Esben Sparre Andreasen
|
e7adb62288
|
Merge pull request #1221 from asger-semmle/contextual-typing
TS: Extract contextual type for object/array literals
|
2019-04-09 10:43:01 +02:00 |
|
Asger F
|
db9fd3f721
|
TS: update test change
|
2019-04-08 15:17:40 +01:00 |
|
semmle-qlci
|
f54366bf95
|
Merge pull request #1214 from asger-semmle/taint-addexpr-phi
Approved by esben-semmle, xiemaisi
|
2019-04-08 11:55:06 +01:00 |
|
Asger F
|
50c2921625
|
TS: Use contextual typing for literals
|
2019-04-05 18:43:51 +01:00 |
|
Asger F
|
d7bfeeefd0
|
TS: add test case with nested literals
|
2019-04-05 18:40:24 +01:00 |
|
Asger F
|
80f413177a
|
Merge branch 'master' into shelljs
|
2019-04-05 14:44:32 +01:00 |
|
Asger F
|
e55330b820
|
JS: Fix flow through +=
|
2019-04-05 13:55:48 +01:00 |
|
semmle-qlci
|
063dbeeff3
|
Merge pull request #1198 from esben-semmle/js/more-express-route-handlers
Approved by xiemaisi
|
2019-04-05 09:47:51 +01:00 |
|
Esben Sparre Andreasen
|
60ba74a210
|
JS: Express cleanup and generalization
|
2019-04-04 21:42:08 +02:00 |
|
Esben Sparre Andreasen
|
c94ca46366
|
JS: add more Express tests
|
2019-04-04 21:42:08 +02:00 |
|
Asger F
|
43f6b8fa70
|
JS: Add test
|
2019-04-04 11:44:56 +01:00 |
|
Asger F
|
3da76cb798
|
JS: add model of ShellJS
|
2019-04-04 11:44:56 +01:00 |
|
Esben Sparre Andreasen
|
3c608fe11e
|
Merge branch 'master' into js/improve-createServer
|
2019-04-03 12:37:33 +02:00 |
|
semmle-qlci
|
1da828fa80
|
Merge pull request #1195 from esben-semmle/js/firebase-express-requests
Approved by xiemaisi
|
2019-04-03 11:36:02 +01:00 |
|
Esben Sparre Andreasen
|
f23a5a5fee
|
JS: model firebase-functions/https.onRequest
|
2019-04-03 08:01:45 +02:00 |
|
Esben Sparre Andreasen
|
0b733b4f23
|
JS: treat the last argument to https.createServer as a route handler
|
2019-04-02 14:38:31 +02:00 |
|
semmle-qlci
|
02f4695a5b
|
Merge pull request #1152 from esben-semmle/js/koa-improvements
Approved by xiemaisi
|
2019-04-02 08:51:19 +01:00 |
|
semmle-qlci
|
54b4e59d12
|
Merge pull request #1182 from esben-semmle/js/sourcenode-regexp-literals
Approved by xiemaisi
|
2019-04-01 21:58:58 +01:00 |
|
Esben Sparre Andreasen
|
2622fc64db
|
JS: autoformat
|
2019-04-01 22:55:17 +02:00 |
|
Esben Sparre Andreasen
|
7fec005806
|
JS: use DataFlow::SourceNode in three locations in Koa
|
2019-04-01 22:55:17 +02:00 |
|
Esben Sparre Andreasen
|
919eed6630
|
JS: add koa tests
|
2019-04-01 22:55:17 +02:00 |
|
Esben Sparre Andreasen
|
00c8387bb3
|
JS: model Koa redirects
|
2019-04-01 22:55:17 +02:00 |
|
Esben Sparre Andreasen
|
298dbe13c4
|
JS: improve Koa model to account for aliases on the context object
|
2019-04-01 22:49:00 +02:00 |
|
Esben Sparre Andreasen
|
0e01988622
|
JS: add koa tests
|
2019-04-01 22:49:00 +02:00 |
|
Rebecca Valentine
|
2b6869fff3
|
updates expecteds to reflect changes in the test file
|
2019-04-01 11:21:21 -07:00 |
|
Rebecca Valentine
|
0d0adada42
|
fixes tests and adds test results to expecteds
|
2019-04-01 11:13:04 -07:00 |
|
Rebecca Valentine
|
a16b5d36a8
|
adds tests
|
2019-04-01 10:40:51 -07:00 |
|
semmle-qlci
|
a4de82de06
|
Merge pull request #1185 from xiemaisi/js/improve-amd-imports
Approved by asger-semmle
|
2019-04-01 16:30:47 +01:00 |
|
semmle-qlci
|
a7d9a50dcf
|
Merge pull request #1176 from xiemaisi/js/fix-socket-io-type-tracking
Approved by asger-semmle
|
2019-04-01 13:57:13 +01:00 |
|
Esben Sparre Andreasen
|
42d3012f81
|
JS: let RegExpLiteral be a DataFlow::SourceNode
|
2019-04-01 09:19:25 +02:00 |
|
Max Schaefer
|
f5279b2a1d
|
JavaScript: Resolve AMD imports based on absolute paths if there is only a single candidate.
