Asger F
|
76a8e9827e
|
Merge pull request #13283 from asgerf/js/restrict-regex-search-function
JS: Be more conservative about flagging "search" call arguments as regex
|
2023-06-08 10:50:51 +02:00 |
|
Erik Krogh Kristensen
|
6ba7f9a238
|
Merge pull request #13352 from erik-krogh/once-again-deps-not-py-cpp
delete old deprecations
|
2023-06-07 13:00:57 +02:00 |
|
Asger F
|
17f9239c33
|
JS: Fix invalid source kind in test
|
2023-06-06 13:40:06 +02:00 |
|
Erik Krogh Kristensen
|
0e6693bdea
|
Merge pull request #12874 from erik-krogh/ts51
JS: Add support for TS 5.1
|
2023-06-06 11:51:51 +02:00 |
|
Erik Krogh Kristensen
|
b78cd48954
|
Merge pull request #13329 from erik-krogh/sqlhelp
JS: improve the sql-injection help page
|
2023-06-06 08:44:44 +02:00 |
|
Erik Krogh Kristensen
|
219ec9d05d
|
Merge pull request #13127 from erik-krogh/polReDoS
ReDoS: revert new superlinear algorithm.
|
2023-06-02 16:10:24 +02:00 |
|
erik-krogh
|
3584e85fe8
|
JS: fix tutorial
|
2023-06-02 11:58:08 +02:00 |
|
erik-krogh
|
44b6366586
|
delete old deprecations
|
2023-06-02 11:58:08 +02:00 |
|
erik-krogh
|
1b44b59842
|
add stress test
|
2023-06-01 23:20:23 +02:00 |
|
erik-krogh
|
97afa5733b
|
add support for namespaced JSX attributes
|
2023-06-01 21:52:14 +02:00 |
|
Jami
|
3886ebffa9
|
Merge branch 'main' into jcogs33/update-javascript-sink-kinds
|
2023-06-01 14:09:10 -04:00 |
|
erik-krogh
|
b343dcaadd
|
put string/object in the alert-message for sql-injection
|
2023-05-31 08:06:04 +02:00 |
|
Asger F
|
c637b6f59a
|
JS: Update test for RegExpAlwaysMatches
|
2023-05-26 14:10:26 +02:00 |
|
Asger F
|
9df9ca2916
|
JS: Update test and expectations for MissingRegExpAnchor
|
2023-05-26 14:07:34 +02:00 |
|
Asger F
|
40daa9c906
|
JS: Update RegExpInjection test and expectations
|
2023-05-26 14:05:36 +02:00 |
|
Erik Krogh Kristensen
|
796e71f8be
|
Merge pull request #13176 from MaxSchlueter/fixquery12
Fix "Introducing the JavaScript libraries" query12.qll and add test case
|
2023-05-24 10:56:53 +02:00 |
|
Max Schlueter
|
40aa9417d0
|
Fix query12 and add test case
|
2023-05-23 11:52:51 +02:00 |
|
erik-krogh
|
f7419c9250
|
add expected output
|
2023-05-23 09:56:06 +02:00 |
|
erik-krogh
|
f85b3e13c2
|
update expected output
|
2023-05-23 09:56:06 +02:00 |
|
Erik Krogh Kristensen
|
e658177c31
|
Merge pull request #12975 from tyage/support-sub-modules
JS: Support sub modules
|
2023-05-23 09:24:43 +02:00 |
|
Erik Krogh Kristensen
|
3647b9cfeb
|
Merge pull request #13196 from erik-krogh/indirectCommand
JS: require arguments to be shell interpreted to be flagged by indirect-command-injection
|
2023-05-22 11:53:57 +02:00 |
|
erik-krogh
|
3293a55e8f
|
require arguments to be shell interpreted to be flagged by indirect-command-injection
|
2023-05-17 11:07:45 +02:00 |
|
Asger F
|
f94fdc6348
|
JS: Remove mention of TrackedNode in docs
|
2023-05-17 10:37:12 +02:00 |
|
Jami Cogswell
|
7880e9e92c
|
