From 6364f8bbf72a2a6c5db80b5fceb4b744c63b9f7b Mon Sep 17 00:00:00 2001 From: Asger F Date: Mon, 26 Aug 2019 12:54:33 +0100 Subject: [PATCH 1/2] JS: Change notes for jump-to-def and documentation improvements --- change-notes/1.22/analysis-javascript.md | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/change-notes/1.22/analysis-javascript.md b/change-notes/1.22/analysis-javascript.md index 861258829c3..bf03c1ab7bf 100644 --- a/change-notes/1.22/analysis-javascript.md +++ b/change-notes/1.22/analysis-javascript.md @@ -19,6 +19,8 @@ * Method calls are now resolved in more cases, due to improved class hierarchy analysis. This may produce more security alerts. +* Jump-to-definition now resolves calls to their definition in more cases, and supports jumping from a JSDoc type annotation to its definition. + ## New queries | **Query** | **Tags** | **Purpose** | @@ -42,3 +44,7 @@ - The two-argument and three-argument variants of `DataFlow::Configuration::isBarrier` and `TaintTracking::Configuration::isSanitizer` have been deprecated. Overriding them no longer has any effect. Use `isBarrierEdge` and `isSanitizerEdge` instead. +- The QLDoc for most AST classes have expanded with concrete syntax examples. +- Tutorials on how to use [flow labels](https://help.semmle.com/QL/learn-ql/javascript/flow-labels.html) + and [type tracking](https://help.semmle.com/QL/learn-ql/javascript/type-tracking.html) have been published, + as well as a [data flow cheat sheet](https://help.semmle.com/QL/learn-ql/javascript/dataflow-cheat-sheet.html) for quick reference. From 17f59841015695ae2555021633f7a78b6b0ce151 Mon Sep 17 00:00:00 2001 From: Asger F <42069257+asger-semmle@users.noreply.github.com> Date: Mon, 26 Aug 2019 13:10:19 +0100 Subject: [PATCH 2/2] Update change-notes/1.22/analysis-javascript.md Co-Authored-By: Felicity Chapman --- change-notes/1.22/analysis-javascript.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/change-notes/1.22/analysis-javascript.md b/change-notes/1.22/analysis-javascript.md index bf03c1ab7bf..fd211197157 100644 --- a/change-notes/1.22/analysis-javascript.md +++ b/change-notes/1.22/analysis-javascript.md @@ -44,7 +44,7 @@ - The two-argument and three-argument variants of `DataFlow::Configuration::isBarrier` and `TaintTracking::Configuration::isSanitizer` have been deprecated. Overriding them no longer has any effect. Use `isBarrierEdge` and `isSanitizerEdge` instead. -- The QLDoc for most AST classes have expanded with concrete syntax examples. +- The QLDoc for most AST classes have been expanded with concrete syntax examples. - Tutorials on how to use [flow labels](https://help.semmle.com/QL/learn-ql/javascript/flow-labels.html) and [type tracking](https://help.semmle.com/QL/learn-ql/javascript/type-tracking.html) have been published, as well as a [data flow cheat sheet](https://help.semmle.com/QL/learn-ql/javascript/dataflow-cheat-sheet.html) for quick reference.