52 Commits

Author	SHA1	Message	Date
Asger F	d97d67359b	JS: Add test case showing lack of flow through non-sanitising regexp	2025-02-28 13:58:08 +01:00
Asger F	cd6ebb103e	JS: Make test not assume implicit through for maps	2024-12-19 15:25:45 +01:00
Asger F	dc2f39c399	JS: Add model of Map#groupBy	2024-12-19 15:25:43 +01:00
Asger F	de5e6ddeed	JS: Update with changes in TaintTracking test	2024-12-19 15:25:42 +01:00
Asger F	1ac7591faf	JS: Update missed flow in capture-flow.js ... We previously caught this flow because of a heuristic in capture flow. We'll have to fix it properly later.	2024-11-21 12:57:34 +01:00
Asger F	1b85feb1fa	JS: Add imprecise post-update steps for when a captured var/this is not tracked precisely ... With the capture library we sometimes bails out of handling certain functions for scalability reasons. This means we have a notion of "captured but imprecisely-tracked" variables and 'this'. In these cases we go back to propagating flow from a post-update node to the local source.	2024-10-29 08:32:07 +01:00
Asger F	094112c905	Merge pull request #17213 from asgerf/jss/spread-argument ... JS: Improve handling of spread arguments and rest parameters [shared data flow branch]	2024-09-09 13:15:22 +02:00
Asger F	aa8bd332bf	JS: Add a few more tests	2024-08-27 11:35:31 +02:00
Asger F	df42e7c527	JS: Add test showing lack of implicit reads for ArrayElement	2024-08-27 11:35:30 +02:00
Asger F	ac1dd1850e	JS: Remove taint step from array element to whole array	2024-08-27 11:35:26 +02:00
Asger F	47c519fc0a	JS: Add test for flow through dynamic imports	2024-08-26 15:15:49 +02:00
Asger F	e5924c1f84	JS: Another messy test update	2024-06-28 13:08:38 +02:00
Asger F	5e7d1d5c2c	Merge branch 'main' into js/shared-dataflow-merged	2024-03-13 14:27:16 +01:00
Asger F	18db769d6d	JS: Update expected output	2024-02-14 10:45:51 +01:00
Asger F	bafe5e3d8e	JS: Add test case (with old expected data)	2024-02-14 10:45:51 +01:00
erik-krogh	58dc14d5bb	update expected output	2024-01-04 11:38:58 +01:00
Asger F	9faf300dd0	JS: Use type-pruning to restrict callback flow	2023-10-13 13:15:08 +02:00
Asger F	e738b5d125	JS: Expand callback test case ... Type-based pruning is confused by the different tests being interleaved, so we additionally want to have a test that is independent from the other parts of this test.	2023-10-13 13:15:08 +02:00
Asger F	51dec79401	JS: Lower access path limit to 2	2023-10-13 13:15:08 +02:00
Asger F	7c5eb89491	JS: Add tests for captured 'this' (genuine FN)	2023-10-13 13:15:08 +02:00
Asger F	2eff07f476	JS: Update TaintTracking test	2023-10-13 13:15:08 +02:00
erik-krogh	7ca0996912	add a taint-tracking tests for calls to tagged template strings	2023-10-06 21:39:42 +02:00
erik-krogh	45e78a355f	ensure call-apply.js is seen as a module	2022-08-23 10:11:46 +02:00
Erik Krogh Kristensen	11b039c1f1	add tests	2022-08-22 08:29:28 +02:00
Asger Feldthaus	b336c29283	JS: Track functions with methods	2021-12-10 09:38:29 +01:00
Asger Feldthaus	4ef2a5f4f1	JS: Add test	2021-12-10 09:38:29 +01:00
Asger Feldthaus	457ce14ca6	JS: Summarize steps into captured variables	2021-07-02 13:42:42 +02:00
Asger Feldthaus	093ff41170	JS: Update tests	2021-07-02 13:31:17 +02:00
Asger Feldthaus	8befb03cb9	JS: Add test case with spurious call/return flow	2021-07-02 13:17:32 +02:00
Asger Feldthaus	23d2f11840	JS: Handle inheritance	2021-03-23 14:39:37 +00:00
Asger Feldthaus	3d94ccf5dd	JS: Support accessor-calls in object literals via local flow	2021-03-23 14:16:06 +00:00
Asger F	2f3d516413	JS: Track flow into ES accessors	2021-03-19 11:11:25 +00:00
Asger Feldthaus	0496642b0b	JS: Add test for captured flow into callback	2020-12-07 10:34:27 +00:00
Erik Krogh Kristensen	9bcac10d9e	summarize exceptions thrown by immidiatly awaited function calls	2020-08-10 13:28:25 +02:00
Erik Krogh Kristensen	cc94c5ec60	remove imprecise return-flow from async functions	2020-08-07 17:33:24 +02:00
Esben Sparre Andreasen	f9ed64fc45	Merge branch 'master' into js/membershiptest	2020-06-02 08:54:44 +02:00
Asger Feldthaus	75be3b7ecb	JS: Add test case for missed captured flow	2020-05-21 16:14:13 +01:00
Esben Sparre Andreasen	ddb545c182	JS: introduce MembershipTests.qll and use in two locations	2020-05-18 09:50:00 +02:00
Asger Feldthaus	0edb765958	JS: Split test case function in two	2020-03-18 11:55:13 +00:00
Asger Feldthaus	a195429471	JS: Add test with non-guard sanitizer	2020-03-18 11:55:12 +00:00
Asger Feldthaus	98524556c3	JS: Add some tests	2020-03-03 11:32:23 +00:00
Asger Feldthaus	b780bc4d59	JS: Also track into callbacks	2020-02-21 13:51:22 +00:00
Asger Feldthaus	e8e649102f	JS: Also propagate out of returns	2020-02-21 13:51:22 +00:00
Erik Krogh Kristensen	1ece6b9afe	update expected output of tests	2020-02-07 12:57:51 +01:00
Asger F	142c83f38f	JS: Add negative dominance test	2020-01-06 11:37:21 +00:00
Asger F	aa6572b5c8	JS: Sanitize phi edges from barrier guards	2020-01-06 11:37:21 +00:00
Asger F	0b04f0d8f7	JS: Add test case for phi input	2020-01-06 11:37:20 +00:00
Asger F	f48d16fcb7	JS: Support barrier guards that are reflective calls	2019-11-01 15:23:38 +00:00
Asger F	e2b0ec5696	JS: Handle multiple and/or operators in SanitizerFunction	2019-11-01 15:23:38 +00:00
Asger F	6617747185	JS: Update DataFlowTracking output for booleanOps.js	2019-05-28 11:19:23 +01:00