hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-07-03 02:25:29 +02:00
Code Issues Packages Projects Releases Wiki Activity
Files
e9766086cd14bbcd940049b168ebd0105a0226c8
codeql/javascript/ql/lib/semmle/javascript/frameworks
History
BazookaMusic d0ffde8c45 Em-dash - of course :D
2026-06-08 14:03:12 +02:00
..
AngularJS
JS: Use question-mark variant in all overlay annotations
2025-12-08 13:13:09 +01:00
data
Replace branch with acceptingValue
2026-03-27 22:39:10 +00:00
helmet
Update javascript/ql/lib/semmle/javascript/frameworks/helmet/Helmet.qll
2024-08-16 09:44:53 +02:00
minimongo
…
mongodb
…
mssql
…
mysql
…
pg
…
sequelize
…
spanner
…
sqlite3
…
ActionsLib.qll
…
Angular2.qll
JS: Resolve Angular2 templateUrl with ResolveExpr instead of PathExpr
2025-04-29 13:23:42 +02:00
AngularJS.qll
…
Anser.qll
…
Anthropic.qll
QLDoc + include the queries in the correct expected files per query suite
2026-06-08 12:38:28 +02:00
AsyncPackage.qll
JS: Adapt to changes in FlowSummaryImpl
2026-01-26 12:40:21 +01:00
AWS.qll
Revert "stash"
2024-05-25 12:03:00 +02:00
Azure.qll
Revert "stash"
2024-05-25 12:03:00 +02:00
Babel.qll
JS: Fix some Ql4Ql violations.
2025-09-01 15:17:53 +02:00
Bundling.qll
…
Cheerio.qll
…
Classnames.qll
…
ClassValidator.qll
JS: Update type usage in ClassValidator.qll
2025-06-23 12:55:01 +02:00
ClientRequests.qll
JS: Localize charpred of API::EntryPoint
2026-01-07 11:05:41 +01:00
ClosureLibrary.qll
…
CommandLineArguments.qll
add taint flow for arg/command-line-args with custom argv option
2025-08-01 13:34:08 +02:00
ComposedFunctions.qll
…
Connect.qll
use my script to delete outdated deprecations
2024-09-03 20:30:58 +02:00
ConnectExpressShared.qll
…
CookieLibraries.qll
…
Credentials.qll
python: add machinery for MaD barriers
2026-01-22 17:30:24 +01:00
CryptoLibraries.qll
Properly share CryptoAlgorithms and CryptoAlgorithmNames
2025-07-14 11:39:00 +02:00
D3.qll
JS: Localize charpred of API::EntryPoint
2026-01-07 11:05:41 +01:00
DateFunctions.qll
…
DigitalOcean.qll
Revert "stash"
2024-05-25 12:03:00 +02:00
DomEvents.qll
…
Electron.qll
JS: Localize charpred of API::EntryPoint
2026-01-07 11:05:41 +01:00
Emscripten.qll
…
EventEmitter.qll
JS: Add overlay[global] to abstract classes with fields
2026-01-07 11:05:41 +01:00
Execa.qll
JS: removed execa parts from SystemCommandExecutors and moved it to Execa.qll
2025-06-24 12:41:22 +02:00
Express.qll
Update javascript/ql/lib/semmle/javascript/frameworks/Express.qll
2025-09-16 13:48:26 +02:00
ExpressModules.qll
…
Fastify.qll
JS: Update Fastify tld
2025-06-19 16:22:46 +01:00
Files.qll
Removed old mkdirp modeling and replaced it with MaD.
2025-04-03 10:45:16 +02:00
Firebase.qll
…
FormParsers.qll
…
GoogleGenAI.qll
QLDoc + include the queries in the correct expected files per query suite
2026-06-08 12:38:28 +02:00
GraphQL.qll
…
GWT.qll
use my script to delete outdated deprecations
2024-09-03 20:30:58 +02:00
Handlebars.qll
…
Hapi.qll
Added support for @hapi/hapi server.
