Erik Krogh Kristensen
|
a4450c36f6
|
autoformat
|
2020-05-19 10:26:36 +02:00 |
|
semmle-qlci
|
0c081a8e87
|
Merge pull request #3497 from esbena/js/yield-and-local-objects
Approved by asgerf, erik-krogh
|
2020-05-19 09:02:22 +01:00 |
|
Asger Feldthaus
|
7d9923038e
|
JS: Fix perf issue from overriding isIncomplete
|
2020-05-18 22:45:59 +01:00 |
|
Asger Feldthaus
|
9581bb52cb
|
JS: Update test output
|
2020-05-18 22:45:59 +01:00 |
|
Asger Feldthaus
|
eddbdffe62
|
JS: Add more tests for implicit returns
|
2020-05-18 22:29:33 +01:00 |
|
Erik Krogh Kristensen
|
aa396a39d3
|
Merge branch 'master' of https://github.com/github/codeql into pr/erik-krogh/3478
|
2020-05-18 20:57:51 +00:00 |
|
Erik Krogh Kristensen
|
742abf8751
|
refactor package export into a library, and add tests for the library
|
2020-05-18 21:06:14 +02:00 |
|
Asger F
|
96d6115452
|
Merge branch 'master' into js/sql-type-tracking
|
2020-05-18 15:58:42 +01:00 |
|
Esben Sparre Andreasen
|
a9ba6ac659
|
JS: make LocalObjects::isEscape aware of yield
|
2020-05-18 12:43:46 +02:00 |
|
Esben Sparre Andreasen
|
b3691cd0e9
|
JS: change MembershipTest to MembershipCandidate
|
2020-05-18 11:51:00 +02:00 |
|
Erik Krogh Kristensen
|
c6276ddd1c
|
update expected output after restricting precise array tracking to Promise.all
|
2020-05-18 11:49:07 +02:00 |
|
Erik Krogh Kristensen
|
bd3c4d4077
|
Merge branch 'master' of https://github.com/github/codeql into pr/erik-krogh/3478
|
2020-05-18 07:51:19 +00:00 |
|
Esben Sparre Andreasen
|
ddb545c182
|
JS: introduce MembershipTests.qll and use in two locations
|
2020-05-18 09:50:00 +02:00 |
|
Erik Krogh Kristensen
|
e2cd7e6230
|
more precise taint-tracking for Promise.all
|
2020-05-15 22:02:41 +02:00 |
|
Asger Feldthaus
|
5249e84359
|
JS: Type track spanner model
|
2020-05-15 17:27:30 +01:00 |
|
Asger Feldthaus
|
d225715828
|
JS: Type track mssql model
|
2020-05-15 17:27:30 +01:00 |
|
Asger Feldthaus
|
6dcee5a0ef
|
JS: Type track sqlite model
|
2020-05-15 17:27:30 +01:00 |
|
Asger Feldthaus
|
84cd02cf01
|
JS: Type track pg model
|
2020-05-15 17:27:27 +01:00 |
|
Asger Feldthaus
|
f7771f17d1
|
JS: Type track mysql model
|
2020-05-15 17:27:27 +01:00 |
|
Asger Feldthaus
|
3e9849b7c4
|
JS: Type track sequelize model
|
2020-05-15 17:27:24 +01:00 |
|
Erik Krogh Kristensen
|
3138918f1d
|
add test for promise inside Promise.all
|
2020-05-15 11:49:29 +02:00 |
|
Asger Feldthaus
|
d84f1b47c2
|
JS: Refactor RequestInputAccess to use source nodes
|
2020-05-15 09:59:28 +01:00 |
|
Asger Feldthaus
|
da974f1527
|
JS: Add test with dynamic access to req.query
|
2020-05-15 09:59:28 +01:00 |
|
Asger Feldthaus
|
bfbe70a7a9
|
JS: Fixes
|
2020-05-15 09:59:27 +01:00 |
|
Asger Feldthaus
|
9cacfab7c6
|
JS: Recognize Express param value callback as RemoteFlowSource
|
2020-05-15 09:59:26 +01:00 |
|
