Max Schaefer
|
bdba647bf5
|
Merge pull request #1893 from erik-semmle/addXLinkHref
JS: add xlink:href as xss target when using setAttribute
|
2019-09-09 15:56:47 +01:00 |
|
Asger F
|
ad5abc61cc
|
JS: Move typed test into separate test
|
2019-09-09 15:35:26 +01:00 |
|
Asger F
|
ea446f2aa1
|
JS: Use type info in mongodb/mongoose model
|
2019-09-09 15:35:26 +01:00 |
|
Asger F
|
8e397ad203
|
JS: Use type tracking in mongodb/mongoose model
|
2019-09-09 15:35:23 +01:00 |
|
semmle-qlci
|
e899250e87
|
Merge pull request #1894 from asger-semmle/fp-incorrect-suffix-check
Approved by xiemaisi
|
2019-09-09 15:33:47 +01:00 |
|
semmle-qlci
|
89cba089b4
|
Merge pull request #1892 from asger-semmle/event-handler-sink
Approved by esben-semmle
|
2019-09-09 15:33:21 +01:00 |
|
Erik Krogh Kristensen
|
2729566bbf
|
add setAttributeNS('xlink', 'href',..) example in XSS test
|
2019-09-09 09:41:08 +01:00 |
|
Erik Krogh Kristensen
|
c780956f0d
|
add setAttributeNS method in the XSS test
|
2019-09-06 21:56:29 +01:00 |
|
Asger F
|
7007698de4
|
JS: Fix the FP
|
2019-09-06 15:39:40 +01:00 |
|
Asger F
|
ebd7875cae
|
JS: Add regression test
|
2019-09-06 15:38:55 +01:00 |
|
Erik Krogh Kristensen
|
ccdc821c5d
|
add xlink:href as xss target when using setAttribute
|
2019-09-06 14:43:47 +01:00 |
|
Asger F
|
f7654d6f1c
|
JS: Add test
|
2019-09-06 14:42:07 +01:00 |
|
Anders Schack-Mulligen
|
ca45fb5a60
|
JavaScript: Autoformat.
|
2019-09-06 09:04:51 +02:00 |
|
Esben Sparre Andreasen
|
a9665f53b8
|
JS: whitelist quote stripping for js/incomplete-sanitization
|
2019-09-05 09:47:49 +01:00 |
|
Asger F
|
5aa948cd17
|
JS: Add angular.merge sink to prototype pollution query
|
2019-09-04 16:14:51 +01:00 |
|
Max Schaefer
|
b6220998d1
|
JavaScript: Restrict setAttribute sink to potentially dangerous attribute names.
|
2019-08-30 11:57:29 +01:00 |
|
Max Schaefer
|
78ce290de3
|
JavaScript: Fix DomMethodCallExpr.interpretsArgumentsAsHTML.
|
2019-08-28 11:22:03 +01:00 |
|
semmle-qlci
|
bb4f00d770
|
Merge pull request #1015 from esben-semmle/js/cli-cli
Approved by xiemaisi
|
2019-08-02 09:57:19 +01:00 |
|
Esben Sparre Andreasen
|
bf4a324a86
|
JS: add query js/indirect-command-line-injection
|
2019-07-31 09:24:25 +02:00 |
|
Asger F
|
378b0bfb74
|
JS: Do not treat the empty string as a credential
|
2019-07-30 17:29:12 +01:00 |
|
Max Schaefer
|
8b3e647ae9
|
JavaScript: Do not taint for-in loop variable.
|
2019-07-23 10:52:55 +01:00 |
|
Asger F
|
57dac1d0d5
|
JS: Update test output to reflect new edge relation
|
2019-06-25 16:41:29 +01:00 |
|
Esben Sparre Andreasen
|
59b7b0757a
|
JS: make Express' res/req extend Node's res/req
|
2019-06-12 12:45:01 +02:00 |
|
Esben Sparre Andreasen
|
299d4c6e93
|
JS: add additional SystemCommandExecutors
|
2019-06-11 09:38:10 +02:00 |
|
Max Schaefer
|
d723ab76d8
|
JavaScript: Fix getDelimiterMatchingRegexp to work on multi-line strings.
|
2019-06-05 08:09:19 +01:00 |
|
Max Schaefer
|
a4876270ec
|
JavaScript: Tweak PasswordInConfigurationFile alerts.
