Erik Krogh Kristensen
|
3ddfd7ba73
|
add extra promise test for chrome-remote-interface
|
2020-03-10 12:24:16 +01:00 |
|
Erik Krogh Kristensen
|
69d8cf643d
|
add type tracking predicates for promises
|
2020-03-10 12:23:23 +01:00 |
|
Esben Sparre Andreasen
|
3bfda6cd38
|
JS: refactoring: make separate modules for mongoose Model and Query
|
2020-03-10 09:57:45 +01:00 |
|
Esben Sparre Andreasen
|
480be06d86
|
JS: replace Model class with opaque type tracking predicate
|
2020-03-10 09:57:45 +01:00 |
|
Esben Sparre Andreasen
|
dbeb216af0
|
JS: make use of TypeScript types for mongoose Model and Query
|
2020-03-10 09:57:45 +01:00 |
|
Esben Sparre Andreasen
|
0c46e4d1af
|
JS: fixup typetracking usage: t2 -> t2.continue()
|
2020-03-10 09:57:45 +01:00 |
|
Esben Sparre Andreasen
|
aae92ad795
|
JS: add test for DatabaseAccess
|
2020-03-10 09:57:45 +01:00 |
|
Esben Sparre Andreasen
|
6b9bd8bd97
|
JS: adjust tests slightly to also support DatabaseAccess testing
|
2020-03-10 09:57:45 +01:00 |
|
Esben Sparre Andreasen
|
7a2faa0b6b
|
JS: add additional mongoose and mongodb js/nosql-injection sinks
|
2020-03-10 09:57:45 +01:00 |
|
Esben Sparre Andreasen
|
b6c616efd3
|
JS: support optional options argument to MongoClient.connect
|
2020-03-10 09:57:45 +01:00 |
|
Esben Sparre Andreasen
|
f24f03e1f8
|
JS: add mongodb .connect tests
|
2020-03-10 09:57:45 +01:00 |
|
Esben Sparre Andreasen
|
21e6e69f22
|
JS: support mongodb v3 (minimally)
https://github.com/github/codeql-javascript-team/issues/79
|
2020-03-10 09:57:45 +01:00 |
|
Erik Krogh Kristensen
|
ad52d6446e
|
add test case for tuple-like use
|
2020-03-09 19:47:05 +01:00 |
|
Erik Krogh Kristensen
|
981eef2587
|
expose arrayFunctionTaintStep in TaintTracking.qll
|
2020-03-09 17:22:29 +01:00 |
|
Erik Krogh Kristensen
|
509941649c
|
remove redundant qldoc, and change parameter names to better reflect behavior
|
2020-03-09 17:20:12 +01:00 |
|
Erik Krogh Kristensen
|
a476fc5c3b
|
revert Array.from change
|
2020-03-09 17:09:31 +01:00 |
|
Erik Krogh Kristensen
|
68ffd52d4c
|
update expected output
|
2020-03-09 16:45:10 +01:00 |
|
Erik Krogh Kristensen
|
b4b05696e1
|
two bugfixes
|
2020-03-09 16:45:03 +01:00 |
|
Max Schaefer
|
3c785ecaa7
|
JavaScript: Move flow summaries to experimental.
Also update description and change note to call out their experimental character more clearly.
