Merge pull request #1074 from xiemaisi/js/socket.io-comm

Approved by esben-semmle

Author: semmle-qlci

change-notes/1.21/analysis-javascript.md

@@ -0,0 +1,18 @@
+# Improvements to JavaScript analysis
+
+## General improvements
+
+* Support for the following frameworks and libraries has been improved:
+  - [socket.io](http://socket.io)
+
+## New queries
+
+| **Query**                                     | **Tags**                                             | **Purpose**                                                                                                                                                                 |
+|-----------------------------------------------|------------------------------------------------------|-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
+
+## Changes to existing queries
+
+| **Query**                                  | **Expected impact**          | **Change**                                                                   |
+|--------------------------------------------|------------------------------|------------------------------------------------------------------------------|
+
+## Changes to QL libraries

javascript/ql/src/semmle/javascript/dataflow/Nodes.qll

@@ -325,6 +325,9 @@ class FunctionNode extends DataFlow::ValueNode, DataFlow::SourceNode {
   /** Gets the number of parameters declared on this function. */
   int getNumParameter() { result = count(astNode.getAParameter()) }
 
+  /** Gets the last parameter of this function. */
+  ParameterNode getLastParameter() { result = getParameter(getNumParameter()-1) }
+
   /** Holds if the last parameter of this function is a rest parameter. */
   predicate hasRestParameter() { astNode.hasRestParameter() }