CodeQL now supports more libraries and frameworks for a variety of languages (C++, JavaScript, Python,Java, Go). The CodeQL engine can now detect more sources of untrusted user data, which improves the quality and depth of the code scanning alerts. The libraries and frameworks that have been added and improved are listed below.
C/C++
- Bloomberg Standard Library
- Berkeley socket API library
- string.h library
JavaScript and TypeScript
- Angular 2 framework
- React Helmet component
- xml2js
- Formik
- Immutable
- Marked
- Multer
- vue-router
- apollo-link-http
- pug
Python
- Improvements to Flask framework support
- Improvements to Django support
- Tornado web application framework
Java
- Improvements to Google Guava libraries
- Improvements to Apache Commons Lang libraries
Go
Support for these libraries and frameworks has been deployed to GitHub.com. These improvements will also be available in GitHub Enterprise Server 3.1, which is due to be released in Q2.
Learn more about CodeQL and code scanning.