|
2020-03-09 12:57:20 +00:00 |
|
Asger Feldthaus
|
6c1f98a5ae
|
JS: Update vague variable name
|
2020-03-09 11:58:38 +00:00 |
|
Erik Krogh Kristensen
|
0f0187d585
|
move Array.from to ArrayCreationNode
|
2020-03-09 10:26:21 +01:00 |
|
Erik Krogh Kristensen
|
dc4e361d75
|
add data-flow steps for arrays
|
2020-03-09 09:53:08 +01:00 |
|
Erik Krogh Kristensen
|
8e3cf5c9c8
|
add test for data-flow on arrays
|
2020-03-09 09:25:17 +01:00 |
|
Erik Krogh Kristensen
|
14740d4ccc
|
move existing array taint stracking into Arrays.qll
|
2020-03-09 09:20:45 +01:00 |
|
Asger Feldthaus
|
a1d479e975
|
JS: Declassify sensitive exprs with special characters
|
2020-03-07 15:15:13 +00:00 |
|
Asger Feldthaus
|
759631ae56
|
JS: Raise default memory limit to 2.4G
|
2020-03-07 15:13:53 +00:00 |
|
Asger Feldthaus
|
c55dcf88d5
|
JS: Improve error reporting
|
2020-03-07 15:13:52 +00:00 |
|
Asger Feldthaus
|
549d4e9b57
|
JS: Do not restart in the middle of a message
|
2020-03-07 15:13:52 +00:00 |
|
Asger Feldthaus
|
e1657b237b
|
JS: Extract compiler-restarting into a function
|
2020-03-07 15:13:52 +00:00 |
|
Asger Feldthaus
|
2ef21ea4b8
|
JS: Only evaluate relevant barrier guards
|
2020-03-07 15:13:20 +00:00 |
|
Asger Feldthaus
|
fd1a14d3bd
|
JS: Add qldoc to a private predicate
|
2020-03-07 15:13:20 +00:00 |
|
Asger Feldthaus
|
eed4204e04
|
JS: Lift some internal members to private top-level
|
2020-03-07 15:13:20 +00:00 |
|
semmle-qlci
|
7891f8621e
|
Merge pull request #2982 from esbena/js/request-model-with-chaining
Approved by asgerf
|
2020-03-06 08:57:42 +00:00 |
|
Asger Feldthaus
|
2c8eae22d1
|
JS: Autoformat
|
2020-03-05 16:58:49 +00:00 |
|
semmle-qlci
|
0d76c71ed7
|
Merge pull request #2981 from asger-semmle/js/lower-syntax-error-severity
Approved by max-schaefer
|
2020-03-05 09:47:56 +00:00 |
|
semmle-qlci
|
98cee5cc1d
|
Merge pull request #2967 from asger-semmle/js/flow-through-prop
Approved by esbena
|
2020-03-05 09:46:35 +00:00 |
|
semmle-qlci
|
85ee5fc988
|
Merge pull request #2955 from erik-krogh/BetterHeader
Approved by asgerf
|
2020-03-05 08:24:43 +00:00 |
|
semmle-qlci
|
98034aaa53
|
Merge pull request #2988 from asger-semmle/js/autoformat-again-again
Approved by esbena
|
2020-03-04 21:20:52 +00:00 |
|
semmle-qlci
|
c6e3d8df49
|
Merge pull request #2969 from esbena/js/process-as-event-emitter
Approved by erik-krogh
|
2020-03-04 20:24:12 +00:00 |
|
Asger Feldthaus
|
53569453ba
|
JS: Autoformat again
|
2020-03-04 19:28:24 +00:00 |
|
semmle-qlci
|
c5d39039bc
|
Merge pull request #2962 from erik-krogh/YetAnotherSanitizer
Approved by asgerf
|
2020-03-04 15:27:09 +00:00 |
|
Asger Feldthaus
|
c2f7cdce25
|
JS: Change precision to very-high
|
2020-03-04 15:06:10 +00:00 |
|
Esben Sparre Andreasen
|
db335ae89b
|
JS: add default/chaining for request
|
2020-03-04 12:36:49 +01:00 |
|
Esben Sparre Andreasen
|
92b3e8c060
|
JS: add default/chaining tests for request
|
2020-03-04 12:25:23 +01:00 |
|
Asger Feldthaus
|
af0df6c369
|
JS: Lower severity of js/syntax-error
|
2020-03-04 11:16:59 +00:00 |
|
Esben Sparre Andreasen
|
ae43e90a67
|
JS: model process as an EventEmitter
|
2020-03-04 09:49:16 +01:00 |
|
Esben Sparre Andreasen
|
4625217a68
|
Merge branch 'master' of github.com:Semmle/ql into js/more-fs-modules
|
2020-03-03 15:07:51 +01:00 |
|
Esben Sparre Andreasen
|
dfa07130b5
|
JS: add process EventEmitter test
|
2020-03-03 14:26:03 +01:00 |
|
Erik Krogh Kristensen
|
f03c67266a
|
add taint step for replace call that only removes dots
|
2020-03-03 12:58:06 +01:00 |
|
Erik Krogh Kristensen
|
95819c8731
|
use RegExpTerm to generalize predicate
|
2020-03-03 12:34:18 +01:00 |
|