Skip to content

Commit 99ab144

Browse files
authored
Merge pull request #19578 from Napalys/js/security_quality_suite
JS: Explicitly Filter Quality Queries for Inclusion in `Security-and-Quality`
2 parents 0f2d2b7 + 1f6b3ad commit 99ab144

File tree

1 file changed

+136
-2
lines changed

1 file changed

+136
-2
lines changed
Lines changed: 136 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,138 @@
11
- description: Security-and-quality queries for JavaScript
22
- queries: .
3-
- apply: security-and-quality-selectors.yml
4-
from: codeql/suite-helpers
3+
- include:
4+
kind:
5+
- problem
6+
- path-problem
7+
precision:
8+
- high
9+
- very-high
10+
tags contain:
11+
- security
12+
- include:
13+
kind:
14+
- problem
15+
- path-problem
16+
precision: medium
17+
problem.severity:
18+
- error
19+
- warning
20+
tags contain:
21+
- security
22+
- include:
23+
id:
24+
- js/node/assignment-to-exports-variable
25+
- js/node/missing-exports-qualifier
26+
- js/angular/duplicate-dependency
27+
- js/angular/missing-explicit-injection
28+
- js/angular/dependency-injection-mismatch
29+
- js/angular/incompatible-service
30+
- js/angular/expression-in-url-attribute
31+
- js/angular/repeated-dependency-injection
32+
- js/regex/back-reference-to-negative-lookahead
33+
- js/regex/unmatchable-dollar
34+
- js/regex/empty-character-class
35+
- js/regex/back-reference-before-group
36+
- js/regex/unbound-back-reference
37+
- js/regex/always-matches
38+
- js/regex/unmatchable-caret
39+
- js/regex/duplicate-in-character-class
40+
- js/vue/arrow-method-on-vue-instance
41+
- js/conditional-comment
42+
- js/superfluous-trailing-arguments
43+
- js/illegal-invocation
44+
- js/invalid-prototype-value
45+
- js/incomplete-object-initialization
46+
- js/useless-type-test
47+
- js/template-syntax-in-string-literal
48+
- js/with-statement
49+
- js/property-assignment-on-primitive
50+
- js/deletion-of-non-property
51+
- js/setter-return
52+
- js/index-out-of-bounds
53+
- js/unused-index-variable
54+
- js/non-standard-language-feature
55+
- js/syntax-error
56+
- js/for-in-comprehension
57+
- js/strict-mode-call-stack-introspection
58+
- js/automatic-semicolon-insertion
59+
- js/inconsistent-use-of-new
60+
- js/non-linear-pattern
61+
- js/yield-outside-generator
62+
- js/mixed-static-instance-this-access
63+
- js/arguments-redefinition
64+
- js/nested-function-reference-in-default-parameter
65+
- js/duplicate-parameter-name
66+
- js/unreachable-method-overloads
67+
- js/duplicate-variable-declaration
68+
- js/function-declaration-conflict
69+
- js/ineffective-parameter-type
70+
- js/assignment-to-constant
71+
- js/use-before-declaration
72+
- js/suspicious-method-name-declaration
73+
- js/overwritten-property
74+
- js/useless-assignment-to-local
75+
- js/useless-assignment-to-property
76+
- js/variable-initialization-conflict
77+
- js/variable-use-in-temporal-dead-zone
78+
- js/missing-variable-declaration
79+
- js/missing-this-qualifier
80+
- js/unused-local-variable
81+
- js/label-in-switch
82+
- js/ignore-array-result
83+
- js/inconsistent-loop-direction
84+
- js/unreachable-statement
85+
- js/trivial-conditional
86+
- js/useless-comparison-test
87+
- js/misleading-indentation-of-dangling-else
88+
- js/use-of-returnless-function
89+
- js/useless-assignment-in-return
90+
- js/loop-iteration-skipped-due-to-shifting
91+
- js/misleading-indentation-after-control-statement
92+
- js/unused-loop-variable
93+
- js/implicit-operand-conversion
94+
- js/whitespace-contradicts-precedence
95+
- js/missing-space-in-concatenation
96+
- js/unbound-event-handler-receiver
97+
- js/shift-out-of-range
98+
- js/missing-dot-length-in-comparison
99+
- js/redundant-operation
100+
- js/comparison-with-nan
101+
- js/duplicate-property
102+
- js/unclear-operator-precedence
103+
- js/unknown-directive
104+
- js/string-instead-of-regex
105+
- js/unneeded-defensive-code
106+
- js/duplicate-switch-case
107+
- js/duplicate-condition
108+
- js/useless-expression
109+
- js/redundant-assignment
110+
- js/misspelled-variable-name
111+
- js/call-to-non-callable
112+
- js/missing-await
113+
- js/comparison-between-incompatible-types
114+
- js/property-access-on-non-object
115+
- js/malformed-html-id
116+
- js/eval-like-call
117+
- js/duplicate-html-attribute
118+
- js/react/unsupported-state-update-in-lifecycle-method
119+
- js/react/unused-or-undefined-state-property
120+
- js/react/direct-state-mutation
121+
- js/react/inconsistent-state-update
122+
- js/diagnostics/extraction-errors
123+
- js/diagnostics/successfully-extracted-files
124+
- js/summary/lines-of-code
125+
- js/summary/lines-of-user-code
126+
- include:
127+
kind:
128+
- diagnostic
129+
- include:
130+
kind:
131+
- metric
132+
tags contain:
133+
- summary
134+
- exclude:
135+
deprecated: //
136+
- exclude:
137+
query path:
138+
- /^experimental\/.*/

0 commit comments

Comments
 (0)
pFad - Phonifier reborn

Pfad - The Proxy pFad of © 2024 Garber Painting. All rights reserved.

Note: This service is not intended for secure transactions such as banking, social media, email, or purchasing. Use at your own risk. We assume no liability whatsoever for broken pages.


Alternative Proxies:

Alternative Proxy

pFad Proxy

pFad v3 Proxy

pFad v4 Proxy