Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion docs/codeql/README.rst
Original file line number Diff line number Diff line change
Expand Up @@ -71,7 +71,7 @@ For example, to generate the HTML output for a project in the
You can use errors reported during the build to debug problems in your source
code, such as broken internal links and malformed tables. You can also check
external links using Sphinx's `external link builder
<http://www.sphinx-doc.org/en/master/usage/builders/index.html#sphinx.builders.linkcheck.CheckExternalLinksBuilder>`__.
<https://www.sphinx-doc.org/en/master/usage/builders/index.html#sphinx.builders.linkcheck.CheckExternalLinksBuilder>`__.

Add the ``-a`` flag to regenerate all output files. By default, only files that
have changed are rebuilt.
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -762,7 +762,7 @@ HTTP framework libraries

The library ``semmle.javacript.frameworks.HTTP`` provides classes modeling common concepts from various HTTP frameworks.

Currently supported frameworks are `Express <https://expressjs.com/>`__, the standard Node.js ``http`` and ``https`` modules, `Connect <https://github.com/senchalabs/connect>`__, `Koa <https://koajs.com>`__, `Hapi <https://hapi.dev/>`__ and `Restify <http://restify.com/>`__.
Currently supported frameworks are `Express <https://expressjs.com/>`__, the standard Node.js ``http`` and ``https`` modules, `Connect <https://github.com/senchalabs/connect>`__, `Koa <https://koajs.com>`__, `Hapi <https://hapi.dev/>`__ and `Restify <https://restify.com/>`__.

The most important classes include (all in module ``HTTP``):

Expand All @@ -779,7 +779,7 @@ For each framework library, there is a corresponding CodeQL library (for example
Node.js
^^^^^^^

The ``semmle.javascript.NodeJS`` library provides support for working with `Node.js <http://nodejs.org/>`__ modules through the following classes:
The ``semmle.javascript.NodeJS`` library provides support for working with `Node.js <https://nodejs.org/>`__ modules through the following classes:

- `NodeModule <https://codeql.github.com/codeql-standard-libraries/javascript/semmle/javascript/NodeJS.qll/type.NodeJS$NodeModule.html>`__: a top-level that defines a Node.js module; see the section on `Modules <#modules>`__ for more information.
- `Require <https://codeql.github.com/codeql-standard-libraries/javascript/semmle/javascript/NodeJS.qll/type.NodeJS$Require.html>`__: a call to the special ``require`` function that imports a module.
Expand Down Expand Up @@ -927,7 +927,7 @@ However, unlike HTML, JSX is interleaved with JavaScript, hence `JSXElement <htt
JSON
^^^^

The ``semmle.javascript.JSON`` library provides support for working with `JSON <http://json.org/>`__ files that were processed by the JavaScript extractor when building the CodeQL database.
The ``semmle.javascript.JSON`` library provides support for working with `JSON <https://json.org/>`__ files that were processed by the JavaScript extractor when building the CodeQL database.

JSON files are modeled as trees of JSON values. Each JSON value is represented by an entity of class `JSONValue <https://codeql.github.com/codeql-standard-libraries/javascript/semmle/javascript/JSON.qll/type.JSON$JSONValue.html>`__, which provides the following member predicates:

Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -295,7 +295,7 @@ New Features
JavaScript/TypeScript
"""""""""""""""""""""

* Improved support for `Restify <http://restify.com/>`__ framework, leading to more results when scanning applications developed with this framework.
* Improved support for `Restify <https://restify.com/>`__ framework, leading to more results when scanning applications developed with this framework.
* Added support for the `Spife <https://github.com/npm/spife>`__ framework.

Shared Libraries
Expand Down
2 changes: 1 addition & 1 deletion docs/codeql/index.html
Original file line number Diff line number Diff line change
Expand Up @@ -250,7 +250,7 @@ <h3 class="mb-3 text-mono text-gray-light text-normal">Platform</h3>
<ul class="list-style-none f5">
<li class="lh-condensed mb-3"><a href="https://docs.github.com/get-started/exploring-integrations/about-building-integrations"
data-ga-click="Footer, go to api, text:api" class="link-gray">Developer API</a></li>
<li class="lh-condensed mb-3"><a href="http://partner.github.com/"
<li class="lh-condensed mb-3"><a href="https://partner.github.com/"
data-ga-click="Footer, go to partner, text:partner" class="link-gray">Partners</a></li>
<li class="lh-condensed mb-3"><a href="https://github.com/edu"
data-ga-click="Footer, go to education, text:education" class="link-gray">Education</a></li>
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -66,7 +66,7 @@ Further reading

`Academic references <https://codeql.github.com/publications/>`__ also provide an overview of QL and its semantics. Other useful references on database query languages and Datalog:

- `Database theory: Query languages <http://www.lsv.fr/~segoufin/Papers/Mypapers/DB-chapter.pdf>`__
- `Database theory: Query languages <https://www.di.ens.fr/~segoufin/Papers/Mypapers/DB-chapter.pdf>`__
- `Logic Programming and Databases book <https://doi.org/10.1007/978-3-642-83952-8>`__
- `Foundations of Databases <http://webdam.inria.fr/Alice/>`__
- `Datalog <https://en.wikipedia.org/wiki/Datalog>`__
2 changes: 1 addition & 1 deletion docs/codeql/ql-training/java/apache-struts-java.rst
Original file line number Diff line number Diff line change
Expand Up @@ -41,7 +41,7 @@ RCE in Apache Struts

- Xstream allows deserialization of **dynamic proxies**, which permit remote code execution.

