Asger Feldthaus
|
a39cb74b89
|
JS: Heuristics
|
2021-03-17 13:26:01 +00:00 |
|
Asger Feldthaus
|
58a34fc249
|
JS: VHtmlSourceWrite -> SharedTaintStep
|
2021-03-17 13:26:01 +00:00 |
|
Asger Feldthaus
|
bd5452f2cf
|
JS: Move VHtmlSourceWrite step into Vue library (as its a shared step)
|
2021-03-17 13:26:01 +00:00 |
|
Asger Feldthaus
|
2dcb708022
|
JS: Base64
|
2021-03-17 13:26:01 +00:00 |
|
Asger Feldthaus
|
d9be660633
|
JS: Extend
|
2021-03-17 13:26:01 +00:00 |
|
Asger Feldthaus
|
d079cb5149
|
JS: ClosureLibrary
|
2021-03-17 13:26:01 +00:00 |
|
Asger Feldthaus
|
25d4ab78fe
|
JS: ComposedFunctions
|
2021-03-17 13:26:01 +00:00 |
|
Asger Feldthaus
|
a2f7ecec66
|
JS: AsyncPackage
|
2021-03-17 13:26:01 +00:00 |
|
Asger Feldthaus
|
4746670ac6
|
JS: UriLibraryStep
|
2021-03-17 13:26:00 +00:00 |
|
Asger Feldthaus
|
ade75793dd
|
JS: Typeahead
|
2021-03-17 13:26:00 +00:00 |
|
Asger Feldthaus
|
9ee81cb115
|
JS: Fix TaintedPath
|
2021-03-17 13:26:00 +00:00 |
|
Asger Feldthaus
|
ec19bed1fa
|
JS: Fix regexp tracking
|
2021-03-17 13:26:00 +00:00 |
|
Asger Feldthaus
|
92d555166a
|
JS: PropertyProjectionTest
|
2021-03-17 13:26:00 +00:00 |
|
Asger Feldthaus
|
a39086ab27
|
JS: Vue::InstanceHeapStep
|
2021-03-17 13:26:00 +00:00 |
|
Asger Feldthaus
|
957c406969
|
JS: BufferTaintStep
|
2021-03-17 13:26:00 +00:00 |
|
Asger Feldthaus
|
6bd2c2e476
|
JS: FsFlowStep
|
2021-03-17 13:26:00 +00:00 |
|
Asger Feldthaus
|
ee9841e7ec
|
JS: PathFlowStep
|
2021-03-17 13:26:00 +00:00 |
|
Asger Feldthaus
|
8fe229fb08
|
JS: ArrayFunctionTaintStep
|
2021-03-17 13:26:00 +00:00 |
|
Asger Feldthaus
|
7275707115
|
JS: UtilInspectTaintStep
|
2021-03-17 13:25:59 +00:00 |
|
Asger Feldthaus
|
462e31c2b4
|
JS: ErrorConstructorTaintStep
|
2021-03-17 13:25:59 +00:00 |
|
Asger Feldthaus
|
fa9b3dfff4
|
JS: SortTaintStep
|
2021-03-17 13:25:59 +00:00 |
|
Asger Feldthaus
|
107569ef41
|
JS: JsonParserTaintStep
|
2021-03-17 13:25:59 +00:00 |
|
Asger Feldthaus
|
301b5e6556
|
JS: JsonStringifyTaintStep
|
2021-03-17 13:25:59 +00:00 |
|
Asger Feldthaus
|
0b41124b0f
|
JS: StringMatchTaintStep
|
2021-03-17 13:25:59 +00:00 |
|
Asger Feldthaus
|
9f15b14df9
|
JS: StringFormattingStep
|
2021-03-17 13:25:59 +00:00 |
|
Asger Feldthaus
|
a00fdc9b25
|
JS: StringManipulationStep
|
2021-03-17 13:25:59 +00:00 |
|
Asger Feldthaus
|
7a5f9f6a69
|
JS: StringConcatStep
|
2021-03-17 13:25:59 +00:00 |
|
Asger Feldthaus
|
0fa66acdb8
|
JS: ReactPropStep
|
2021-03-17 13:25:59 +00:00 |
|
