00
SocketIO.qll
delete old deprecations
2023-03-03 09:23:02 +01:00
Spife.qll
JavaScript: Autoformat
2023-03-10 09:41:20 +01:00
SQL.model.yml
JS: No longer use models-as-data CSV interface
2024-04-12 13:40:15 +02:00
SQL.qll
JS: Fix the spurious flow
2025-02-28 13:28:02 +01:00
StringFormatters.qll
JS: Make implicit this receivers explicit
2023-05-03 15:31:00 +02:00
SystemCommandExecutors.qll
JS: Make implicit this receivers explicit
2023-05-03 15:31:00 +02:00
Templating.qll
JS: Add DataFlow::Node.getLocation
2024-03-13 13:06:16 +01:00
Testing.qll
delete outdated deprecations
2024-01-22 09:11:35 +01:00
TestingCustomizations.qll
Packaging: Rafactor Javascript core libraries
2021-08-25 12:15:56 -07:00
TorrentLibraries.qll
JS: Rename Node.{getASource -> asSource, getASink -> asSink}
2022-05-24 11:57:30 +02:00
TrustedTypes.qll
JS: Make implicit this receivers explicit
2023-05-03 15:31:00 +02:00
Typeahead.qll
add explicit this to all member calls
2021-11-01 09:51:15 +01:00
UriLibraries.qll
JS: Track deep flow through qs.stringify
2025-02-28 13:28:04 +01:00
Vue.qll
JS: Add view-component-input threat model
2025-01-22 10:45:46 +01:00
Vuex.qll
JS: Deprecate getUnknownMember() and replace its uses with getArrayElement()
2025-03-14 23:08:19 +01:00
Webix.qll
Apply suggestions from code review
2023-06-29 16:06:34 +02:00
WebSocket.qll
delete old deprecations
2023-06-02 11:58:08 +02:00
XmlParsers.qll
JS: Make implicit this receivers explicit
2023-05-03 15:31:00 +02:00
xUnit.qll
JS: Make implicit this receivers explicit
2023-05-03 15:31:00 +02:00