Erik Krogh Kristensen
|
2b2d691e45
|
don't treated a property from a tainted object as tainted when there exists a dominating write
|
2020-06-25 23:00:52 +02:00 |
|
Asger Feldthaus
|
b4f75ef414
|
Merge branch 'master' into js-team-sprint-merge2
|
2020-06-23 00:18:09 +01:00 |
|
Erik Krogh Kristensen
|
0ee3f4977c
|
add test of webpack-dev-server and monorepo import
|
2020-06-19 14:15:46 +02:00 |
|
Erik Krogh Kristensen
|
ef72c03ca9
|
use simpler taint-step for DestructingPattern
|
2020-06-11 23:16:46 +02:00 |
|
Erik Krogh Kristensen
|
b8a9ac39f4
|
add lValueFlowStep for rest-pattern nested inside a property-pattern (and removed old incorrect approach)
|
2020-06-09 18:16:00 +02:00 |
|
Erik Krogh Kristensen
|
b510e470b1
|
support rest-patterns inside property patterns
|
2020-06-09 13:28:56 +02:00 |
|
Erik Krogh Kristensen
|
b04d7015ae
|
fix test
|
2020-06-09 11:23:46 +02:00 |
|
Erik Krogh Kristensen
|
0f06f04e32
|
extend support for yargs for js/indirect-command-line-injection
|
2020-06-08 16:45:09 +02:00 |
|
Erik Krogh Kristensen
|
815671f5d0
|
add sanitizer guard for typeof undefined
|
2020-06-04 21:32:26 +02:00 |
|
semmle-qlci
|
b9ecf1a304
|
Merge pull request #3447 from erik-krogh/LibCmdInjection
Approved by asgerf, mchammer01
|
2020-05-22 17:10:57 +01:00 |
|
Erik Krogh Kristensen
|
5b569a4d6d
|
add a sanitizer for chained replace-calls
|
2020-05-19 19:16:58 +02:00 |
|
Erik Krogh Kristensen
|
fc7e9eb8c8
|
add test for non-tracked aliasing
|
2020-05-18 22:40:41 +02:00 |
|
Max Schaefer
|
6797fec1a3
|
JavaScript: Add more models of packages that execute commands over SSH.
|
2020-05-18 12:08:14 +01:00 |
|
Erik Krogh Kristensen
|
c8cf958c8a
|
add test cases for js/shell-command-constructed-from-input
|
2020-05-17 10:32:27 +02:00 |
|
Erik Krogh Kristensen
|
a1a6826278
|
support non-SourceNode in IndirectCommandArgument#argumentList
|
2020-05-16 23:15:37 +02:00 |
|
Erik Krogh Kristensen
|
e8dc77d508
|
add support for util.promisify with child_process calls
|
2020-04-15 19:16:30 +02:00 |
|
Asger Feldthaus
|
53569453ba
|
JS: Autoformat again
|
2020-03-04 19:28:24 +00:00 |
|
Erik Krogh Kristensen
|
87d283aa6c
|
add tests for third party command execution libraries (and two small fixes)
|
2020-02-25 10:50:59 +01:00 |
|
Erik Krogh Kristensen
|
fb94af9764
|
remove the last dependency on PrettyPrinting
|
2020-02-24 13:18:15 +01:00 |
|
Erik Krogh Kristensen
|
473787a426
|
refactor the getOptionsArg predicate into the SystemCommandExecution class
|
2020-02-24 12:59:20 +01:00 |
|
Erik Krogh Kristensen
|
44db0f4e5d
|
better printing of the options arg
|
2020-02-21 15:39:49 +01:00 |
|
Erik Krogh Kristensen
|
75410e5760
|
big refactor of UselessUseOfCal
|
2020-02-21 14:26:42 +01:00 |
|
Erik Krogh Kristensen
|
b1cbfce50b
|
use SystemCommandExecution and a few small fixes
|
2020-02-20 14:17:37 +01:00 |
|
Erik Krogh Kristensen
|
12c0291dde
|
require that an options object has a known set of properties
|
2020-02-20 11:35:11 +01:00 |
|
Erik Krogh Kristensen
|
b5ef45e6c2
|
add isSync predicate to SystemCommandExecution
|
2020-02-20 11:30:23 +01:00 |
|
Erik Krogh Kristensen
|
a193cb110e
|
support arrow functions in the callbacks
|
2020-02-20 11:13:39 +01:00 |
|
Erik Krogh Kristensen
|
56f3e431f9
|
update expected output
|
2020-02-20 10:28:53 +01:00 |
|
Erik Krogh Kristensen
|
bdab9ee12b
|
change useless cat query to only flag instances that can be re-written to
|
2020-02-19 16:59:28 +01:00 |
|
Erik Krogh Kristensen
|
344060e139
|
accept IO redirections as OK
|
2020-02-19 10:12:24 +01:00 |
|
Erik Krogh Kristensen
|
73a7d406a5
|
add query for useless use of cat
|
2020-02-18 19:18:45 +01:00 |
|
Erik Krogh Kristensen
|
c6668da02e
|
expand how indirectCommandArguments are found
|
2020-02-07 15:00:05 +01:00 |
|
Erik Krogh Kristensen
|
8ea6070120
|
add indirect command injection sink for a concatenated array
|
2020-02-07 11:04:34 +01:00 |
|
Esben Sparre Andreasen
|
8e6a19b3d3
|
JS: add DefaultParsedCommandLineArgumentsAsSource
|
2019-11-15 08:42:02 +01:00 |
|
Max Schaefer
|
8aae1f443f
|
JavaScript: Use type tracking instead of auxiliary data-flow configuration to track indirect command arguments.
|
2019-10-31 12:13:55 +00:00 |
|
Max Schaefer
|
b42026a90a
|
JavaScript: Update expected output.
|
2019-10-29 15:36:24 +00:00 |
|
Max Schaefer
|
dc1d1c2f22
|
JavaScript: Update expected output.
|
2019-10-29 15:30:06 +00:00 |
|
Max Schaefer
|
6964945c74
|
JavaScript: Restrict edges to only contain nodes.
|
2019-10-29 15:03:52 +00:00 |
|
Esben Sparre Andreasen
|
5a983cb535
|
JS: add query js/shell-command-injection-from-environment
|
2019-10-21 23:31:55 +02:00 |
|
Esben Sparre Andreasen
|
f7bfc472c1
|
JS: treat server responses as untrusted for command injections
|
2019-09-11 09:38:18 +02:00 |
|
Esben Sparre Andreasen
|
bf4a324a86
|
JS: add query js/indirect-command-line-injection
|
2019-07-31 09:24:25 +02:00 |
|
Esben Sparre Andreasen
|
299d4c6e93
|
JS: add additional SystemCommandExecutors
|
2019-06-11 09:38:10 +02:00 |
|
Asger F
|
50a77ea843
|
JS: update test expectations
|
2019-03-06 08:41:03 +00:00 |
|
Max Schaefer
|
f9d704bdcf
|
JavaScript: Add example of indirect command injection.
|
2019-01-11 10:24:41 +00:00 |
|
Esben Sparre Andreasen
|
376ed7a4d2
|
JS: generalize js/command-line-injection to handle ConstantString
|
2018-12-11 13:39:15 +01:00 |
|
Max Schaefer
|
9221b62ded
|
JavaScript: Update expectd test output for security path queries to include nodes and edges query predicates.
|
2018-11-14 09:32:31 +00:00 |
|
Pavel Avgustinov
|
b55526aa58
|
QL code and tests for C#/C++/JavaScript.
|
2018-08-02 17:53:23 +01:00 |
|