semmle-qlci
|
6c3d1d676b
|
Merge pull request #1694 from asger-semmle/concatenation-operand
Approved by xiemaisi
|
2019-08-08 12:41:30 +01:00 |
|
Asger F
|
5e87d5c751
|
JS: Update syntactic heuristics
|
2019-08-07 10:53:17 +01:00 |
|
Asger F
|
f173e3024a
|
JS: Add getConstantStringParts() and HTML concat node
|
2019-08-07 10:53:17 +01:00 |
|
Asger F
|
f101944c92
|
JS: Expand on the StringOps::Concatenation API
|
2019-08-07 10:53:17 +01:00 |
|
Asger F
|
2df0b08b26
|
JS: Add test with header access
|
2019-08-06 15:43:39 +01:00 |
|
Asger F
|
c4006be0e8
|
JS: Add more axios tests
|
2019-08-06 15:28:53 +01:00 |
|
Asger F
|
af7b942eec
|
JS: Add newline in test
|
2019-08-06 15:28:53 +01:00 |
|
Asger F
|
4fb3fd992d
|
JS: Address comments
|
2019-08-06 15:28:53 +01:00 |
|
Asger F
|
7fb6615970
|
JS: Test for XhrIo
|
2019-08-06 15:28:53 +01:00 |
|
Asger F
|
4eb072a376
|
JS: Test for 'superagent' package
|
2019-08-06 15:28:53 +01:00 |
|
Asger F
|
ce4f098625
|
JS: Test for 'got' package
|
2019-08-06 15:28:52 +01:00 |
|
Asger F
|
f88a7162c5
|
JS: Test for fetch
|
2019-08-06 15:28:52 +01:00 |
|
Asger F
|
b8c1714ba9
|
JS: Test for 'axios' package
|
2019-08-06 15:28:52 +01:00 |
|
Asger F
|
4f6b6d12e0
|
JS: Test for 'request' package
|
2019-08-06 15:28:52 +01:00 |
|
Asger F
|
93be5ab715
|
JS: Test for XMLHttpRequest
|
2019-08-06 15:28:52 +01:00 |
|
Asger F
|
250a5997e2
|
JS: Add test query for getAResponseDataNode
|
2019-08-06 15:28:52 +01:00 |
|
Asger F
|
d1179be757
|
JS: Move ClientRequest tests into shared ql file
|
2019-08-06 15:28:52 +01:00 |
|
Asger F
|
9e949d0f44
|
JS: Add taint step through destructuring for-of loop
|
2019-08-02 20:35:21 +01:00 |
|
Asger F
|
de3c8bf711
|
JS: Introduce DataFlow::lvalueNode
|
2019-08-02 20:35:21 +01:00 |
|
Max Schaefer
|
3daa974255
|
JavaScript: Rename a test.
The old test name would cause a compiler warning, which we don't want to include in the expected output.
|
2019-08-02 14:05:57 +01:00 |
|
semmle-qlci
|
d63e53f3a4
|
Merge pull request #1628 from asger-semmle/self-globalobj
Approved by xiemaisi
|
2019-07-30 11:23:54 +01:00 |
|
Asger F
|
6f158182d1
|
JS: Add self as global object alias
|
2019-07-24 17:10:59 +01:00 |
|
Asger F
|
28efadea73
|
JS: Use defSourceNode from getRhsNode
|
2019-07-23 17:14:56 +01:00 |
|
Asger F
|
44f7e2d5c5
|
JS: Handle IIFE parameters
|
2019-07-23 17:14:56 +01:00 |
|
Asger F
|
7d2e83710a
|
JS: Add JSDoc name resolution test
|
2019-07-23 17:14:56 +01:00 |
|
Asger F
|
80fa9915fd
|
JS: Rename JSDoc.qll to avoid conflict with JSDoc module
|
2019-07-23 17:14:56 +01:00 |
|
Asger F
|
f3b8e39848
|
JS: Move JSDoc tests into JSDoc/Nodes
|
2019-07-23 17:13:01 +01:00 |
|
Asger F
|
13da242576
|
JS: Add GlobalAccessPaths library
|
2019-07-23 17:08:02 +01:00 |
|
Asger F
|
c97b9af4b8
|
JS: Add SsaExplicitDefinition.getRhsNode
|
2019-07-23 17:08:02 +01:00 |
|
semmle-qlci
|
8b60314d85
|
Merge pull request #1617 from asger-semmle/documentable
Approved by xiemaisi
|
2019-07-23 14:55:51 +01:00 |
|
semmle-qlci
|
247848c931
|
Merge pull request #1577 from asger-semmle/infername
Approved by xiemaisi
|
2019-07-22 21:01:48 +01:00 |
|
semmle-qlci
|
2d82a5517f
|
Merge pull request #1608 from asger-semmle/thisnode-basicblock
Approved by xiemaisi
|
2019-07-18 17:03:29 +01:00 |
|
Asger F
|
1e451bc541
|
JS: Restrict Expr.getDocumentation()
|
2019-07-18 13:14:23 +01:00 |
|
Asger F
|
ed56939650
|
JS: Add array literal elements
|
2019-07-18 12:56:41 +01:00 |
|
Asger F
|
87ceb1bbda
|
JS: Add test for other expressions that have docs
|
2019-07-18 12:55:55 +01:00 |
|
Asger F
|
416b1b4ba8
|
JS: Move getDocumentation tests into one file
|
2019-07-18 12:54:02 +01:00 |
|
Asger F
|
e9c03c9820
|
JS: Implement getBasicBlock() for exceptional nodes
|
2019-07-18 10:01:28 +01:00 |
|
Asger F
|
44a270a43d
|
JS: Add test
|
2019-07-18 09:37:45 +01:00 |
|
Asger F
|
cee742152d
|
JS: Update test outputs
|
2019-07-17 09:16:15 +01:00 |
|
Asger F
|
4e77a368c3
|
JS: Avoid having multiple names again
|
2019-07-16 16:23:27 +01:00 |
|
Asger F
|
9408b96b9a
|
JS: Update yet more tests
|
2019-07-16 16:09:29 +01:00 |
|
Asger F
|
7da341ba04
|
JS: Merge getInferredName() => getName()
|
2019-07-16 11:21:33 +01:00 |
|
Asger F
|
b2da2d2a4b
|
JS: update tests again
|
2019-07-16 10:47:23 +01:00 |
|
Max Schaefer
|
ca36c7aa9a
|
Revert "JavaScript: Use type tracking to identify more portal entry/exit nodes."
This reverts commit 39c37f519d.
|
2019-07-15 16:27:55 +01:00 |
|
Asger F
|
ab00da763d
|
JS: Autoformat
|
2019-07-11 16:24:09 +01:00 |
|
Asger F
|
ec288c1eb1
|
JS: Update more expected test output
|
2019-07-11 16:23:48 +01:00 |
|
Asger F
|
c44a3b4735
|
JS: Add ClassDefinition.getInferredName
|
2019-07-11 16:19:11 +01:00 |
|
Asger F
|
eead67ac6d
|
JS: Add Function.getInferredName()
|
2019-07-11 16:15:53 +01:00 |
|
Asger F
|
cf23c50f0c
|
JS: Add convenience layer
Adds getASpreadArgument() and defines getCalleeName() for reflective
calls to be the name of the property being invoked, if there is one.
|
2019-07-11 10:55:28 +01:00 |
|
Asger F
|
83908464e0
|
JS: more taint steps through array manipulation
|
2019-07-11 10:55:28 +01:00 |
|