Erik Krogh Kristensen
|
adc05022f3
|
update comment in test case
Co-authored-by: Max Schaefer <54907921+max-schaefer@users.noreply.github.com>
|
2020-09-29 18:21:41 +02:00 |
|
Erik Krogh Kristensen
|
3857331657
|
avoid .getReturn().getAUse().(DataFlow::InvokeNode) in the SQL model
|
2020-09-29 17:08:09 +02:00 |
|
Erik Krogh Kristensen
|
6b9aea82ca
|
model method calls in the needle library
|
2020-09-25 14:13:31 +02:00 |
|
Erik Krogh Kristensen
|
a22ddb145b
|
model calls to needle
|
2020-09-25 13:53:22 +02:00 |
|
Erik Krogh Kristensen
|
b4e75bf567
|
update expected output
|
2020-09-18 09:29:13 +02:00 |
|
Erik Krogh Kristensen
|
1f95311342
|
further loosen the RouteHandlerCandidate heuristic
|
2020-09-18 09:29:13 +02:00 |
|
Erik Krogh Kristensen
|
3eaa56ed60
|
support containers with decorated route handlers
|
2020-09-18 09:29:08 +02:00 |
|
Erik Krogh Kristensen
|
c087e94d47
|
add additional indirect route-handler steps
|
2020-09-18 09:26:33 +02:00 |
|
Erik Krogh Kristensen
|
02c1d689e4
|
support indirect route-handlers for NodeJS
|
2020-09-18 09:26:33 +02:00 |
|
CodeQL CI
|
951e3093d2
|
Merge pull request #4231 from erik-krogh/CVE767
Approved by asgerf
|
2020-09-15 03:47:40 -07:00 |
|
Erik Krogh Kristensen
|
bb97829e1d
|
add a model for the ClientRequest new require("net").Socket()
|
2020-09-09 09:57:53 +02:00 |
|
Erik Krogh Kristensen
|
d5097d820d
|
support direct callbacks to require("net").createServer
|
2020-09-09 09:46:17 +02:00 |
|
Max Schaefer
|
6d68036d85
|
JavaScript: Add test demonstrating more SQL flow.
|
2020-09-02 17:35:47 +01:00 |
|
CodeQL CI
|
722b1a24f6
|
Merge pull request #4087 from erik-krogh/thisJsx
Approved by asgerf
|
2020-08-25 10:20:32 +01:00 |
|
Erik Krogh Kristensen
|
eb5dfe8438
|
autoformat
|
2020-08-17 22:46:20 +02:00 |
|
Erik Krogh Kristensen
|
6f28ddf1f8
|
proper support for this inside a JSX-name
|
2020-08-17 14:23:42 +02:00 |
|
Erik Krogh Kristensen
|
0004c28fe8
|
introduce and use FunctionReturnNode
|
2020-08-07 17:32:25 +02:00 |
|
semmle-qlci
|
224289c55f
|
Merge pull request #3845 from max-schaefer/js/walk-sync
Approved by asgerf
|
2020-06-30 14:45:41 +01:00 |
|
semmle-qlci
|
c850938af0
|
Merge pull request #3833 from asger-semmle/js/vue-class-component
Approved by erik-krogh
|
2020-06-30 13:16:42 +01:00 |
|
Max Schaefer
|
62d56a3d7c
|
JavaScript: Fix module name for walk-sync package.
