Asger F
7a27ccdaf3
JS: Move a comment
2019-07-31 08:19:26 +01:00
Asger F
ea563f8b97
JS: Rephrase dead store of local at declaration site
2019-07-30 18:02:27 +01:00
Asger F
378b0bfb74
JS: Do not treat the empty string as a credential
2019-07-30 17:29:12 +01:00
Max Schaefer
3e6629d007
JavaScript: Deprecate multi-argument isBarrier and isSanitizer predicates.
...
We informally deprecated them in 1.21, this commit deprecates them properly and removes support from the implementation. The predicates themselves will be removed in a future release.
2019-07-30 16:32:08 +01:00
Max Schaefer
7b3c835bc6
JavaScript: Fix semantic merge conflict.
...
https://github.com/Semmle/ql/pull/1621 vs https://github.com/Semmle/ql/pull/1613
2019-07-30 12:34:30 +01:00
semmle-qlci
0f9a286284
Merge pull request #1621 from asger-semmle/no-recursive-import
...
Approved by xiemaisi
2019-07-30 11:25:11 +01:00
semmle-qlci
d63e53f3a4
Merge pull request #1628 from asger-semmle/self-globalobj
...
Approved by xiemaisi
2019-07-30 11:23:54 +01:00
Max Schaefer
d3016593e4
JavaScript: Remove extra backslashes in MissingRegExpAnchor.qhelp.
2019-07-29 15:23:09 +01:00
semmle-qlci
3dfc697585
Merge pull request #1642 from xiemaisi/json_locations
...
Approved by asger-semmle
2019-07-29 14:55:33 +01:00
semmle-qlci
904c94ec9e
Merge pull request #1644 from xiemaisi/js/more-examples
...
Approved by asger-semmle
2019-07-29 14:36:20 +01:00
Max Schaefer
d282ba04ae
JavaScript: Add concrete syntax examples to JSDoc, RegExp, Tokens, Variables and XML.
2019-07-29 12:17:25 +01:00
Max Schaefer
fcf35dc3c2
JavaScript: Add configuration-file snippet to dbscheme.
2019-07-29 10:46:56 +01:00
semmle-qlci
143016ed96
Merge pull request #1635 from xiemaisi/js/dont-taint-for-in
...
Approved by asger-semmle
2019-07-26 08:32:14 +01:00
Max Schaefer
2e760bf5b5
JavaScript: Add upgrade script.
2019-07-25 16:52:44 +01:00
Max Schaefer
9a00f4d0f0
JavaScript: store YAML locations in yaml_locations table instead of hasLocation.
2019-07-25 16:52:44 +01:00
Max Schaefer
37cb4e4023
JavaScript: Add upgrade script.
2019-07-25 16:52:44 +01:00
Max Schaefer
6b3abbbde5
JavaScript: Store JSON locations in json_locations table instead of hasLocation.
2019-07-25 16:52:44 +01:00
semmle-qlci
137427fc40
Merge pull request #1613 from asger-semmle/canonical-name-defs
...
Approved by xiemaisi
2019-07-24 18:51:08 +01:00
Asger F
6f158182d1
JS: Add self as global object alias
2019-07-24 17:10:59 +01:00
semmle-qlci
2a292c7dee
Merge pull request #1626 from xiemaisi/js/more-examples
...
Approved by asger-semmle
2019-07-24 14:15:04 +01:00
Max Schaefer
74397daeb8
JavaScript: Add concrete syntax examples to ES2015Modules, Externs, JSON, YAML.
2019-07-24 11:56:11 +01:00
semmle-qlci
29e49ae9b2
Merge pull request #1620 from asger-semmle/hardcoded-creds-import
...
Approved by xiemaisi
2019-07-24 09:57:12 +01:00
Asger F
ff8529d3ec
JS: Address comments
2019-07-23 17:14:56 +01:00
Asger F
1c3ce09607
JS: Downgrade the contract for getImmediatePredecessor
2019-07-23 17:14:56 +01:00
Asger F
28efadea73
JS: Use defSourceNode from getRhsNode
2019-07-23 17:14:56 +01:00
Asger F
747c320c35
JS: cache getEnclosingContainer
2019-07-23 17:14:56 +01:00
Asger F
498e4d2d57
JS: Avoid materializing DataFlow::Node.getFile
2019-07-23 17:14:56 +01:00
Asger F
d8165d0313
JS: Restrict importLookup to ASTNode
2019-07-23 17:14:56 +01:00
Asger F
421ad89bf9
JS: Fix join order
2019-07-23 17:14:56 +01:00
Asger F
e39725114a
JS: Add jsdoc type lookup to definitions.ql
2019-07-23 17:14:56 +01:00
Asger F
197b4d5637
JS: Add TypeAnnotation.getClass
2019-07-23 17:14:56 +01:00
Asger F
106539c495
JS: Compute qualified name of classes
2019-07-23 17:14:56 +01:00
Asger F
44f7e2d5c5
JS: Handle IIFE parameters
2019-07-23 17:14:56 +01:00
Asger F
225e96ddc3
JS: Resolve qualified name of JSDoc types
2019-07-23 17:08:02 +01:00
Asger F
13da242576
JS: Add GlobalAccessPaths library
2019-07-23 17:08:02 +01:00
Asger F
aded18b7dd
JS: Add DataFlow::Node.getImmediatePredecessor()
2019-07-23 17:08:02 +01:00
Asger F
c97b9af4b8
JS: Add SsaExplicitDefinition.getRhsNode
2019-07-23 17:08:02 +01:00
semmle-qlci
8b60314d85
Merge pull request #1617 from asger-semmle/documentable
...
Approved by xiemaisi
2019-07-23 14:55:51 +01:00
Max Schaefer
8b3e647ae9
JavaScript: Do not taint for-in loop variable.
2019-07-23 10:52:55 +01:00
Asger F
e98061a2e9
JS: Do not recursively import javascript into DataFlow:: scope
2019-07-23 00:03:14 +01:00
Asger F
ce095d0681
JS: Avoid unnecessary import of configuration
2019-07-22 23:10:34 +01:00
semmle-qlci
247848c931
Merge pull request #1577 from asger-semmle/infername
...
Approved by xiemaisi
2019-07-22 21:01:48 +01:00
semmle-qlci
2d82a5517f
Merge pull request #1608 from asger-semmle/thisnode-basicblock
...
Approved by xiemaisi
2019-07-18 17:03:29 +01:00
Asger F
1e451bc541
JS: Restrict Expr.getDocumentation()
2019-07-18 13:14:23 +01:00
Asger F
e9c03c9820
JS: Implement getBasicBlock() for exceptional nodes
2019-07-18 10:01:28 +01:00
Asger F
3347b7d977
JS: Implement ThisNode.getBasicBlock
2019-07-18 09:25:19 +01:00
Max Schaefer
ae07546026
JavaScript: Add syntax examples to Comments.qll, E4X.qll, Functions.qll, HTML.qll and NodeJS.qll.
2019-07-17 13:03:45 +01:00
Asger F
b2fcea4fd2
JS: Allow PropAccess when guessing name
2019-07-16 17:29:56 +01:00
Asger F
1c2d874c55
JS: Quantify of ValueProperty instead of Property
2019-07-16 16:27:11 +01:00
Asger F
4e77a368c3
JS: Avoid having multiple names again
2019-07-16 16:23:27 +01:00