BazookaMusic e612db2ec9 Promote user prompt injection query to stable security ...

Move UserPromptInjection out of experimental into stable JavaScript security locations.

Set js/user-prompt-injection precision to low and remove experimental tagging.

Move supporting dataflow libraries, qhelp/examples, and tests to stable paths and update references.

2026-06-11 11:28:14 +02:00

..

change-notes

Merge branch 'main' into js/vercel-node-framework

2026-04-25 14:19:43 -04:00

Declarations

JS: Make implicit this receivers explicit

2023-05-03 15:31:00 +02:00

Expressions

JS: Use question-mark variant in all overlay annotations

2025-12-08 13:13:09 +01:00

ext

add openrouter support

2026-06-04 16:42:49 +02:00

external

JS: move ExternalArtifact.qll into lib/ folder to fix ql/db-type-outside-core

2022-01-20 14:00:57 +01:00

LanguageFeatures

JS: Use question-mark variant in all overlay annotations

2025-12-08 13:13:09 +01:00

semmle

Promote user prompt injection query to stable security

2026-06-11 11:28:14 +02:00

upgrades

JS: Add upgrade/downgrade scripts but with 'partial' compatibility

2026-03-02 11:09:19 +01:00

utils/test

JS: Adapt to changes in FlowSummaryImpl

2026-01-26 12:40:21 +01:00

BUILD.bazel

Upgrade rules_pkg to 0.10.1.

2024-04-16 16:29:56 +02:00

CHANGELOG.md

Release preparation for version 2.25.3

2026-04-20 09:27:23 +00:00

codeql-pack.release.yml

Release preparation for version 2.25.3

2026-04-20 09:27:23 +00:00

Customizations.qll

…

default.qll

…

definitions.qll

JS: Update type usage in definitions.qll

2025-06-23 12:54:59 +02:00

IDEContextual.qll

Share getFileBySourceArchiveName implementation

2024-02-23 11:25:49 +01:00

javascript.qll

JS: Add support for @vercel/node serverless functions

2026-04-12 19:17:18 +00:00

localDefinitions.ql

Move contextual queries from src to lib

2022-06-29 07:51:26 -07:00

localReferences.ql

Move contextual queries from src to lib

2022-06-29 07:51:26 -07:00

printAst.ql

Move contextual queries from src to lib

2022-06-29 07:51:26 -07:00

qlpack.lock.yml

…

qlpack.yml

Post-release preparation for codeql-cli-2.25.3

2026-04-20 12:40:34 +00:00

semmlecode.javascript.dbscheme

JS: Emit variable bindings for 'this' expressions

2026-02-27 11:44:54 +01:00

semmlecode.javascript.dbscheme.stats

JS: Preserve information about 'defer' keyword

2025-09-05 11:57:33 +02:00