Commits

Commit history

1. Commits on Apr 22, 2025

   • Merge pull request #19283 from asgerf/js/rest-pattern-fix

     Show description for c2cab18
     asgerf

     authored
     c2cab18View commit details

     Copy full SHA for c2cab18

     View code at this pointBrowse repository at this point
2. Commits on Apr 15, 2025

   • Post-release preparation for codeql-cli-2.21.1

     

     github-actions[bot]

     committed
     d78736bView commit details

     Copy full SHA for d78736b

     View code at this pointBrowse repository at this point
3. Commits on Apr 14, 2025

   • Release preparation for version 2.21.1

     

     github-actions[bot]

     committed
     b961c59View commit details

     Copy full SHA for b961c59

     View code at this pointBrowse repository at this point

   • Merge pull request #19184 from Napalys/js/request_handlers

     Show description for 8631371
     Napalys

     authored
     8631371View commit details

     Copy full SHA for 8631371

     View code at this pointBrowse repository at this point
4. Commits on Apr 11, 2025

   • JS: Update more test output

     asgerf

     committed
     6c01709View commit details

     Copy full SHA for 6c01709

     View code at this pointBrowse repository at this point

   • Merge pull request #19231 from Napalys/js/typed_array

     Show description for 3d7c020
     Napalys

     authored
     3d7c020View commit details

     Copy full SHA for 3d7c020

     View code at this pointBrowse repository at this point

   • Now `nextUrl` is of type `parameter` and loosen the restriction for `NextAppRouteHandler`

     Napalys

     committed
     11abbf8View commit details

     Copy full SHA for 11abbf8

     View code at this pointBrowse repository at this point

   • Update javascript/ql/lib/semmle/javascript/frameworks/Next.qll

     Show description for 92e4f11
     

     Napalys

     and

     asgerf

     authored
     92e4f11View commit details

     Copy full SHA for 92e4f11

     View code at this pointBrowse repository at this point

   • Update javascript/ql/lib/semmle/javascript/internal/flow_summaries/Strings.qll

     Show description for d0dcf89
     

     Napalys

     and

     asgerf

     authored
     d0dcf89View commit details

     Copy full SHA for d0dcf89

     View code at this pointBrowse repository at this point

   • Merge pull request #19218 from Napalys/js/upgrade_websocket

     Show description for d17d29a
     Napalys

     authored
     d17d29aView commit details

     Copy full SHA for d17d29a

     View code at this pointBrowse repository at this point

   • Renamed`DecodeLike` to `Decode` and updated `propagatesFlow`

     Napalys

     committed
     e3f1720View commit details

     Copy full SHA for e3f1720

     View code at this pointBrowse repository at this point

   • Added change note

     Napalys

     committed
     2c4b352View commit details

     Copy full SHA for 2c4b352

     View code at this pointBrowse repository at this point

   • Added `searchParams.get` as potential source for SSRF

     Napalys

     committed
     678eccbView commit details

     Copy full SHA for 678eccb

     View code at this pointBrowse repository at this point

   • Added SSRF test case with `searchParams` for `NextRequest`

     Napalys

     committed
     8674b61View commit details

     Copy full SHA for 8674b61

     View code at this pointBrowse repository at this point

   • Added support for `NextRequest` `middleware` SSRF.

     Napalys

     committed
     6e09a65View commit details

     Copy full SHA for 6e09a65

     View code at this pointBrowse repository at this point

   • Removed legacy `Consistency` check as it is redundant now with inline test expectations.

     Napalys

     committed
     734ad2dView commit details

     Copy full SHA for 734ad2d

     View code at this pointBrowse repository at this point

   • Added `middleware` test

     Napalys

     committed
     208487fView commit details

     Copy full SHA for 208487f

     View code at this pointBrowse repository at this point

   • JS: Fix missing flow into rest pattern lvalue

     asgerf

     committed
     719456eView commit details

     Copy full SHA for 719456e

     View code at this pointBrowse repository at this point

   • JS: Add test for missing getALocalSource flow for rest pattern

     asgerf

     committed
     7703b1fView commit details

     Copy full SHA for 7703b1f

     View code at this pointBrowse repository at this point
5. Commits on Apr 10, 2025

   • Merge pull request #19263 from Napalys/js/make-dir-lib

     Show description for 43bf0be
     Napalys

     authored
     43bf0beView commit details

     Copy full SHA for 43bf0be

     View code at this pointBrowse repository at this point

   • Added `NextResponse` to the `ResponseCall` class it models similar near idential behaviour.

     Napalys

     committed
     86b64afView commit details

     Copy full SHA for 86b64af

     View code at this pointBrowse repository at this point

   • Added test cases for `NextResponse` and `Response`

     Napalys

     committed
     8acb024View commit details

     Copy full SHA for 8acb024

     View code at this pointBrowse repository at this point

   • Enhance Next.js API endpoint handling for compatibility with both Pages and App Router structures.

     Napalys

     committed
     63a3953View commit details

     Copy full SHA for 63a3953

     View code at this pointBrowse repository at this point

   • Added test cases with missing alerts for `Request` and `NextRequest`.

     Napalys

     committed
     81cba7fView commit details

     Copy full SHA for 81cba7f

     View code at this pointBrowse repository at this point

   • Merge pull request #19200 from asgerf/js/web-response

     Show description for eac14b9
     asgerf

     authored
     eac14b9View commit details

     Copy full SHA for eac14b9

     View code at this pointBrowse repository at this point

   • Applied copilot suggestion.

     Napalys

     committed
     171a846View commit details

     Copy full SHA for 171a846

     View code at this pointBrowse repository at this point

   • JS: Change note

     asgerf

     committed
     3da1f26View commit details

     Copy full SHA for 3da1f26

     View code at this pointBrowse repository at this point

   • JS: Update extractor version string

     asgerf

     committed
     cfa1a9bView commit details

     Copy full SHA for cfa1a9b

     View code at this pointBrowse repository at this point

   • JS: Tolerate trailing comma in JSON array

     Show description for 1434f7a
     asgerf

     committed
     1434f7aView commit details

     Copy full SHA for 1434f7a

     View code at this pointBrowse repository at this point

   • JS: Add failing TRAP test for trailing comma

     asgerf

     committed
     800dd16View commit details

     Copy full SHA for 800dd16

     View code at this pointBrowse repository at this point
6. Commits on Apr 9, 2025

   • Brought back old methods and marked them as `deprecated`

     Napalys

     committed
     5243f90View commit details

     Copy full SHA for 5243f90

     View code at this pointBrowse repository at this point

   • Added change note

     Napalys

     committed
     5ec71abView commit details

     Copy full SHA for 5ec71ab

     View code at this pointBrowse repository at this point

   • Added `make-dir` model as data

     Napalys

     committed
     ce2fc25View commit details

     Copy full SHA for ce2fc25

     View code at this pointBrowse repository at this point

   • Added test cases for `make-dir` package.

     Napalys

     committed
     674f40bView commit details

     Copy full SHA for 674f40b

     View code at this pointBrowse repository at this point

   • Update javascript/ql/lib/change-notes/2025-04-07-websocket.md

     Show description for 2dca95a
     

     Napalys

     and

     asgerf

     authored
     2dca95aView commit details

     Copy full SHA for 2dca95a

     View code at this pointBrowse repository at this point