hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-02-17 23:43:42 +01:00
Code Issues Packages Projects Releases Wiki Activity
Files
b8cff77cab58a125918b14a2730a244ea10496e4
codeql/javascript/ql/lib/semmle/javascript
History
Asger F b8cff77cab Merge pull request #20873 from github/shared-xml-discard 
Share XML discard predicates
2025-12-01 10:06:02 +01:00
..
dataflow
Merge branch 'main' into 20823-globalVarRef-document-defaultView
2025-11-20 15:18:15 +02:00
dependencies
JS: Deprecate PathExpr and related classes
2025-04-29 13:23:47 +02:00
endpoints
JS: Expose InternalModuleNaming
2024-04-25 13:33:17 +02:00
explore
JS: Deprecate forward/backward exploration modules
2025-01-03 11:41:39 +01:00
filters
JS: More aggressive test file classification
2024-11-19 13:23:32 +01:00
frameworks
JS: Fix project layout detection for Next.js apps
2025-11-25 15:54:45 +01:00
heuristics
JS: Make implicit this receivers explicit
2023-05-03 15:31:00 +02:00
internal
Sync OverlayXml.qll
2025-11-28 09:23:49 +01:00
linters
JS: Make implicit this receivers explicit
2023-05-11 11:50:56 +02:00
meta
JS: Make implicit this receivers explicit
2023-05-11 11:50:56 +02:00
security
Constrain location overrides to actual sources/sinks
2025-10-28 09:42:20 +01:00
Actions.qll
JS: Un-deprecate Actions.qll for now as we have some internal queries that use it.
2025-06-23 16:38:04 +02:00
Aliases.qll
…
AMD.qll
JS: Overlay annotations for AST layer
2025-11-13 09:45:56 +01:00
ApiGraphs.qll
JS: Refine criteria so that explicit this-passing is not affected
2025-10-06 11:43:18 +02:00
Arrays.qll
Merge branch 'main' into js/shared-dataflow-merge-main
2024-12-19 10:14:38 +01:00
AST.qll
JS: Avoid more bad joins due to locality
2025-11-13 09:46:14 +01:00
Base64.qll
JS: Make implicit this receivers explicit
2023-05-03 15:31:00 +02:00
BasicBlocks.qll
JS: Add qldoc to file
2024-10-22 12:46:09 +02:00
CanonicalNames.qll
JS: Deprecate everything that depends on type extraction
2025-06-23 12:55:14 +02:00
CFG.qll
JS: Overlay annotations for AST layer
2025-11-13 09:45:56 +01:00
CharacterEscapes.qll
…
Classes.qll
JS: Overlay annotations for AST layer
2025-11-13 09:45:56 +01:00
Closure.qll
JS: Overlay annotations for AST layer
2025-11-13 09:45:56 +01:00
Collections.qll
Merge branch 'main' into js/shared-dataflow-merge-main
2024-12-19 10:14:38 +01:00
Comments.qll
JS: Overlay annotations for AST layer
2025-11-13 09:45:56 +01:00
Concepts.qll
Shared: Use final aliases in ConcentsShared.qll
2025-08-05 14:53:52 +02:00
Constants.qll
JS: Overlay annotations for AST layer
2025-11-13 09:45:56 +01:00
DefensiveProgramming.qll
Py/JS/RB: Use instanceof in more places
2022-12-12 16:06:57 +01:00
DefUse.qll
JS: Overlay annotations for AST layer
2025-11-13 09:45:56 +01:00
DOM.qll
JS: Updates to DOM model
2025-04-02 10:14:03 +02:00
DynamicPropertyAccess.qll
JS: Make implicit this receivers explicit
2023-05-03 15:31:00 +02:00
E4X.qll
JS: Overlay annotations for AST layer
2025-11-13 09:45:56 +01:00
EmailClients.qll
JS: Make implicit this receivers explicit
2023-05-03 15:31:00 +02:00
Errors.qll
JS: Overlay annotations for AST layer
2025-11-13 09:45:56 +01:00
ES2015Modules.qll
JS: Fix typo
2025-11-26 11:40:41 +01:00
Expr.qll
JS: Avoid bad join in shared predicate induced by 'forex'.