|
2019-03-29 08:30:05 +00:00 |
|
Max Schaefer
|
b29b3dff4d
|
JavaScript: Use proper camel-case for AMD-related class names.
|
2019-03-29 08:14:07 +00:00 |
|
Max Schaefer
|
c097031c7e
|
JavaScript: Fix uses of TypeTracker with custom flow steps.
These steps need to check that the type hasn't been tracked into a property.
|
2019-03-28 10:33:04 +00:00 |
|
Asger F
|
42c0efd549
|
JS: add test
|
2019-03-27 13:21:45 +00:00 |
|
Max Schaefer
|
084159dcfd
|
JavaScript: Teach type trackers to track flow through one level of properties.
|
2019-03-25 20:38:58 +00:00 |
|
Max Schaefer
|
9fbc0eb717
|
JavaScript: Switch from path summaries to step summaries for type tracking.
This is sufficient since we are not doing summarisation.
|
2019-03-25 20:37:05 +00:00 |
|
Max Schaefer
|
55394df96f
|
JavaScript: Refactor HTTP libraries to use type tracking instead of tracked nodes.
|
2019-03-25 16:57:46 +00:00 |
|
Max Schaefer
|
74db8b1979
|
JavaScript: Use type tracking instead of tracked nodes in Express.
|
2019-03-25 16:57:46 +00:00 |
|
Max Schaefer
|
8c460ae385
|
Merge remote-tracking branch 'upstream/master' into rc/1.20-merge-master
Conflict in `javascript/extractor/src/com/semmle/js/extractor/Main.java` resolved
in favour of `master`.
|
2019-03-21 14:46:29 +00:00 |
|
Asger F
|
1a6c95c908
|
TS: update test expectation
|
2019-03-21 11:06:04 +00:00 |
|
Max Schaefer
|
6fbf487524
|
Merge remote-tracking branch 'upstream/rc/1.20' into mergeback-2019-03-19
|
2019-03-19 14:09:03 +00:00 |
|
semmle-qlci
|
cb86687302
|
Merge pull request #1078 from psygnisfive/UndefinedReturns
Approved by xiemaisi
|
2019-03-15 08:37:12 +00:00 |
|
Rebecca Valentine
|
f3683794d6
|
stylistic changes per PR change req. in description
https://github.com/Semmle/ql/pull/1078#pullrequestreview-214401005
|
2019-03-14 09:49:02 -07:00 |
|
semmle-qlci
|
d549a0dcb8
|
Merge pull request #1111 from xiemaisi/js/performance-fiddling
Approved by esben-semmle
|
2019-03-14 14:56:26 +00:00 |
|
semmle-qlci
|
7513bcf7ec
|
Merge pull request #1095 from xiemaisi/js/base64
Approved by esben-semmle
|
2019-03-14 11:58:50 +00:00 |
|
Max Schaefer
|
993345fb7b
|
JavaScript: Track Electron browser objects locally only.
|
2019-03-14 11:53:46 +00:00 |
|
Max Schaefer
|
5d35626c58
|
JavaScript: Rename a test file to avoid case clash.
|
2019-03-14 08:55:30 +00:00 |
|
Rebecca Valentine
|
f9012cb00e
|
improves tests
|
2019-03-13 10:48:02 -07:00 |
|
Max Schaefer
|
f76efcb558
|
JavaScript: Fix modelling of Buffer base64 encoders and decoders.
|
2019-03-13 12:27:23 +00:00 |
|
Robert Brignull
|
5380e1df68
|
Merge remote-tracking branch 'upstream/rc/1.20' into merge/rc/1.20
|
2019-03-13 10:55:30 +00:00 |
|