Erik Krogh Kristensen
|
fb94af9764
|
remove the last dependency on PrettyPrinting
|
2020-02-24 13:18:15 +01:00 |
|
Erik Krogh Kristensen
|
051de247b0
|
change regexpMatch to regexpFind
|
2020-02-24 13:11:30 +01:00 |
|
Erik Krogh Kristensen
|
a768e937f0
|
complete qldoc
|
2020-02-24 13:08:50 +01:00 |
|
Erik Krogh Kristensen
|
473787a426
|
refactor the getOptionsArg predicate into the SystemCommandExecution class
|
2020-02-24 12:59:20 +01:00 |
|
Asger Feldthaus
|
18974bad1c
|
TS: Add upgrade script and stats
|
2020-02-24 11:40:27 +00:00 |
|
Asger Feldthaus
|
47673c6e21
|
TS: Disable export analysis for type-only exports
|
2020-02-24 11:40:27 +00:00 |
|
Asger Feldthaus
|
8d58aad0f2
|
TS: Support type-only import/export
|
2020-02-24 11:40:27 +00:00 |
|
semmle-qlci
|
94aa77748d
|
Merge pull request #2810 from erik-krogh/CVE74
Approved by asgerf
|
2020-02-24 11:32:42 +00:00 |
|
Erik Krogh Kristensen
|
75c1852ee4
|
doc changes from review
Co-Authored-By: Esben Sparre Andreasen <esbena@github.com>
|
2020-02-24 11:58:59 +01:00 |
|
Erik Krogh Kristensen
|
44db0f4e5d
|
better printing of the options arg
|
2020-02-21 15:39:49 +01:00 |
|
Asger Feldthaus
|
d1df251b92
|
JS: Proto pollution: Add is-plain-object sanitizer
|
2020-02-21 14:38:33 +00:00 |
|
Erik Krogh Kristensen
|
90e5671d98
|
Merge branch 'master' of git.semmle.com:Semmle/ql into CVE481
|
2020-02-21 15:25:07 +01:00 |
|
Asger Feldthaus
|
b780bc4d59
|
JS: Also track into callbacks
|
2020-02-21 13:51:22 +00:00 |
|
Asger Feldthaus
|
e8e649102f
|
JS: Also propagate out of returns
|
2020-02-21 13:51:22 +00:00 |
|
Asger Feldthaus
|
8c36b999cc
|
JS: Track flow into calls to bound functions
|
2020-02-21 13:51:20 +00:00 |
|
semmle-qlci
|
ee5cf95f5b
|
Merge pull request #2892 from asger-semmle/js/field-methods
Approved by esbena
|
2020-02-21 13:49:42 +00:00 |
|
semmle-qlci
|
e163d8d8c8
|
Merge pull request #2796 from asger-semmle/js/partial-invoke-receiver
Approved by esbena
|
2020-02-21 13:48:43 +00:00 |
|
Erik Krogh Kristensen
|
75410e5760
|
big refactor of UselessUseOfCal
|
2020-02-21 14:26:42 +01:00 |
|
semmle-qlci
|
382e4bc06a
|
Merge pull request #2895 from max-schaefer/js/improve-param-qldoc
Approved by asgerf
|
2020-02-21 12:01:02 +00:00 |
|
Max Schaefer
|
75495d7aad
|
Update javascript/ql/src/semmle/javascript/Variables.qll
Co-Authored-By: Asger F <asgerf@github.com>
|
2020-02-21 10:06:32 +00:00 |
|
Erik Krogh Kristensen
|
6ea14532ab
|
small changes based on review
|
2020-02-21 10:27:57 +01:00 |
|
Max Schaefer
|
fc4afe6eb2
|
JavaScript: Improve qldoc for Parameter to clarify that it also contains catch-clause parameters.
