Commit Graph

11726 Commits

Author SHA1 Message Date
Asger F
d83f152f39 JS: Address review comments 2019-08-07 10:53:17 +01:00
Asger F
5e87d5c751 JS: Update syntactic heuristics 2019-08-07 10:53:17 +01:00
Asger F
f173e3024a JS: Add getConstantStringParts() and HTML concat node 2019-08-07 10:53:17 +01:00
Asger F
f101944c92 JS: Expand on the StringOps::Concatenation API 2019-08-07 10:53:17 +01:00
Asger F
687534e647 JS: Address review comments 2019-08-07 10:47:08 +01:00
Asger F
41bdd8a7cc JS: Fix qldoc indentation 2019-08-07 10:38:22 +01:00
semmle-qlci
d0a761477b Merge pull request #1704 from xiemaisi/js/fix-export-default-examples
Approved by asger-semmle
2019-08-07 09:34:36 +01:00
Asger F
2df0b08b26 JS: Add test with header access 2019-08-06 15:43:39 +01:00
Asger F
075e47dce2 JS: Add header/headers response type 2019-08-06 15:42:22 +01:00
Asger F
ea4bfda2d1 JS: Add predicate that disappeared during conflict resolution 2019-08-06 15:33:33 +01:00
Asger F
c4006be0e8 JS: Add more axios tests 2019-08-06 15:28:53 +01:00
Asger F
af7b942eec JS: Add newline in test 2019-08-06 15:28:53 +01:00
Asger F
4fb3fd992d JS: Address comments 2019-08-06 15:28:53 +01:00
Asger F
55ab7e6abf JS: Add qldoc 2019-08-06 15:28:53 +01:00
Asger F
64f1260220 JS: Rename getResponseFormat => getResponseType 2019-08-06 15:28:53 +01:00
Asger F
7fb6615970 JS: Test for XhrIo 2019-08-06 15:28:53 +01:00
Asger F
4eb072a376 JS: Test for 'superagent' package 2019-08-06 15:28:53 +01:00
Asger F
ce4f098625 JS: Test for 'got' package 2019-08-06 15:28:52 +01:00
Asger F
f88a7162c5 JS: Test for fetch 2019-08-06 15:28:52 +01:00
Asger F
b8c1714ba9 JS: Test for 'axios' package 2019-08-06 15:28:52 +01:00
Asger F
4f6b6d12e0 JS: Test for 'request' package 2019-08-06 15:28:52 +01:00
Asger F
93be5ab715 JS: Test for XMLHttpRequest 2019-08-06 15:28:52 +01:00
Asger F
250a5997e2 JS: Add test query for getAResponseDataNode 2019-08-06 15:28:52 +01:00
Asger F
d1179be757 JS: Move ClientRequest tests into shared ql file 2019-08-06 15:28:52 +01:00
Asger F
ea507db638 JS: Fix a qldoc comment 2019-08-06 15:28:52 +01:00
Asger F
a697a1b700 JS: Fix indentation of qldoc comment 2019-08-06 15:28:52 +01:00
Asger F
d3e796decc JS: Add caution to XMLHttpRequest class 2019-08-06 15:28:52 +01:00
Asger F
02fba482fa JS: Bugfixes 2019-08-06 15:28:52 +01:00
Asger F
0950b4d0f7 JS: Move ClientRequest classes into a module and publish them 2019-08-06 15:28:49 +01:00
Asger F
55ad3bb65f JS: add ClientRequest.getAResponseDataNode() 2019-08-06 15:28:13 +01:00
semmle-qlci
327d5acdcf Merge pull request #1686 from asger-semmle/lvalue-node
Approved by xiemaisi
2019-08-06 14:43:46 +01:00
Max Schaefer
82e15ada5f JavaScript: Fix export default examples.
Only hoistable (function) declarations and class declarations can be default-exported (https://www.ecma-international.org/ecma-262/10.0/index.html#sec-exports).
2019-08-06 14:40:53 +01:00
semmle-qlci
77eac2c980 Merge pull request #1687 from esben-semmle/js/hide-conflicting-html-attribute
Approved by xiemaisi
2019-08-06 11:38:33 +01:00
semmle-qlci
5de6da4ee4 Merge pull request #1697 from esben-semmle/js/fix-missing-this-in-method
Approved by xiemaisi
2019-08-06 11:38:11 +01:00
Max Schaefer
5026a55c25 JavaScript: Fix a Cartesian product. 2019-08-05 15:42:20 +01:00
Max Schaefer
d230921b89 JavaScript: Remove two unused fields. 2019-08-05 15:41:55 +01:00
Esben Sparre Andreasen
bc2785d143 JS: add missing binding for this in BuiltinServiceCall 2019-08-05 14:10:21 +02:00
Esben Sparre Andreasen
bc296e74a1 JS: generalize internal AngularJS::BuiltinServiceCall to handle calls 2019-08-05 13:59:48 +02:00
Esben Sparre Andreasen
a652f754ee JS: rename internal AngularJS::ServiceMethodCall 2019-08-05 13:56:49 +02:00
semmle-qlci
f60af2cfba Merge pull request #1683 from asger-semmle/type-tracking-non-exp
Approved by xiemaisi
2019-08-05 11:06:53 +01:00
semmle-qlci
77ae2bc8b7 Merge pull request #1684 from asger-semmle/protopollution-qhelp
Approved by xiemaisi
2019-08-05 11:06:34 +01:00
Asger F
8bec2fe7bf JS: Address comments 2019-08-05 10:44:39 +01:00
Jonas Jensen
73d8bf38a9 Merge pull request #1680 from aschackmull/cookbook/autoformat
Cookbook examples: Autoformat
2019-08-05 10:24:56 +02:00
Esben Sparre Andreasen
c4eb258f5b JS: lower precision of js/conflicting-html-attribute 2019-08-05 09:22:10 +02:00
Asger F
5397da7579 JS: Handle implicit return in getImmediatePredecessor 2019-08-02 20:35:22 +01:00
Asger F
8e1893d0ed JS: Update range analysis to use getImmediatePredecessor 2019-08-02 20:35:22 +01:00
Asger F
9e949d0f44 JS: Add taint step through destructuring for-of loop 2019-08-02 20:35:21 +01:00
Asger F
de3c8bf711 JS: Introduce DataFlow::lvalueNode 2019-08-02 20:35:21 +01:00
semmle-qlci
d4e39a250d Merge pull request #1667 from xiemaisi/js/more-ranges
Approved by esben-semmle
2019-08-02 16:46:30 +01:00
Asger F
fcc51a8407 JS: Fix lodash version in proto pollution qhelp 2019-08-02 16:42:36 +01:00