2025-11-13 09:46:12 +01:00
Extend.qll
JS: Make more general-purpose data flow things local
2025-11-13 09:46:01 +01:00
Externs.qll
JS: Overlay annotations for AST layer
2025-11-13 09:45:56 +01:00
Files.qll
JS: Overlay annotations for AST layer
2025-11-13 09:45:56 +01:00
Functions.qll
JS: Overlay annotations for AST layer
2025-11-13 09:45:56 +01:00
GeneratedCode.qll
JavaScript: Autoformat
2023-03-10 09:41:20 +01:00
Generators.qll
JS: Summary/steps for iterators and generators
2023-10-13 12:42:41 +02:00
GlobalAccessPaths.qll
JS: Make isAssignedInUniqueFile global, as it should be
2025-11-13 09:46:20 +01:00
HTML.qll
JS: Overlay annotations for AST layer
2025-11-13 09:45:56 +01:00
HtmlSanitizers.qll
JS: Make implicit this receivers explicit
2023-05-03 15:31:00 +02:00
InclusionTests.qll
Remove pragma[assume_small_delta]
2023-06-30 11:09:29 -07:00
JSDoc.qll
JS: Overlay annotations for AST layer
2025-11-13 09:45:56 +01:00
JSON.qll
JS: Overlay annotations for AST layer
2025-11-13 09:45:56 +01:00
JsonParsers.qll
JS: remove serialize-javascript from JsonParsers.qll as it is not a parser
2025-06-16 12:59:36 +02:00
JsonSchema.qll
…
JsonStringifiers.qll
JS: track taint through serialize-javascript calls with object arguments
2025-06-16 10:38:20 +02:00
JSX.qll
JS: Overlay annotations for AST layer
2025-11-13 09:45:56 +01:00
Lines.qll
JS: Overlay annotations for AST layer
2025-11-13 09:45:56 +01:00
Locations.qll
JS: Add more overlay[caller?] annotations
2025-11-13 09:46:06 +01:00
MembershipCandidates.qll
JS: Sharpen up EnumerationRegExp
2025-02-28 13:58:11 +01:00
Modules.qll
JS: Overlay annotations for AST layer
2025-11-13 09:45:56 +01:00
NodeJS.qll
JS: Overlay annotations for AST layer
2025-11-13 09:45:56 +01:00
NodeModuleResolutionImpl.qll
JS: Deprecate PathExpr and related classes
2025-04-29 13:23:47 +02:00
NPM.qll
JS: Overlay annotations for AST layer
2025-11-13 09:45:56 +01:00
PackageExports.qll
JS: Use PackageJsonEx instead of resolveMainModule
2025-04-29 13:23:45 +02:00
Paths.qll
JS: Deprecate PathExpr and related classes
2025-04-29 13:23:47 +02:00
PrintAst.qll
Add support for XML attributes in the data flow graph
2023-12-14 11:33:53 -08:00
Promises.qll
JS: Add more overlay[caller?] annotations
2025-11-13 09:46:06 +01:00
RangeAnalysis.qll
ensure consistent casing of names
2022-09-09 10:34:14 +02:00
Regexp.qll
JS: Avoid more bad joins due to locality
2025-11-13 09:46:14 +01:00
RestrictedLocations.qll
JS: Remove synthetic locations
2025-08-27 11:20:24 +02:00
Routing.qll
JS: enchance middleware taint tracking via local source
2025-06-17 08:30:19 +02:00
SourceMaps.qll
use my script to delete outdated deprecations
2024-09-03 20:30:58 +02:00
SSA.qll
JS: Overlay annotations for AST layer
2025-11-13 09:45:56 +01:00
StandardLibrary.qll
Merge branch 'main' into js/shared-dataflow-merge-main
2024-12-19 10:14:38 +01:00
Stmt.qll
JS: Overlay annotations for AST layer
2025-11-13 09:45:56 +01:00
StringConcatenation.qll
…
StringOps.qll
Added support for matchAll in CWE-020 including new test cases
2024-11-05 08:51:24 +01:00
Templates.qll
JS: Overlay annotations for AST layer
2025-11-13 09:45:56 +01:00
Tokens.qll
JS: Overlay annotations for AST layer
2025-11-13 09:45:56 +01:00
TSConfig.qll
Apply suggestions from code review
2025-05-02 12:41:29 +02:00
TypeAnnotations.qll
JS: Overlay annotations for AST layer
2025-11-13 09:45:56 +01:00
TypeScript.qll
JS: Overlay annotations for AST layer
2025-11-13 09:45:56 +01:00
Unit.qll
Replace all definitions of Unit by import codeql.util.Unit
2023-03-24 10:39:34 +01:00
Util.qll
…
Variables.qll
JS: Overlay annotations for AST layer
2025-11-13 09:45:56 +01:00
ViewComponentInput.qll
JS: Update API usage in ViewComponentInput
2025-06-23 12:55:08 +02:00
XML.qll
JS: Overlay annotations for AST layer
2025-11-13 09:45:56 +01:00
YAML.qll
JS: Overlay annotations for AST layer
2025-11-13 09:45:56 +01:00