Erik Krogh Kristensen
|
6775294ac1
|
update expected output
|
2020-05-14 22:26:44 +02:00 |
|
Erik Krogh Kristensen
|
5132e61ce7
|
add tests
|
2020-05-14 18:55:49 +02:00 |
|
Asger Feldthaus
|
1cdb51741f
|
JS: Dont use deprecated API in test case
|
2020-05-14 11:08:31 +01:00 |
|
Erik Krogh Kristensen
|
efbd74a4a4
|
remove more spurious jQuery objects by using externs
|
2020-05-01 18:54:32 +02:00 |
|
Erik Krogh Kristensen
|
87365357ba
|
remove spurious jQuery objects
|
2020-05-01 15:19:54 +02:00 |
|
semmle-qlci
|
28cfe548d5
|
Merge pull request #3325 from erik-krogh/MoreEventClasses
Approved by asgerf
|
2020-04-24 09:02:27 +01:00 |
|
Jonas Jensen
|
d98e956c2b
|
Merge pull request #3322 from felicitymay/merge-124-master
Merge rc/1.24 into master
|
2020-04-24 08:48:54 +02:00 |
|
Erik Krogh Kristensen
|
6ada588dd1
|
add support for util.inherits
|
2020-04-22 22:55:12 +02:00 |
|
Erik Krogh Kristensen
|
957e4073b0
|
use getABoundCallbackParameter in SocketIO
|
2020-04-22 21:56:34 +02:00 |
|
Erik Krogh Kristensen
|
40822e10b4
|
add SocketIO test case
|
2020-04-22 21:55:20 +02:00 |
|
Felicity Chapman
|
89bf35cd43
|
Merge branch 'rc/1.24' into merge-124-master
Conflicts:
change-notes/1.24/analysis-javascript.md
Resolved in favor of the rc/1.24 branch
|
2020-04-22 19:01:47 +01:00 |
|
semmle-qlci
|
2fb711e460
|
Merge pull request #3169 from erik-krogh/Maps
Approved by asgerf, esbena
|
2020-04-21 12:12:06 +01:00 |
|
Asger Feldthaus
|
883846dfb6
|
JS: Fix extraction of negative number literal types
|
2020-04-20 16:17:15 +01:00 |
|
Asger Feldthaus
|
4fc79e38ec
|
JS: Also fix typo in test case
|
2020-04-20 15:24:51 +01:00 |
|
Erik Krogh Kristensen
|
69a16af152
|
Merge branch 'master' into Maps
|
2020-04-15 20:41:22 +02:00 |
|
Asger F
|
34d40b5035
|
Merge pull request #3237 from asger-semmle/js/sparse-capture
JS: Add CapturedVariableNode to avoid N^2 edges
|
2020-04-15 10:42:48 +01:00 |
|
Asger Feldthaus
|
3515a2b412
|
JS: Update test output
|
2020-04-14 10:31:31 +01:00 |
|
Asger Feldthaus
|
c070416fbe
|
JS: Update test output
|
2020-04-09 12:24:11 +01:00 |
|
Asger Feldthaus
|
5ab595da2e
|
JS: Autoformat
|
2020-04-08 12:40:00 +01:00 |
|
Asger Feldthaus
|
171b131eb1
|
JS: Add test for SourceNode not depending on flowsTo
|
2020-04-08 10:23:47 +01:00 |
|
Erik Krogh Kristensen
|
75b183bc33
|
update expected output
|
2020-04-01 20:46:49 +02:00 |
|
Erik Krogh Kristensen
|
957b60f84b
|
split fuzzy read/writes on collections into 2 pseudo-properties
|
2020-04-01 14:25:41 +02:00 |
|
Asger Feldthaus
|
b5e110e39e
|
JS: Fix value of numeric literals containing underscores
|
2020-04-01 12:24:42 +01:00 |
|
Asger Feldthaus
|
9888f15a29
|
JS: Add test showing root cause of problem
|
2020-04-01 12:21:27 +01:00 |
|
Asger Feldthaus
|
2d864aaf1b
|
JS: Add failing test
|
2020-04-01 12:21:25 +01:00 |
|