75 Commits

Author	SHA1	Message	Date
Asger F	429c4eac96	JS: Add support for Array.prototype.with ... Note: This was authored by Copilot	2025-09-16 13:06:59 +02:00
Asger F	ee78b7dc96	JS: Add support for Promise.try	2025-09-16 13:06:57 +02:00
Asger F	980d0f46fa	JS: Add model for react 'use'	2025-06-23 15:27:21 +02:00
Asger F	768ccc6a54	JS: Add test for react 'use' function	2025-06-23 15:26:08 +02:00
Asger F	a44bdf3be2	JS: Generate summaries from summaryModel, and only generate steps as a fallback	2025-05-01 15:22:47 +02:00
Napalys	9e787555df	Fixed typo in the test cases.	2025-03-20 13:25:36 +01:00
Napalys	f4ca2dc1f3	Restricted taint to array elements.	2025-03-20 12:24:49 +01:00
Napalys	752f02f04d	Fixed map modeling and added test cases.	2025-03-20 12:18:28 +01:00
Napalys	922a07d01e	Added underscore.string clearsContent. ... Co-authored-by: Asgerf <asgerf@github.com>	2025-03-18 12:58:19 +01:00
Napalys	d8e6d76b0e	Added modeling for tap function.	2025-03-17 19:07:02 +01:00
Napalys	eb18c3ce24	Added test case for tap.	2025-03-17 18:36:23 +01:00
Napalys	fc6b779a4b	Added modeling for aliases.	2025-03-17 18:33:14 +01:00
Napalys	dcc1e88d08	Added test cases for aliases.	2025-03-17 18:23:46 +01:00
Napalys	3a83c8d1fd	Added modeling for extra chaining function from underscore.string.	2025-03-17 18:06:26 +01:00
Napalys	cccd863a96	Added test for extra chaining function for underscore.string.	2025-03-17 18:05:49 +01:00
Napalys	ca9ae8a58d	Added chaining modeling for underscore.string package.	2025-03-17 14:46:07 +01:00
Napalys	25c6fb59df	Added chaining tests for underscore.string package.	2025-03-17 14:46:06 +01:00
Napalys	b59b9c86e4	Added modeling underscore.string of function which contain multiple sources points.	2025-03-17 14:46:01 +01:00
Napalys	77e1e171e1	Added test cases underscore.string with multiple sources.	2025-03-17 12:58:53 +01:00
Napalys	6b105b2f49	Added modeling underscore.string array to string functions.	2025-03-17 12:55:53 +01:00
Napalys	cd40b6f125	Added test cases underscore.string array to string.	2025-03-17 12:53:53 +01:00
Napalys	30623cd953	Added modeling of underscore.string for str to array.	2025-03-17 12:52:56 +01:00
Napalys	c256b9c336	Added underscore.string test cases for str to array.	2025-03-17 12:51:48 +01:00
Napalys	9bca863e38	Added modeling of underscore.string string to string functions.	2025-03-17 12:50:41 +01:00
Napalys	e8b233f086	Added test cases underscore.string string to string.	2025-03-17 12:48:41 +01:00
Anders Schack-Mulligen	b2a595596b	JS: Remove irrelevant comment.	2025-02-25 11:33:16 +01:00
Anders Schack-Mulligen	449150e6b5	JS: Accept fixed FP flow.	2025-02-25 10:42:21 +01:00
Asger F	a1b7096125	Merge pull request #18783 from asgerf/js/downward-calls ... JS: Resolve calls downward in class hierarchy	2025-02-20 09:01:58 +01:00
Asger F	58c8b5fa2b	Merge pull request #18790 from asgerf/js/no-implicit-array-taint ... JS: Do not taint whole array when storing into ArrayElement	2025-02-19 13:23:31 +01:00
Asger F	08b9d934c0	JS: Add a negative test	2025-02-17 11:37:44 +01:00
Asger F	352924fb8c	JS: Handle a few other stringification contexts	2025-02-17 11:36:28 +01:00
Asger F	33ab7db98a	JS: Handle Array.prototype.toString calls	2025-02-17 11:25:03 +01:00
Asger F	a74b203c86	JS: Add test with implicit array stringification	2025-02-17 11:21:46 +01:00
Asger F	d87534c7d0	JS: Model Array#toString	2025-02-17 11:13:36 +01:00
Asger F	e8d1703224	JS: Add test for flow through Buffer.concat ... This flow was lost since the existing model of concat() boxes its return value in ArrayElement. There is no explicit model of Buffer.concat.	2025-02-17 11:12:51 +01:00
Asger F	ab5fc9f4d7	JS: Implement viableImplInCallContext	2025-02-14 13:25:19 +01:00
Asger F	ff7bc7c25e	JS: Track types of classes in data flow	2025-02-14 12:44:45 +01:00
Asger F	d3c4b5d493	JS: Add test with spurious flow due to up-down calls	2025-02-14 12:42:02 +01:00
Asger F	26dcbf7a2a	JS: Migrate URLSearchParams model to flow summaries	2025-02-13 11:51:33 +01:00
Asger F	f531f4479b	JS: Add test for URL and URLSearchParams	2025-02-13 11:51:32 +01:00
Asger F	33e8bd5032	JS: Update testUtilities import	2024-12-19 15:25:39 +01:00
Asger F	84820adf3c	Add test for exception flow out of finally()	2024-11-21 11:01:03 +01:00
Asger F	948d21ca07	JS: Propagate exceptions from summarized callables by default	2024-11-21 10:24:31 +01:00
Asger F	dcdb2e5133	JS: Fix callback check so it works without parameters	2024-11-21 10:24:29 +01:00
Asger F	b7dd455aff	JS: Add test case	2024-11-21 09:21:36 +01:00
Asger F	80a5a5909e	JS: Use getUnderlyingValue() a few places in VariableCapture	2024-11-19 13:23:29 +01:00
Asger F	d2daec4c66	JS: Add tests explaining why the IIFE in f2 didn't work	2024-11-19 13:23:24 +01:00
Asger F	37676f41aa	JS: Remove jump steps from IIFE steps	2024-11-18 13:38:34 +01:00
Asger F	7f2eae0966	JS: Add test case for false flow through IIFEs ... We generate local flow steps into and out of IIFEs, but these come jump steps automatically, resulting in FPs.	2024-11-18 13:34:35 +01:00
Asger F	7acc5689cf	JS: Port exception steps to a universal summary	2024-11-18 13:27:58 +01:00