Thanks to visit codestin.com
Credit goes to github.com

Skip to content

Commit 99a634d

Browse files
author
james
committed
add introduction to article
1 parent 00f244c commit 99a634d

2 files changed

Lines changed: 6 additions & 1 deletion

File tree

docs/codeql/codeql-language-guides/codeql-for-javascript.rst

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -13,6 +13,7 @@ Experiment and learn how to write effective and efficient queries for CodeQL dat
1313
codeql-library-for-typescript
1414
analyzing-data-flow-in-javascript
1515
using-flow-labels-for-precise-data-flow-analysis
16+
specifying-additional-remote-flow-sources-for-javascript
1617
using-type-tracking-for-api-modeling
1718
abstract-syntax-tree-classes-for-working-with-javascript-and-typescript-programs
1819
data-flow-cheat-sheet-for-javascript
@@ -27,6 +28,8 @@ Experiment and learn how to write effective and efficient queries for CodeQL dat
2728

2829
- :doc:`Using flow labels for precise data flow analysis <using-flow-labels-for-precise-data-flow-analysis>`: You can associate flow labels with each value tracked by the flow analysis to determine whether the flow contains potential vulnerabilities.
2930

31+
- :doc:`Specifying remote flow sources for JavaScript <specifying-additional-remote-flow-sources-for-javascript>`: You can model potential sources of untrusted user input without making changes to the CodeQL standard libary fror JavaScript.
32+
3033
- :doc:`Using type tracking for API modeling <using-type-tracking-for-api-modeling>`: You can track data through an API by creating a model using the CodeQL type-tracking library for JavaScript.
3134

3235
- :doc:`Abstract syntax tree classes for working with JavaScript and TypeScript programs <abstract-syntax-tree-classes-for-working-with-javascript-and-typescript-programs>`: CodeQL has a large selection of classes for representing the abstract syntax tree of JavaScript and TypeScript programs.

docs/codeql/codeql-language-guides/specifying-additional-remote-flow-sources-for-javascript.rst

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,8 +1,10 @@
1-
.. specifying-additional-remote-flow-sources-for-javascript:
1+
.. _specifying-additional-remote-flow-sources-for-javascript:
22

33
Specifying additional remote flow sources for JavaScript
44
========================================================
55

6+
You can model potential sources of untrusted user input without making changes to the CodeQL standard libary fror JavaScript.
7+
68
As mentioned in the :doc:`Data flow cheat sheet for JavaScript <data-flow-cheat-sheet-for-javascript>`, the CodeQL libraries for JavaScript
79
provide a class `RemoteFlowSource <https://codeql.github.com/codeql-standard-libraries/javascript/semmle/javascript/security/dataflow/RemoteFlowSources.qll/type.RemoteFlowSources$RemoteFlowSource.html>`__ to represent sources of untrusted user input, sometimes also referred to as `remote flow
810
sources`.

0 commit comments

Comments
 (0)