2558 Commits

Author	SHA1	Message	Date
Asger F	46f88e7ce7	JS: Updates to DOM model	2025-04-02 10:14:03 +02:00
Asger F	48db2b9315	JS: Add test	2025-04-02 10:12:36 +02:00
Asger F	887942e3e9	Merge pull request #19108 from asgerf/js/api-graph-spread-rest ... JS: Handle spread/rest in API graphs	2025-04-01 17:48:36 +02:00
Napalys Klicius	4572376e9a	Merge pull request #19143 from Napalys/js/fs-extra-missing ... JS: Modeling of `fs-extra` functions	2025-03-31 10:35:45 +02:00
Napalys	32d6ac8da7	Add test case to ensure exec calls without middleware injection into Express are not flagged.	2025-03-30 14:09:15 +02:00
Napalys	45c8ec96df	Added test cases for hana db additional sources.	2025-03-28 15:02:03 +01:00
Napalys Klicius	f7264d82d4	Merge branch 'main' into js/hana_db_client	2025-03-28 13:21:15 +01:00
Napalys	75b4d1b771	Applied copilot suggestions.	2025-03-28 13:19:11 +01:00
Napalys	495af56ab5	Added NodeJSFileSystemVectorWrite class for vectored write.	2025-03-28 13:07:23 +01:00
Napalys	e0c6cbb1b7	Added test cases for writev and writevSync.	2025-03-28 13:07:21 +01:00
Napalys	e63e170ac2	Added support for readv and readvSync functions in NodeJSFileSystemAccessRead class .	2025-03-28 13:07:20 +01:00
Napalys	6e7214747c	Added test cases for readv and readvSync	2025-03-28 13:07:14 +01:00
Asger F	1ad471cb32	JS: Track through spread/rest params in API graphs	2025-03-28 09:14:36 +01:00
Napalys	e1bf054056	Added support for lutimes, opendir, and statfs functions from fs-extra.	2025-03-28 08:37:30 +01:00
Napalys	55c74b2bac	Added support for emptydir functions from fs-extra.	2025-03-28 08:37:28 +01:00
Napalys	e386448f60	Added support for missing rm functions from fs-extra	2025-03-28 08:37:22 +01:00
Napalys	7a08f32e16	Added support for cp functions from fs-extra.	2025-03-28 08:36:26 +01:00
Napalys	96a550582b	Added test cases for fs-extra missing features.	2025-03-28 08:26:31 +01:00
Napalys Klicius	32369dab7d	Merge pull request #19124 from Napalys/js/hapi_upgrade ... JS: Support for newer version of `Hapi` - `@hapi/hapi`	2025-03-27 16:42:51 +01:00
Napalys Klicius	fdea22fbc3	Merge pull request #19129 from Napalys/js/readfile_async ... JS: Add support for `async` `readFile`	2025-03-27 12:34:39 +01:00
Napalys	200bf391ce	Enhance NodeJSLib data flow handling through await.	2025-03-26 14:24:52 +01:00
Napalys	762ca2f8f5	Added test case with async readFile, currently not flagged.	2025-03-26 14:21:44 +01:00
Napalys	ae645e49ba	Added support for @hapi/hapi server.	2025-03-26 11:41:11 +01:00
Napalys	649b4e07e2	Added test cases for @hapi/hapi	2025-03-26 11:35:58 +01:00
Napalys	4cdc40d115	Added SQL injection detection for exec method embeded Express client from hdbext.	2025-03-25 18:39:54 +01:00
Napalys	7cc0634f57	Added createProcStatement as potential sql sink.	2025-03-25 14:50:38 +01:00
Napalys	0285cb6c7a	Added @sap/hdbext.loadProccedure as sql sink.	2025-03-25 14:48:40 +01:00
Napalys	e595def8b0	Modeled execute as potential hana's sink.	2025-03-25 14:44:37 +01:00
Napalys	d28af9508a	Added sink models for hana's client prepare function.	2025-03-25 14:42:27 +01:00
Napalys	9229962096	Add sink model for SQL injection detection in exec clients.	2025-03-25 14:36:13 +01:00
Napalys	032cfc134f	Added test cases for hana clients.	2025-03-25 14:29:06 +01:00
Napalys Klicius	0689cf7f5e	Update javascript/ql/lib/ext/axios.model.yml ... Co-authored-by: Asger F <asgerf@github.com>	2025-03-25 10:56:01 +01:00
Napalys	1ee3fde214	Added support for axios.interceptors.response.	2025-03-25 10:55:34 +01:00
Napalys	20bb831ce9	Added test case for axios.interceptors.response with missing alert.	2025-03-25 10:55:14 +01:00
Napalys	10498bbaa4	Added support for axios.interceptors.request.	2025-03-25 10:54:56 +01:00
Napalys	ea181e4173	Added test case for axios.interceptors.request	2025-03-25 10:54:17 +01:00
Napalys	056bf4fde7	Added test case with inheretence.	2025-03-20 13:08:56 +01:00
Napalys	cb18408502	Added data as model for ApolloServer.	2025-03-19 13:36:06 +01:00
Napalys	23fdc3534f	Added test case @apollo/server with SSRF.	2025-03-19 13:34:27 +01:00
Asger F	1324c11044	Merge pull request #19012 from asgerf/js/api-graph-array-element ... JS: Make API graphs use steps from summaries	2025-03-18 18:03:43 +01:00
Napalys Klicius	749a0560b4	Merge pull request #19027 from Napalys/js/escape ... JS: Add support for `escape`	2025-03-17 10:48:44 +01:00
Asger F	4c1c0b79a6	JS: Make API-graphs use Content internally, and use steps from flow summaries	2025-03-14 23:08:16 +01:00
Napalys	4a691b778b	Added escape as UriEncodingSanitizer	2025-03-14 14:53:21 +01:00
Napalys	37e02e4261	Added escape as StringManipulationTaintStep.	2025-03-14 14:49:45 +01:00
Napalys	933f3c6f77	Refactor Tanstack integration: remove Tanstack framework and added model as data for it instead.	2025-03-14 13:52:05 +01:00
Napalys	dc262236f4	Enhance taint tracking by including escape and unescape in TaintedPath customizations.	2025-03-14 11:43:22 +01:00
Napalys	c4b717b86c	Added test case for escape.	2025-03-14 11:40:23 +01:00
Napalys	66737402c2	Updated test ouput with fixes from main.	2025-03-14 10:50:10 +01:00
Napalys Klicius	908f48a22f	Merge branch 'main' into js/vue_tanstack_model	2025-03-14 10:45:42 +01:00
Napalys	de5c7efd63	Added test case for unescape.	2025-03-13 13:47:42 +01:00