codeql

dataflow

Merge pull request #19078 from asgerf/js/name-resolution

2025-06-11 14:17:11 +02:00

dependencies

JS: Deprecate PathExpr and related classes

2025-04-29 13:23:47 +02:00

endpoints

JS: Expose InternalModuleNaming

2024-04-25 13:33:17 +02:00

explore

JS: Deprecate forward/backward exploration modules

2025-01-03 11:41:39 +01:00

filters

JS: More aggressive test file classification

2024-11-19 13:23:32 +01:00

frameworks

Merge pull request #19769 from trailofbits/VF/Nest-improvements

2025-06-30 10:42:18 +02:00

heuristics

JS: Make implicit this receivers explicit

2023-05-03 15:31:00 +02:00

internal

JS: Clarifying comment on commonStep

2025-06-11 10:24:21 +02:00

linters

JS: Make implicit this receivers explicit

2023-05-11 11:50:56 +02:00

meta

JS: Make implicit this receivers explicit

2023-05-11 11:50:56 +02:00

security

Updated UriEncodingSanitizer comment

2025-06-16 13:08:16 +02:00

Actions.qll

JS: Un-deprecate Actions.qll for now as we have some internal queries that use it.

2025-06-23 16:38:04 +02:00

Aliases.qll

…

AMD.qll

JS: Deprecate PathExpr and related classes

2025-04-29 13:23:47 +02:00

ApiGraphs.qll

JS: Remove some dependencies on type extraction

2025-05-20 13:20:14 +02:00

Arrays.qll

Merge branch 'main' into js/shared-dataflow-merge-main

2024-12-19 10:14:38 +01:00

AST.qll

JS: Move Directive subclasses into Directive module

2024-03-26 09:39:37 +01:00

Base64.qll

JS: Make implicit this receivers explicit

2023-05-03 15:31:00 +02:00

BasicBlocks.qll

JS: Add qldoc to file

2024-10-22 12:46:09 +02:00

CanonicalNames.qll

JS: Make implicit this receivers explicit

2023-05-03 15:31:00 +02:00

CFG.qll

JS: Add DataFlow::Node.getLocation

2024-03-13 13:06:16 +01:00

CharacterEscapes.qll

…

Classes.qll

JS: Treat private-field methods as private

2024-01-15 13:00:39 +01:00

Closure.qll

JS: Make Closure concepts based on AST instead

2025-05-20 13:19:52 +02:00

Collections.qll

Merge branch 'main' into js/shared-dataflow-merge-main

2024-12-19 10:14:38 +01:00

Comments.qll

JS: Add DataFlow::Node.getLocation

2024-03-13 13:06:16 +01:00

Concepts.qll

JS: Add ThreatModelSource#isCilentSideSource()

2025-01-22 10:45:48 +01:00

Constants.qll

JS: Make implicit this receivers explicit

2023-05-03 15:31:00 +02:00

DefensiveProgramming.qll

Py/JS/RB: Use instanceof in more places

2022-12-12 16:06:57 +01:00

DefUse.qll

delete old deprecations

2023-06-02 11:58:08 +02:00

DOM.qll

JS: Updates to DOM model

2025-04-02 10:14:03 +02:00

DynamicPropertyAccess.qll

JS: Make implicit this receivers explicit

2023-05-03 15:31:00 +02:00

E4X.qll

delete old deprecations

2023-06-02 11:58:08 +02:00

EmailClients.qll

JS: Make implicit this receivers explicit

2023-05-03 15:31:00 +02:00

Errors.qll

JS: Add DataFlow::Node.getLocation

2024-03-13 13:06:16 +01:00

ES2015Modules.qll

JS: Add ImportSpecifier.getImportDeclaration()

2025-05-20 13:19:50 +02:00

Expr.qll

JS: Use type resolution for CG augmentation

2025-05-20 13:20:17 +02:00

Extend.qll

Adapt Webix modeling to support HTML use-cases

2023-06-28 15:26:30 +02:00

Externs.qll

JS: Update some deprecated calls to getName()

2025-03-27 11:51:24 +01:00

Files.qll

JS: Add some helpers

2025-04-29 13:07:14 +02:00

Functions.qll

JS: Move Directive subclasses into Directive module

2024-03-26 09:39:37 +01:00

GeneratedCode.qll

JavaScript: Autoformat

2023-03-10 09:41:20 +01:00

Generators.qll

JS: Summary/steps for iterators and generators

2023-10-13 12:42:41 +02:00

GlobalAccessPaths.qll

JS: Make Closure concepts based on AST instead

2025-05-20 13:19:52 +02:00

HTML.qll

JS: Deprecate PathExpr and related classes

2025-04-29 13:23:47 +02:00

HtmlSanitizers.qll

JS: Make implicit this receivers explicit

2023-05-03 15:31:00 +02:00

InclusionTests.qll

Remove pragma[assume_small_delta]