|
2020-02-21 09:14:00 +00:00 |
|
Erik Krogh Kristensen
|
924272a7a5
|
insert placeholder qhelp
|
2020-02-20 14:35:26 +01:00 |
|
Erik Krogh Kristensen
|
b2ccec28e0
|
require the file to be non-empty
|
2020-02-20 14:34:50 +01:00 |
|
Erik Krogh Kristensen
|
b1cbfce50b
|
use SystemCommandExecution and a few small fixes
|
2020-02-20 14:17:37 +01:00 |
|
Erik Krogh Kristensen
|
03e295ef11
|
Merge branch 'master' of git.semmle.com:Semmle/ql into CVE74
|
2020-02-20 12:19:32 +01:00 |
|
semmle-qlci
|
f6af5da7f7
|
Merge pull request #2778 from erik-krogh/FalsySanitizer
Approved by asgerf
|
2020-02-20 11:17:03 +00:00 |
|
Erik Krogh Kristensen
|
63036aa444
|
Merge branch 'master' of git.semmle.com:Semmle/ql into CVE74
|
2020-02-20 12:09:06 +01:00 |
|
semmle-qlci
|
8b277f7226
|
Merge pull request #2868 from asger-semmle/js/missing-await-void
Approved by max-schaefer
|
2020-02-20 10:56:47 +00:00 |
|
Erik Krogh Kristensen
|
12c0291dde
|
require that an options object has a known set of properties
|
2020-02-20 11:35:11 +01:00 |
|
Erik Krogh Kristensen
|
b5ef45e6c2
|
add isSync predicate to SystemCommandExecution
|
2020-02-20 11:30:23 +01:00 |
|
Erik Krogh Kristensen
|
a193cb110e
|
support arrow functions in the callbacks
|
2020-02-20 11:13:39 +01:00 |
|
Erik Krogh Kristensen
|
558beb7255
|
simplify the output file argument
|
2020-02-20 10:57:33 +01:00 |
|
semmle-qlci
|
091c6c063c
|
Merge pull request #2856 from esbena/js/fix-RegExp-getPredecessor-getSuccessor
Approved by max-schaefer
|
2020-02-20 09:50:52 +00:00 |
|
Erik Krogh Kristensen
|
a5fdcb67f9
|
restricts alerts to the first line
|
2020-02-20 10:43:41 +01:00 |
|
Erik Krogh Kristensen
|
d4e73df92f
|
remove dead predicate
|
2020-02-20 10:39:16 +01:00 |
|
Erik Krogh Kristensen
|
80962803b0
|
update doc for VarAccessBarrier, and make the class private
|
2020-02-20 10:09:32 +01:00 |
|
Erik Krogh Kristensen
|
2d437efdfd
|
corrections on qldoc
Co-Authored-By: Asger F <asgerf@github.com>
|
2020-02-20 09:54:11 +01:00 |
|
Asger Feldthaus
|
479770dc07
|
JS: Recognize class members in more cases
|
2020-02-19 17:04:41 +00:00 |
|
Erik Krogh Kristensen
|
bdab9ee12b
|
change useless cat query to only flag instances that can be re-written to
|
2020-02-19 16:59:28 +01:00 |
|
Asger Feldthaus
|
77105f6572
|
JS: Do not flag void operands MissingAwait
|
2020-02-19 09:30:03 +00:00 |
|
Erik Krogh Kristensen
|
344060e139
|
accept IO redirections as OK
|
2020-02-19 10:12:24 +01:00 |
|
Max Schaefer
|
4346691cdc
|
JavaScript: Distinguish {lo} and {lo,} in the regular expression parser.
|
2020-02-19 08:26:14 +00:00 |
|
Erik Krogh Kristensen
|
73a7d406a5
|
add query for useless use of cat
|
2020-02-18 19:18:45 +01:00 |
|
Erik Krogh Kristensen
|
e359e1a373
|
use a barrier directly instead of a barrier guard
|
2020-02-18 10:57:28 +01:00 |
|
Esben Sparre Andreasen
|
abe7aeef7c
|
Merge pull request #2643 from esbena/js/unsafe-jquery
JS: add query js/unsafe-jquery-plugin
|
2020-02-18 09:26:14 +01:00 |
|
Esben Sparre Andreasen
|
e8938fb466
|
JS: introduce RegExpSequence::nextElement and previousElement
|
2020-02-17 23:20:25 +01:00 |
|
Erik Krogh Kristensen
|
2885d48ad0
|
changes based on review
|
2020-02-17 14:44:10 +01:00 |
|
Asger Feldthaus
|
9249b92d85
|
JS: Fix typo in comment
|
2020-02-17 12:48:13 +00:00 |
|
Esben Sparre Andreasen
|
8a9587fc91
|
JS: fix RegExp::getSuccessor/getPredecessor for sequence end/starts
|
2020-02-17 13:40:53 +01:00 |
|