hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-01-09 20:50:21 +01:00
Code Issues Packages Projects Releases Wiki Activity
Files
bd98ae0dcc57a5fc5ea5fb830430a5268eb84e2a
codeql/javascript/ql/lib/semmle/javascript
History
yoff 7ae389bb28 Merge pull request #12026 from erik-krogh/nodePty 
JS: add code-injection sink for node-pty
2023-01-31 13:27:32 +01:00
..
dataflow
JavaScript: Remove omittable exists variables
2023-01-10 13:37:21 +01:00
dependencies
Py/JS/RB: Use instanceof in more places
2022-12-12 16:06:57 +01:00
explore
JS: fix ql/field-only-used-in-charpred within JavaScript
2022-01-20 09:41:13 +01:00
filters
fix misspellings in predicate names
2022-05-24 10:57:13 +02:00
frameworks
add support for axios used as a global variable
2023-01-29 22:55:20 +01:00
heuristics
Merge pull request #10663 from pwntester/restify_improvements
2022-12-15 11:08:22 +01:00
internal
Sync ConceptsShared
2022-08-18 13:42:52 +02:00
linters
rename more acronyms
2022-08-25 20:52:27 +02:00
meta
Fix non-US spelling of 'behavior'
2021-12-17 15:29:31 +00:00
security
fix QL-for-QL warnings
2023-01-31 10:55:27 +01:00
Actions.qll
Ran autoformatter on Actions.qll
2022-09-30 09:24:12 +01:00
Aliases.qll
JS: delete leftover comment
2022-03-10 10:25:02 +01:00
AMD.qll
Manually write out a transitive closure.
2022-05-30 12:37:50 +02:00
ApiGraphs.qll
simplifications inspired by review
2023-01-13 13:18:52 +01:00
Arrays.qll
simplify getALibraryInputParameter by adding more general dataflow for the arguments object
2022-08-22 08:32:43 +02:00
AST.qll
patch upper-case acronyms to be PascalCase
2022-03-11 11:10:33 +01:00
Base64.qll
…
BasicBlocks.qll
JS: fix most ql/missing-parameter-qldoc issues
2022-03-16 22:56:52 +01:00
CanonicalNames.qll
patch upper-case acronyms to be PascalCase
2022-03-11 11:10:33 +01:00
CFG.qll
patch upper-case acronyms to be PascalCase
2022-03-11 11:10:33 +01:00
CharacterEscapes.qll
JS: fix most ql/missing-parameter-qldoc issues
2022-03-16 22:56:52 +01:00
Classes.qll
JS: Use explicit this
2022-08-29 12:39:53 +02:00
Closure.qll
Py/JS/RB: Use instanceof in more places
2022-12-12 16:06:57 +01:00
Collections.qll
delete old deprecations
2022-08-16 22:27:15 +02:00
Comments.qll
…
Concepts.qll
base implementation of Spanner model on models-as-data
2022-01-12 17:07:16 +01:00
Constants.qll
cache more predicates
2021-11-22 09:03:36 +01:00
DefensiveProgramming.qll
Py/JS/RB: Use instanceof in more places
2022-12-12 16:06:57 +01:00
DefUse.qll
JavaScript: Remove omittable exists variables
2023-01-10 13:37:21 +01:00
DOM.qll
fix that the TypeTracker was unrestricted for the base-case of nonFirstLocationType
2023-01-10 13:39:50 +01:00
DynamicPropertyAccess.qll
merge hasDominatingWrite and hasDominatingAssignment
2022-03-02 11:30:05 +01:00
E4X.qll
patch upper-case acronyms to be PascalCase
2022-03-11 11:10:33 +01:00
EmailClients.qll
…
Errors.qll
…
ES2015Modules.qll
Merge branch 'main' into missDocParam
2022-07-13 09:58:04 +02:00
Expr.qll
JavaScript: Remove omittable exists variables
2023-01-10 13:37:21 +01:00
Extend.qll
add lodash.{clone, cloneDeep} as a clone step
2022-02-21 22:27:29 +01:00
