4435 Commits

Author	SHA1	Message	Date
Asger F	858c79e395	JS: Add plain taint step through Promise.all()	2024-03-13 08:57:42 +01:00
Asger F	13a8e0fbf0	JS: Add failing test for Promise.all()	2024-03-13 08:54:06 +01:00
erik-krogh	95a5ec7f27	add test that the new Object.groupBy method has a type	2024-03-12 13:22:11 +01:00
erik-krogh	9f410eb2d6	Merge branch 'main' into ts-54	2024-03-11 18:07:52 +01:00
Asger F	7c35309732	Merge pull request #15823 from asgerf/js/lift-cg-restriction ... JS: Call graph improvements	2024-03-08 13:40:38 +01:00
Asger F	245cd5c0b5	Merge pull request #15760 from asgerf/js/summarised-tt-store-steps ... JS: Summarise store steps for type tracking	2024-03-08 13:16:25 +01:00
Asger F	fc5b9e2796	JS: Expand test case	2024-03-08 10:34:39 +01:00
Asger F	c7295a09cd	JS: Benign test output update	2024-03-07 11:55:56 +01:00
Asger F	6a0adff1dc	JS: More precise detection of classes with escaping instances	2024-02-29 11:15:37 +01:00
Asger F	eeaa2bcc55	JS: Add test for class instance escaping into dependency	2024-02-29 11:14:23 +01:00
Asger F	853397361f	JS: Do not treat AMD pseudo-dependencies as file paths	2024-02-29 10:23:28 +01:00
Asger F	f384afbaf6	JS: Also summarize loadStore steps	2024-02-29 10:11:16 +01:00
Asger F	3ad83cc098	JS: Summarise store steps for type tracking	2024-02-29 10:10:39 +01:00
Asger F	7cd84c8f0a	JS: Add type-tracking test	2024-02-29 10:10:07 +01:00
erik-krogh	0056067a17	Merge branch 'main' into ts-54	2024-02-25 21:20:43 +01:00
erik-krogh	bf22f4a870	update expected output	2024-02-22 13:21:11 +01:00
Asger F	c324b2aed8	JS: Refactor	2024-02-19 13:59:49 +01:00
Asger F	6d597bea0d	JS: Refactor	2024-02-19 13:59:49 +01:00
Asger F	8a5b907912	JS: Handle wrapper functions more gracefully	2024-02-19 13:59:48 +01:00
Asger F	51bed86778	Update EndpointNaming.expected	2024-02-19 13:59:46 +01:00
Asger F	29258ad8c2	WIP new aliasing rule	2024-02-19 13:59:15 +01:00
Asger F	4ef1ac9250	JS: Accept bad test output	2024-02-19 13:59:12 +01:00
Asger F	15bc3c282f	JS: Add test with wrapper function	2024-02-19 13:58:40 +01:00
Asger F	d94d4591da	JS: Name instance methods using API nodes instead of special-casing	2024-02-14 15:08:19 +01:00
Asger F	c4a0f36a08	JS: Fix handling of unknown properties ... These would shorten the expected distance to a node, but would never be usable as an edge, meaning we failed to pick a preferred predecessor.	2024-02-14 15:08:19 +01:00
Asger F	3ff950660b	JS: Add test with unknown property name	2024-02-14 15:08:19 +01:00
Asger F	a3dc19fd31	JS: Check privacy earlier	2024-02-14 15:08:19 +01:00
Asger F	5c454944a9	JS: Add test for private fields	2024-02-14 15:08:19 +01:00
Asger F	2a91bb8c54	JS: Add test showing ambiguous predecessor	2024-02-14 15:08:19 +01:00
Asger F	75a95ffcd1	Merge pull request #15602 from asgerf/js/block-logical-and-flow ... JS: Fix flow through &&	2024-02-14 12:29:40 +01:00
Asger F	2172c4863f	Merge pull request #15380 from asgerf/js/endpoint-naming ... JS: Add library for naming endpoints	2024-02-14 10:48:13 +01:00
Asger F	18db769d6d	JS: Update expected output	2024-02-14 10:45:51 +01:00
Asger F	bafe5e3d8e	JS: Add test case (with old expected data)	2024-02-14 10:45:51 +01:00
Asger F	f5c437694c	Update UselessConditional.expected	2024-02-13 18:31:24 +01:00
Asger F	f27fda801e	Update tests.expected	2024-02-13 18:30:23 +01:00
Asger F	6598a669a1	JS: Use set literal	2024-02-13 09:30:35 +01:00
Asger F	baa3c35d6f	JS: Refactor aliasing relation	2024-02-13 09:24:00 +01:00
erik-krogh	94b7bda3dc	exclude tagged template literals from js/superfluous-trailing-arguments	2024-02-06 09:36:30 +01:00
Rasmus Lerchedahl Petersen	f275531542	Add support for TS 5.4-beta	2024-02-02 11:03:44 +01:00
Asger F	1737ba1a6b	JS: Add library for naming endpoints	2024-01-30 16:36:51 +01:00
Asger F	6cfdd7aec4	JS: Add InlineExpectationsTest	2024-01-30 13:20:57 +01:00
Sid Shankar	b1d7a635f5	Renames diagnostic query files and tests ... This commit renames the files relating to the diagnostic query that produces information on the number of files extracted. The files have been renamed from "SuccessfullExtractedFiles.*" to "ExtractedFiles.*". All related tests and test files have been renamed too. The `@tags` and `@id` attributes of the queries have been left untouched, consistent with the `@tags` and `@id` for similar queries in other languages.	2024-01-29 20:19:20 +00:00
erik-krogh	396da117bb	remove an FP in overly-large-range for [@-Z]	2024-01-25 14:15:06 +01:00
GitHub Security Lab	df10a7e7f0	Merge branch 'main' into amammad-js-bombs	2024-01-25 11:23:38 +01:00
Sid Shankar	2d71294f61	Merge pull request #15256 from sidshank/change/adjust-extracted-files-diagnostics ... Js/Py/Rb: Report any extracted file as successfully extracted	2024-01-17 11:04:06 -05:00
erik-krogh	1a8a70dc1b	mark the range [0-?] as good in the overly-large-range query	2024-01-17 13:11:57 +01:00
Sid Shankar	59098be8c4	Merge branch 'main' into change/adjust-extracted-files-diagnostics	2024-01-16 21:51:41 -05:00
Erik Krogh Kristensen	d782bd9b1f	Merge pull request #13624 from jorgectf/seclab/dotjs ... JS: Add `dot.js` support	2024-01-11 14:57:19 +01:00
Sid Shankar	e30a0d1e83	JS: Report any extracted file as successfully extracted	2024-01-08 22:19:33 +00:00
erik-krogh	58dc14d5bb	update expected output	2024-01-04 11:38:58 +01:00