Commits

Breadcrumbs

History for

on7198372

User selector

All users

All time

Commit History

Commits on Jun 2, 2025

• Update javascript/ql/src/Quality/UnhandledStreamPipe.qhelp

  Show description for 7198372
  

  Napalys

  and

  asgerf

  committed
  7198372

  Copy full SHA for 7198372

• Update javascript/ql/src/Quality/UnhandledStreamPipe.ql

  Show description for abd446a
  

  Napalys

  and

  asgerf

  committed
  abd446a

  Copy full SHA for abd446a

• Update javascript/ql/src/Quality/UnhandledStreamPipe.ql

  Show description for 64f00fd
  

  Napalys

  and

  asgerf

  committed
  64f00fd

  Copy full SHA for 64f00fd

• Update javascript/ql/src/Quality/UnhandledStreamPipe.ql

  Show description for 3cbc414
  

  Napalys

  and

  asgerf

  authored
  3cbc414

  Copy full SHA for 3cbc414

• Now able to track error handler registration via instance properties

  Napalys

  committed
  298ef9a

  Copy full SHA for 298ef9a

Commits on May 30, 2025

• Fix false positives in stream pipe analysis by improving error handler tracking via property access.

  Napalys

  committed
  f843cc0

  Copy full SHA for f843cc0

Commits on May 28, 2025

• Fixed ql warning `Expression can be replaced with a cast`

  Napalys

  committed
  d3b2a57

  Copy full SHA for d3b2a57

• Make predicates private and clarify stream reference naming.

  Napalys

  committed
  2e2b9a9

  Copy full SHA for 2e2b9a9

• Exclude `.pipe` detection which are in a test file.

  Napalys

  committed
  f8f5d8f

  Copy full SHA for f8f5d8f

• Now flags only `.pipe` calls which have an error somewhere down the stream, but not on the source stream.

  Napalys

  committed
  5bb29b6

  Copy full SHA for 5bb29b6

Commits on May 27, 2025

• Excluded `ngrx`, `datorama`, `angular`, `react` and `langchain` from stream pipe query.

  Napalys

  committed
  5214cc0

  Copy full SHA for 5214cc0

Commits on May 26, 2025

• Added `maintainability` and `error-handling` tags

  Napalys

  committed
  e964b17

  Copy full SHA for e964b17

Commits on May 23, 2025

• Replaced fuzzy `NonNodeStream` MaD to a ql predicate to deal easier with submodules

  Napalys

  committed
  000e69f

  Copy full SHA for 000e69f

• Added `qhelp` for `UnhandledStreamPipe` query

  Napalys

  committed
  248f83c

  Copy full SHA for 248f83c

Commits on May 22, 2025

• Fixed false positives from `strapi` and `rxjs/testing` as well as when one passes function as second arg to `pipe`

  Napalys

  committed
  b10a948

  Copy full SHA for b10a948

• Add predicate to detect non-stream-like usage in sources of pipe calls

  Napalys

  committed
  ac24fdd

  Copy full SHA for ac24fdd

• Added detection of custom `gulp-plumber` sanitizer, thus one would not flag such instances.

  Napalys

  committed
  5b1af0c

  Copy full SHA for 5b1af0c

• Fixed issue where `pipe` calls from `rxjs` package would been identified as `pipe` calls on streams

  Napalys

  committed
  09220fc

  Copy full SHA for 09220fc

• Enhance PipeCall to exclude non-function and non-object arguments in pipe method detection

  Napalys

  committed
  d7f86db

  Copy full SHA for d7f86db

• Eliminate false positives by detecting non-stream objects returned from `pipe()` calls based on accessed properties

  Napalys

  committed
  4332de4

  Copy full SHA for 4332de4

Commits on May 21, 2025

• Restrict pipe detection to calls with 1-2 arguments

  Napalys

  committed
  03d1f9a

  Copy full SHA for 03d1f9a

• Fixed issue where a custom `pipe` method which returns non stream would be flagged by the query

  Napalys

  committed
  30f2815

  Copy full SHA for 30f2815

• Fixed issue where streams would not be tracked via chainable methods

  Napalys

  committed
  ef1bde5

  Copy full SHA for ef1bde5

• Add `UnhandledStreamPipee` Quality query and tests to detect missing error handlers in `Node.js` streams

  Napalys

  committed
  c27157f

  Copy full SHA for c27157f

Commits on May 2, 2025

• Merge pull request #19422 from Napalys/js/shelljs

  Show description for d1e769b
  Napalys

  authored
  d1e769b

  Copy full SHA for d1e769b

• Merge pull request #19413 from tamasvajk/quality/query-suite-selector

  Show description for cb1c373
  tamasvajk

  authored
  cb1c373

  Copy full SHA for cb1c373

Commits on May 1, 2025

• Add change notes

  owen-mc

  committed
  0863c87

  Copy full SHA for 0863c87

• Refactor process.env handling in CleartextLogging and IndirectCommandInjection modules to use ThreatModelSource

  Napalys

  committed
  d4b5ef6

  Copy full SHA for d4b5ef6

Commits on Apr 30, 2025

• Fix cwe tags to include leading zero

  owen-mc

  committed
  cf614a5

  Copy full SHA for cf614a5

• Merge pull request #19412 from asgerf/js/promise-all

  Show description for 8ebbfb1
  asgerf

  authored
  8ebbfb1

  Copy full SHA for 8ebbfb1

• JS: Change note

  asgerf

  committed
  da5d799

  Copy full SHA for da5d799

Commits on Apr 29, 2025

• Use code-quality-selectors in JS suite

  tamasvajk

  committed
  d56c522

  Copy full SHA for d56c522

Commits on Apr 28, 2025

• Post-release preparation for codeql-cli-2.21.2

  

  github-actions[bot]

  committed
  2e0699a

  Copy full SHA for 2e0699a

• Release preparation for version 2.21.2

  

  github-actions[bot]

  committed
  625354c

  Copy full SHA for 625354c

Commits on Apr 15, 2025

• Post-release preparation for codeql-cli-2.21.1

  

  github-actions[bot]

  committed
  d78736b

  Copy full SHA for d78736b