Erik Krogh Kristensen
|
0edb46c20d
|
improve precision for load/store steps with async functions
|
2020-08-07 17:39:59 +02:00 |
|
Erik Krogh Kristensen
|
26ef2f34da
|
add precise return-flow for async functions
|
2020-08-07 17:33:26 +02:00 |
|
Erik Krogh Kristensen
|
cc94c5ec60
|
remove imprecise return-flow from async functions
|
2020-08-07 17:33:24 +02:00 |
|
Erik Krogh Kristensen
|
0004c28fe8
|
introduce and use FunctionReturnNode
|
2020-08-07 17:32:25 +02:00 |
|
Asger Feldthaus
|
64f58b74f6
|
JS: Fix extractor crash when some parameters have no type annotation
|
2020-08-07 11:56:54 +01:00 |
|
Erik Krogh Kristensen
|
f1dc36244c
|
update tests and queries that used getId()
|
2020-08-05 14:32:09 +00:00 |
|
Erik Krogh Kristensen
|
f70cb2e7b3
|
add test for new JSON serializers
|
2020-08-05 12:14:56 +02:00 |
|
CodeQL CI
|
c8e5db189a
|
Merge pull request #3913 from erik-krogh/topmost
Approved by asgerf
|
2020-08-03 13:18:22 +01:00 |
|
CodeQL CI
|
0bbdc70cdb
|
Merge pull request #3864 from erik-krogh/exprString
Approved by asgerf, esbena
|
2020-08-03 09:25:17 +01:00 |
|
semmle-qlci
|
e167b87150
|
Merge pull request #3932 from max-schaefer/portals-additions
Approved by esbena
|
2020-07-09 11:43:45 +01:00 |
|
Max Schaefer
|
7a1410e0d5
|
JavaScript: Update and expand tests.
|
2020-07-09 09:25:52 +01:00 |
|
Erik Krogh Kristensen
|
00e900f1b1
|
only include named topmost package.json files for js/shell-command-constructed-from-input
|
2020-07-08 09:25:08 +02:00 |
|
semmle-qlci
|
b5c8f2238b
|
Merge pull request #3805 from esbena/js/seal-freeze-flow
Approved by asgerf
|
2020-07-02 13:54:54 +01:00 |
|
Erik Krogh Kristensen
|
ceb19292cb
|
autoformat
|
2020-07-02 14:47:08 +02:00 |
|
Erik Krogh Kristensen
|
f60a7489b5
|
ignore parents that doesn't have all constant roots when deciding which roots to compute getStringValue for
|
2020-07-02 10:39:41 +02:00 |
|
semmle-qlci
|
bfb734e1d7
|
Merge pull request #3832 from asger-semmle/js/typescript-in-html-files3
Approved by erik-krogh
|
2020-07-02 08:30:45 +01:00 |
|
Esben Sparre Andreasen
|
75451e349a
|
JS: teach the dataflow library identity functions Object.freeze/seal
|
2020-07-01 15:27:28 +02:00 |
|
Esben Sparre Andreasen
|
33c52761d4
|
JS: more dataflow and global access path testing
|
2020-07-01 15:26:25 +02:00 |
|
semmle-qlci
|
224289c55f
|
Merge pull request #3845 from max-schaefer/js/walk-sync
Approved by asgerf
|
2020-06-30 14:45:41 +01:00 |
|
semmle-qlci
|
42bca1a3fa
|
Merge pull request #3824 from asger-semmle/js/static-regexp-capture-group-step
Approved by erik-krogh, esbena
|
2020-06-30 13:20:14 +01:00 |
|
semmle-qlci
|
c850938af0
|
Merge pull request #3833 from asger-semmle/js/vue-class-component
Approved by erik-krogh
|
2020-06-30 13:16:42 +01:00 |
|
Max Schaefer
|
62d56a3d7c
|
JavaScript: Fix module name for walk-sync package.
