21 Commits

Author	SHA1	Message	Date
Asger F	2a194a53af	raw test output	2025-02-28 13:29:39 +01:00
Asger F	f5911c9e5a	JS: Accept raw test output	2025-02-28 13:27:38 +01:00
Asger F	9be041e27d	JS: Update OK-style comments to $-style	2025-02-28 13:27:28 +01:00
Asger F	cd2c4d5e3a	JS: Use post-processed inline test in MissingCsrfMiddleware ... This query flags the cookie-parsing middleware in order to consolidate huge numbers of alerts into a single alert, which is more manageable. But simply annotating the cookie-parsing middleware with 'Alert' isn't a very useful, we want to annotate which middlewares are vulnerable.	2025-02-21 14:44:46 +01:00
erik-krogh	368f84785b	fix some more style-guide violations in the alert-messages	2022-10-07 11:22:22 +02:00
Asger Feldthaus	615b2ec539	JS: Fix handling of fastify-plugin	2021-12-15 16:04:46 +01:00
Asger Feldthaus	b73219392b	JS: Improve precision of missing CSRF middleware	2021-12-07 10:46:17 +01:00
Asger Feldthaus	71820569e1	JS: Instantiate for Fastify	2021-12-07 10:46:15 +01:00
Asger Feldthaus	389a3c9073	JS: Port CSRF query	2021-12-07 10:43:06 +01:00
Erik Krogh Kristensen	e061c6a006	add support for more custom CSRF checking middlewares	2020-10-20 15:16:14 +02:00
Erik Krogh Kristensen	ce95676130	add express.csrf as an CSRF protecting middleware	2020-10-19 15:39:02 +02:00
Erik Krogh Kristensen	8206933e85	add test for home grown CSRF protection	2020-10-15 14:51:02 +02:00
Erik Krogh Kristensen	e04404b713	also recognize cookie writes are leading to cookie access	2020-09-28 21:17:25 +02:00
Erik Krogh Kristensen	dafcd59148	add another indirect route-handler test	2020-09-18 09:26:33 +02:00
Erik Krogh Kristensen	43e5c0212c	add basic support for indirect route handlers	2020-09-18 09:26:33 +02:00
Asger Feldthaus	b98db62e82	JS: Recognize req.user a cookie access	2020-01-24 09:44:20 +00:00
Asger Feldthaus	a68bb9ffd1	JS: Ignore calls and csrf/captcha access	2020-01-23 15:32:05 +00:00
Asger Feldthaus	b1ec3e1bf2	JS: Add test and dont check predecessors	2020-01-23 14:59:03 +00:00
Asger F	4797924bea	JS: review comments	2018-09-21 14:46:21 +01:00
Asger F	5f467d2fc5	JS: recognize CSRF middleware from lusca package	2018-09-21 13:15:40 +01:00
Pavel Avgustinov	b55526aa58	QL code and tests for C#/C++/JavaScript.	2018-08-02 17:53:23 +01:00