semmle-qlci
57de628ab8
Merge pull request #650 from xiemaisi/js/nomagic-isDOMProperty
...
Approved by asger-semmle
2018-12-10 13:52:47 +00:00
Max Schaefer
e7df9b8b01
JavaScript: Avoid unhelpful magic.
2018-12-10 10:40:37 +00:00
semmle-qlci
1ca27e2c18
Merge pull request #647 from xiemaisi/js/fix-msita-perf
...
Approved by esben-semmle
2018-12-09 21:32:31 +00:00
Max Schaefer
74e70615ed
JavaScript: Fix performance regression in MixedStaticInstanceThisAccess.
2018-12-07 13:17:36 +00:00
Aditya Sharad
fcfab26267
Merge rc/1.19 into next.
2018-12-07 12:31:51 +00:00
semmle-qlci
9e73ed71b9
Merge pull request #623 from esben-semmle/js/incomplete-url-sanitization
...
Approved by mc-semmle
2018-12-06 20:46:37 +00:00
Esben Sparre Andreasen
4f53411397
JS: recognize HTTP URLs in js/incomplete-url-sanitization
2018-12-06 15:53:20 +01:00
Esben Sparre Andreasen
229eea00dc
JS: add query js/incomplete-url-substring-sanitization
2018-12-06 15:53:20 +01:00
semmle-qlci
3397533045
Merge pull request #628 from xiemaisi/js/setUnsafeHTML
...
Approved by esben-semmle
2018-12-06 13:58:52 +00:00
Esben Sparre Andreasen
45b207c21b
JS: introduce models of three cookie libraries
2018-12-06 14:53:22 +01:00
Esben Sparre Andreasen
28b4a78430
JS: introduce DOM::PersistentWebStorage
2018-12-06 14:53:22 +01:00
Esben Sparre Andreasen
7fb752784a
JS: introduce persistent read/write pairs as a taint step
2018-12-06 10:36:10 +01:00
Max Schaefer
ef347b3870
JavaScript: Teach Xss query about WinJS HTML injection functions.
2018-12-06 09:13:21 +00:00
semmle-qlci
bc91e0f53b
Merge pull request #624 from Semmle/xiemaisi-patch-2
...
Approved by esben-semmle
2018-12-06 08:04:37 +00:00
Sam Lanning
2ea148016c
JS: Fix syntax error in js/react/inconsistent-state-update example
2018-12-05 16:44:40 -08:00
Max Schaefer
13a9903c21
JavaScript: Remove redundant conjunct in MixedStaticInstanceThisAccess.
...
Minor cleanup, but might as well go into the release.
2018-12-05 15:11:32 +00:00
Max Schaefer
a1f210df67
JavaScript: Address review comments.
2018-12-05 14:10:06 +00:00
Max Schaefer
22502e7a10
JavaScript: Add query help for FileAccessToHttp query.
2018-12-05 13:12:52 +00:00
Max Schaefer
92c1e655dd
JavaScript: Add query help for HttpToFileAccess query.
2018-12-05 12:58:38 +00:00
Max Schaefer
7ee0ba36af
JavaScript: Fix expected test output.
2018-12-05 10:14:25 +00:00
Max Schaefer
3c00d4be6d
Merge pull request #607 from esben-semmle/js/more-react-methods
...
JS: model additional React component methods
2018-12-05 08:00:16 +00:00
Esben Sparre Andreasen
d63d838534
JS: add regression test for ODASA-7506
2018-12-04 22:22:46 +01:00
semmle-qlci
d05b11f00d
Merge pull request #587 from asger-semmle/incorrect-suffix-check
...
Approved by mc-semmle, xiemaisi
2018-12-04 16:18:42 +00:00
Aditya Sharad
3caf4e52a7
Merge rc/1.19 into next.
