Esben Sparre Andreasen
|
52d86471af
|
JS: whitelist another emptiness check for the type-confusion query
|
2019-04-08 09:52:27 +02:00 |
|
semmle-qlci
|
662ad4b2ca
|
Merge pull request #1205 from asger-semmle/prefix-sanitizer
Approved by esben-semmle
|
2019-04-08 08:29:04 +01:00 |
|
Asger F
|
50c2921625
|
TS: Use contextual typing for literals
|
2019-04-05 18:43:51 +01:00 |
|
Asger F
|
d7bfeeefd0
|
TS: add test case with nested literals
|
2019-04-05 18:40:24 +01:00 |
|
Rebecca Valentine
|
40e3a241a1
|
Revert "Update javascript/ql/src/semmle/javascript/Expr.qll"
This reverts commit 78407f85ee.
|
2019-04-05 09:47:56 -07:00 |
|
Max Schaefer
|
78407f85ee
|
Update javascript/ql/src/semmle/javascript/Expr.qll
Co-Authored-By: psygnisfive <psygnisfive@users.noreply.github.com>
|
2019-04-05 09:46:09 -07:00 |
|
Max Schaefer
|
280c334ab8
|
Update javascript/ql/src/semmle/javascript/Expr.qll
Co-Authored-By: psygnisfive <psygnisfive@users.noreply.github.com>
|
2019-04-05 09:45:53 -07:00 |
|
Asger F
|
80f413177a
|
Merge branch 'master' into shelljs
|
2019-04-05 14:44:32 +01:00 |
|
Asger F
|
e55330b820
|
JS: Fix flow through +=
|
2019-04-05 13:55:48 +01:00 |
|
semmle-qlci
|
063dbeeff3
|
Merge pull request #1198 from esben-semmle/js/more-express-route-handlers
Approved by xiemaisi
|
2019-04-05 09:47:51 +01:00 |
|
Rebecca Valentine
|
b7939029bf
|
removes bigint cases
|
2019-04-04 16:41:52 -07:00 |
|
Rebecca Valentine
|
5b87b85960
|
fixes comment language
|
2019-04-04 16:41:14 -07:00 |
|
Esben Sparre Andreasen
|
60ba74a210
|
JS: Express cleanup and generalization
|
2019-04-04 21:42:08 +02:00 |
|
Esben Sparre Andreasen
|
c94ca46366
|
JS: add more Express tests
|
2019-04-04 21:42:08 +02:00 |
|
Asger F
|
c38b8d81ca
|
JS: review comments
|
2019-04-04 14:43:11 +01:00 |
|
Asger F
|
d594e55a61
|
JS: Remove ShellJS::Instance for simplicity
|
2019-04-04 11:45:59 +01:00 |
|
Asger F
|
43f6b8fa70
|
JS: Add test
|
2019-04-04 11:44:56 +01:00 |
|
Asger F
|
3da76cb798
|
JS: add model of ShellJS
|
2019-04-04 11:44:56 +01:00 |
|
Rebecca Valentine
|
ec2e17f07a
|
adds whitelist and recursive cases, per PR change req
|
2019-04-03 10:06:02 -07:00 |
|
Asger F
|
3bc7371fd6
|
JS: be less conservative about incomplete nodes in prefix sanitizers
|
2019-04-03 15:20:03 +01:00 |
|
Esben Sparre Andreasen
|
3c608fe11e
|
Merge branch 'master' into js/improve-createServer
|
2019-04-03 12:37:33 +02:00 |
|
semmle-qlci
|
1da828fa80
|
Merge pull request #1195 from esben-semmle/js/firebase-express-requests
Approved by xiemaisi
|
2019-04-03 11:36:02 +01:00 |
|
Esben Sparre Andreasen
|
f23a5a5fee
|
JS: model firebase-functions/https.onRequest
|
2019-04-03 08:01:45 +02:00 |
|
Esben Sparre Andreasen
|
0b733b4f23
|
JS: treat the last argument to https.createServer as a route handler
|
2019-04-02 14:38:31 +02:00 |
|
semmle-qlci
|
4ec2df6bad
|
Merge pull request #1179 from asger-semmle/js-windoc
Approved by xiemaisi
|
2019-04-02 11:21:07 +01:00 |
|
semmle-qlci
|
02f4695a5b
|
Merge pull request #1152 from esben-semmle/js/koa-improvements
