Asger F
|
d5ae69d40a
|
TS: Support readonly type expressions
|
2019-04-10 12:26:46 +01:00 |
|
Asger F
|
8304ce1e16
|
TS: Update test output with new toString value
|
2019-04-10 11:34:27 +01:00 |
|
Asger F
|
bd1d9ed810
|
JS: Add test
|
2019-04-09 12:21:54 +01:00 |
|
Esben Sparre Andreasen
|
e7adb62288
|
Merge pull request #1221 from asger-semmle/contextual-typing
TS: Extract contextual type for object/array literals
|
2019-04-09 10:43:01 +02:00 |
|
semmle-qlci
|
92acd322fc
|
Merge pull request #1218 from esben-semmle/js/whitelist-typeconfusion-lt1-checks
Approved by asger-semmle
|
2019-04-09 01:11:34 +01:00 |
|
Asger F
|
db9fd3f721
|
TS: update test change
|
2019-04-08 15:17:40 +01:00 |
|
semmle-qlci
|
f54366bf95
|
Merge pull request #1214 from asger-semmle/taint-addexpr-phi
Approved by esben-semmle, xiemaisi
|
2019-04-08 11:55:06 +01:00 |
|
Esben Sparre Andreasen
|
52d86471af
|
JS: whitelist another emptiness check for the type-confusion query
|
2019-04-08 09:52:27 +02:00 |
|
semmle-qlci
|
662ad4b2ca
|
Merge pull request #1205 from asger-semmle/prefix-sanitizer
Approved by esben-semmle
|
2019-04-08 08:29:04 +01:00 |
|
Asger F
|
50c2921625
|
TS: Use contextual typing for literals
|
2019-04-05 18:43:51 +01:00 |
|
Asger F
|
d7bfeeefd0
|
TS: add test case with nested literals
|
2019-04-05 18:40:24 +01:00 |
|
Asger F
|
80f413177a
|
Merge branch 'master' into shelljs
|
2019-04-05 14:44:32 +01:00 |
|
Asger F
|
e55330b820
|
JS: Fix flow through +=
|
2019-04-05 13:55:48 +01:00 |
|
semmle-qlci
|
063dbeeff3
|
Merge pull request #1198 from esben-semmle/js/more-express-route-handlers
Approved by xiemaisi
|
2019-04-05 09:47:51 +01:00 |
|
Esben Sparre Andreasen
|
60ba74a210
|
JS: Express cleanup and generalization
|
2019-04-04 21:42:08 +02:00 |
|
Esben Sparre Andreasen
|
c94ca46366
|
JS: add more Express tests
|
2019-04-04 21:42:08 +02:00 |
|
Asger F
|
43f6b8fa70
|
JS: Add test
|
2019-04-04 11:44:56 +01:00 |
|
Asger F
|
3da76cb798
|
JS: add model of ShellJS
|
2019-04-04 11:44:56 +01:00 |
|
Asger F
|
3bc7371fd6
|
JS: be less conservative about incomplete nodes in prefix sanitizers
|
2019-04-03 15:20:03 +01:00 |
|
Esben Sparre Andreasen
|
3c608fe11e
|
Merge branch 'master' into js/improve-createServer
|
2019-04-03 12:37:33 +02:00 |
|
semmle-qlci
|
1da828fa80
|
Merge pull request #1195 from esben-semmle/js/firebase-express-requests
Approved by xiemaisi
|
2019-04-03 11:36:02 +01:00 |
|
Esben Sparre Andreasen
|
f23a5a5fee
|
JS: model firebase-functions/https.onRequest
|
2019-04-03 08:01:45 +02:00 |
|
Esben Sparre Andreasen
|
0b733b4f23
|
JS: treat the last argument to https.createServer as a route handler
|
2019-04-02 14:38:31 +02:00 |
|
semmle-qlci
|
02f4695a5b
|
Merge pull request #1152 from esben-semmle/js/koa-improvements
Approved by xiemaisi
|
2019-04-02 08:51:19 +01:00 |
|
semmle-qlci
|
54b4e59d12
|
Merge pull request #1182 from esben-semmle/js/sourcenode-regexp-literals
Approved by xiemaisi
|