2025-03-26 11:41:11 +01:00
History.qll
JS: Localize charpred of API::EntryPoint
2026-01-07 11:05:41 +01:00
HTTP.qll
JS: Enable association with headers without needing a route handler
2025-04-03 11:08:10 +02:00
HttpFrameworks.qll
…
HttpProxy.qll
…
Immutable.qll
JS: Localize charpred of API::EntryPoint
2026-01-07 11:05:41 +01:00
jQuery.qll
JS: Update jQuery model
2025-05-20 13:20:07 +02:00
JWT.qll
add new default cred kind
2024-07-01 14:42:34 +02:00
Knex.qll
…
Koa.qll
…
LazyCache.qll
JS: Use question-mark variant in all overlay annotations
2025-12-08 13:13:09 +01:00
LdapJS.qll
…
LiveServer.qll
…
LodashUnderscore.qll
JS: Adapt to changes in FlowSummaryImpl
2026-01-26 12:40:21 +01:00
Logging.qll
JS: Localize charpred of API::EntryPoint
2026-01-07 11:05:41 +01:00
Markdown.qll
Refactor Markdown taint steps and update expected results for reflected XSS tests
2025-03-10 19:27:36 +01:00
Micro.qll
…
MooTools.qll
…
Nest.qll
JS: Localize charpred of API::EntryPoint
2026-01-07 11:05:41 +01:00
Next.qll
Update javascript/ql/lib/semmle/javascript/frameworks/Next.qll
2026-01-13 10:34:25 +01:00
NodeJSLib.model.yml
Revert "javascript: add MaD model"
2026-02-17 14:38:56 +00:00
NodeJSLib.qll
JS: Add overlay[global] to abstract classes with fields
2026-01-07 11:05:41 +01:00
NoSQL.model.yml
…
NoSQL.qll
python: add machinery for MaD barriers
2026-01-22 17:30:24 +01:00
OpenAI.qll
Em-dash - of course :D
2026-06-08 14:03:12 +02:00
OpenRouter.qll
Formatting
2026-06-08 12:15:50 +02:00
PkgCloud.qll
Revert "stash"
2024-05-25 12:03:00 +02:00
Prettier.qll
…
PropertyProjection.qll
JS: Use question-mark variant in all overlay annotations
2025-12-08 13:13:09 +01:00
Puppeteer.qll
JS: Deprecate getUnknownMember() and replace its uses with getArrayElement()
2025-03-14 23:08:19 +01:00
React.qll
Merge pull request #21349 from asgerf/mobx-wrapper
2026-02-25 09:24:45 +01:00
ReactNative.qll
…
Redux.qll
JS: Localize charpred of API::EntryPoint
2026-01-07 11:05:41 +01:00
Request.qll
Revert "stash"
2024-05-25 12:03:00 +02:00
Restify.qll
…
RxJS.qll
…
ServerLess.qll
…
ShellJS.qll
Update javascript/ql/lib/semmle/javascript/frameworks/ShellJS.qll
2025-05-02 13:39:46 +02:00
Snapdragon.qll
…
SocketIO.qll
…
Spife.qll
…
SQL.model.yml
…
SQL.qll
python: add machinery for MaD barriers
2026-01-22 17:30:24 +01:00
StringFormatters.qll
…
SystemCommandExecutors.qll
JS: removed execa parts from SystemCommandExecutors and moved it to Execa.qll
2025-06-24 12:41:22 +02:00
Templating.qll
JS: Work around an issue with overlay-invariance
2026-01-07 11:05:41 +01:00
Testing.qll
…
TestingCustomizations.qll
…
TorrentLibraries.qll
…
TrustedTypes.qll
JS: Localize charpred of API::EntryPoint
2026-01-07 11:05:41 +01:00
Typeahead.qll
…
UnderscoreDotString.qll
Adressed comments.
2025-03-20 12:37:06 +01:00
UriLibraries.qll
JS: Adapt to changes in FlowSummaryImpl
2026-01-26 12:40:21 +01:00
VercelNode.qll
Model res.json and res.jsonp as Vercel response sinks
2026-04-28 16:14:53 +00:00
Vue.qll
Merge pull request #21159 from asgerf/js/vue-prop-function
2026-01-19 10:13:49 +01:00
Vuex.qll
JS: Deprecate getUnknownMember() and replace its uses with getArrayElement()
2025-03-14 23:08:19 +01:00
Webix.qll
JS: Localize charpred of API::EntryPoint
2026-01-07 11:05:41 +01:00
WebResponse.qll
Merge pull request #20733 from asgerf/js/incremental-api-graphs
2026-01-14 12:49:41 +01:00
WebSocket.qll
JS: Localize charpred of API::EntryPoint
2026-01-07 11:05:41 +01:00
XmlParsers.qll
Removed libxmljs from being marked as sink for xml-bomb.
2025-07-15 09:33:11 +02:00
xUnit.qll
JS: Avoid overriding Expr predicates in xUnit.qll
2025-08-29 13:06:05 +02:00