Asger Feldthaus
|
317a073b6e
|
JS: DictionaryTaintStep
|
2021-03-17 13:25:58 +00:00 |
|
Asger Feldthaus
|
3398ddf783
|
JS: HeapTaintStep
|
2021-03-17 13:25:58 +00:00 |
|
Asger Feldthaus
|
c3e00181cb
|
JS: Add SharedTaintStep
|
2021-03-17 13:25:58 +00:00 |
|
Erik Krogh Kristensen
|
dab6a11978
|
add example code
|
2021-03-17 13:35:16 +01:00 |
|
Erik Krogh Kristensen
|
5898b48391
|
add missing polarity check
|
2021-03-17 13:35:07 +01:00 |
|
Erik Krogh Kristensen
|
1db5cb15f0
|
Update javascript/ql/src/semmle/javascript/security/IncompleteBlacklistSanitizer.qll
Co-authored-by: Asger F <asgerf@github.com>
|
2021-03-17 13:30:05 +01:00 |
|
Erik Krogh Kristensen
|
edb0f77177
|
add missing qldoc
|
2021-03-17 10:05:36 +01:00 |
|
Erik Krogh Kristensen
|
8975c3a7ce
|
broaden which types are recognized by API-graphs
|
2021-03-17 10:03:55 +01:00 |
|
Erik Krogh Kristensen
|
2f3869f41b
|
add model for puppeteer
|
2021-03-17 10:03:51 +01:00 |
|
Asger Feldthaus
|
a76be91481
|
JS: Remove deprected use of queryAccess
|
2021-03-16 13:28:12 +00:00 |
|
Asger Feldthaus
|
ff1326cc7b
|
JS: Cache getReExportedModule
|
2021-03-16 13:28:12 +00:00 |
|
Asger Feldthaus
|
a9383da2c3
|
JS: Autoformat
|
2021-03-16 13:28:12 +00:00 |
|
Asger Feldthaus
|
bc4c178648
|
JS: Cache together
|
2021-03-16 13:28:12 +00:00 |
|
Asger Feldthaus
|
7b7e87f177
|
JS: Fix bad join order in closure
|
2021-03-16 13:28:11 +00:00 |
|
Asger Feldthaus
|
aa1c8c041e
|
JS: Exclude client-side sources from RegExpInjection
|
2021-03-16 13:28:11 +00:00 |
|
Asger Feldthaus
|
2e57a7d3e9
|
JS: Add ClientSideRemoteFlowSource
|
2021-03-16 13:28:09 +00:00 |
|
CodeQL CI
|
ae62fbc2c7
|
Merge pull request #5382 from erik-krogh/moreCache
Approved by asgerf
|
2021-03-16 05:53:03 -07:00 |
|
CodeQL CI
|
b37da7cc22
|
Merge pull request #5386 from erik-krogh/cachePrepend
Approved by asgerf
|
2021-03-16 05:49:24 -07:00 |
|
CodeQL CI
|
40acb95105
|
Merge pull request #5397 from erik-krogh/globalSanitizer
Approved by asgerf
|
2021-03-16 05:37:32 -07:00 |
|
Erik Krogh Kristensen
|
1bf259beef
|
support another String.prototype.replace pattern
|
2021-03-16 13:25:13 +01:00 |
|
CodeQL CI
|
c08230ce1e
|
Merge pull request #5378 from asgerf/js/meta-problem-queries
Approved by esbena
|
2021-03-16 03:58:12 -07:00 |
|
Jaroslav Lobačevski
|
8445ec6c17
|
Update javascript/ql/src/experimental/semmle/javascript/Actions.qll
Co-authored-by: Erik Krogh Kristensen <erik-krogh@github.com>
|
2021-03-15 19:15:10 +02:00 |
|