Code

JS: Modeling of ShellJS functions#19422

Code

Merged

Napalys merged 8 commits intogithub:maingithub/codeql:mainfrom

Napalys:js/shelljsNapalys/codeql:js/shelljsCopy head branch name to clipboard

May 2, 2025

Commits

Commits on Apr 30, 2025

• Added test cases for `cmd`, `which` and `asyncExec`

  Napalys

  committed
  f6fae7a

  Copy full SHA for f6fae7a

• Added support for `shelljs.which`

  Napalys

  committed
  25d04f1

  Copy full SHA for 25d04f1

• Added support for `shelljs.cmd` and `async-shelljs.asyncExec`

  Napalys

  committed
  18cea2d

  Copy full SHA for 18cea2d

Commits on May 1, 2025

• Added model for shelljs.env

  Napalys

  committed
  40d176a

  Copy full SHA for 40d176a

• Added change note

  Napalys

  committed
  602500e

  Copy full SHA for 602500e

• Added test cases for shelljs.env

  Napalys

  committed
  33d8ffa

  Copy full SHA for 33d8ffa

• Refactor process.env handling in CleartextLogging and IndirectCommandInjection modules to use ThreatModelSource

  Napalys

  committed
  d4b5ef6

  Copy full SHA for d4b5ef6

Commits on May 2, 2025

• Update javascript/ql/lib/semmle/javascript/frameworks/ShellJS.qll

  Show description for 871e93d
  

  Napalys

  and

  asgerf

  authored
  871e93d

  Copy full SHA for 871e93d