6736 Commits

Author	SHA1	Message	Date
Erik Krogh Kristensen	4fa33b151f	Merge pull request #5146 from github/more-redos-tests ... JS: add two non ReDoS regular expressions to the ReDoS test suite	2021-02-12 18:56:52 +01:00
CodeQL CI	179a7a89dd	Merge pull request #5098 from erik-krogh/xml2js ... Approved by asgerf	2021-02-12 09:22:40 -08:00
Erik Krogh Kristensen	004147a22f	add change note	2021-02-11 17:54:53 +01:00
Erik Krogh Kristensen	6f405635ef	add ClientRequest model for apollo-client	2021-02-11 17:49:44 +01:00
Erik Krogh Kristensen	fd46b7a7bc	fix type in change-note ... Co-authored-by: intrigus-lgtm <60750685+intrigus-lgtm@users.noreply.github.com>	2021-02-11 16:17:26 +01:00
Erik Krogh Kristensen	69d8aa143c	add taint step for the snarkdown libary	2021-02-11 16:16:46 +01:00
Erik Krogh Kristensen	d14586de56	add two non ReDoS regular expressions to the ReDoS test suite ... Adds the regular expression from #5145	2021-02-11 14:41:45 +01:00
Erik Krogh Kristensen	f12c38425f	add change-note	2021-02-11 13:36:53 +01:00
Erik Krogh Kristensen	3ee0029cd8	Update javascript/change-notes/2021-02-08-xml-parser-taint.md ... Co-authored-by: Asger F <asgerf@github.com>	2021-02-11 13:33:42 +01:00
Erik Krogh Kristensen	044f80215e	add change note	2021-02-11 09:34:04 +01:00
Erik Krogh Kristensen	010d580f8e	add model for multiparty	2021-02-11 09:34:04 +01:00
Erik Krogh Kristensen	61b4ffec3d	add remote flow from the Formidable library	2021-02-11 09:34:04 +01:00
Erik Krogh Kristensen	a03f4ed3cd	add remote flow source for busboy	2021-02-11 09:34:02 +01:00
Erik Krogh Kristensen	e2fbf8a68c	add files uploaded with multer as RemoteFlowSource	2021-02-11 09:33:15 +01:00
Erik Krogh Kristensen	7cff1f441b	add model for the unified and remark libraries	2021-02-10 18:13:01 +01:00
Erik Krogh Kristensen	0d497e8b9a	add model for the showdown library	2021-02-10 17:22:42 +01:00
Erik Krogh Kristensen	f76018c039	add taint step for the markdown-table library	2021-02-10 15:11:41 +01:00
Erik Krogh Kristensen	b4704f7016	add taint-step for the marked library	2021-02-10 14:51:08 +01:00
Erik Krogh Kristensen	91f7d33044	add change note	2021-02-10 14:17:49 +01:00
Erik Krogh Kristensen	101d4358a9	detect DOM nodes from event callbacks	2021-02-10 14:17:49 +01:00
Erik Krogh Kristensen	be9636491b	add source for react-hook-form in xss-through-dom	2021-02-10 14:17:49 +01:00
Erik Krogh Kristensen	65d93c9061	detect for DOM elements from DOM events in React	2021-02-10 14:17:49 +01:00
Erik Krogh Kristensen	458dda9d25	add xss-through-dom source from react-final-form	2021-02-10 14:17:49 +01:00
Erik Krogh Kristensen	ff3950ce98	add model for formik	2021-02-10 14:17:49 +01:00
Erik Krogh Kristensen	d1087d4e41	move sources from XssThroughDom into a customizations file	2021-02-10 14:17:49 +01:00
Erik Krogh Kristensen	4969a1ef4f	add change note	2021-02-10 14:16:31 +01:00
Erik Krogh Kristensen	0ca2310594	add model for htmlparser2	2021-02-10 14:16:31 +01:00
Erik Krogh Kristensen	e2a66bf3ed	add model for xml-js	2021-02-10 14:16:31 +01:00
Erik Krogh Kristensen	73f7cd149f	add model for sax	2021-02-10 14:16:31 +01:00
Erik Krogh Kristensen	c43025d7b3	add model for xml2js	2021-02-10 14:16:30 +01:00
Erik Krogh Kristensen	44ca2e26a6	add taint-step to XML parsers	2021-02-10 14:16:08 +01:00
Alexander Eyers-Taylor	1c43505d30	Merge pull request #5121 from alexet/fix-js-jdoc ... Javascript Extractor: Update <tt> tages to <code>	2021-02-09 13:07:19 +00:00
CodeQL CI	475d216f8e	Merge pull request #5087 from erik-krogh/immutable ... Approved by asgerf	2021-02-09 12:43:19 +00:00
alexet	8dd5a7e7c7	Javascript Extractor: Update <tt> tages to <code>	2021-02-09 12:10:09 +00:00
CaptainFreak	503b339a1f	remove hbs specific checks	2021-02-09 07:35:35 +05:30
CodeQL CI	8a2e063af7	Merge pull request #5107 from asgerf/js/json-in-script-tag ... Approved by erik-krogh	2021-02-08 09:52:53 +00:00
Erik Krogh Kristensen	504db8739d	fix typo in execa change-note file name	2021-02-08 10:00:26 +01:00
Erik Krogh Kristensen	8ca75e41d2	add change note	2021-02-08 09:59:45 +01:00
Asger Feldthaus	0ceb8aa638	JS: Bump extractor version	2021-02-05 21:55:43 +00:00
Asger Feldthaus	236b7c5887	JS: Tolerate JSON in script tags	2021-02-05 21:54:50 +00:00
alexet	9d06c75aed	Javascript: improve performance of ExplicitInvokeNode::getArgument	2021-02-04 15:55:51 +00:00
Erik Krogh Kristensen	6cbf7b3267	add of Set, Stack and similar to the Immutable model	2021-02-04 12:05:44 +01:00
Erik Krogh Kristensen	b74df66463	implement Immutable merge	2021-02-04 12:05:44 +01:00
Erik Krogh Kristensen	c0de6a3af2	add support for Immutable Record	2021-02-04 12:05:44 +01:00
Erik Krogh Kristensen	609b16b1f7	implement Immutable OrderedMap	2021-02-04 12:05:44 +01:00
Erik Krogh Kristensen	2e7bf9b53c	implement Immutable lists	2021-02-04 12:05:44 +01:00
Erik Krogh Kristensen	a5c9492c87	add support for fromJS in the Immutable model	2021-02-04 12:05:44 +01:00
Erik Krogh Kristensen	6cbe4caecc	support toJS() by using plain property names instead of pseudoproperties.	2021-02-04 12:05:44 +01:00
Erik Krogh Kristensen	b1f092f052	add support for map.set in Immutable model	2021-02-04 12:05:44 +01:00
Erik Krogh Kristensen	b77dd54618	implement basic map get/set for immutable.js	2021-02-04 12:05:44 +01:00