Only highlight first line, and include the password in the alert
message.
|
2019-06-05 08:09:19 +01:00 |
|
semmle-qlci
|
80ff63a3bb
|
Merge pull request #1387 from esben-semmle/js/unanchored-url-regex
Approved by mc-semmle, xiemaisi
|
2019-06-03 17:27:08 +01:00 |
|
Esben Sparre Andreasen
|
bf51c54338
|
JS: add RegExpPatternSource::getAParse to hide the subclasses
|
2019-06-03 14:23:22 +02:00 |
|
Max Schaefer
|
d8a101df6d
|
JavaScript: Shrink Configurations.qll some more.
|
2019-06-03 10:32:25 +01:00 |
|
Esben Sparre Andreasen
|
7018a38691
|
JS: improve tests and regexp for js/regex/missing-regexp-anchor
|
2019-06-03 08:29:52 +02:00 |
|
Esben Sparre Andreasen
|
3289c629f7
|
JS: address minor review comments
|
2019-06-03 08:29:52 +02:00 |
|
Esben Sparre Andreasen
|
0fa73b8331
|
JS: add query js/regex/missing-regexp-anchor
|
2019-06-03 08:29:52 +02:00 |
|
Esben Sparre Andreasen
|
69db54a03a
|
JS: add anchors to js/incomplete-hostname-regexp examples
|
2019-06-03 08:27:49 +02:00 |
|
Max Schaefer
|
3097037a6f
|
Merge pull request #1290 from esben-semmle/js/semver-lib
JS: add SemVer library
|
2019-05-31 08:09:24 +01:00 |
|
semmle-qlci
|
0fa06e5c8d
|
Merge pull request #1180 from asger-semmle/tainted-path-squashed
Approved by xiemaisi
|
2019-05-30 17:20:19 +01:00 |
|
Max Schaefer
|
3c8aea26da
|
JavaScript: Update expected test output.
|
2019-05-30 15:05:43 +01:00 |
|
Asger F
|
ef1ad0d3b7
|
JS: Summary expected output (not taint-tracking config anymore)
|
2019-05-28 12:05:51 +01:00 |
|
Asger F
|
9f1617a6a8
|
JS: Update TaintedPath.expected (4x paths)
|
2019-05-28 11:22:08 +01:00 |
|
Esben Sparre Andreasen
|
eb13ab52cf
|
JS: sharpen js/prototype-pollution with version analysis
|
2019-05-27 22:32:32 +02:00 |
|
Esben Sparre Andreasen
|
1cea29d89f
|
JS: improve prototype pollution tests
|
2019-05-27 22:32:32 +02:00 |
|
Asger F
|
37fa2446d4
|
JS: review comments
|
2019-05-23 10:16:31 +01:00 |
|
Asger F
|
07d508d1bf
|
JS: Track taint through .replace()
|
2019-05-23 09:23:48 +01:00 |
|
Asger F
|
1ec3475457
|
JS: All of TaintedPath
|
2019-05-23 09:23:47 +01:00 |
|
Asger F
|
9046fd15f7
|
JS: Update expected output of XSS query (benign)
|
2019-05-23 08:56:01 +01:00 |
|
semmle-qlci
|
2b5b8751ea
|
Merge pull request #1316 from asger-semmle/incorrect-suffix-check-fps
Approved by esben-semmle, xiemaisi
|
2019-05-21 11:30:37 +01:00 |
|
Esben Sparre Andreasen
|
3af3c5413b
|
Merge pull request #1318 from asger-semmle/prototype-pollution-query2
Move prototype pollution query into suite
|
2019-05-21 12:23:41 +02:00 |
|
Asger F
|
9293010e4c
|
JS: Fix some FPs in IncorrectSuffixCheck
|
2019-05-16 10:56:17 +01:00 |
|
Asger F
|
aaf503837d
|
JS: Move prototype pollution into real query
|
2019-05-13 15:20:25 +01:00 |
|
Max Schaefer
|
b478c0ddaa
|
JavaScript: Further broaden the whitelist in PasswordInConfigurationFile.
|
2019-05-09 17:07:59 +01:00 |
|
Max Schaefer
|
c16e9a77f3
|
JavaScript: Fix a few false positives in PasswordInConfigurationFile.
|
2019-05-08 08:26:05 +01:00 |
|