semmle-qlci
|
b5c8f2238b
|
Merge pull request #3805 from esbena/js/seal-freeze-flow
Approved by asgerf
|
2020-07-02 13:54:54 +01:00 |
|
Erik Krogh Kristensen
|
ceb19292cb
|
autoformat
|
2020-07-02 14:47:08 +02:00 |
|
Erik Krogh Kristensen
|
f60a7489b5
|
ignore parents that doesn't have all constant roots when deciding which roots to compute getStringValue for
|
2020-07-02 10:39:41 +02:00 |
|
semmle-qlci
|
bfb734e1d7
|
Merge pull request #3832 from asger-semmle/js/typescript-in-html-files3
Approved by erik-krogh
|
2020-07-02 08:30:45 +01:00 |
|
Esben Sparre Andreasen
|
75451e349a
|
JS: teach the dataflow library identity functions Object.freeze/seal
|
2020-07-01 15:27:28 +02:00 |
|
Esben Sparre Andreasen
|
33c52761d4
|
JS: more dataflow and global access path testing
|
2020-07-01 15:26:25 +02:00 |
|
semmle-qlci
|
224289c55f
|
Merge pull request #3845 from max-schaefer/js/walk-sync
Approved by asgerf
|
2020-06-30 14:45:41 +01:00 |
|
semmle-qlci
|
42bca1a3fa
|
Merge pull request #3824 from asger-semmle/js/static-regexp-capture-group-step
Approved by erik-krogh, esbena
|
2020-06-30 13:20:14 +01:00 |
|
semmle-qlci
|
c850938af0
|
Merge pull request #3833 from asger-semmle/js/vue-class-component
Approved by erik-krogh
|
2020-06-30 13:16:42 +01:00 |
|
Max Schaefer
|
62d56a3d7c
|
JavaScript: Fix module name for walk-sync package.
|
2020-06-30 11:57:16 +01:00 |
|
Asger Feldthaus
|
182e4ce727
|
JS: Autoformat
|
2020-06-29 19:10:28 +01:00 |
|
Asger Feldthaus
|
b05942b599
|
JS: Add HTML file example
|
2020-06-29 13:45:01 +01:00 |
|
Asger Feldthaus
|
3938856e61
|
JS: Make this work in qltest
|
2020-06-29 13:42:55 +01:00 |
|
Asger Feldthaus
|
da3d1a3b5f
|
JS: Recognize 'lang' attribute of script tags
|
2020-06-29 08:15:52 +01:00 |
|
Asger Feldthaus
|
3e616e998e
|
JS: Add test
|
2020-06-27 21:31:40 +01:00 |
|
ubuntu
|
9135bbd5c8
|
JS: model fancy-log (and recognize the 'dir' log level)
|
2020-06-26 21:33:52 +02:00 |
|
Asger Feldthaus
|
06dd3ab2ca
|
JS: Propagate into RegExp.$x
|
2020-06-26 18:58:43 +01:00 |
|
Asger Feldthaus
|
17af8f7650
|
JS: Add test for taint propagating into RegExp.$1
|
2020-06-26 18:58:43 +01:00 |
|
semmle-qlci
|
3aefb7fad9
|
Merge pull request #3613 from erik-krogh/Reassigned
Approved by asgerf
|
2020-06-26 17:05:45 +01:00 |
|
semmle-qlci
|
b015c735d0
|
Merge pull request #3809 from max-schaefer/util-deprecate
Approved by asgerf
|
2020-06-26 14:20:14 +01:00 |
|
Max Schaefer
|
640c194c92
|
JavaScript: Model util.deprecate as a pre call-graph step.
|
2020-06-26 11:47:19 +01:00 |
|
Max Schaefer
|
712a216461
|
Add self-verifying type-tracking tests.