|
2020-06-30 11:57:16 +01:00 |
|
Asger Feldthaus
|
3e616e998e
|
JS: Add test
|
2020-06-27 21:31:40 +01:00 |
|
ubuntu
|
9135bbd5c8
|
JS: model fancy-log (and recognize the 'dir' log level)
|
2020-06-26 21:33:52 +02:00 |
|
Esben Sparre Andreasen
|
4bfce4b8a3
|
JS: model npmlog (and recognize the "verbose" log level)
|
2020-06-25 12:06:51 +02:00 |
|
semmle-qlci
|
a723ac0d8e
|
Merge pull request #3767 from esbena/js/console-member-calls
Approved by erik-krogh
|
2020-06-24 08:03:49 +01:00 |
|
Esben Sparre Andreasen
|
2d32ee7448
|
JS: support member calls of console
|
2020-06-23 10:46:01 +02:00 |
|
Asger Feldthaus
|
b4f75ef414
|
Merge branch 'master' into js-team-sprint-merge2
|
2020-06-23 00:18:09 +01:00 |
|
semmle-qlci
|
07bff646d8
|
Merge pull request #3641 from asger-semmle/js/pre-call-graph-steps
Approved by erik-krogh
|
2020-06-16 13:41:55 +01:00 |
|
semmle-qlci
|
3728e1afd3
|
Merge pull request #3715 from asger-semmle/js/returned-functions
Approved by erik-krogh, esbena
|
2020-06-15 15:32:54 +01:00 |
|
Asger Feldthaus
|
17010e25a1
|
JS: Update another test
|
2020-06-15 13:55:46 +01:00 |
|
Asger Feldthaus
|
c4179eb81d
|
JS: Update test
|
2020-06-15 11:13:20 +01:00 |
|
Asger Feldthaus
|
315f3389d1
|
JS: Autoformat test
|
2020-06-12 19:58:05 +01:00 |
|
Asger Feldthaus
|
5548606f21
|
JS: Add test
|
2020-06-12 13:02:33 +01:00 |
|
Asger Feldthaus
|
53280a6b11
|
JS: Add test demonstrating new flow
|
2020-06-08 14:25:21 +01:00 |
|
Esben Sparre Andreasen
|
872ee13ba6
|
JS: formatting
|
2020-06-08 10:04:37 +02:00 |
|
Esben Sparre Andreasen
|
fa35a6a694
|
JS: formatting
|
2020-06-08 08:13:58 +02:00 |
|
Esben Sparre Andreasen
|
f618d430e7
|
JS: simplify HTTP::ContainerCollection, and improve expressivity(!)
|
2020-06-04 14:34:52 +02:00 |
|
Esben Sparre Andreasen
|
44ebf84f4c
|
JS: more express tests
|
2020-06-04 14:33:03 +02:00 |
|
Esben Sparre Andreasen
|
afee864295
|
JS: make use of the colletions type tracking steps
|
2020-06-03 08:19:34 +02:00 |
|
Esben Sparre Andreasen
|
36b7574ac1
|
JS: add additional route handler registration tests
|
2020-06-03 08:18:11 +02:00 |
|
Esben Sparre Andreasen
|
117f009d17
|
JS: use HTTP::RouteHandlerCandidateContainer in Express
|
2020-06-03 08:18:11 +02:00 |
|
Esben Sparre Andreasen
|
606f8274c7
|
JS: add tests for various route handler registration patterns
|
2020-06-03 08:16:58 +02:00 |
|
Esben Sparre Andreasen
|
b31f83a5af
|
JS: fixup expected output
|
2020-05-21 13:47:16 +02:00 |
|
Esben Sparre Andreasen
|
c400b45cd6
|
JS: make the Fastify model support isUserControlledObject
|
2020-05-21 13:42:28 +02:00 |
|
Esben Sparre Andreasen
|
a76c70d2d7
|
JS: model fastify
|
2020-05-21 13:42:27 +02:00 |
|
Asger Feldthaus
|
9581bb52cb
|
JS: Update test output
|
2020-05-18 22:45:59 +01:00 |
|
Asger F
|
96d6115452
|
Merge branch 'master' into js/sql-type-tracking
|
2020-05-18 15:58:42 +01:00 |
|
Asger Feldthaus
|
5249e84359
|
JS: Type track spanner model
|
2020-05-15 17:27:30 +01:00 |
|
Asger Feldthaus
|
d225715828
|
JS: Type track mssql model
|
2020-05-15 17:27:30 +01:00 |
|
Asger Feldthaus
|
6dcee5a0ef
|
JS: Type track sqlite model
|
2020-05-15 17:27:30 +01:00 |
|
Asger Feldthaus
|
84cd02cf01
|
JS: Type track pg model
|
2020-05-15 17:27:27 +01:00 |
|