- Disclosed as `CVE-2017-9805 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9805>`__
- Disclosed as `CVE-2017-9805 <https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9805>`__

- Blog post: https://securitylab.github.com/research/apache-struts-vulnerability-cve-2017-9805

Expand Down
2 changes: 1 addition & 1 deletion docs/codeql/qllexer.py
Original file line number Diff line number Diff line change
@@ -1,7 +1,7 @@
"""
Custom Pygments lexer for highlighting QL code.

Based on instructions from http://pygments.org/docs/lexerdevelopment/.
Based on instructions from https://pygments.org/docs/lexerdevelopment/.
"""

import re
Expand Down
12 changes: 6 additions & 6 deletions docs/codeql/reusables/supported-frameworks.rst
Original file line number Diff line number Diff line change
Expand Up @@ -74,7 +74,7 @@ and the CodeQL library pack ``codeql/go-all`` (`changelog <https://github.com/gi
`AWS Lambda <https://docs.aws.amazon.com/lambda/latest/dg/lambda-golang.html>`_, Serverless framework
`beego <https://beego.me/>`_, Web/logging/database framework
`Chi <https://github.com/go-chi/chi>`_, Web framework
Couchbase (`gocb <https://github.com/couchbase/gocb>`_ and `go-couchbase <http://www.github.com/couchbase/go-couchbase>`_), Database
Couchbase (`gocb <https://github.com/couchbase/gocb>`_ and `go-couchbase <https://www.github.com/couchbase/go-couchbase>`_), Database
`Echo <https://echo.labstack.com/>`_, Web framework
`Gin <https://github.com/gin-gonic/gin>`_, Web framework
`glog <https://github.com/golang/glog>`_, Logging library
Expand All @@ -87,7 +87,7 @@ and the CodeQL library pack ``codeql/go-all`` (`changelog <https://github.com/gi
`golang.org/x/crypto/ssh <https://pkg.go.dev/golang.org/x/crypto/ssh>`_, Network communicator
`golang.org/x/net/websocket <https://pkg.go.dev/golang.org/x/net/websocket>`_, Network communicator
`goproxy <https://github.com/elazarl/goproxy>`_, HTTP proxy library
`Gorilla mux <http://www.gorillatoolkit.org/pkg/mux>`_, HTTP request router and dispatcher
`Gorilla mux <https://github.com/gorilla/mux>`_, HTTP request router and dispatcher
`Gorilla websocket <https://github.com/gorilla/websocket>`_, Network communicator
`GORM <https://gorm.io/>`_, Database
`GoWebsocket <https://github.com/sacOO7/gowebsocket>`_, Network communicator
Expand All @@ -100,11 +100,11 @@ and the CodeQL library pack ``codeql/go-all`` (`changelog <https://github.com/gi
`Logrus <https://github.com/sirupsen/logrus>`_, Logging library
`Macaron <https://gopkg.in/macaron.v1>`_, Web framework
`mongo <https://pkg.go.dev/go.mongodb.org/mongo-driver/mongo>`_, Database
`nhooyr.io/websocket <http://nhooyr.io/websocket>`_, Network communicator
`coder/websocket <https://github.com/coder/websocket>`_ (formerly nhooyr.io/websocket), Network communicator
`protobuf <https://pkg.go.dev/google.golang.org/protobuf>`_, Serialization
`Revel <http://revel.github.io/>`_, Web framework
`Revel <https://revel.github.io/>`_, Web framework
`SendGrid <https://github.com/sendgrid/sendgrid-go>`_, Email library
`sqlx <http://jmoiron.github.io/sqlx/>`_, Database
`sqlx <https://jmoiron.github.io/sqlx/>`_, Database
`Squirrel <https://github.com/Masterminds/squirrel>`_, Database
`ws <https://github.com/gobwas/ws>`_, Network communicator
`xmlpath <https://gopkg.in/xmlpath.v2>`_, XPath library
Expand Down Expand Up @@ -328,7 +328,7 @@ and the CodeQL library pack ``codeql/rust-all`` (`changelog <https://github.com/
alloc, Standard library
`async-std <https://crates.io/crates/async-std>`__, Asynchronous programming library
`biscotti <https://crates.io/crates/biscotti>`__, Cookie management
`clap <http://crates.io/crates/clap>`__, Utility library
`clap <https://crates.io/crates/clap>`__, Utility library
`cookie <https://crates.io/crates/cookie>`__, Cookie management
core, Standard library
`digest <https://crates.io/crates/digest>`__, Cryptography library
Expand Down
Loading