Esben Sparre Andreasen
|
9c65277b53
|
JS: reformulate js/incomplete-hostname-regexp with type tracking
|
2019-04-12 08:51:28 +02:00 |
|
Esben Sparre Andreasen
|
5a7101481c
|
JS: make message for js/incomplete-hostname-regexp more informative
|
2019-04-12 08:51:28 +02:00 |
|
Esben Sparre Andreasen
|
d643904faf
|
JS: improve tests for fixup js/incomplete-hostname-regexp
|
2019-04-12 08:51:28 +02:00 |
|
Esben Sparre Andreasen
|
fd429ce639
|
JS: whitelist delimiter unwrapping for js/incomplete-sanitization
|
2019-04-12 08:38:44 +02:00 |
|
Esben Sparre Andreasen
|
a0ed362310
|
JS: add test case for js/incomplete-sanitization
|
2019-04-12 08:37:47 +02:00 |
|
semmle-qlci
|
ccbb7ce04b
|
Merge pull request #1224 from asger-semmle/cheerio
Approved by esben-semmle
|
2019-04-11 15:21:44 +01:00 |
|
semmle-qlci
|
a1cc2fbed3
|
Merge pull request #1233 from xiemaisi/js/amd-type-inference
Approved by asger-semmle
|
2019-04-11 15:20:00 +01:00 |
|
semmle-qlci
|
ed5fd96603
|
Merge pull request #1227 from asger-semmle/typescript3.4
Approved by xiemaisi
|
2019-04-11 10:39:57 +01:00 |
|
Max Schaefer
|
301dab0e40
|
JavaScript: Improve AMD support in type inference.
Now leverages the recently introduced logic for resolving AMD imports
based on unique matching paths.
|
2019-04-10 09:47:54 -07:00 |
|
Max Schaefer
|
20312fc3bf
|
JavaScript: Improve socket.io model.
Recognise `io` imports and use type-tracking to better track handlers.
|
2019-04-10 08:02:40 -07:00 |
|
Asger F
|
bfa6208a58
|
TS: Fix test output
|
2019-04-10 15:44:37 +01:00 |
|
Asger F
|
c1c7ebfc48
|
TS: Support const type assertions
|
2019-04-10 12:54:42 +01:00 |
|
Asger F
|
d5ae69d40a
|
TS: Support readonly type expressions
|
2019-04-10 12:26:46 +01:00 |
|
Asger F
|
8304ce1e16
|
TS: Update test output with new toString value
|
2019-04-10 11:34:27 +01:00 |
|
Asger F
|
bd1d9ed810
|
JS: Add test
|
2019-04-09 12:21:54 +01:00 |
|
Esben Sparre Andreasen
|
e7adb62288
|
Merge pull request #1221 from asger-semmle/contextual-typing
TS: Extract contextual type for object/array literals
|
2019-04-09 10:43:01 +02:00 |
|
semmle-qlci
|
92acd322fc
|
Merge pull request #1218 from esben-semmle/js/whitelist-typeconfusion-lt1-checks
Approved by asger-semmle
|
2019-04-09 01:11:34 +01:00 |
|
Asger F
|
db9fd3f721
|
TS: update test change
|
2019-04-08 15:17:40 +01:00 |
|
semmle-qlci
|
f54366bf95
|
Merge pull request #1214 from asger-semmle/taint-addexpr-phi
Approved by esben-semmle, xiemaisi
|
2019-04-08 11:55:06 +01:00 |
|
Esben Sparre Andreasen
|
52d86471af
|
JS: whitelist another emptiness check for the type-confusion query
|
2019-04-08 09:52:27 +02:00 |
|
semmle-qlci
|
662ad4b2ca
|
Merge pull request #1205 from asger-semmle/prefix-sanitizer
Approved by esben-semmle
|
2019-04-08 08:29:04 +01:00 |
|
Asger F
|
50c2921625
|
TS: Use contextual typing for literals
|
2019-04-05 18:43:51 +01:00 |
|
Asger F
|
d7bfeeefd0
|
TS: add test case with nested literals
|
2019-04-05 18:40:24 +01:00 |
|
Asger F
|
80f413177a
|
Merge branch 'master' into shelljs
|
2019-04-05 14:44:32 +01:00 |
