6144 Commits

Author	SHA1	Message	Date
Esben Sparre Andreasen	4dc147d506	JS: rename CapturedSource -> LocalObject (files)	2019-02-25 16:09:07 +01:00
Esben Sparre Andreasen	66367987af	JS: rename CapturedSource -> LocalObject	2019-02-25 16:04:37 +01:00
Esben Sparre Andreasen	0d94fe3f54	JS: analyze assignments in with correctly	2019-02-25 15:32:17 +01:00
Esben Sparre Andreasen	047b69a4c2	JS: address review comments	2019-02-25 15:19:00 +01:00
Asger F	7d14429dce	JS: handle deeper access paths in Closure::moduleImport	2019-02-25 12:31:18 +00:00
semmle-qlci	c31ccbc114	Merge pull request #925 from asger-semmle/closure-reorg ... Approved by xiemaisi	2019-02-25 12:02:00 +00:00
Esben Sparre Andreasen	b0358d7d11	JS: autoformat	2019-02-25 12:44:55 +01:00
Asger F	707886f259	JS: minor qldoc fixes	2019-02-25 11:31:09 +00:00
Asger F	eab034ccfd	JS: add ModuleImportNode::Range	2019-02-25 11:31:08 +00:00
Asger F	e9bc728919	JS: fixes in qldoc	2019-02-25 11:26:12 +00:00
Esben Sparre Andreasen	97edfc5524	JS: address review comments	2019-02-25 12:17:56 +01:00
Esben Sparre Andreasen	80a716f3b3	JS: fixup visibility of DataFlow::HtmlAttributeNode	2019-02-25 12:17:56 +01:00
Esben Sparre Andreasen	4ce7ec1661	JS: add XSS vector for Vue's v-html	2019-02-25 12:17:56 +01:00
Esben Sparre Andreasen	4c5e48fbbc	JS: introduce DataFlow::HtmlAttributeNode	2019-02-25 12:17:56 +01:00
Esben Sparre Andreasen	da1ffcfd1b	JS: introduce Vue Template Element	2019-02-25 12:17:33 +01:00
Esben Sparre Andreasen	9f4f945975	JS: introduce Vue::InstanceHeapStep	2019-02-25 12:17:33 +01:00
Asger F	86153be64b	JS: fix qldoc	2019-02-25 09:51:31 +00:00
semmle-qlci	014d4b9ed0	Merge pull request #934 from asger-semmle/module-import ... Approved by xiemaisi	2019-02-25 09:46:52 +00:00
Max Schaefer	d4dbe3bfb6	JavaScript: Back out parsing of qualified XML identifiers. ... Their syntax conflicts with the proposed function-bind operator, which is more important to support.	2019-02-24 21:30:59 +00:00
Max Schaefer	be67d5129a	JavaScript: Add QL library support for E4X.	2019-02-24 20:45:41 +00:00
Max Schaefer	f3ea810c21	JavaScript: Add parser support for E4X.	2019-02-24 20:45:41 +00:00
Max Schaefer	c6fc4e4764	JavaScript: Address review comments.	2019-02-23 21:43:13 +00:00
Max Schaefer	e7c95bae49	JavaScript: Add flow steps modelling Electron IPC.	2019-02-23 21:43:13 +00:00
Max Schaefer	a4e4957f31	JavaScript: Model webContents property.	2019-02-23 21:43:13 +00:00
Max Schaefer	ff83e600dc	JavaScript: Track Electron browser objects inter-procedurally.	2019-02-23 21:43:13 +00:00
Max Schaefer	d59c12e6eb	JavaScript: Recognise Electron browser objects based on TypeScript types when available.	2019-02-23 21:43:13 +00:00
Max Schaefer	143bb711f9	JavaScript: Slightly restructure Electron BrowserWindow class hierarchy.	2019-02-23 21:43:13 +00:00
Max Schaefer	db9ac72e7a	Merge pull request #957 from esben-semmle/js/another-autobinder-model ... JS: model one more 'autobind' for js/unbound-event-handler-receiver	2019-02-22 20:58:17 +00:00
Max Schaefer	12ed2ca000	Merge pull request #958 from esben-semmle/js/improve-tainted-path ... JS: add taint steps for fs.realpath and fs.realpathSync	2019-02-22 20:55:39 +00:00
Esben Sparre Andreasen	6c1b29e4b6	JS: add missing flowstep for unused parameter field initializers	2019-02-21 21:44:28 +01:00
Esben Sparre Andreasen	bdd8691e65	JS: add type inference for the return value of captured method calls	2019-02-21 21:44:28 +01:00
Esben Sparre Andreasen	8af501d4d5	JS: avoid double reporting dead code with js/unused-variable	2019-02-21 21:44:28 +01:00
Esben Sparre Andreasen	91dccc3356	JS: add query js/unused-property	2019-02-21 21:44:28 +01:00
Esben Sparre Andreasen	0cf2eaec5e	JS: introduce CapturedSource	2019-02-21 21:44:28 +01:00
Esben Sparre Andreasen	305a249280	JS: add taint steps for fs.realpath and fs.realpathSync	2019-02-21 09:48:35 +01:00
Esben Sparre Andreasen	27cae0c190	JS: model one more 'autobind' for js/unbound-event-handler-receiver	2019-02-21 08:23:54 +01:00
james	50ad8a4089	update link in vue.qll	2019-02-20 16:43:56 +00:00
semmle-qlci	f5e419e774	Merge pull request #933 from xiemaisi/js/createContextualFragment ... Approved by asger-semmle	2019-02-20 12:42:27 +00:00
Asger F	e7e29101e4	JS: add StringOps::Concatenation	2019-02-15 16:57:26 +00:00
Asger F	c115451b9d	JS: Fix copy-pasta bug	2019-02-15 16:48:42 +00:00
Asger F	ab0ed66266	JS: Add EndsWith::Range	2019-02-15 16:48:15 +00:00
Asger F	2ccfd73be5	JS: Add Includes::Range	2019-02-15 16:42:41 +00:00
Asger F	56e081f7c9	JS: Add StartsWith::Range	2019-02-15 16:38:18 +00:00
Asger F	1aba111a00	JS: Use ::Range pattern for abstract classes	2019-02-15 14:28:07 +00:00
Asger F	c8823fa7cf	JS: change charpred of ClosureModule to be AST-based	2019-02-15 14:28:06 +00:00
Asger F	d1607f7c47	JS: remove SourceNode supertype from ClosureNamespaceAccess	2019-02-15 14:28:06 +00:00
Asger F	8801431352	JS: elaborate qldoc for isTopLevelExpr	2019-02-15 14:28:06 +00:00
Asger F	fa34f8f414	JS: replace dataflow -> data flow	2019-02-15 14:28:06 +00:00
Asger F	701e662bc4	JS: rename more predicates for consistency	2019-02-15 14:28:06 +00:00
Asger F	23bd9e62f0	JS: Add ClosureNamespaceAccess	2019-02-15 14:28:06 +00:00