Asger F
8c5b6b256b
JS: Remove globalFlowPred()
2019-08-30 18:19:18 +01:00
Asger F
96d9e66ced
JS: cache things
2019-08-30 18:19:18 +01:00
Asger F
313579c258
JS: Restrict flow to access paths assigned in a unique file
2019-08-30 18:19:18 +01:00
Asger F
48b70c4f1d
JS: Add type-tracking test case
2019-08-30 18:19:18 +01:00
Asger F
7315a2baee
JS: Make type tracking work through access paths
2019-08-30 18:19:18 +01:00
Asger F
2105e0bdee
JS: use JSDoc types in class tracking
2019-08-30 18:19:18 +01:00
Asger F
6b05aa129c
JS: Use global access paths to recognize .prototype
2019-08-30 18:19:18 +01:00
Asger F
f219598281
JS: Update DeclarationFiles test
2019-08-30 16:02:42 +01:00
Asger F
5874c14a9c
JS: Avoid materializing JSONValue.getFile()
2019-08-30 16:02:42 +01:00
Asger F
6c0f9be6df
JS: Avoid materializing HTML::Element.getFile()
2019-08-30 16:02:42 +01:00
Asger F
33267067e0
JS: Deprecate and remove path resolution for reference comments
2019-08-30 16:02:42 +01:00
Asger F
fa3532ca8c
TS: Handle locally defined packages
2019-08-30 16:02:42 +01:00
Asger F
d8cda5e268
JS: Add Firebase test with types
2019-08-30 16:02:41 +01:00
Asger F
ec81e368da
JS: Use type info in Firebase model
2019-08-30 16:02:41 +01:00
Asger F
efa7e1112b
JS: Add Node.hasUnderlyingType
2019-08-30 16:02:41 +01:00
Max Schaefer
b6220998d1
JavaScript: Restrict setAttribute sink to potentially dangerous attribute names.
2019-08-30 11:57:29 +01:00
Max Schaefer
78ce290de3
JavaScript: Fix DomMethodCallExpr.interpretsArgumentsAsHTML.
2019-08-28 11:22:03 +01:00
semmle-qlci
fc59dd6819
Merge pull request #1788 from asger-semmle/additional-type-tracking-step
...
Approved by xiemaisi
2019-08-24 11:55:16 +01:00
Pavel Avgustinov
da29d99560
Merge branch 'master' of github.com:Semmle/ql into attribute
2019-08-23 21:47:31 +01:00
semmle-qlci
af469fdeb8
Merge pull request #1773 from xiemaisi/js/undocumented-parameter-precision
...
Approved by esben-semmle
2019-08-23 21:29:10 +01:00
Pavel Avgustinov
cc854dd937
Merge branch 'master' of github.com:Semmle/ql into attribute
2019-08-23 09:55:35 +01:00
semmle-qlci
cf24c9ff4a
Merge pull request #1804 from asger-semmle/template-literal-tag
...
Approved by esben-semmle
2019-08-23 09:37:38 +01:00
Asger F
45d4b83fc8
TS: Extract type args to tagged template exprs
2019-08-22 18:07:29 +01:00
Asger F
fd7cfedf4b
JS: Add AdditionalTypeTrackingStep
2019-08-21 13:44:03 +01:00
Max Schaefer
d105de81a3
JavaScript: Raise precision of UndocumentedParameter to high.
...
This is more consistent with the other JSDoc queries. Results are still not shown on LGTM by default, but the query can now be enabled selectively for projects that care about JSDoc.
2019-08-20 09:32:00 +01:00
Asger F
ad67015720
JS: Address comments
2019-08-19 10:57:26 +01:00
Pavel Avgustinov
ca951f1669
Add jquery-datatables license to make it clear which option we choose
2019-08-17 16:31:18 +01:00
Max Schaefer
020d31c3b6
JavaScript: Fix inconisstency in TaintedPath.qhelp.
2019-08-12 10:29:41 +01:00
Max Schaefer
80cfe070d4
JavaScript: Fix inconsistency in MissingRegExpAnchor.qhelp.
2019-08-12 10:29:21 +01:00
Max Schaefer
d2f4575978
JavaScript: Expand qldoc for {Barrier,Sanitizer}GuardNode.
2019-08-09 14:19:53 +01:00
semmle-qlci
6c3d1d676b
Merge pull request #1694 from asger-semmle/concatenation-operand
...
Approved by xiemaisi
2019-08-08 12:41:30 +01:00
semmle-qlci
7482233a02
Merge pull request #1693 from asger-semmle/request-response
...
Approved by esben-semmle, xiemaisi
2019-08-08 12:40:35 +01:00
Asger F
d83f152f39
JS: Address review comments
2019-08-07 10:53:17 +01:00
Asger F
5e87d5c751
JS: Update syntactic heuristics
2019-08-07 10:53:17 +01:00
Asger F
f173e3024a
JS: Add getConstantStringParts() and HTML concat node
2019-08-07 10:53:17 +01:00
Asger F
f101944c92
JS: Expand on the StringOps::Concatenation API
2019-08-07 10:53:17 +01:00
Asger F
687534e647
JS: Address review comments
2019-08-07 10:47:08 +01:00
Asger F
41bdd8a7cc
JS: Fix qldoc indentation
2019-08-07 10:38:22 +01:00
semmle-qlci
d0a761477b
Merge pull request #1704 from xiemaisi/js/fix-export-default-examples
...
Approved by asger-semmle
2019-08-07 09:34:36 +01:00
Asger F
2df0b08b26
JS: Add test with header access
2019-08-06 15:43:39 +01:00
Asger F
075e47dce2
JS: Add header/headers response type
2019-08-06 15:42:22 +01:00
Asger F
ea4bfda2d1
JS: Add predicate that disappeared during conflict resolution
2019-08-06 15:33:33 +01:00
Asger F
c4006be0e8
JS: Add more axios tests
2019-08-06 15:28:53 +01:00
Asger F
af7b942eec
JS: Add newline in test
2019-08-06 15:28:53 +01:00
Asger F
4fb3fd992d
JS: Address comments
2019-08-06 15:28:53 +01:00
Asger F
55ab7e6abf
JS: Add qldoc
2019-08-06 15:28:53 +01:00
Asger F
64f1260220
JS: Rename getResponseFormat => getResponseType
2019-08-06 15:28:53 +01:00
Asger F
7fb6615970
JS: Test for XhrIo
2019-08-06 15:28:53 +01:00
Asger F
4eb072a376
JS: Test for 'superagent' package
2019-08-06 15:28:53 +01:00
Asger F
ce4f098625
JS: Test for 'got' package
2019-08-06 15:28:52 +01:00