Approved by xiemaisi
|
2019-04-02 08:51:19 +01:00 |
|
semmle-qlci
|
54b4e59d12
|
Merge pull request #1182 from esben-semmle/js/sourcenode-regexp-literals
Approved by xiemaisi
|
2019-04-01 21:58:58 +01:00 |
|
Esben Sparre Andreasen
|
2622fc64db
|
JS: autoformat
|
2019-04-01 22:55:17 +02:00 |
|
Esben Sparre Andreasen
|
7fec005806
|
JS: use DataFlow::SourceNode in three locations in Koa
|
2019-04-01 22:55:17 +02:00 |
|
Esben Sparre Andreasen
|
919eed6630
|
JS: add koa tests
|
2019-04-01 22:55:17 +02:00 |
|
Esben Sparre Andreasen
|
00c8387bb3
|
JS: model Koa redirects
|
2019-04-01 22:55:17 +02:00 |
|
Esben Sparre Andreasen
|
298dbe13c4
|
JS: improve Koa model to account for aliases on the context object
|
2019-04-01 22:49:00 +02:00 |
|
Esben Sparre Andreasen
|
0e01988622
|
JS: add koa tests
|
2019-04-01 22:49:00 +02:00 |
|
Rebecca Valentine
|
2b6869fff3
|
updates expecteds to reflect changes in the test file
|
2019-04-01 11:21:21 -07:00 |
|
Rebecca Valentine
|
0d0adada42
|
fixes tests and adds test results to expecteds
|
2019-04-01 11:13:04 -07:00 |
|
Rebecca Valentine
|
a16b5d36a8
|
adds tests
|
2019-04-01 10:40:51 -07:00 |
|
Rebecca Valentine
|
5bf7efeed3
|
fixes name and autoformats
|
2019-04-01 10:39:06 -07:00 |
|
Rebecca Valentine
|
7d183eab0b
|
moves functionality over to Expr method per PR change requests
|
2019-04-01 10:22:49 -07:00 |
|
semmle-qlci
|
a4de82de06
|
Merge pull request #1185 from xiemaisi/js/improve-amd-imports
Approved by asger-semmle
|
2019-04-01 16:30:47 +01:00 |
|
semmle-qlci
|
a7d9a50dcf
|
Merge pull request #1176 from xiemaisi/js/fix-socket-io-type-tracking
Approved by asger-semmle
|
2019-04-01 13:57:13 +01:00 |
|
Esben Sparre Andreasen
|
364ba1b4ac
|
JS: use RegExpLiteral as a SourceNode
|
2019-04-01 09:19:25 +02:00 |
|
Esben Sparre Andreasen
|
7923c9d77c
|
JS: add tests for missing flow of regular expressions
|
2019-04-01 09:19:25 +02:00 |
|
Esben Sparre Andreasen
|
42d3012f81
|
JS: let RegExpLiteral be a DataFlow::SourceNode
|
2019-04-01 09:19:25 +02:00 |
|
semmle-qlci
|
ed0ef36427
|
Merge pull request #1035 from asger-semmle/firebase
Approved by xiemaisi
|
2019-03-29 13:44:02 +00:00 |
|
Asger F
|
4c99c01c1a
|
JS: review comments
|
2019-03-29 13:42:22 +00:00 |
|
Max Schaefer
|
e4c4f7a5ae
|
Update javascript/ql/src/semmle/javascript/DOM.qll
Co-Authored-By: asger-semmle <42069257+asger-semmle@users.noreply.github.com>
|
2019-03-29 13:42:00 +00:00 |
|
Max Schaefer
|
10479eaf4d
|
Update javascript/ql/src/semmle/javascript/DOM.qll
Co-Authored-By: asger-semmle <42069257+asger-semmle@users.noreply.github.com>
|
2019-03-29 13:40:59 +00:00 |
|
Max Schaefer
|
a0b06c267c
|
Update javascript/ql/src/semmle/javascript/DOM.qll
Co-Authored-By: asger-semmle <42069257+asger-semmle@users.noreply.github.com>
|
2019-03-29 13:40:46 +00:00 |
|
Max Schaefer
|
62c895de3e
|
JavaScript: Introduce Type(Back)Tracker::continue predicate.
|
2019-03-29 11:45:18 +00:00 |
|
Asger F
|
e90a889f76
|
JS: Refactor DOM libs to use DataFlow more
|
2019-03-29 11:15:30 +00:00 |
|