Externs.qll
Fix syntax errors in QL comments
2022-04-28 11:53:36 -07:00
Files.qll
Remove redundant overrides
2022-08-19 13:57:41 +02:00
Functions.qll
JavaScript: Remove omittable exists variables
2023-01-10 13:37:21 +01:00
GeneratedCode.qll
Py/JS/RB: Use instanceof in more places
2022-12-12 16:06:57 +01:00
Generators.qll
run the non-us patch
2021-12-20 16:24:41 +01:00
GlobalAccessPaths.qll
simplify and improve the example for getLaterBaseAccess
2022-09-22 15:57:54 +02:00
HTML.qll
JS: Functionality from untrusted sources query (CWE-830)
2022-02-22 11:41:52 +01:00
HtmlSanitizers.qll
…
InclusionTests.qll
add explicit this to all member calls
2021-11-01 09:51:15 +01:00
JSDoc.qll
patch upper-case acronyms to be PascalCase
2022-03-11 11:10:33 +01:00
JSON.qll
bind the result in JsonValue::getBooleanValue
2022-06-14 13:22:09 +02:00
JsonParsers.qll
JS: Rename Node.{getASource -> asSource, getASink -> asSink}
2022-05-24 11:57:30 +02:00
JsonSchema.qll
JS: Rename Node.{getASource -> asSource, getASink -> asSink}
2022-05-24 11:57:30 +02:00
JsonStringifiers.qll
rename more acronyms
2022-08-25 20:52:27 +02:00
JSX.qll
JS/Python/Ruby: s/a HTML/an HTML/
2022-09-30 10:37:52 +01:00
Lines.qll
…
Locations.qll
add explicit this to all member calls
2021-11-01 09:51:15 +01:00
MembershipCandidates.qll
make a model for hasOwnProperty calls and similar
2022-05-24 14:13:53 +02:00
Modules.qll
patch upper-case acronyms to be PascalCase
2022-03-11 11:10:33 +01:00
NodeJS.qll
JavaScript: Remove omittable exists variables
2023-01-10 13:37:21 +01:00
NodeModuleResolutionImpl.qll
expand what is parsed as the stem of a pathexpr
2023-01-17 21:28:21 +01:00
NPM.qll
rename more acronyms
2022-08-25 20:52:27 +02:00
PackageExports.qll
autoformat
2023-01-10 15:38:13 +01:00
Paths.qll
JS: fix most ql/missing-parameter-qldoc issues
2022-03-16 22:56:52 +01:00
PrintAst.qll
fix errors in JS printAst
2023-01-12 15:37:52 +01:00
Promises.qll
JS: Add withoutPropStep and model 'await' steps with it
2022-06-20 20:16:07 +02:00
RangeAnalysis.qll
ensure consistent casing of names
2022-09-09 10:34:14 +02:00
Regexp.qll
share {js,rb}/regex/missing-regexp-anchor
2022-12-18 17:23:41 +01:00
RestrictedLocations.qll
…
Routing.qll
JavaScript: Remove omittable exists variables
2023-01-10 13:37:21 +01:00
SourceMaps.qll
patch upper-case acronyms to be PascalCase
2022-03-11 11:10:33 +01:00
SSA.qll
ensure consistent casing of names
2022-09-09 10:34:14 +02:00
StandardLibrary.qll
make a model for hasOwnProperty calls and similar
2022-05-24 14:13:53 +02:00
Stmt.qll
rename more acronyms
2022-08-25 20:52:27 +02:00
StringConcatenation.qll
…
StringOps.qll
JavaScript: fix typos in documentation
2022-03-07 16:09:13 +01:00
Templates.qll
…
Tokens.qll
add explicit this to all member calls
2021-11-01 09:51:15 +01:00
TypeAnnotations.qll
…
TypeScript.qll
add support for satisfies-expressions
2022-11-15 22:07:24 +01:00
Unit.qll
…
Util.qll
…
Variables.qll
JS: Add getters for DeclarationSpace members
2022-05-24 14:30:36 +02:00
XML.qll
Make *.qll non-executable
2022-08-24 16:36:15 +01:00
YAML.qll
fixup getAPrimaryQlClass
2022-08-25 20:52:30 +02:00