11702 Commits

Author	SHA1	Message	Date
Napalys	5243f90c90	Brought back old methods and marked them as deprecated	2025-04-09 14:56:24 +02:00
Napalys	5ec71ab9af	Added change note	2025-04-09 14:42:34 +02:00
Napalys	ce2fc25cdb	Added make-dir model as data	2025-04-09 14:42:29 +02:00
Napalys	674f40b35f	Added test cases for make-dir package.	2025-04-09 14:41:12 +02:00
Napalys Klicius	2dca95af92	Update javascript/ql/lib/change-notes/2025-04-07-websocket.md ... Co-authored-by: Asger F <asgerf@github.com>	2025-04-09 14:26:00 +02:00
Napalys	0c52b5ad95	Added summary flow for StringFromCharCode	2025-04-09 14:24:43 +02:00
Napalys Klicius	f02783a9c6	Merge pull request #19210 from Napalys/js/mkdirp ... JS: Modeling of `mkdirp` functions	2025-04-09 13:43:37 +02:00
Napalys	a3e4e62eac	Removed taint from ArrayBuffer constructor as it accepts length	2025-04-09 13:27:13 +02:00
Napalys	4bc3e9e736	Addressed comments ... Co-authored-by: Asgerf <asgerf@github.com>	2025-04-09 12:31:45 +02:00
Asger F	da7d6d3346	JS: Change note	2025-04-09 11:28:21 +02:00
Napalys	4a4d78bbde	Added change note	2025-04-08 08:12:42 +02:00
Napalys	b8802a29f4	Added open package model as data.	2025-04-08 08:12:30 +02:00
Napalys	df89739085	Added test cases for open package.	2025-04-08 08:10:10 +02:00
Napalys	873db7c121	Added change note	2025-04-07 18:15:24 +02:00
Napalys	b97c61864e	Add flow summaries and entry points for TextDecoder	2025-04-07 18:15:19 +02:00
Napalys	f28478e876	Add test cases from TypedArrays to strings.	2025-04-07 18:13:52 +02:00
Napalys	f4277204b7	Add flow summaries and entry points for ArrayBuffer and SharedArrayBuffer	2025-04-07 18:12:35 +02:00
Napalys	0e099474c5	Added test cases for ArrayBuffer and SharedArrayBuffer	2025-04-07 18:07:54 +02:00
Napalys	ff07ec8d8c	Add flow summaries for TypedArray methods set and subarray	2025-04-07 18:06:40 +02:00
Napalys	d689a55229	Added test cases for TypedArray methods	2025-04-07 15:15:29 +02:00
Napalys	e23ff9cf3e	Add TypedArrays flow summaries for Uint8Array and buffer property	2025-04-07 15:15:24 +02:00
Napalys	93882263f9	Added test case for Uint8Array and TypedArray.prototype.buffer	2025-04-07 12:46:19 +02:00
Napalys	c4fa417680	Added change note	2025-04-07 12:11:33 +02:00
Napalys	6fb5376c5f	Refactor ReceivedItemAsRemoteFlow to handle data from both client and server WebSocket sources	2025-04-07 11:44:40 +02:00
Napalys	6bcfd8c91d	Updated getAServer with API graphs.	2025-04-04 12:31:29 +02:00
Napalys	c5860e92ec	Updated WebSocketReceiveNode to match bind functions.	2025-04-04 12:28:53 +02:00
Napalys	4b7a9cd399	Added test case with bind.	2025-04-04 12:26:58 +02:00
Napalys	49194b0340	Updated WebSocketReceiveNode with API graphs.	2025-04-04 12:26:52 +02:00
Napalys	0dbf951291	Updated ClientSocket and SendNode with API graphs.	2025-04-04 09:14:54 +02:00
Napalys	455ce59583	Added test cases with export of an instance.	2025-04-04 08:59:19 +02:00
Napalys	e16a20e69f	Updated SocketClass to use API Graphs.	2025-04-04 08:47:27 +02:00
Napalys	c7fad09664	Added test cases with custom exports/imports.	2025-04-04 08:33:26 +02:00
Napalys	a572ac60d2	Added inline test expectations for WebSocket	2025-04-04 08:22:48 +02:00
Asger F	14c5495b4c	JS: Use in SensitiveActions test as an example	2025-04-03 13:24:18 +02:00
Asger F	6c33013788	JS: Enable association with headers without needing a route handler ... Previously it was not possible to associate a ResponseSendArgument with its header definitions if they did not have the same route handler. But for calls like `new Response(body, { headers })` the headers are fairly obvious whereas the route handler is unnecessarily hard to find. So we use the direct and obvious association between 'body' and 'headers' in the call.	2025-04-03 11:08:10 +02:00
Asger F	db2720ea5b	JS: Initial model of Response	2025-04-03 11:08:05 +02:00
Napalys	0e7bff0f81	Added change note.	2025-04-03 10:45:17 +02:00
Napalys	04a39eb735	Removed old mkdirp modeling and replaced it with MaD.	2025-04-03 10:45:16 +02:00
Napalys	3fa24d6026	Add sink model for mkdirp and update tests for path injection alerts.	2025-04-03 10:45:14 +02:00
Napalys	533f1a93e2	JS: Added test cases for mkdirp.	2025-04-03 10:45:12 +02:00
Napalys Klicius	5c42c0ba4c	Merge pull request #19196 from Napalys/js/rimraf ... JS: Modeling of `rimraf` functions	2025-04-03 09:51:52 +02:00
Asger F	bb15f30ef6	Merge pull request #19192 from asgerf/js/name-resolution-independent-fixes ... JS: Some preliminary fixes from name resolution branch	2025-04-03 09:36:02 +02:00
Jon Janego	d8ef4fc25d	Update javascript/ql/src/Expressions/ExprHasNoEffect.ql ... Co-authored-by: Napalys Klicius <napalys@github.com>	2025-04-02 10:22:27 -05:00
Asger F	6c3bc941c5	Merge branch 'main' into js/name-resolution-independent-fixes	2025-04-02 14:15:44 +02:00
Asger F	2c40359143	JS: Change note	2025-04-02 14:12:07 +02:00
Asger F	30a9cd7c8a	JS: Include document as a DOM value	2025-04-02 14:09:52 +02:00
Asger F	9ebaac82cf	JS: Add tests for Response object sink	2025-04-02 13:47:18 +02:00
Napalys	390d9ffe66	Added change note	2025-04-02 12:50:53 +02:00
Napalys	b16b407f89	Add rimraf model and update tests for path injection vulnerabilities	2025-04-02 12:49:48 +02:00
Napalys	14999c19da	Added test cases for rimraf library.	2025-04-02 12:46:48 +02:00