2018-12-04 12:39:41 +00:00
Asger F
7121a18eba
JS: address comments
2018-12-04 10:40:43 +00:00
Esben Sparre Andreasen
679db191f5
JS: move shared conjunct up
2018-12-04 10:55:24 +01:00
Esben Sparre Andreasen
a342fa36c6
JS: support React getSnapshotBeforeUpdate
2018-12-04 10:48:35 +01:00
Esben Sparre Andreasen
67b1487384
JS: support React shouldComponentUpdate
2018-12-04 10:48:35 +01:00
Esben Sparre Andreasen
417dac7ad6
JS: support React getDerivedStateFromProps
2018-12-04 10:48:35 +01:00
Esben Sparre Andreasen
9ff3d2ef1f
JS: introduce ReactComponent::getStaticMethod
2018-12-04 10:48:35 +01:00
Esben Sparre Andreasen
0d62191d84
JS: add more React tests
2018-12-04 10:48:35 +01:00
semmle-qlci
3d058a2895
Merge pull request #603 from xiemaisi/js/fix-inconsistent-new
...
Approved by asger-semmle, esben-semmle
2018-12-03 16:48:55 +00:00
semmle-qlci
b58c263fd0
Merge pull request #602 from esben-semmle/js/additional-route-handlers-from-context
...
Approved by xiemaisi
2018-12-03 14:31:10 +00:00
Max Schaefer
8627ddbe4b
JavaScript: Adjust alert message.
2018-12-03 12:38:00 +00:00
Asger F
1130d0c6f9
JS: add comment about arrays
2018-12-03 11:23:02 +00:00
Asger F
374f7ab65d
JS: address comments
2018-12-03 11:23:02 +00:00
Asger F
c4d7672ea7
JS: fix typo in method name
2018-12-03 11:23:02 +00:00
Asger F
0462eb4b50
JS: add IncorrectSuffixCheck query
2018-12-03 11:23:02 +00:00
Esben Sparre Andreasen
104eafec2f
JS: cleanup for all HTTP::RouteHandlerCandidates
2018-12-03 10:13:08 +01:00
Esben Sparre Andreasen
a3bd072590
JS: add Hapi::RouteHandlerCandidate
2018-12-03 09:22:21 +01:00
Esben Sparre Andreasen
fd489271b7
JS: refactor Hapi::RouteSetup
2018-12-03 09:22:21 +01:00
Max Schaefer
52b8a6bb56
Merge branch 'master' into js/invalid-entity-transcoding
2018-11-30 16:49:20 +00:00
Max Schaefer
3351650895
JavaScript: Make InconsistentNew give fewer results.
2018-11-30 16:13:46 +00:00
Max Schaefer
b17518a5eb
JavaScript: Refactor InconsistentNew to improve performance.
...
All the filtering is now done in `getALikelyCallee`, to which I have also added an additional parameter that improves the join in the `select` clause.
I've also simplified the alert message to no longer use `toString`, which isn't meant for alert messages anyway. (This is an old query.)
2018-11-30 15:40:45 +00:00
Max Schaefer
dfcf767090
Merge pull request #440 from asger-semmle/range-analysis
...
JS: Range analysis for dead code detection
2018-11-30 15:01:34 +00:00
semmle-qlci
dbeb2dfa0e
Merge pull request #585 from xiemaisi/js/join-order-fiddling
...
Approved by esben-semmle
2018-11-30 14:59:53 +00:00
Max Schaefer
10166be535
JavaScript: Add new query DoubleEscaping.
2018-11-30 09:39:00 +00:00
Max Schaefer
3ed40d5da1
Merge branch 'master' into range-analysis
2018-11-30 09:36:40 +00:00
semmle-qlci
1c5322274a
Merge pull request #557 from esben-semmle/js/unused-react-variable
...
Approved by xiemaisi
2018-11-30 09:35:36 +00:00
Max Schaefer
dcad2a3431
JavaScript: Simplify an if condition.
...
By pulling this out of the condition we can avoid computing its negation for the `else` branch, which could previously lead to quite an enormous pipeline.
2018-11-30 09:32:31 +00:00
