4992 Commits

Author	SHA1	Message	Date
Behrang Fouladi Azarnaminy	02047ea260	Edit .expected file	2018-09-10 10:27:29 -07:00
Behrang Fouladi	302e271a79	Update EnablingNodeIntegration.expected ... Change EOL to unix format	2018-09-07 09:52:52 -07:00
Esben Sparre Andreasen	3d3b7b0254	JS: fix typo in test case	2018-09-06 22:54:07 +02:00
Behrang Fouladi Azarnaminy	9179701248	JavaScript: Add query for Node.js integration in Electron framework	2018-09-06 11:38:08 -07:00
semmle-qlci	62e9946fe2	Merge pull request #150 from asger-semmle/ts-asi-bug ... Approved by xiemaisi	2018-09-05 21:22:29 +01:00
Aditya Sharad	f27945216f	Merge rc/1.18 into master.	2018-09-05 15:32:30 +01:00
Esben Sparre Andreasen	f63a3b3f39	JS: add missing abstract modifier	2018-09-05 09:20:45 +02:00
Esben Sparre Andreasen	2306afdebf	JS: use extensible architecture for Electron- and NodeClientRequest	2018-09-05 09:20:45 +02:00
Esben Sparre Andreasen	0da14fccbd	JS: renaming UrlRequests.qll -> ClientRequests.qll	2018-09-05 09:20:45 +02:00
Esben Sparre Andreasen	6d78350fee	JS: s/URLRequest/ClientRequest, merge with NodeJSLib::ClientRequest	2018-09-05 09:20:45 +02:00
Esben Sparre Andreasen	b9d825b379	JS: better matching of String.prototype.search in js/regex-injection	2018-09-05 08:35:00 +02:00
Asger F	7bd53e72dc	TypeScript: fix alerts in ambient code	2018-09-04 13:55:48 +01:00
Asger F	003b600e24	TypeScript: disable queries that rely on token information	2018-09-04 13:18:37 +01:00
Esben Sparre Andreasen	f5a6af54e6	JS: add security query: js/request-forgery	2018-09-04 09:25:42 +02:00
Esben Sparre Andreasen	2104cf55e3	JS: add models of URL requests	2018-09-04 09:25:42 +02:00
Max Schaefer	759d98661c	Merge pull request #117 from esben-semmle/js/push-sort-taint-steps ... JS: support `push` and `sort` taint steps for arrays	2018-09-03 09:20:35 +01:00
Max Schaefer	20bff709b1	Merge pull request #136 from esben-semmle/js/composed-function-taint ... JS: model composed functions (RC)	2018-09-03 08:18:20 +01:00
Max Schaefer	7e3adec789	Merge pull request #135 from esben-semmle/js/pick-get-taint-steps ... JS: model property projection calls (RC)	2018-09-03 08:17:42 +01:00
Max Schaefer	69ca103e06	Merge pull request #115 from esben-semmle/js/composed-function-taint ... JS: model composed functions	2018-08-31 08:14:18 +01:00
Max Schaefer	7e18426fde	Merge pull request #113 from esben-semmle/js/pick-get-taint-steps ... JS: model property projection calls	2018-08-31 08:13:40 +01:00
Esben Sparre Andreasen	90b3902244	JS: add a taint step for property projection	2018-08-30 09:39:02 +02:00
Esben Sparre Andreasen	df97132519	JS: add model for property projection	2018-08-30 09:39:02 +02:00
Esben Sparre Andreasen	86ab9adb06	JS: support push and sort taint steps for arrays	2018-08-30 09:14:06 +02:00
Esben Sparre Andreasen	dc72788746	JS: add a model of some function composition libraries	2018-08-30 08:17:01 +02:00
semmle-qlci	d22a65a66b	Merge pull request #108 from esben-semmle/js/classify-generated-data-files ... Approved by xiemaisi	2018-08-29 14:15:55 +01:00
Esben Sparre Andreasen	02d56306c9	JS: classify generated data files	2018-08-27 15:06:00 +02:00
Dave Bartolomeo	d920fc7d94	Force LF line endings for .ql, .qll, and .qlref files	2018-08-24 11:58:58 -07:00
semmle-qlci	55ceb9be8b	Merge pull request #91 from esben-semmle/js/additional-indexof-sanitizers ... Approved by xiemaisi	2018-08-24 08:37:41 +01:00
Max Schaefer	2187b0c245	Merge pull request #89 from esben-semmle/js/sharpen-type-confusion ... JS: remove emptiness checks from the type confusion `x.length` sinks	2018-08-23 08:04:09 +01:00
Esben Sparre Andreasen	20b48a2d24	JS: support relational indexof comparison sanitizers	2018-08-22 15:58:47 +02:00
Esben Sparre Andreasen	218c0cb51a	JS: address review comments	2018-08-22 13:54:07 +02:00
Esben Sparre Andreasen	fef257b1ec	JS: remove emptiness checks from the type confusion x.length sinks	2018-08-22 13:25:22 +02:00
Asger F	35aa2e6fbb	TypeScript: update test output	2018-08-22 10:18:38 +01:00
Asger F	4eeaf63a3a	TypeScript: update related test output	2018-08-22 10:18:38 +01:00
Asger F	d26aa04642	TypeScript: support optional and rest elements in static tuple type	2018-08-22 10:18:38 +01:00
Asger F	96005d2147	TypeScript: support unknown static type	2018-08-22 10:18:38 +01:00
Asger F	9a9bbac99e	TypeScript: support syntax for unknown types	2018-08-22 10:18:38 +01:00
Asger F	4a9eb0fd3f	TypeScript: Add tests for OptionalTypeExpr and RestTypeExpr	2018-08-22 10:18:38 +01:00
Asger F	241ce10da4	TypeScript: support syntax for rest elements in tuple types	2018-08-22 10:18:38 +01:00
Asger F	204b2a3002	TypeScript: support syntax for optional tuple type elements	2018-08-22 10:18:38 +01:00
semmle-qlci	7e7e30c01c	Merge pull request #73 from esben-semmle/js/cleartext-logging-query ... Approved by xiemaisi	2018-08-22 08:04:36 +01:00
semmle-qlci	7661a98909	Merge pull request #68 from esben-semmle/determinate-1-cfa-type-inference ... Approved by xiemaisi	2018-08-22 08:02:27 +01:00
Esben Sparre Andreasen	2b9f5c3fa2	JS: remove check for test-environment in js/clear-text-logging	2018-08-21 22:32:52 +02:00
Esben Sparre Andreasen	3636708d30	JS: extract and expose StringConcatenationTaintStep in TaintTracking	2018-08-21 22:32:52 +02:00
Esben Sparre Andreasen	6f5fb2a9fe	JS: update queries and tests for improved type inference	2018-08-21 22:07:38 +02:00
Esben Sparre Andreasen	3692667af2	JS: improve inter-procedural type inference for "local functions"	2018-08-21 22:07:11 +02:00
Esben Sparre Andreasen	eb356d8d0b	Merge branch 'master' into js/format-string-taint-step	2018-08-21 15:47:31 +02:00
semmle-qlci	6969466202	Merge pull request #83 from esben-semmle/js/bitwise-indexof-sanitizer ... Approved by xiemaisi	2018-08-21 14:17:20 +01:00
semmle-qlci	a01a453045	Merge pull request #78 from xiemaisi/js/remove-old-test ... Approved by esben-semmle	2018-08-21 09:04:52 +01:00
Esben Sparre Andreasen	bbdf6b0f1d	JS: mark PrintfStyleCall as a taint step	2018-08-21 09:02:35 +02:00