Asger F
2c05ee8ab8
JS: Add regression test
2020-01-14 10:53:00 +00:00
Asger F
9bd3c4a11c
JS: Add sanitizer for "in" exprs
2020-01-14 10:53:00 +00:00
Asger Feldthaus
7ac30e2289
JS: Add test for rephinement nodes
2020-01-14 10:53:00 +00:00
Asger F
a447645c10
JS: Add test with typeof on value
2020-01-14 10:52:59 +00:00
Asger F
bd9405ab84
JS: Guard against more FPs
2020-01-14 10:52:59 +00:00
Asger F
738123d3f5
JS: More sanitizers
2020-01-14 10:52:59 +00:00
Asger F
f7543aec95
JS: Support Reflect.ownKeys
2020-01-14 10:52:59 +00:00
Asger F
8af233307a
JS: Support enumeration through Object.entries
2020-01-14 10:52:59 +00:00
Asger F
ac2f0a8e11
JS: Do not require flow from key -> rhs
2020-01-14 10:52:59 +00:00
Asger F
96bf9db200
JS: Add another test and more barriers
2020-01-14 10:52:59 +00:00
Asger F
bc7871078a
JS: Fix FPs from Object.create(null)
2020-01-14 10:52:59 +00:00
Asger F
c889420dd3
JS: Add qhelp samples to test suite
2020-01-14 10:52:59 +00:00
Asger F
654f145772
JS: Add PrototypePollutionUtility query
2020-01-14 10:52:59 +00:00
Asger F
52cec25035
JS: Build access paths for array accesses
2020-01-14 10:52:59 +00:00
Asger Feldthaus
73e60a7400
JS: Ignore strict-mode-call-stack-introspection for expr stmts
2020-01-13 16:03:03 +00:00
Erik Krogh Kristensen
c50de3a7e8
update expected output of tests
2020-01-10 17:49:24 +01:00
Erik Krogh Kristensen
1619a98bc8
make the default registration/dispatch extend DataFlow::InvokeNode
2020-01-10 17:40:16 +01:00
Erik Krogh Kristensen
ec5896abba
add additional data-flow edges to data-flow related to promises
2020-01-10 14:12:53 +01:00
Erik Krogh Kristensen
87bbbd643c
changes based on review feedback
2020-01-09 16:18:32 +01:00
Erik Krogh Kristensen
af8b36b750
Merge remote-tracking branch 'upstream/master' into EventEmitter
2020-01-09 15:09:43 +01:00
semmle-qlci
f1f69ef85d
Merge pull request #2589 from esbena/js/ignore-duplicate-params-for-empty-functions
...
Approved by erik-krogh
2020-01-09 11:58:04 +00:00
Max Schaefer
308da0774d
Merge pull request #2525 from asger-semmle/promise-missing-await
...
JS: New query: missing await
2020-01-08 15:29:45 +00:00
Max Schaefer
de15ecf47b
Merge pull request #2593 from asger-semmle/regexp-always-matches
...
JS: Add RegExpAlwaysMatches query
2020-01-08 15:21:39 +00:00
Asger Feldthaus
775e63d9c0
JS: Fix qhelp validation error
2020-01-08 10:38:10 +00:00
Asger F
ef79023e52
Update javascript/ql/src/Expressions/MissingAwait.qhelp
...
Co-Authored-By: Max Schaefer <54907921+max-schaefer@users.noreply.github.com >
2020-01-08 10:23:30 +00:00
semmle-qlci
0e16969e15
Merge pull request #2591 from max-schaefer/js/fix-16
...
Approved by asgerf
2020-01-07 10:36:19 +00:00
Asger Feldthaus
d55d5cc4ed
JS: Address comments from doc review
2020-01-07 10:27:46 +00:00
Asger Feldthaus
66a16d21a9
JS: Fix buggy test cases
2020-01-07 10:19:09 +00:00
Asger Feldthaus
2d534163d0
JS: Add test for empty regex
2020-01-07 10:10:29 +00:00
Asger Feldthaus
9f6e04887b
JS: Fix FP from word boundaries
2020-01-07 10:09:17 +00:00
Asger F
b604be5cfb
Apply suggestions from code review
...
Co-Authored-By: Max Schaefer <54907921+max-schaefer@users.noreply.github.com >
2020-01-06 14:44:02 +00:00
Asger Feldthaus
4c25d84b6e
JS: Fix and expand test cases
2020-01-06 14:43:29 +00:00
Max Schaefer
9160fbf106
Merge pull request #2435 from asger-semmle/phi-edge-barrier-guards
...
JS: Phi edge barrier guards
2020-01-06 14:14:18 +00:00
semmle-qlci
f48e4bc2a0
Merge pull request #2580 from asger-semmle/typescript-unbounded-recursion
...
Approved by max-schaefer
2020-01-06 14:00:55 +00:00
semmle-qlci
0c0073fb02
Merge pull request #2582 from asger-semmle/spurious-css-import
...
Approved by max-schaefer
2020-01-06 14:00:08 +00:00
semmle-qlci
7e9b5b1036
Merge pull request #2590 from asger-semmle/ts-install-deps-unverbose
...
Approved by max-schaefer
2020-01-06 13:57:43 +00:00
Asger F
9928762769
JS: Add RegExpAlwaysMatches query
2020-01-06 13:48:02 +00:00
semmle-qlci
39531c6516
Merge pull request #2574 from max-schaefer/js/fix-17
...
Approved by erik-krogh
2020-01-06 12:43:56 +00:00
Asger F
4d25bfc038
JS: Fix copy pasta
2020-01-06 11:37:21 +00:00
Asger F
142c83f38f
JS: Add negative dominance test
2020-01-06 11:37:21 +00:00
Asger F
aa6572b5c8
JS: Sanitize phi edges from barrier guards
2020-01-06 11:37:21 +00:00
Asger F
0b04f0d8f7
JS: Add test case for phi input
2020-01-06 11:37:20 +00:00
Max Schaefer
9391d36699
JavaScript: Teach extractor to tolerate assignment patterns in AST.
...
Our database representation of ASTs does not use assignment patterns, instead encoding the relevant information directly in the associated function/loop/assignment. We convert from an AST with assignment patterns to one without during parsing, so the extractor does not expect any assignment patterns to be present in the AST.
Due to a bug in the parser, this can currently happen for malformed programs. While we should fix that bug once it gets fixed in Acorn, it also makes sense for the extractor to be more robust, so this PR teaches the `ASTExtractor` pass to raise a parse error when it encounters an assignment pattern, and all other passes to simply ignore them.
2020-01-06 11:31:36 +00:00
Asger F
a3481b3713
TS: Do not pass --verbose to yarn
2020-01-06 11:18:58 +00:00
semmle-qlci
48deb30756
Merge pull request #2573 from max-schaefer/js/generalise-alert-suppression
...
Approved by asgerf
2020-01-06 10:43:17 +00:00
semmle-qlci
5dcc5b3b1e
Merge pull request #2581 from erik-krogh/FlowUselessExpr
...
Approved by max-schaefer
2020-01-06 08:33:36 +00:00
Esben Sparre Andreasen
9279bfc8a2
JS: add test case for arrow functions with duplicate parameter names
2020-01-06 09:21:36 +01:00
Esben Sparre Andreasen
96748ca32e
JS: sharpen js/duplicate-parameter-name
2020-01-06 08:51:00 +01:00
Esben Sparre Andreasen
5718fbd98a
JS: update test
2020-01-06 08:33:38 +01:00
Asger F
503bcdc5d7
JS: Dont capitalize Promise in prose
2020-01-03 14:16:31 +00:00
