2069 Commits

Author	SHA1	Message	Date
Napalys	401c6ea0f6	Added test case which is not detected by dataflow.	2025-03-20 18:17:27 +01:00
Napalys	9e787555df	Fixed typo in the test cases.	2025-03-20 13:25:36 +01:00
Napalys Klicius	221cc1977d	Merge branch 'main' into js/underscore-string	2025-03-20 12:26:00 +01:00
Napalys	f4ca2dc1f3	Restricted taint to array elements.	2025-03-20 12:24:49 +01:00
Napalys	752f02f04d	Fixed map modeling and added test cases.	2025-03-20 12:18:28 +01:00
Napalys	539e2ef558	Added support for superagent.agent().	2025-03-20 12:09:31 +01:00
Napalys	cdf4f5395f	Enhance SuperAgent URL request handling for both method calls and direct calls	2025-03-20 12:09:26 +01:00
Napalys	2e1734eeba	Added support for del function in superagent	2025-03-20 12:01:18 +01:00
Napalys	e5c179d5a4	Added test cases for superagent	2025-03-19 17:44:22 +01:00
Asger F	1324c11044	Merge pull request #19012 from asgerf/js/api-graph-array-element ... JS: Make API graphs use steps from summaries	2025-03-18 18:03:43 +01:00
Napalys	922a07d01e	Added underscore.string clearsContent. ... Co-authored-by: Asgerf <asgerf@github.com>	2025-03-18 12:58:19 +01:00
Napalys	d8e6d76b0e	Added modeling for tap function.	2025-03-17 19:07:02 +01:00
Napalys	eb18c3ce24	Added test case for tap.	2025-03-17 18:36:23 +01:00
Napalys	fc6b779a4b	Added modeling for aliases.	2025-03-17 18:33:14 +01:00
Napalys	dcc1e88d08	Added test cases for aliases.	2025-03-17 18:23:46 +01:00
Napalys	3a83c8d1fd	Added modeling for extra chaining function from underscore.string.	2025-03-17 18:06:26 +01:00
Napalys	cccd863a96	Added test for extra chaining function for underscore.string.	2025-03-17 18:05:49 +01:00
Napalys	ca9ae8a58d	Added chaining modeling for underscore.string package.	2025-03-17 14:46:07 +01:00
Napalys	25c6fb59df	Added chaining tests for underscore.string package.	2025-03-17 14:46:06 +01:00
Napalys	b59b9c86e4	Added modeling underscore.string of function which contain multiple sources points.	2025-03-17 14:46:01 +01:00
Napalys	77e1e171e1	Added test cases underscore.string with multiple sources.	2025-03-17 12:58:53 +01:00
Napalys	6b105b2f49	Added modeling underscore.string array to string functions.	2025-03-17 12:55:53 +01:00
Napalys	cd40b6f125	Added test cases underscore.string array to string.	2025-03-17 12:53:53 +01:00
Napalys	30623cd953	Added modeling of underscore.string for str to array.	2025-03-17 12:52:56 +01:00
Napalys	c256b9c336	Added underscore.string test cases for str to array.	2025-03-17 12:51:48 +01:00
Napalys	9bca863e38	Added modeling of underscore.string string to string functions.	2025-03-17 12:50:41 +01:00
Napalys	e8b233f086	Added test cases underscore.string string to string.	2025-03-17 12:48:41 +01:00
Asger F	4c1c0b79a6	JS: Make API-graphs use Content internally, and use steps from flow summaries	2025-03-14 23:08:16 +01:00
Asger F	cc95c77cbc	JS: Add failing test	2025-03-14 23:04:10 +01:00
Napalys	1468e81c55	Ensure interface extends valid expr.	2025-03-14 13:41:37 +01:00
Napalys Klicius	a4f2264f17	Merge pull request #18899 from Napalys/js/ecma-2024-regex ... JS: Add ECMAScript 2024 `v` Flag Operators for Regex Parsing	2025-03-11 12:50:44 +01:00
Asger F	b583e52a87	Merge pull request #18962 from asgerf/js/local-type-indirection ... JS: Unfold local type aliases in getAnUnderlyingType	2025-03-11 08:54:03 +01:00
Asger F	f7d2abf3e3	JS: Unfold local type aliases in getAnUnderlyingType	2025-03-10 16:09:16 +01:00
Asger F	91e9b23cf7	JS: Add test showing FN source	2025-03-10 16:08:55 +01:00
Napalys	f48eab903f	Add RegExpSubtraction class to support subtraction terms in regex	2025-03-10 11:18:10 +01:00
Napalys	8cbc0aea05	Add RegExpQuotedString class to support quoted string escapes in regex	2025-03-10 11:18:03 +01:00
Napalys	e0f20b2bd1	Add RegExpIntersection class to support intersection terms in regex	2025-03-07 08:58:19 +01:00
Napalys	9cc26208d4	Add test cases for v flag operators in RegExp library-tests.	2025-03-07 08:32:10 +01:00
Asger F	c3ad805fe8	JS: Sharpen up EnumerationRegExp	2025-02-28 13:58:11 +01:00
Asger F	d97d67359b	JS: Add test case showing lack of flow through non-sanitising regexp	2025-02-28 13:58:08 +01:00
Anders Schack-Mulligen	b2a595596b	JS: Remove irrelevant comment.	2025-02-25 11:33:16 +01:00
Anders Schack-Mulligen	449150e6b5	JS: Accept fixed FP flow.	2025-02-25 10:42:21 +01:00
Asger F	a1b7096125	Merge pull request #18783 from asgerf/js/downward-calls ... JS: Resolve calls downward in class hierarchy	2025-02-20 09:01:58 +01:00
Asger F	58c8b5fa2b	Merge pull request #18790 from asgerf/js/no-implicit-array-taint ... JS: Do not taint whole array when storing into ArrayElement	2025-02-19 13:23:31 +01:00
Asger F	24e7aad6ba	JS: Overriden -> Overridden	2025-02-18 09:51:13 +01:00
Asger F	c958702830	JS: Accept some unproblematic consistency warnings	2025-02-17 20:30:07 +01:00
Asger F	08b9d934c0	JS: Add a negative test	2025-02-17 11:37:44 +01:00
Asger F	352924fb8c	JS: Handle a few other stringification contexts	2025-02-17 11:36:28 +01:00
Asger F	33ab7db98a	JS: Handle Array.prototype.toString calls	2025-02-17 11:25:03 +01:00
Asger F	a74b203c86	JS: Add test with implicit array stringification	2025-02-17 11:21:46 +01:00