4844 Commits

Author	SHA1	Message	Date
Asger F	cf5450dbd5	JS: Port XssThroughDom	2023-10-13 13:15:03 +02:00
Asger F	5f05232e02	JS: Port StoredXss	2023-10-13 13:15:03 +02:00
Asger F	46b90e51fc	JS: Port ReflectedXss	2023-10-13 13:15:03 +02:00
Asger F	e091fdefa4	JS: Port DomBasedXss	2023-10-13 13:15:03 +02:00
Asger F	547a8a958a	JS: Port SqlInjection	2023-10-13 13:15:03 +02:00
Asger F	65e9706c8e	JS: Port TaintedPath	2023-10-13 13:15:03 +02:00
Asger F	fcfab5238e	JS: Port CodeInjection	2023-10-13 13:15:03 +02:00
Asger F	17233a6749	JS: Port CommandInjection	2023-10-13 13:15:03 +02:00
Asger F	449ec72dbe	JS: Port experimental queries	2023-10-13 13:15:03 +02:00
Arthur Baars	a9a21aa313	Rename DynamicImportExpr::getImport{Attributes => Options}	2023-10-12 13:00:39 +02:00
Arthur Baars	a1c1f7b910	Add tests for deprecated 'assert' syntax	2023-10-12 13:00:39 +02:00
Arthur Baars	f38d2e1b89	Replace 'assert' with 'with' in QL test files	2023-10-12 13:00:39 +02:00
Arthur Baars	c28004f2a6	Rename 'getImportAssertion()' to 'getImportAttributes()' in QL library	2023-10-12 13:00:39 +02:00
amammad	3899f2cdf3	upgrade execa scripts	2023-10-12 10:44:57 +02:00
amammad	b24c6fd579	for demonstration	2023-10-11 17:34:33 +02:00
amammad	4cd3618dcd	Merge branch 'main' into amammad-js-CodeInjection_execa	2023-10-11 13:27:26 +02:00
Maiky	c0e6d7c049	Merge branch 'github:main' into maikypedia/javascript-cors	2023-10-11 12:20:42 +02:00
amammad	32859eb057	move to experimental	2023-10-10 22:46:44 +02:00
amammad	6f73e9c3ba	revert for in additional steps	2023-10-10 22:12:37 +02:00
amammad	242f7e1c53	update pg :)	2023-10-10 11:42:32 +02:00
amammad	18edef6ea4	add better-sqlite3 tests	2023-10-10 11:20:17 +02:00
amammad	00b6e1f0b0	fix tests	2023-10-08 11:03:19 +02:00
amammad	aff6f00450	comments improvement,separate module file, fix tests	2023-10-07 12:02:39 +02:00
amammad	5a49f6bb9b	fix tests	2023-10-06 22:10:57 +02:00
erik-krogh	7ca0996912	add a taint-tracking tests for calls to tagged template strings	2023-10-06 21:39:42 +02:00
erik-krogh	9b6501787a	add API-graph test for the new tagged template calls	2023-10-06 21:25:34 +02:00
erik-krogh	18e6a5491c	recognize tagged templates as DataFlow::CallNode	2023-10-06 21:14:00 +02:00
amammad	e45268cd4d	improve and fix bugs and add Form Flow Sources test files	2023-10-06 21:01:42 +02:00
erik-krogh	951ed01d6b	combine the library-tests/CallGraphs/FullTest tests into one file	2023-10-06 20:57:09 +02:00
amammad	5bc21a6178	delete old tests	2023-10-06 16:09:05 +02:00
amammad	7d961e1af2	do review improvements	2023-10-06 16:07:10 +02:00
Asger F	162c477236	JS: Add AmdModuleDefinition::Range	2023-10-04 20:38:37 +02:00
Maiky	816eebbb51	Add .qhelp and apply some review changes	2023-10-02 18:05:39 +02:00
Maiky	e171123589	Add initial query for CWE-942	2023-09-29 18:25:58 +02:00
amammad	58f4cd77dc	add TypeORM to javascript.qll file ... add tests improvement on comments	2023-09-29 01:23:22 +10:00
amammad	921198ed30	add separate query for sinks that accepts data: URL	2023-09-28 20:33:38 +10:00
amammad	2c74dc23c9	add second order command execution sinks to tests	2023-09-22 20:00:36 +10:00
amammad	344869f0d7	change commandExecution sink to CodeInjection sink	2023-09-22 19:37:17 +10:00
amammad	a20ca78599	V1	2023-09-22 19:23:34 +10:00
amammad	f1a7f0a7e8	V1	2023-09-22 19:21:41 +10:00
amammad	06114d91d8	V1	2023-09-22 19:19:52 +10:00
erik-krogh	fdd349c1a3	fix out of bounds string access in isUsingDecl	2023-09-13 20:11:21 +02:00
Max Schaefer	e722e3288f	Merge pull request #13771 from github/max-schaefer/server-side-url-redirect-help ... JavaScript: Improve query help for `js/server-side-unvalidated-url-redirection`.	2023-09-13 13:20:48 +01:00
Max Schaefer	a9e81672f0	Make suggestion to replace example.com more explicit.	2023-09-12 16:54:05 +01:00
Max Schaefer	a02f373e79	Use better sanitiser.	2023-09-06 14:06:16 +01:00
erik-krogh	984795ee46	fix off-by-one	2023-08-30 13:29:23 +02:00
erik-krogh	2643ab3dbf	using is not a keyword	2023-08-30 08:44:59 +02:00
amammad	4f04dc8f6e	add test cases	2023-08-29 21:34:02 +10:00
erik-krogh	78487d437f	add test for await using in TypeScript	2023-08-28 13:30:35 +02:00
erik-krogh	be2712698b	add support for await using in the JS parser	2023-08-28 09:34:13 +02:00