|
Asger F
|
e55330b820
|
JS: Fix flow through +=
|
2019-04-05 13:55:48 +01:00 |
|
semmle-qlci
|
063dbeeff3
|
Merge pull request #1198 from esben-semmle/js/more-express-route-handlers
Approved by xiemaisi
|
2019-04-05 09:47:51 +01:00 |
|
Esben Sparre Andreasen
|
60ba74a210
|
JS: Express cleanup and generalization
|
2019-04-04 21:42:08 +02:00 |
|
Esben Sparre Andreasen
|
c94ca46366
|
JS: add more Express tests
|
2019-04-04 21:42:08 +02:00 |
|
Asger F
|
43f6b8fa70
|
JS: Add test
|
2019-04-04 11:44:56 +01:00 |
|
Asger F
|
3da76cb798
|
JS: add model of ShellJS
|
2019-04-04 11:44:56 +01:00 |
|
Asger F
|
3bc7371fd6
|
JS: be less conservative about incomplete nodes in prefix sanitizers
|
2019-04-03 15:20:03 +01:00 |
|
Esben Sparre Andreasen
|
3c608fe11e
|
Merge branch 'master' into js/improve-createServer
|
2019-04-03 12:37:33 +02:00 |
|
semmle-qlci
|
1da828fa80
|
Merge pull request #1195 from esben-semmle/js/firebase-express-requests
Approved by xiemaisi
|
2019-04-03 11:36:02 +01:00 |
|
Esben Sparre Andreasen
|
f23a5a5fee
|
JS: model firebase-functions/https.onRequest
|
2019-04-03 08:01:45 +02:00 |
|
Esben Sparre Andreasen
|
0b733b4f23
|
JS: treat the last argument to https.createServer as a route handler
|
2019-04-02 14:38:31 +02:00 |
|
semmle-qlci
|
02f4695a5b
|
Merge pull request #1152 from esben-semmle/js/koa-improvements
Approved by xiemaisi
|
2019-04-02 08:51:19 +01:00 |
|
semmle-qlci
|
54b4e59d12
|
Merge pull request #1182 from esben-semmle/js/sourcenode-regexp-literals
Approved by xiemaisi
|
2019-04-01 21:58:58 +01:00 |
|
Esben Sparre Andreasen
|
2622fc64db
|
JS: autoformat
|
2019-04-01 22:55:17 +02:00 |
|
Esben Sparre Andreasen
|
7fec005806
|
JS: use DataFlow::SourceNode in three locations in Koa
|
2019-04-01 22:55:17 +02:00 |
|
Esben Sparre Andreasen
|
919eed6630
|
JS: add koa tests
|
2019-04-01 22:55:17 +02:00 |
|
Esben Sparre Andreasen
|
00c8387bb3
|
JS: model Koa redirects
|
2019-04-01 22:55:17 +02:00 |
|
Esben Sparre Andreasen
|
298dbe13c4
|
JS: improve Koa model to account for aliases on the context object
|
2019-04-01 22:49:00 +02:00 |
|
Esben Sparre Andreasen
|
0e01988622
|
JS: add koa tests
|
2019-04-01 22:49:00 +02:00 |
|
Rebecca Valentine
|
2b6869fff3
|
updates expecteds to reflect changes in the test file
|
2019-04-01 11:21:21 -07:00 |
|
Rebecca Valentine
|
0d0adada42
|
fixes tests and adds test results to expecteds
|
2019-04-01 11:13:04 -07:00 |
|
Rebecca Valentine
|
a16b5d36a8
|
adds tests
|
2019-04-01 10:40:51 -07:00 |
|
semmle-qlci
|
a4de82de06
|
Merge pull request #1185 from xiemaisi/js/improve-amd-imports
Approved by asger-semmle
|
2019-04-01 16:30:47 +01:00 |
|
semmle-qlci
|
a7d9a50dcf
|
Merge pull request #1176 from xiemaisi/js/fix-socket-io-type-tracking
Approved by asger-semmle
|
2019-04-01 13:57:13 +01:00 |
|
Esben Sparre Andreasen
|
364ba1b4ac
|
JS: use RegExpLiteral as a SourceNode
|
2019-04-01 09:19:25 +02:00 |
|
Esben Sparre Andreasen
|
7923c9d77c
|
JS: add tests for missing flow of regular expressions
|
2019-04-01 09:19:25 +02:00 |
|