67 Commits

Author	SHA1	Message	Date
Asger Feldthaus	0496642b0b	JS: Add test for captured flow into callback	2020-12-07 10:34:27 +00:00
Erik Krogh Kristensen	65a1769d43	Merge branch 'main' into asyncCalls	2020-08-21 14:58:27 +02:00
Erik Krogh Kristensen	9bcac10d9e	summarize exceptions thrown by immidiatly awaited function calls	2020-08-10 13:28:25 +02:00
Erik Krogh Kristensen	aab2e6f803	update name of test file	2020-08-07 18:20:22 +02:00
Erik Krogh Kristensen	cc94c5ec60	remove imprecise return-flow from async functions	2020-08-07 17:33:24 +02:00
Erik Krogh Kristensen	f70cb2e7b3	add test for new JSON serializers	2020-08-05 12:14:56 +02:00
Asger Feldthaus	06dd3ab2ca	JS: Propagate into RegExp.$x	2020-06-26 18:58:43 +01:00
Esben Sparre Andreasen	f9ed64fc45	Merge branch 'master' into js/membershiptest	2020-06-02 08:54:44 +02:00
Asger Feldthaus	75be3b7ecb	JS: Add test case for missed captured flow	2020-05-21 16:14:13 +01:00
Esben Sparre Andreasen	ddb545c182	JS: introduce MembershipTests.qll and use in two locations	2020-05-18 09:50:00 +02:00
Asger Feldthaus	0edb765958	JS: Split test case function in two	2020-03-18 11:55:13 +00:00
Asger Feldthaus	a195429471	JS: Add test with non-guard sanitizer	2020-03-18 11:55:12 +00:00
Asger Feldthaus	83606e7b60	JS: Dont use data label in taint-tracking configs	2020-03-18 11:55:12 +00:00
Asger Feldthaus	98524556c3	JS: Add some tests	2020-03-03 11:32:23 +00:00
Asger Feldthaus	b780bc4d59	JS: Also track into callbacks	2020-02-21 13:51:22 +00:00
Asger Feldthaus	e8e649102f	JS: Also propagate out of returns	2020-02-21 13:51:22 +00:00
Erik Krogh Kristensen	2865723059	add test for new barrier	2020-02-06 15:44:33 +01:00
Asger Feldthaus	b306571d52	JS: Type-track react component factories	2020-01-28 10:22:04 +00:00
Asger F	142c83f38f	JS: Add negative dominance test	2020-01-06 11:37:21 +00:00
Asger F	aa6572b5c8	JS: Sanitize phi edges from barrier guards	2020-01-06 11:37:21 +00:00
Asger F	0b04f0d8f7	JS: Add test case for phi input	2020-01-06 11:37:20 +00:00
Asger F	f48d16fcb7	JS: Support barrier guards that are reflective calls	2019-11-01 15:23:38 +00:00
Asger F	e2b0ec5696	JS: Handle multiple and/or operators in SanitizerFunction	2019-11-01 15:23:38 +00:00
Asger F	9f2f10fa15	JS: Make type inference flow go through ssa definition node	2019-09-02 16:45:06 +01:00
Asger F	9e949d0f44	JS: Add taint step through destructuring for-of loop	2019-08-02 20:35:21 +01:00
Asger F	cf23c50f0c	JS: Add convenience layer ... Adds getASpreadArgument() and defines getCalleeName() for reflective calls to be the name of the property being invoked, if there is one.	2019-07-11 10:55:28 +01:00
Asger F	83908464e0	JS: more taint steps through array manipulation	2019-07-11 10:55:28 +01:00
Asger F	aa4d28028e	JS: Add test	2019-06-25 14:15:06 +01:00
semmle-qlci	0fa06e5c8d	Merge pull request #1180 from asger-semmle/tainted-path-squashed ... Approved by xiemaisi	2019-05-30 17:20:19 +01:00
Asger F	1ec3475457	JS: All of TaintedPath	2019-05-23 09:23:47 +01:00
Asger F	de2f323172	JS: Mark unused parameter nodes as incomplete	2019-05-21 16:53:39 +01:00
Asger F	69dbbcf1c8	JS: Mark destructuring nodes as incomplete	2019-05-21 16:52:35 +01:00
Asger F	faa47029d5	JS: Mark exceptional nodes as incomplete	2019-05-21 13:51:59 +01:00
Asger F	68ae409947	JS: Test for mismatch between taint and type inference	2019-05-21 13:26:02 +01:00
Asger F	87e0831872	JS: Fix flow for nested destructurings	2019-05-20 09:22:02 +01:00
Asger F	a3cf07af7e	JS: Add flow steps through iteration callback	2019-05-07 13:52:31 +01:00
Asger F	e7bf485807	JS: Add another interprocedural flow test case	2019-05-07 10:33:01 +01:00
Asger F	3cbd6d3786	JS: Test case for nested statements	2019-05-07 10:26:30 +01:00
Asger F	f3a4acf0b2	JS: Add async functions to test	2019-05-07 10:11:42 +01:00
Asger F	1f897b4b63	JS: step through Error constructor and accept the potential FP	2019-05-07 10:11:41 +01:00
Asger F	f3c80c738e	JS: Unify access paths for captured variables	2019-04-18 11:27:15 +01:00
Asger F	e543097c45	JS: Add test	2019-04-18 11:26:39 +01:00
Asger F	b36075ca46	JS: step through refinements in AccessPaths	2019-04-12 11:12:50 +01:00
Asger F	720555be45	JS: Add test case	2019-04-12 11:11:26 +01:00
Asger F	e55330b820	JS: Fix flow through +=	2019-04-05 13:55:48 +01:00
Max Schaefer	c8a37297f3	Merge pull request #997 from asger-semmle/closure-promise ... JS: model of closure Promises	2019-02-28 10:05:12 +00:00
Max Schaefer	1b5887014b	Merge pull request #988 from asger-semmle/spread-taint-step ... JS: add taint step through object/array spread operators	2019-02-28 09:58:23 +00:00
Asger F	3d400cc57f	JS: basic model of closure Promises	2019-02-27 11:58:51 +00:00
Asger F	29d2d620e4	JS: add taint step through object/array spread operators	2019-02-26 11:43:59 +00:00
Asger F	93440014a0	JS: only propagate through first argument of truncate()	2019-02-25 17:11:55 +00:00