4992 Commits

Author	SHA1	Message	Date
Asger F	c8817d9667	JS: Parse with proper locations	2025-03-27 11:51:23 +01:00
Asger F	6868f66108	JS: Restrict size of hasNameParts ... Test updates look OK. Some intermediate results are omitted but the qualified name of the final type names are still present.	2025-03-27 11:51:20 +01:00
Asger F	328bf753b4	JS: Benign test updates	2025-03-27 11:51:17 +01:00
Napalys	200bf391ce	Enhance NodeJSLib data flow handling through await.	2025-03-26 14:24:52 +01:00
Napalys	762ca2f8f5	Added test case with async readFile, currently not flagged.	2025-03-26 14:21:44 +01:00
Napalys	ae645e49ba	Added support for @hapi/hapi server.	2025-03-26 11:41:11 +01:00
Napalys	649b4e07e2	Added test cases for @hapi/hapi	2025-03-26 11:35:58 +01:00
Napalys	4cdc40d115	Added SQL injection detection for exec method embeded Express client from hdbext.	2025-03-25 18:39:54 +01:00
Napalys	7cc0634f57	Added createProcStatement as potential sql sink.	2025-03-25 14:50:38 +01:00
Napalys	0285cb6c7a	Added @sap/hdbext.loadProccedure as sql sink.	2025-03-25 14:48:40 +01:00
Napalys	e595def8b0	Modeled execute as potential hana's sink.	2025-03-25 14:44:37 +01:00
Napalys	d28af9508a	Added sink models for hana's client prepare function.	2025-03-25 14:42:27 +01:00
Napalys	9229962096	Add sink model for SQL injection detection in exec clients.	2025-03-25 14:36:13 +01:00
Napalys	032cfc134f	Added test cases for hana clients.	2025-03-25 14:29:06 +01:00
Napalys Klicius	0689cf7f5e	Update javascript/ql/lib/ext/axios.model.yml ... Co-authored-by: Asger F <asgerf@github.com>	2025-03-25 10:56:01 +01:00
Napalys	1ee3fde214	Added support for axios.interceptors.response.	2025-03-25 10:55:34 +01:00
Napalys	20bb831ce9	Added test case for axios.interceptors.response with missing alert.	2025-03-25 10:55:14 +01:00
Napalys	10498bbaa4	Added support for axios.interceptors.request.	2025-03-25 10:54:56 +01:00
Napalys	ea181e4173	Added test case for axios.interceptors.request	2025-03-25 10:54:17 +01:00
Napalys	a3c84d9feb	Added support for axios.create.	2025-03-25 10:45:09 +01:00
Napalys	8f2adb6543	Added test case for create.	2025-03-25 10:44:15 +01:00
Napalys	c0d848cdf1	Added support for getUri.	2025-03-25 10:43:54 +01:00
Napalys	f48a362d71	Added support for patchForm.	2025-03-25 10:42:57 +01:00
Napalys	7fe943d8b2	Added support for putForm.	2025-03-25 10:42:04 +01:00
Napalys	69fe251eac	Add support for axios.postForm in ClientRequest.	2025-03-25 10:41:08 +01:00
Napalys	e79f4602b5	Added test for axios methods. ... In particular for `postForm` `putForm` `patchForm` `getUri`.	2025-03-25 10:40:00 +01:00
Napalys	cb14b4381e	Applied copilot suggestions.	2025-03-24 14:05:28 +01:00
Napalys	2d6f5d1da4	Refactor ClientRequest to introduce GotInstance classes for improved handling of got instances and options retrieval.	2025-03-24 13:20:09 +01:00
Napalys	f43510c9aa	Added support for paginate.	2025-03-21 15:03:23 +01:00
Napalys	63193fa91c	Improve URL handling in ClientRequest for extend() and Options	2025-03-21 15:02:34 +01:00
Napalys	99efb610d4	Enhance URL handling in ClientRequest for got Options	2025-03-21 15:01:43 +01:00
Napalys	b33f760765	Manage chain calls of extend.	2025-03-21 15:00:39 +01:00
Napalys	a58c4eb652	Added additional test cases for got package.	2025-03-21 15:00:35 +01:00
Napalys Klicius	7bd1c4d2ae	Merge pull request #19060 from Napalys/js/apollo-server ... JS: model `ApolloServer`	2025-03-21 10:00:31 +01:00
Napalys Klicius	803aacf9f0	Merge pull request #19068 from Napalys/js/superagent ... JS: `superagent` modeling	2025-03-21 09:15:31 +01:00
Napalys	d61d038b9b	Refactored SuperAgentUrlRequest to use API graph.	2025-03-20 18:17:28 +01:00
Napalys	401c6ea0f6	Added test case which is not detected by dataflow.	2025-03-20 18:17:27 +01:00
Napalys	9e787555df	Fixed typo in the test cases.	2025-03-20 13:25:36 +01:00
Napalys	056bf4fde7	Added test case with inheretence.	2025-03-20 13:08:56 +01:00
Napalys Klicius	221cc1977d	Merge branch 'main' into js/underscore-string	2025-03-20 12:26:00 +01:00
Napalys	f4ca2dc1f3	Restricted taint to array elements.	2025-03-20 12:24:49 +01:00
Napalys	752f02f04d	Fixed map modeling and added test cases.	2025-03-20 12:18:28 +01:00
Napalys	539e2ef558	Added support for superagent.agent().	2025-03-20 12:09:31 +01:00
Napalys	cdf4f5395f	Enhance SuperAgent URL request handling for both method calls and direct calls	2025-03-20 12:09:26 +01:00
Napalys	2e1734eeba	Added support for del function in superagent	2025-03-20 12:01:18 +01:00
Napalys	e5c179d5a4	Added test cases for superagent	2025-03-19 17:44:22 +01:00
Napalys	cb18408502	Added data as model for ApolloServer.	2025-03-19 13:36:06 +01:00
Napalys	23fdc3534f	Added test case @apollo/server with SSRF.	2025-03-19 13:34:27 +01:00
Asger F	1324c11044	Merge pull request #19012 from asgerf/js/api-graph-array-element ... JS: Make API graphs use steps from summaries	2025-03-18 18:03:43 +01:00
Napalys	922a07d01e	Added underscore.string clearsContent. ... Co-authored-by: Asgerf <asgerf@github.com>	2025-03-18 12:58:19 +01:00