JS: update 'command-line-injection' sink kind to 'command-injection'
|
2023-05-16 15:45:55 -04:00 |
|
Asger F
|
20e8ee8423
|
Merge pull request #12748 from JarLob/yi
JS: Add more sources, more unit tests, fixes to the GitHub Actions injection query
|
2023-05-15 11:03:00 +02:00 |
|
Kasper Svendsen
|
fe2f36a1fe
|
JS: Make implicit this receivers explicit
|
2023-05-12 12:12:48 +02:00 |
|
Kasper Svendsen
|
7dd9906e95
|
JS: Enable implicit this receiver warnings
|
2023-05-12 09:49:14 +02:00 |
|
Kasper Svendsen
|
189f8515c0
|
JS: Make implicit this receivers explicit
|
2023-05-12 09:49:14 +02:00 |
|
Asger F
|
c376eeb133
|
Merge pull request #12978 from asgerf/js/github-actions-sources
JS: Add sources and sinks related to GitHub Actions
|
2023-05-10 09:55:24 +02:00 |
|
Asger F
|
1a9956354e
|
JS: Restrict getInput to indirect command injection query
|
2023-05-03 16:10:03 +02:00 |
|
Kasper Svendsen
|
67950c8e6b
|
JS: Make implicit this receivers explicit
|
2023-05-03 15:31:00 +02:00 |
|
Asger F
|
b9ad4177f9
|
JS: List safe environment variables in IndirectCommandInjection
|
2023-05-03 10:48:14 +02:00 |
|
tyage
|
0d991574ec
|
Fix typo in test
|
2023-05-02 12:00:42 +09:00 |
|
Asger F
|
08785a4063
|
JS: Add sources from actions/core
|
2023-05-01 11:42:17 +02:00 |
|
Asger F
|
cb95dbfa14
|
JS: Add tests
|
2023-05-01 11:42:17 +02:00 |
|
Asger F
|
2c89f9747b
|
Merge pull request #12949 from asgerf/js/angular-native
JS: Add a few more DOM element sources
|
2023-05-01 11:08:45 +02:00 |
|
Asger F
|
e9f1e99526
|
Merge pull request #12887 from asgerf/js/unsafe-yaml-deserialization
JS: Update model of js-yaml
|
2023-05-01 09:57:20 +02:00 |
|
tyage
|
71952fe551
|
JS: Add test for sub module
|
2023-04-30 18:18:35 +09:00 |
|
Erik Krogh Kristensen
|
3d41cd583f
|
Merge pull request #12963 from tyage/track-interfile-use-router
JS: Track interfile useRouter
|
2023-04-28 22:41:43 +02:00 |
|
Asger F
|
d1c8e0abd7
|
Merge pull request #12951 from asgerf/js/json-with-comments
JS: Stop complaining about comments in JSON files
|
2023-04-28 20:53:35 +02:00 |
|
tyage
|
933b55d37d
|
Track interfile useRouter
|
2023-04-28 15:49:26 +09:00 |
|
Asger F
|
8a9308c8b0
|
JS: Update test output
|
2023-04-28 07:55:20 +02:00 |
|
Asger F
|
0c8f895e0f
|
JS: Add one more test
|
2023-04-27 21:06:20 +02:00 |
|
Asger F
|
97a942de80
|
JS: Update test output
|
2023-04-27 21:04:35 +02:00 |
|
Asger F
|
682ff23e04
|
JS: Update Express test
|
2023-04-27 16:36:04 +02:00 |
|
Asger F
|
410719fd9e
|
Update JSONError.expected
|
2023-04-27 10:57:38 +02:00 |
|
Asger F
|
cf1e87de9e
|
JS: Track DOM elements out of collections
|
2023-04-26 14:55:34 +02:00 |
|
Asger F
|
1f228a049f
|
JS: Add test for iterating over DOM collections
|
2023-04-26 14:54:38 +02:00 |
|
Asger F
|
0d74d88b7b
|
JS: Add new sink to test
|
2023-04-26 14:33:04 +02:00 |
|
Asger F
|
4df05b4e74
|
JS: Shift line numbers in test
|
2023-04-26 14:33:04 +02:00 |
|