Rasmus Wriedt Larsen f733ac19a9 JS: Make (most) queries use ActiveThreatModelSource ...

7 cases looks something like this:

```
class RemoteFlowSourceAsSource extends Source instanceof RemoteFlowSource {
  RemoteFlowSourceAsSource() { not this instanceof ClientSideRemoteFlowSource }
}
```

(some have variations like `not this.(ClientSideRemoteFlowSource).getKind().isPathOrUrl()`)

javascript/ql/lib/semmle/javascript/security/dataflow/ClientSideUrlRedirectCustomizations.qll
javascript/ql/lib/semmle/javascript/security/dataflow/CommandInjectionCustomizations.qll
javascript/ql/lib/semmle/javascript/security/dataflow/CorsMisconfigurationForCredentialsCustomizations.qll
javascript/ql/lib/semmle/javascript/security/dataflow/RegExpInjectionCustomizations.qll
javascript/ql/lib/semmle/javascript/security/dataflow/RequestForgeryCustomizations.qll
javascript/ql/lib/semmle/javascript/security/dataflow/ResourceExhaustionCustomizations.qll
javascript/ql/lib/semmle/javascript/security/dataflow/TaintedPathCustomizations.qll

2024-10-25 15:03:42 +02:00

..

examples

Javascript: Enable implicit this warnings for remaining packs

2023-06-27 11:56:29 +02:00

integration-tests

JS: Move all integration tests.

2024-08-28 10:43:08 +02:00

lib

JS: Make (most) queries use ActiveThreatModelSource

2024-10-25 15:03:42 +02:00

src

Post-release preparation for codeql-cli-2.19.2

2024-10-15 12:16:59 +00:00

test

JS: Remove 'response' from default threat-models

2024-10-25 14:52:49 +02:00