3047 Commits

Author	SHA1	Message	Date
Asger Feldthaus	52279d4bea	JS: Rename some test predicates to reflect reality	2021-03-23 14:53:13 +00:00
Asger Feldthaus	fae907df65	JS: Update some uses in tests	2021-03-23 14:53:13 +00:00
Asger Feldthaus	23d2f11840	JS: Handle inheritance	2021-03-23 14:39:37 +00:00
Asger Feldthaus	3d94ccf5dd	JS: Support accessor-calls in object literals via local flow	2021-03-23 14:16:06 +00:00
Erik Krogh Kristensen	b565e3de91	expand outDir support in tsconfig files	2021-03-19 23:13:51 +01:00
Asger Feldthaus	405c1f3fc7	JS: Update test suite	2021-03-19 16:45:31 +00:00
Asger Feldthaus	6ca425f033	JS: Implement new metric queries for line counting	2021-03-19 16:34:29 +00:00
Erik Krogh Kristensen	84e9229386	Merge branch 'main' into koa	2021-03-19 16:56:15 +01:00
Erik Krogh Kristensen	8949b9eb0a	add shell interpreted arrays as sinks for js/shell-command-constructed-from-input	2021-03-19 15:59:06 +01:00
CodeQL CI	3b117f5218	Merge pull request #5419 from erik-krogh/forgery ... Approved by asgerf	2021-03-19 12:56:53 +00:00
Asger F	2f3d516413	JS: Track flow into ES accessors	2021-03-19 11:11:25 +00:00
Asger F	4f46908224	JS: Add test with ES getters/setters	2021-03-19 11:07:15 +00:00
CodeQL CI	fc7f19f900	Merge pull request #5433 from erik-krogh/clientSocket ... Approved by esbena	2021-03-19 02:12:19 -07:00
Erik Krogh Kristensen	d489d63b8e	recognize object transformations in module.exports when looking for library inputs	2021-03-18 20:54:33 +01:00
Erik Krogh Kristensen	28ad667578	add model for async-execute	2021-03-18 19:40:46 +01:00
Erik Krogh Kristensen	58617c5c59	recognize client websockets as ClientRequests	2021-03-18 19:08:39 +01:00
Erik Krogh Kristensen	6bab41ce8b	Merge pull request #5350 from JarLob/actions ... github actions queries	2021-03-18 14:46:25 +01:00
Erik Krogh Kristensen	67a5831ac0	update expected output	2021-03-18 13:59:44 +01:00
Asger Feldthaus	e30fa89405	JS: Update more test expectations	2021-03-18 10:04:39 +00:00
Erik Krogh Kristensen	8b931626ce	add edge from root type MkHasUnderlyingType	2021-03-18 11:04:08 +01:00
Erik Krogh Kristensen	3995ff322d	add models for koa-route and koa-router	2021-03-17 19:17:20 +01:00
Asger Feldthaus	e4d891cab5	JS: Add tests for flow through replace	2021-03-17 15:20:40 +00:00
Asger Feldthaus	9cfbb90591	JS: Add test case for insufficient replace-sanitizer	2021-03-17 15:20:40 +00:00
CodeQL CI	7c20c4a664	Merge pull request #5396 from asgerf/js/shared-taint-step ... Approved by erik-krogh, esbena	2021-03-17 08:07:20 -07:00
CodeQL CI	d95b295e52	Merge pull request #5400 from erik-krogh/replaceCallbacks ... Approved by asgerf	2021-03-17 06:42:34 -07:00
Asger Feldthaus	d74e84abd8	JS: Remove or update some mentions of AdditionalTaintStep	2021-03-17 13:29:17 +00:00
Asger Feldthaus	332ee40984	JS: Autoformat	2021-03-17 13:29:17 +00:00
Asger Feldthaus	0675066ab9	JS: Fixup UriLibraries test	2021-03-17 13:29:17 +00:00
Asger Feldthaus	80bc5d921b	JS: Update Vue test	2021-03-17 13:29:16 +00:00
Asger Feldthaus	4746670ac6	JS: UriLibraryStep	2021-03-17 13:26:00 +00:00
Asger Feldthaus	dbb8aaeb0b	JS: Remove a column from UriLibraryStep test case	2021-03-17 13:26:00 +00:00
Erik Krogh Kristensen	2f3869f41b	add model for puppeteer	2021-03-17 10:03:51 +01:00
Asger Feldthaus	97b8e35426	JS: Update test expectations	2021-03-16 15:09:01 +00:00
Asger Feldthaus	710cca5395	JS: Update expectations with new sources	2021-03-16 13:28:12 +00:00
Asger Feldthaus	aa1c8c041e	JS: Exclude client-side sources from RegExpInjection	2021-03-16 13:28:11 +00:00
Asger Feldthaus	2e57a7d3e9	JS: Add ClientSideRemoteFlowSource	2021-03-16 13:28:09 +00:00
CodeQL CI	40acb95105	Merge pull request #5397 from erik-krogh/globalSanitizer ... Approved by asgerf	2021-03-16 05:37:32 -07:00
Erik Krogh Kristensen	3640bbd466	add test for IncompleteHtmlAttributeSanitization	2021-03-16 13:25:27 +01:00
Jaroslav Lobačevski	de6ed1dcb9	File rename	2021-03-15 18:34:10 +02:00
Jaroslav Lobačevski	a823baabfb	Ranamed to CWE-094	2021-03-15 18:24:08 +02:00
CodeQL CI	9268050eb8	Merge pull request #5369 from erik-krogh/tempObjInj ... Approved by asgerf	2021-03-15 05:23:55 -07:00
CodeQL CI	a9c292e265	Merge pull request #5391 from erik-krogh/additionalXss ... Approved by asgerf	2021-03-15 04:50:54 -07:00
Erik Krogh Kristensen	1dcfc3840d	add test	2021-03-12 16:25:33 +01:00
CodeQL CI	cb6ee547ca	Merge pull request #5379 from asgerf/js/d3 ... Approved by erik-krogh	2021-03-12 06:49:48 -08:00
Asger Feldthaus	a2d1e88bb3	JS: Update more test expectations	2021-03-12 12:57:21 +00:00
Erik Krogh Kristensen	d7b0f628a1	add test	2021-03-12 00:03:20 +01:00
Asger Feldthaus	a03cb11257	JS: Include $().prop() source in XssThroughDom	2021-03-11 16:27:31 +00:00
Asger Feldthaus	18cfe72e99	JS: Add model of d3	2021-03-11 10:05:05 +00:00
CodeQL CI	25f4b76788	Merge pull request #5045 from erik-krogh/bindRoute ... Approved by asgerf	2021-03-11 01:39:26 -08:00
Erik Krogh Kristensen	c993f9a3a3	add instance methods in the same class to localFieldStep	2021-03-10 15:19:07 +01:00