Skip to content

Commit fbe0735

Browse files
committed
pre-migration tasks: address review comments
1 parent 162a683 commit fbe0735

6 files changed

Lines changed: 15 additions & 7 deletions

File tree

docs/language/learn-ql/javascript/ast-class-reference.rst

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,8 @@
11
Abstract syntax tree classes for JavaScript and TypeScript
22
==========================================================
33

4+
CodeQL has a large selection of classes for working with JavaScript and TypeScript statements and expressions.
5+
46
Statement classes
57
-----------------
68

docs/language/learn-ql/javascript/dataflow.rst

Lines changed: 3 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -1,12 +1,11 @@
11
Analyzing data flow in JavaScript and TypeScript
22
================================================
33

4-
Overview
5-
--------
6-
74
This topic describes how data flow analysis is implemented in the CodeQL libraries for JavaScript/TypeScript and includes examples to help you write your own data flow queries.
8-
The following sections describe how to utilize the libraries for local data flow, global data flow, and taint tracking.
95

6+
Overview
7+
--------
8+
The various sections in this article describe how to utilize the libraries for local data flow, global data flow, and taint tracking.
109
As our running example, we will develop a query that identifies command-line arguments that are passed as a file path to the standard Node.js ``readFile`` function.
1110
While this is not a problematic pattern as such, it is typical of the kind of reasoning that is frequently used in security queries.
1211

docs/language/learn-ql/javascript/flow-labels.rst

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,11 @@
11
Using flow labels for precise data flow analysis
22
================================================
33

4+
You can associate flow labels with each value tracked by the flow analysis to determine whether the flow contains potential vulnerabilities.
5+
6+
Overview
7+
--------
8+
49
You can use basic inter-procedural data-flow analysis and taint tracking as described in
510
:doc:`Analyzing data flow in JavaScript and TypeScript <dataflow>` to check whether there is a path in
611
the data-flow graph from some source node to a sink node that does not pass through any sanitizer

docs/language/learn-ql/javascript/introduce-libraries-js.rst

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
CodeQL libraries for JavaScript
22
===============================
33

4-
This article is an overview of the extensive libraries you can use to analyze databases generated from JavaScript codebases. Using the libraries makes it easier for you to write queries.
4+
You can use the extensive libraries described in this article to analyze databases generated from JavaScript codebases. Using these libraries makes it easier for you to write queries.
55

66
Overview
77
--------

docs/language/learn-ql/javascript/introduce-libraries-ts.rst

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
CodeQL libraries for TypeScript
22
===============================
33

4-
This article is an overview of the libraries you can use to analyze databases generated from TypeScript codebases. Using the libraries makes it easier for you to write queries.
4+
You can use libraries to analyze databases generated from TypeScript codebases. Using these libraries makes it easier for you to write queries.
55

66
Overview
77
--------

docs/language/learn-ql/javascript/type-tracking.rst

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,9 +1,11 @@
11
Using type tracking for API modeling
22
====================================
33

4-
This tutorial demonstrates how to build a simple model of the Firebase API
4+
You can build a simple model of the Firebase API
55
using the CodeQL type-tracking library for JavaScript.
66

7+
Overview
8+
--------
79
The type-tracking library makes it possible to track values through properties and function calls,
810
usually to recognize method calls and properties accessed on a specific type of object.
911

0 commit comments

Comments
 (0)