mirror of
https://github.com/github/codeql.git
synced 2025-12-18 18:10:39 +01:00
40 lines
2.2 KiB
ReStructuredText
40 lines
2.2 KiB
ReStructuredText
CodeQL for JavaScript
|
|
=====================
|
|
|
|
Experiment and learn how to write effective and efficient queries for CodeQL databases generated from JavaScript codebases.
|
|
|
|
.. toctree::
|
|
:glob:
|
|
:hidden:
|
|
|
|
introduce-libraries-js
|
|
introduce-libraries-ts
|
|
dataflow
|
|
flow-labels
|
|
type-tracking
|
|
ast-class-reference
|
|
dataflow-cheat-sheet
|
|
|
|
These documents provide an overview of the CodeQL libraries for JavaScript and TypeScript and show examples of how to use them.
|
|
|
|
- `Basic JavaScript query <https://lgtm.com/help/lgtm/console/ql-javascript-basic-example>`__ describes how to write and run queries using LGTM.
|
|
|
|
- :doc:`CodeQL libraries for JavaScript <introduce-libraries-js>` introduces the standard libraries used to write queries for JavaScript code. There is an extensive CodeQL library for analyzing JavaScript code. This tutorial briefly summarizes the most important classes and predicates provided by this library.
|
|
|
|
- :doc:`CodeQL libraries for TypeScript <introduce-libraries-ts>` introduces the standard libraries used to write queries for TypeScript code.
|
|
|
|
- :doc:`Analyzing data flow in JavaScript and TypeScript <dataflow>` demonstrates how to write queries using the standard data flow and taint tracking libraries for JavaScript/TypeScript.
|
|
|
|
- :doc:`Using flow labels for precise data flow analysis <flow-labels>` shows a more advanced example of data flow analysis using flow labels.
|
|
|
|
- :doc:`Abstract syntax tree classes for JavaScript and TypeScript <ast-class-reference>` gives an overview of all AST classes in the standard CodeQL library for JavaScript.
|
|
|
|
- :doc:`Data flow cheat sheet for JavaScript <dataflow-cheat-sheet>` lists parts of the CodeQL libraries that are commonly used for variant analysis and in data flow queries.
|
|
|
|
Further reading
|
|
---------------
|
|
|
|
- For examples of how to query common JavaScript elements, see the `JavaScript cookbook <https://help.semmle.com/wiki/display/CBJS>`__.
|
|
- For the queries used in LGTM, display a `JavaScript query <https://lgtm.com/search?q=language%3Ajavascript&t=rules>`__ and click **Open in query console** to see the code used to find alerts.
|
|
- For more information about the library for JavaScript see the `CodeQL library for JavaScript <https://help.semmle.com/qldoc/javascript/>`__.
|