|
2020-06-26 11:47:19 +01:00 |
|
semmle-qlci
|
f81fc77e9e
|
Merge pull request #3782 from erik-krogh/promiseSteps
Approved by asgerf
|
2020-06-26 10:11:10 +01:00 |
|
semmle-qlci
|
92cc59b47b
|
Merge pull request #3800 from esbena/js/npmlog
Approved by erik-krogh
|
2020-06-26 07:54:08 +01:00 |
|
Erik Krogh Kristensen
|
1ec2c549d2
|
autoformat
|
2020-06-25 23:00:52 +02:00 |
|
Erik Krogh Kristensen
|
081b03c8f4
|
add tests that access-path domination can happen within a statement
|
2020-06-25 23:00:52 +02:00 |
|
Erik Krogh Kristensen
|
21e5a522b0
|
give the same rank to all expressions inside a single stmt
|
2020-06-25 23:00:52 +02:00 |
|
semmle-qlci
|
056e1a8c4b
|
Merge pull request #3599 from asger-semmle/js/nameditem
Approved by esbena
|
2020-06-25 17:34:14 +01:00 |
|
Erik Krogh Kristensen
|
690bde47aa
|
remove a .getALocalSource() that isn't needed
|
2020-06-25 16:51:10 +02:00 |
|
semmle-qlci
|
c39dce4d66
|
Merge pull request #3781 from asger-semmle/js/deprecate-type-member-lookup
Approved by erik-krogh
|
2020-06-25 14:56:17 +01:00 |
|
Esben Sparre Andreasen
|
4bfce4b8a3
|
JS: model npmlog (and recognize the "verbose" log level)
|
2020-06-25 12:06:51 +02:00 |
|
Asger Feldthaus
|
42f32bf76c
|
JS: Recognize calls to .item and .namedItem
|
2020-06-24 15:11:18 +01:00 |
|
semmle-qlci
|
a723ac0d8e
|
Merge pull request #3767 from esbena/js/console-member-calls
Approved by erik-krogh
|
2020-06-24 08:03:49 +01:00 |
|
Asger Feldthaus
|
4f67cc269b
|
JS: Reduce ExpansiveTypes test
|
2020-06-23 11:44:07 +01:00 |
|
Asger Feldthaus
|
234f968294
|
JS: Deprecate property lookup on types
|
2020-06-23 11:42:28 +01:00 |
|
Esben Sparre Andreasen
|
2d32ee7448
|
JS: support member calls of console
|
2020-06-23 10:46:01 +02:00 |
|
Asger Feldthaus
|
b4f75ef414
|
Merge branch 'master' into js-team-sprint-merge2
|
2020-06-23 00:18:09 +01:00 |
|
Erik Krogh Kristensen
|
11cc97d286
|
add basic support for importing from neighbouring packages
|
2020-06-19 14:15:10 +02:00 |
|
semmle-qlci
|
07bff646d8
|
Merge pull request #3641 from asger-semmle/js/pre-call-graph-steps
Approved by erik-krogh
|
2020-06-16 13:41:55 +01:00 |
|
semmle-qlci
|
3728e1afd3
|
Merge pull request #3715 from asger-semmle/js/returned-functions
Approved by erik-krogh, esbena
|
2020-06-15 15:32:54 +01:00 |
|
Asger Feldthaus
|
17010e25a1
|
JS: Update another test
|
2020-06-15 13:55:46 +01:00 |
|
semmle-qlci
|
57c8dd85a4
|
Merge pull request #2801 from esbena/js/bulky-route-handler-registration
Approved by asgerf
|
2020-06-15 13:06:22 +01:00 |
|
Asger Feldthaus
|
c4179eb81d
|
JS: Update test
|
2020-06-15 11:13:20 +01:00 |
|
semmle-qlci
|
b6b838774e
|
Merge pull request #3704 from asger-semmle/js/cve-serve
Approved by esbena
|
2020-06-15 09:54:17 +01:00 |
|
Asger Feldthaus
|
315f3389d1
|
JS: Autoformat test
|
2020-06-12 19:58:05 +01:00 |
|
Asger Feldthaus
|
5548606f21
|
JS: Add test
|
2020-06-12 13:02:33 +01:00 |
|
semmle-qlci
|
2342d3dba3
|
Merge pull request #3662 from asger-semmle/js/package-export-fixes
Approved by esbena
|
2020-06-12 12:18:23 +01:00 |
|
Asger Feldthaus
|
4c536dde20
|
JS: Propagate locally returned functions out of calls
|
2020-06-12 10:07:37 +01:00 |
|
Asger Feldthaus
|
6531db3cca
|
JS: Add test
|
2020-06-12 09:56:38 +01:00 |
|
semmle-qlci
|
5c2f1169d0
|
Merge pull request #3679 from asger-semmle/js/dom-value-ref-restriction
Approved by erik-krogh, esbena
|
2020-06-12 07:39:26 +01:00 |
|