Owen Mansel-Chan
de7723f214
Add SPURIOUS and MISSING tags
2026-07-05 17:41:06 +01:00
Owen Mansel-Chan
5c2e5bfe8e
Convert qlref tests to inline expectations
2026-07-05 17:41:04 +01:00
tonghuaroot
e93bc11f6f
Add experimental JS query for SSRF guards missing IPv6-transition unwrap
...
Add javascript/ssrf-ipv6-transition-incomplete-guard, an experimental
@kind problem query that flags hand-rolled SSRF host guards which reject
private/loopback IPv4 ranges but never unwrap IPv6-transition forms
(IPv4-mapped ::ffff:, NAT64 64:ff9b::, 6to4 2002::). Such guards can be
bypassed by wrapping an internal IPv4 address in a transition literal.
Includes a .qhelp with good/bad examples, a change note, and a test pack
with two true-positive fixtures (private-ip package guard and a
hand-written RFC 1918 denylist) and two negative-control fixtures
(ipaddr.js range classifier and an explicit ::ffff: unwrap).
Signed-off-by: tonghuaroot <23011166+tonghuaroot@users.noreply.github.com >
2026-06-06 21:47:24 +08:00
Asger F
cc8fe10801
JS: Update locations in expected files
2025-08-29 12:03:11 +02:00
Asger F
8818fcc207
JS: Benign test output changes
2024-11-26 15:47:13 +01:00
Asger F
d52bc971b8
Merge branch 'main' into js/shared-dataflow-merge-main
2024-11-20 14:05:03 +01:00
Napalys Klicius
1eabb6cbdd
Update javascript/ql/test/experimental/Security/CWE-918/check-regex.js
...
Co-authored-by: Erik Krogh Kristensen <erik-krogh@github.com >
2024-11-11 15:40:22 +01:00
Napalys
514375dbf9
Fixes false positives from commit 42600c93ff
2024-11-07 13:00:54 +01:00
Napalys
42600c93ff
Added tests which shows false positive SSRF via matchAll
2024-11-07 11:40:20 +01:00
Napalys
449cee91c8
Fixes false positives from commit 445552d3b53ec9592e8e3892cb337d1004b6a432
2024-11-07 10:33:13 +01:00
Napalys
4106663d89
Added tests for regex sanitization to identify false positives matchAll
2024-11-07 10:27:58 +01:00
Asger F
53efb5837b
JS: Update some tests with provenance columns
...
Only includes the changes that purely contain the new provenance columns
2024-06-26 13:51:44 +02:00
Asger F
449ec72dbe
JS: Port experimental queries
2023-10-13 13:15:03 +02:00
Erik Krogh Kristensen
2f8c9a5a2c
Merge pull request #12171 from erik-krogh/reg-dot
...
JS: dont recognize regexps that match dot as sanitizers
2023-02-14 14:10:44 +01:00
erik-krogh
4140598769
update expected output for experimental query
2023-02-14 00:08:13 +01:00
erik-krogh
49f5e89f36
update expected output for experimental query
2023-01-23 22:29:49 +01:00
erik-krogh
368f84785b
fix some more style-guide violations in the alert-messages
2022-10-07 11:22:22 +02:00
luciaromeroML
1f2618b893
new test case for unknown base url
2021-09-27 17:37:11 -03:00
Nati Pesaresi
629efb85fb
ternary operator
2021-09-02 17:55:09 -03:00
valeria-meli
0b5c8909dd
tests
2021-08-03 18:00:49 -03:00
