11 Commits

Author	SHA1	Message	Date
Erik Krogh Kristensen	3640bbd466	add test for IncompleteHtmlAttributeSanitization	2021-03-16 13:25:27 +01:00
Erik Krogh Kristensen	3f1e81533c	support html attribute concatenations with single quotes	2021-01-29 10:37:37 +01:00
Esben Sparre Andreasen	89613dbd23	JS: add query for incomplete HTML attribute sanitization	2020-04-24 09:17:46 +02:00
Max Schaefer	5565be14fc	JavaScript: Teach IncompleteSanitization to flag incomplete path sanitizers.	2019-11-19 15:06:16 +00:00
Esben Sparre Andreasen	a9665f53b8	JS: whitelist quote stripping for js/incomplete-sanitization	2019-09-05 09:47:49 +01:00
Esben Sparre Andreasen	bdbd00e046	JS: add newline removal tests for js/incomplete-sanitization	2019-04-23 08:37:39 +02:00
Esben Sparre Andreasen	c80ee3df01	Mergeback: rc/1.20 into Semmle/master	2019-04-16 08:46:15 +02:00
Esben Sparre Andreasen	a0ed362310	JS: add test case for js/incomplete-sanitization	2019-04-12 08:37:47 +02:00
Esben Sparre Andreasen	7923c9d77c	JS: add tests for missing flow of regular expressions	2019-04-01 09:19:25 +02:00
Esben Sparre Andreasen	a1d92bfa50	JS: generalize js/incomplete-sanitization to handle ConstantString	2018-12-11 13:39:15 +01:00
Max Schaefer	10166be535	JavaScript: Add new query DoubleEscaping.	2018-11-30 09:39:00 +00:00