Asger F
33e8bd5032
JS: Update testUtilities import
2024-12-19 15:25:39 +01:00
Asger F
4d7401a074
JS: Deprecate tests for deprecated APIs
...
Mainly adds 'deprecated' in front of a bunch of tests for deprecated APIs.
2024-12-03 14:30:12 +01:00
Asger F
5d2ce172eb
JS: Update a test to handle AdditionalSanitizerGuardNode
2024-10-02 14:44:42 +02:00
Asger F
6c9f4a10ac
JS: Port TaintBarriers test
2023-10-13 13:15:07 +02:00
Asger F
3691b836cb
JS: Add tests
2023-07-11 11:37:30 +02:00
Erik Krogh Kristensen
82c6c22d50
make a model for hasOwnProperty calls and similar
2022-05-24 14:13:53 +02:00
Erik Krogh Kristensen
2a97dd9f6f
add support for Object.hasOwn(obj, key)
2022-05-24 13:59:25 +02:00
Erik Krogh Kristensen
ff73dbc35c
delete redundant imports
2022-04-22 12:55:28 +02:00
Erik Krogh Kristensen
3e3e9de45f
aggregate the tests in library-tests/TaintBarriers into a single .ql file
2020-10-20 14:08:55 +02:00
Esben Sparre Andreasen
76bce40a8b
JS: test fixups
2020-05-19 13:12:34 +02:00
Esben Sparre Andreasen
b3691cd0e9
JS: change MembershipTest to MembershipCandidate
2020-05-18 11:51:00 +02:00
Esben Sparre Andreasen
ddb545c182
JS: introduce MembershipTests.qll and use in two locations
2020-05-18 09:50:00 +02:00
Asger Feldthaus
4f42675b35
JS: Autformat
2020-03-19 09:36:27 +00:00
Asger Feldthaus
a9901a44e8
JS: Update TaintBarriers/isBarrier test
2020-03-18 11:55:13 +00:00
Asger F
b407de01f8
JS: Update TaintBarriers test
2019-12-06 11:49:59 +00:00
Asger F
c373be0dee
JS: Update TaintBarriers test
2019-11-05 10:26:04 +00:00
Max Schaefer
a8470a984a
JavaScript: Generalise ConstantComparison sanitisers.
...
In addition to treating comparisons with literals as sanitisers, we now
also treat comparisons with variables that have a single assignment as
sanitisers.
Proving that such a variable is actually a constant is not easy, but for
this use case a simple approximation works fine.
2019-04-25 07:38:31 +01:00
Asger F
b8ec7083d4
JS: Update isBarrier test output
2019-04-12 16:35:01 +01:00
Anders Schack-Mulligen
e58094c732
Javascript: Autoformat.
2019-01-11 11:02:42 +01:00
Max Schaefer
fb78e14db1
JavaScript: Add support for sanitising dynamic property accesses.
...
This generalises our previous handling of sanitisers operating on property accesses to support dynamic property accesses where the property name is an SSA variable by representing them as access paths.
2018-11-28 12:37:53 +00:00
Esben Sparre Andreasen
eaad84bb4f
JS: add support for dis- and conjunctions in SanitizingFunction
2018-11-12 10:23:52 +01:00
Esben Sparre Andreasen
6d0c93b6a8
JS: introduce TaintTracking::AdditionalSanitizingCall
2018-11-12 10:21:39 +01:00
Esben Sparre Andreasen
52061b35d8
JS: address review comments: improve regex, limit sanitizer usage
2018-09-26 09:20:07 +02:00
Esben Sparre Andreasen
42fc28bc55
JS: add ad hoc whitelist checks as sanitizers
2018-09-24 11:17:35 +02:00
Esben Sparre Andreasen
20b48a2d24
JS: support relational indexof comparison sanitizers
2018-08-22 15:58:47 +02:00
Esben Sparre Andreasen
be8a32bb18
JS: add sanitizer support for ~whitelist.indexOf(x)
2018-08-20 20:32:57 +02:00
Pavel Avgustinov
b55526aa58
QL code and tests for C#/C++/JavaScript.
2018-08-02 17:53:23 +01:00
