Napalys Klicius
|
9ca0fe4cbf
|
Update RegExp handling and add test case
Co-authored-by: erik-krogh <erik-krogh@github.com>
|
2024-11-28 14:13:40 +01:00 |
|
Napalys
|
e673348ed3
|
JS: now RegExp with unknown flags is not flagged as an issue within password Clear text storage of sensitive information
|
2024-11-28 11:26:56 +01:00 |
|
Napalys
|
a2c46749c6
|
JS: fixed issue where MaskingReplacer would work only with regexp literals but not objects
|
2024-11-28 11:26:55 +01:00 |
|
Napalys
|
1ca57cfb9d
|
JS: add test cases with RegExp object for MaskingReplacer, currently gives wrong results
|
2024-11-28 11:26:54 +01:00 |
|
Alvaro Muñoz
|
5d1da861a2
|
fix: Use YamlScalar for booleans
|
2024-09-06 23:21:41 +02:00 |
|
Alvaro Muñoz
|
d9e8792d33
|
[javascript] Query to detect GITHUB_TOKEN leaked in artifacts
|
2024-09-06 22:55:58 +02:00 |
|
Asger F
|
944a2ca825
|
JS: Replace ClearTextLogging::isSanitizerEdge with a node
|
2023-07-11 14:20:17 +02:00 |
|
Erik Krogh Kristensen
|
724a31b746
|
fix comment that wasn't updated in test
Co-authored-by: Rasmus Wriedt Larsen <rasmuswriedtlarsen@gmail.com>
|
2022-11-10 15:56:44 +01:00 |
|
erik-krogh
|
23add8a72b
|
recognize passcode as sensitive
|
2022-11-09 11:30:57 +01:00 |
|
erik-krogh
|
e0bcfe2afb
|
add failing test
|
2022-11-09 11:30:31 +01:00 |
|
erik-krogh
|
368f84785b
|
fix some more style-guide violations in the alert-messages
|
2022-10-07 11:22:22 +02:00 |
|
erik-krogh
|
24f2e3cc07
|
update alert-messages of the sensitive data queries to match #10314
|
2022-09-06 12:25:36 +02:00 |
|
erik-krogh
|
aa56ca37ae
|
make the alert messages of taint-tracking queries more consistent
|
2022-09-05 14:04:52 +02:00 |
|
Asger Feldthaus
|
b85739cb7e
|
JS: Update test output
|
2022-04-07 13:23:26 +02:00 |
|
Erik Krogh Kristensen
|
431c995131
|
add support for the debug library
|
2021-06-02 23:11:15 +02:00 |
|
Erik Krogh Kristensen
|
64828713d6
|
remove FPs in js/build-artifact-leak where the "leaked" properties are constrained to a safe subset
|
2020-11-18 10:35:02 +01:00 |
|
Erik Krogh Kristensen
|
9bcbedde46
|
update consistency comment in passwords.js
|
2020-07-08 09:55:00 +02:00 |
|
Erik Krogh Kristensen
|
02c4a0477d
|
add tests for js/build-artifact-leak
|
2020-06-12 10:21:37 +02:00 |
|
Asger Feldthaus
|
7393844699
|
JS: Update some queries that used data as source
|
2020-03-18 11:55:13 +00:00 |
|
Erik Krogh Kristensen
|
a59a414e0b
|
update expected output
|
2019-11-16 15:20:42 +01:00 |
|
Erik Krogh Kristensen
|
8ff515a58d
|
address review feedback on MaskingReplacer
|
2019-11-16 15:20:42 +01:00 |
|
Erik Krogh Kristensen
|
4ec2070e48
|
remove property reads on process.env as a taint step, and add a barrier for masking replace calls
|
2019-11-16 15:20:42 +01:00 |
|
Erik Krogh Kristensen
|
92dc759cf9
|
remove type cast, and fix expected test results
|
2019-11-16 15:20:42 +01:00 |
|
Erik Krogh Kristensen
|
850278c62f
|
some changes based on review. And change to only flag unknown reads of process.env
|
2019-11-16 15:20:42 +01:00 |
|
Erik Krogh Kristensen
|
68c30aaef3
|
add flowlabels to js/clear-text-logging
|
2019-11-16 15:20:42 +01:00 |
|
Erik Krogh Kristensen
|
14e4decffa
|
changes based on review feedback. No flow-labels yet
|
2019-11-16 15:20:42 +01:00 |
|
Erik Krogh Kristensen
|
297c71a64b
|
add process.env as source for js/clear-text-logging
|
2019-11-16 15:20:41 +01:00 |
|
Max Schaefer
|
b42026a90a
|
JavaScript: Update expected output.
|
2019-10-29 15:36:24 +00:00 |
|
Max Schaefer
|
dc1d1c2f22
|
JavaScript: Update expected output.
|
2019-10-29 15:30:06 +00:00 |
|
Max Schaefer
|
aebc5bc6c3
|
JavaScript: Update qhelp example for CleartextStorage.
|
2019-02-08 08:43:22 +00:00 |
|
Esben Sparre Andreasen
|
b780f82869
|
JS: sharpen js/clear-text-logging (ODASA-7485)
|
2018-11-22 13:38:43 +01:00 |
|
Max Schaefer
|
9221b62ded
|
JavaScript: Update expectd test output for security path queries to include nodes and edges query predicates.
|
2018-11-14 09:32:31 +00:00 |
|
Esben Sparre Andreasen
|
2b9f5c3fa2
|
JS: remove check for test-environment in js/clear-text-logging
|
2018-08-21 22:32:52 +02:00 |
|
Esben Sparre Andreasen
|
3636708d30
|
JS: extract and expose StringConcatenationTaintStep in TaintTracking
|
2018-08-21 22:32:52 +02:00 |
|
Esben Sparre Andreasen
|
0c4fb15651
|
JS: add query js/cleartext-logging
|
2018-08-20 08:34:16 +02:00 |
|
Pavel Avgustinov
|
b55526aa58
|
QL code and tests for C#/C++/JavaScript.
|
2018-08-02 17:53:23 +01:00 |
|