2023-06-30 11:09:29 -07:00

JSDoc.qll

JS: Use in TypeAnnotation.getClass and hasUnderlyingType predicates

2025-05-20 13:20:06 +02:00

JSON.qll

JS: Add DataFlow::Node.getLocation

2024-03-13 13:06:16 +01:00

JsonParsers.qll

JS: remove serialize-javascript from JsonParsers.qll as it is not a parser

2025-06-16 12:59:36 +02:00

JsonSchema.qll

JS: Rename Node.{getASource -> asSource, getASink -> asSink}

2022-05-24 11:57:30 +02:00

JsonStringifiers.qll

JS: track taint through serialize-javascript calls with object arguments

2025-06-16 10:38:20 +02:00

JSX.qll

use my script to delete outdated deprecations

2024-09-03 20:30:58 +02:00

Lines.qll

JS: Add DataFlow::Node.getLocation

2024-03-13 13:06:16 +01:00

Locations.qll

JS: Add DataFlow::Node.getLocation

2024-03-13 13:06:16 +01:00

MembershipCandidates.qll

JS: Sharpen up EnumerationRegExp

2025-02-28 13:58:11 +01:00

Modules.qll

JS: Rename getTargetFile to getImportedFile and remove its deprecated name clash

2025-04-29 16:06:36 +02:00

NodeJS.qll

JS: Rename getTargetFile to getImportedFile and remove its deprecated name clash

2025-04-29 16:06:36 +02:00

NodeModuleResolutionImpl.qll

JS: Deprecate PathExpr and related classes

2025-04-29 13:23:47 +02:00

NPM.qll

JS: More efficient nested package naming

2025-05-19 12:53:18 +02:00

PackageExports.qll

JS: Use PackageJsonEx instead of resolveMainModule

2025-04-29 13:23:45 +02:00

Paths.qll

JS: Deprecate PathExpr and related classes

2025-04-29 13:23:47 +02:00

PrintAst.qll

Add support for XML attributes in the data flow graph

2023-12-14 11:33:53 -08:00

Promises.qll

JS: Move some promise-related store steps into PromiseFlow::storeStep

2025-03-13 12:53:04 +01:00

RangeAnalysis.qll

ensure consistent casing of names

2022-09-09 10:34:14 +02:00

Regexp.qll

JS: exclude sinon module from regexp match calls

2025-06-23 20:25:17 +02:00

RestrictedLocations.qll

JS: Add DataFlow::Node.getLocation

2024-03-13 13:06:16 +01:00

Routing.qll

JS: enchance middleware taint tracking via local source

2025-06-17 08:30:19 +02:00

SourceMaps.qll

use my script to delete outdated deprecations

2024-09-03 20:30:58 +02:00

SSA.qll

Address review comment

2024-03-13 20:03:01 +01:00

StandardLibrary.qll

Merge branch 'main' into js/shared-dataflow-merge-main

2024-12-19 10:14:38 +01:00

Stmt.qll

use my script to delete outdated deprecations

2024-09-03 20:30:58 +02:00

StringConcatenation.qll

…

StringOps.qll

Added support for matchAll in CWE-020 including new test cases

2024-11-05 08:51:24 +01:00

Templates.qll

JS: Make implicit this receivers explicit

2023-05-03 15:31:00 +02:00

Tokens.qll

JS: Add DataFlow::Node.getLocation

2024-03-13 13:06:16 +01:00

TSConfig.qll

Apply suggestions from code review

2025-05-02 12:41:29 +02:00

TypeAnnotations.qll

JS: Use in TypeAnnotation.getClass and hasUnderlyingType predicates

2025-05-20 13:20:06 +02:00

TypeScript.qll

JS: Use in TypeAnnotation.getClass and hasUnderlyingType predicates

2025-05-20 13:20:06 +02:00

Unit.qll

Replace all definitions of Unit by import codeql.util.Unit

2023-03-24 10:39:34 +01:00

Util.qll

…

Variables.qll

JS: Fix regression from global declare vars

2025-05-20 13:20:35 +02:00

ViewComponentInput.qll

JS: Use sanitizing primitive types in ViewComponentInput

2025-05-20 13:20:09 +02:00

XML.qll

JS: Switch to shared XML.qll implementation

2024-03-19 13:17:50 +01:00

YAML.qll

use my script to delete outdated deprecations

2024-09-03 20:30:58 +02:00