2019-04-01 21:58:58 +01:00 |
|
Esben Sparre Andreasen
|
2622fc64db
|
JS: autoformat
|
2019-04-01 22:55:17 +02:00 |
|
Esben Sparre Andreasen
|
7fec005806
|
JS: use DataFlow::SourceNode in three locations in Koa
|
2019-04-01 22:55:17 +02:00 |
|
Esben Sparre Andreasen
|
919eed6630
|
JS: add koa tests
|
2019-04-01 22:55:17 +02:00 |
|
Esben Sparre Andreasen
|
00c8387bb3
|
JS: model Koa redirects
|
2019-04-01 22:55:17 +02:00 |
|
Esben Sparre Andreasen
|
298dbe13c4
|
JS: improve Koa model to account for aliases on the context object
|
2019-04-01 22:49:00 +02:00 |
|
Esben Sparre Andreasen
|
0e01988622
|
JS: add koa tests
|
2019-04-01 22:49:00 +02:00 |
|
Rebecca Valentine
|
2b6869fff3
|
updates expecteds to reflect changes in the test file
|
2019-04-01 11:21:21 -07:00 |
|
Rebecca Valentine
|
0d0adada42
|
fixes tests and adds test results to expecteds
|
2019-04-01 11:13:04 -07:00 |
|
Rebecca Valentine
|
a16b5d36a8
|
adds tests
|
2019-04-01 10:40:51 -07:00 |
|
semmle-qlci
|
a4de82de06
|
Merge pull request #1185 from xiemaisi/js/improve-amd-imports
Approved by asger-semmle
|
2019-04-01 16:30:47 +01:00 |
|
semmle-qlci
|
a7d9a50dcf
|
Merge pull request #1176 from xiemaisi/js/fix-socket-io-type-tracking
Approved by asger-semmle
|
2019-04-01 13:57:13 +01:00 |
|
Esben Sparre Andreasen
|
364ba1b4ac
|
JS: use RegExpLiteral as a SourceNode
|
2019-04-01 09:19:25 +02:00 |
|
Esben Sparre Andreasen
|
7923c9d77c
|
JS: add tests for missing flow of regular expressions
|
2019-04-01 09:19:25 +02:00 |
|
Esben Sparre Andreasen
|
42d3012f81
|
JS: let RegExpLiteral be a DataFlow::SourceNode
|
2019-04-01 09:19:25 +02:00 |
|
semmle-qlci
|
ed0ef36427
|
Merge pull request #1035 from asger-semmle/firebase
Approved by xiemaisi
|
2019-03-29 13:44:02 +00:00 |
|
Max Schaefer
|
f5279b2a1d
|
JavaScript: Resolve AMD imports based on absolute paths if there is only a single candidate.
|
2019-03-29 08:30:05 +00:00 |
|
Max Schaefer
|
b29b3dff4d
|
JavaScript: Use proper camel-case for AMD-related class names.
|
2019-03-29 08:14:07 +00:00 |
|
semmle-qlci
|
35ea746045
|
Merge pull request #1172 from asger-semmle/hostname-prefix-sanitizer
Approved by xiemaisi
|
2019-03-28 11:55:10 +00:00 |
|
Max Schaefer
|
c097031c7e
|
JavaScript: Fix uses of TypeTracker with custom flow steps.
These steps need to check that the type hasn't been tracked into a property.
|
2019-03-28 10:33:04 +00:00 |
|
Asger F
|
99dc2435af
|
JS: update test
|
2019-03-27 15:03:04 +00:00 |
|
Asger F
|
42c0efd549
|
JS: add test
|
2019-03-27 13:21:45 +00:00 |
|
semmle-qlci
|
86040575b1
|
Merge pull request #1161 from esben-semmle/js/classify-mode-html
Approved by xiemaisi
|
2019-03-27 12:56:04 +00:00 |
|
Asger F
|
d4c7312d80
|
JS: more sanitizing prefixes
|
2019-03-27 11:22:31 +00:00 |
|
Asger F
|
50f2afb622
|
JS: add test
|
2019-03-27 11:20:39 +00:00 |
|
Esben Sparre Andreasen
|
3cd93129a6
|
JS: classify HTML files with > 20 elements on a line as generated
|
2019-03-26 08:03:56 +01:00 |
|