|
2020-06-30 11:57:16 +01:00 |
|
Asger Feldthaus
|
182e4ce727
|
JS: Autoformat
|
2020-06-29 19:10:28 +01:00 |
|
Asger Feldthaus
|
b05942b599
|
JS: Add HTML file example
|
2020-06-29 13:45:01 +01:00 |
|
Asger Feldthaus
|
3938856e61
|
JS: Make this work in qltest
|
2020-06-29 13:42:55 +01:00 |
|
Asger Feldthaus
|
da3d1a3b5f
|
JS: Recognize 'lang' attribute of script tags
|
2020-06-29 08:15:52 +01:00 |
|
Asger Feldthaus
|
3e616e998e
|
JS: Add test
|
2020-06-27 21:31:40 +01:00 |
|
ubuntu
|
9135bbd5c8
|
JS: model fancy-log (and recognize the 'dir' log level)
|
2020-06-26 21:33:52 +02:00 |
|
Asger Feldthaus
|
06dd3ab2ca
|
JS: Propagate into RegExp.$x
|
2020-06-26 18:58:43 +01:00 |
|
Asger Feldthaus
|
17af8f7650
|
JS: Add test for taint propagating into RegExp.$1
|
2020-06-26 18:58:43 +01:00 |
|
semmle-qlci
|
3aefb7fad9
|
Merge pull request #3613 from erik-krogh/Reassigned
Approved by asgerf
|
2020-06-26 17:05:45 +01:00 |
|
semmle-qlci
|
b015c735d0
|
Merge pull request #3809 from max-schaefer/util-deprecate
Approved by asgerf
|
2020-06-26 14:20:14 +01:00 |
|
Max Schaefer
|
640c194c92
|
JavaScript: Model util.deprecate as a pre call-graph step.
|
2020-06-26 11:47:19 +01:00 |
|
Max Schaefer
|
712a216461
|
Add self-verifying type-tracking tests.
|
2020-06-26 11:47:19 +01:00 |
|
semmle-qlci
|
f81fc77e9e
|
Merge pull request #3782 from erik-krogh/promiseSteps
Approved by asgerf
|
2020-06-26 10:11:10 +01:00 |
|
semmle-qlci
|
92cc59b47b
|
Merge pull request #3800 from esbena/js/npmlog
Approved by erik-krogh
|
2020-06-26 07:54:08 +01:00 |
|
Erik Krogh Kristensen
|
1ec2c549d2
|
autoformat
|
2020-06-25 23:00:52 +02:00 |
|
Erik Krogh Kristensen
|
081b03c8f4
|
add tests that access-path domination can happen within a statement
|
2020-06-25 23:00:52 +02:00 |
|
Erik Krogh Kristensen
|
21e5a522b0
|
give the same rank to all expressions inside a single stmt
|
2020-06-25 23:00:52 +02:00 |
|
semmle-qlci
|
056e1a8c4b
|
Merge pull request #3599 from asger-semmle/js/nameditem
Approved by esbena
|
2020-06-25 17:34:14 +01:00 |
|
Erik Krogh Kristensen
|
690bde47aa
|
remove a .getALocalSource() that isn't needed
|
2020-06-25 16:51:10 +02:00 |
|
semmle-qlci
|
c39dce4d66
|
Merge pull request #3781 from asger-semmle/js/deprecate-type-member-lookup
Approved by erik-krogh
|
2020-06-25 14:56:17 +01:00 |
|
Esben Sparre Andreasen
|
4bfce4b8a3
|
JS: model npmlog (and recognize the "verbose" log level)
|
2020-06-25 12:06:51 +02:00 |
|
Asger Feldthaus
|
42f32bf76c
|
JS: Recognize calls to .item and .namedItem
|
2020-06-24 15:11:18 +01:00 |
|
semmle-qlci
|
a723ac0d8e
|
Merge pull request #3767 from esbena/js/console-member-calls
Approved by erik-krogh
|
2020-06-24 08:03:49 +01:00 |
|
Asger Feldthaus
|
4f67cc269b
|
JS: Reduce ExpansiveTypes test
|
2020-06-23 11:44:07 +01:00 |
|
Asger Feldthaus
|
234f968294
|
JS: Deprecate property lookup on types
|
2020-06-23 11:42:28 +01:00 |
|
Esben Sparre Andreasen
|
2d32ee7448
|
JS: support member calls of console
|
2020-06-23 10:46:01 +02:00 |
|
Asger Feldthaus
|
b4f75ef414
|
Merge branch 'master' into js-team-sprint-merge2
|
2020-06-23 00:18:09 +01:00 |
|
Erik Krogh Kristensen
|
11cc97d286
|
add basic support for importing from neighbouring packages
|
2020-06-19 14:15:10 +02:00 |
|