Asger F
|
3acd4814de
|
Merge branch 'main' into js/shared-dataflow-merge-main
|
2024-12-19 10:14:38 +01:00 |
|
Napalys
|
64c45debdb
|
JS: removed unnecessary getALocalSource from ArrayCallBackDataFlowStep
|
2024-11-20 14:57:00 +01:00 |
|
Napalys
|
9dbf7d1828
|
JS: removed unnecessary getALocalSource from ArrayCallBackDataTaintStep
|
2024-11-20 14:54:06 +01:00 |
|
Asger F
|
d52bc971b8
|
Merge branch 'main' into js/shared-dataflow-merge-main
|
2024-11-20 14:05:03 +01:00 |
|
Napalys
|
28ead4011a
|
JS: Add: taint step to handle propagation of data flow from the array to callback
|
2024-11-19 14:15:15 +01:00 |
|
Napalys
|
c03d69af1e
|
JS: Add: dataflow step for find, findLast, findLastIndex callback functions
|
2024-11-19 09:42:11 +01:00 |
|
Napalys
|
1b0f8aa657
|
JS: removed unnecessary findlast module import
|
2024-11-19 09:30:05 +01:00 |
|
Napalys
|
fcb65534a8
|
JS: Add: Array.protype.findLast as taint step
|
2024-11-15 14:10:01 +01:00 |
|
Napalys
|
bed1f25b3f
|
JS: Fix: Now Array.prototype.with is properly flagged as taint step
|
2024-11-15 10:35:34 +01:00 |
|
Napalys Klicius
|
6fa3ff39a0
|
Merge branch 'main' into napalys/toSpliced-support
|
2024-11-14 16:56:32 +01:00 |
|
Napalys
|
84234d59b9
|
JS: Fix: Ensure toSpliced with spread operator is flagged
|
2024-11-13 17:21:34 +01:00 |
|
Napalys
|
2df3d1b251
|
JS: Fix: Ensure toSpliced is flagged by taint tracking in test suite (ed44358143)
|
2024-11-13 15:58:20 +01:00 |
|
Napalys
|
df4b596180
|
Added toSpliced as part ArraySliceStep and ArraySpliceStep, fixed tests from 2d9bc43506
|
2024-11-13 13:47:34 +01:00 |
|
Napalys
|
b4c84d3d3c
|
Added taint step for toSpliced, handles test from a65f80ef76
|
2024-11-13 12:41:41 +01:00 |
|
Napalys
|
7427a24ca1
|
Added test case for Array.prototype.toReversed, which is currently not flagged as a taint sink.
|
2024-11-12 12:02:37 +01:00 |
|
Napalys
|
3f0a54c2e8
|
Added support for Array.prototype.toSorted function
|
2024-11-12 12:02:04 +01:00 |
|
Napalys Klicius
|
42f7f73ae1
|
Update ArrayInPlaceManipulationTaintStep documentation
|
2024-11-11 15:38:57 +01:00 |
|
Napalys
|
81bc7cd19f
|
Refactored SortTaintStep to ArrayInPlaceManipulationTaintStep to support both sort and reverse functions. Fixed newly added test case. from 8026a99db7
|
2024-11-11 08:32:03 +01:00 |
|
Napalys
|
f1c6dc1d9b
|
Moved SortTaintStep to more appropriate home TaintTracking->Arrays
|
2024-11-11 08:32:01 +01:00 |
|
Asger F
|
ecf418b8f6
|
Merge branch 'main' into js/shared-dataflow
|
2024-06-25 11:48:41 +02:00 |
|
Rasmus Wriedt Larsen
|
3f2befc3e5
|
JS: Support spread arguments in array.splice
|
2024-06-14 15:33:17 +02:00 |
|
Rasmus Wriedt Larsen
|
ec18786488
|
JS: Provide better model for Array.splice
|
2024-06-12 16:29:21 +02:00 |
|
Rasmus Wriedt Larsen
|
1027ca266d
|
JS: Allow many Array steps to be used in type-tracking
|
2024-06-12 16:14:13 +02:00 |
|
Asger F
|
c408ab9e6a
|
Merge branch 'main' into js/shared-dataflow
|
2024-05-02 19:43:34 +02:00 |
|
erik-krogh
|
129286aa1c
|
allow more flow through .filter()
|
2024-03-13 12:03:00 +01:00 |
|
Asger F
|
4319b07798
|
JS: Add flow summaries for Arrays
|
2023-10-13 12:42:40 +02:00 |
|
erik-krogh
|
2f11f3760e
|
simplify getALibraryInputParameter by adding more general dataflow for the arguments object
|
2022-08-22 08:32:43 +02:00 |
|
Erik Krogh Kristensen
|
7b1ef7473e
|
change ArrayCreationStep to a PreCallGraphStep and unrestrict the storeStep
|
2022-08-22 08:15:54 +02:00 |
|
Evgenii Protsenko
|
50264547bf
|
make array taint-step better
|
2022-08-08 11:00:11 +02:00 |
|
Erik Krogh Kristensen
|
1717d17fb3
|
add flow step for Array.prototype.at
|
2022-05-24 12:41:27 +02:00 |
|
Asger Feldthaus
|
cff8dc0537
|
JS: Improve flow through Array.prototype.reduce
|
2022-04-07 09:57:31 +02:00 |
|
Erik Krogh Kristensen
|
4734f1916e
|
Merge pull request #7598 from erik-krogh/fieldOnlyUsedInCharPred
QL: field only used in charPred
|
2022-03-08 11:25:57 +01:00 |
|
Erik Krogh Kristensen
|
1407b49a8f
|
fix some instances of ql/pred-doc-style for JS
|
2022-02-21 15:02:21 +01:00 |
|
Erik Krogh Kristensen
|
b8f1fb3954
|
JS: fix ql/field-only-used-in-charpred within JavaScript
|
2022-01-20 09:41:13 +01:00 |
|
Erik Krogh Kristensen
|
d17879e1f9
|
run the non-us patch
|
2021-12-20 16:24:41 +01:00 |
|
Andrew Eisenberg
|
45d1fa7f01
|
Packaging: Rafactor Javascript core libraries
Extract the external facing `qll` files into the codeql/javascript-all
query pack.
|
2021-08-25 12:15:56 -07:00 |
|