Esben Sparre Andreasen
|
7cab308205
|
fixup! JS: classify numeric file names as generated
|
2019-07-01 15:49:03 +02:00 |
|
Asger F
|
0c04580b5e
|
JS: fix typo in doc
|
2019-07-01 13:25:55 +01:00 |
|
Asger F
|
ff4d6ece80
|
JS: Rename metrics to ResolvableCallX
|
2019-07-01 12:34:48 +01:00 |
|
Asger F
|
16e6dd12d0
|
JS: Address review comments part 1
|
2019-07-01 12:30:51 +01:00 |
|
Esben Sparre Andreasen
|
41e568d1f7
|
JS: classify files with many short variables as minified
|
2019-07-01 13:25:07 +02:00 |
|
Asger F
|
2ab72c4eef
|
JS: Support line breaks in types
|
2019-07-01 11:46:30 +01:00 |
|
Asger F
|
625cdb8765
|
JS: Update test output
|
2019-07-01 11:29:55 +01:00 |
|
Asger F
|
4f05eab3fd
|
JS: Make docs match reality
|
2019-07-01 11:29:55 +01:00 |
|
Asger F
|
2822e493ae
|
JS: Switch to absolute offsets
|
2019-07-01 11:29:55 +01:00 |
|
Asger F
|
d6ba1ffa8a
|
JS: Some loc() fixes
|
2019-07-01 11:29:55 +01:00 |
|
Asger F
|
fd0791bd8c
|
JS: Parse types from original source string
|
2019-07-01 11:29:55 +01:00 |
|
Asger F
|
a3c7b631f4
|
JS: Extract type source text with substring
|
2019-07-01 11:29:55 +01:00 |
|
Asger F
|
edd96b056e
|
JS: Remove redundant source field
|
2019-07-01 11:29:55 +01:00 |
|
Asger F
|
9403834af5
|
JS: Include leading star in parsed source
|
2019-07-01 11:29:55 +01:00 |
|
Asger F
|
9b4bdaecce
|
JS: Remove unneeded replace call
|
2019-07-01 11:29:55 +01:00 |
|
Esben Sparre Andreasen
|
2eb7e4a818
|
JS: classify x.test.js files with test(...) calls as jest tests
|
2019-07-01 10:28:10 +02:00 |
|
Esben Sparre Andreasen
|
5ebcef41fa
|
JS: classify numeric file names as generated
|
2019-07-01 10:25:38 +02:00 |
|
Asger F
|
aff90b1082
|
TS: Add a missing semicolon
|
2019-06-28 10:53:33 +01:00 |
|
Asger F
|
f5569b8b58
|
TS: Avoid infinite recursion in stringifyType
|
2019-06-28 10:53:33 +01:00 |
|
Max Schaefer
|
3c3422e221
|
JavaScript: Refactor unpromoted-candidate queries to no longer rely on tracked nodes.
|
2019-06-28 10:25:23 +01:00 |
|
Max Schaefer
|
ff62c56df1
|
JavaScript: Replace remaining uses of TrackedExpr with type tracking.
|
2019-06-28 09:21:41 +01:00 |
|
Max Schaefer
|
b3e8103dce
|
JavaScript: Track flow through property getter functions.
|
2019-06-28 08:51:27 +01:00 |
|
Max Schaefer
|
1c175cbe71
|
JavaScript: Rename loadStep to basicLoadStep.
|
2019-06-28 08:51:27 +01:00 |
|
semmle-qlci
|
c4cb75eff5
|
Merge pull request #1508 from xiemaisi/js/fix-MessageEvent-externs
Approved by asger-semmle
|
2019-06-27 14:32:21 +01:00 |
|
Asger F
|
8f4228b7c3
|
JS: Ignore RemoteFlowSource case due to bad join ordering
|
2019-06-27 12:23:07 +01:00 |
|
semmle-qlci
|
44bd540c44
|
Merge pull request #1495 from asger-semmle/array-taint-step
Approved by xiemaisi
|
2019-06-27 12:16:17 +01:00 |
|
Max Schaefer
|
7565eb263e
|
JavaScript: Update externs for MessageEvent.
|
2019-06-26 19:12:05 -07:00 |
|
semmle-qlci
|
1a9f3624c2
|
Merge pull request #1504 from xiemaisi/js/shift-bigint
Approved by asger-semmle
|
2019-06-26 18:30:48 +01:00 |
|
Max Schaefer
|
e35fde322b
|
JavaScript: Teach ShiftOutOfRange about BigInt.
|
2019-06-26 09:16:34 -07:00 |
|
Asger F
|
102fd11e8d
|
JS: Change to queries of @kind metric
|
2019-06-25 22:12:11 +01:00 |
|
Asger F
|
57dac1d0d5
|
JS: Update test output to reflect new edge relation
|
2019-06-25 16:41:29 +01:00 |
|
Asger F
|
aa4d28028e
|
JS: Add test
|
2019-06-25 14:15:06 +01:00 |
|
Asger F
|
71100bb68a
|
JS: Do not require predecessor to be a SourceNode
|
2019-06-25 14:03:57 +01:00 |
|
Chris Gavin
|
bce153648e
|
JavaScript: Update link to the OWASP XSS prevetion cheat sheet.
|
2019-06-24 23:21:14 +01:00 |
|
Esben Sparre Andreasen
|
4f9a7d0b71
|
JS: updated expected output for different SnakeYaml version
|
2019-06-24 09:24:12 +02:00 |
|
Asger F
|
207ed1e14a
|
JS: Add query for measuring call graph quality
|
2019-06-24 01:01:13 +01:00 |
|
Max Schaefer
|
a417884173
|
JavaScript: Fix potential null-pointer exception in YAML extractor.
`ScalarEvent.getStyle()` is documented as returning `null` for plain
scalars, so we need to handle that specially (cf
https://github.com/Semmle/ql/blob/master/javascript/ql/src/semmle/javascript/YAML.qll#L100
for the corresponding code in the library, which expects plain style to
be encoded as zero).
|
2019-06-23 21:56:02 +02:00 |
|
Esben Sparre Andreasen
|
6885b5cf1f
|
JS: fix yaml StringIndexOutOfBoundsException
|
2019-06-21 15:18:56 +02:00 |
|
semmle-qlci
|
59dd3b2fb7
|
Merge pull request #1477 from asger-semmle/ts-debug-failure-in-tsconfig
Approved by xiemaisi
|
2019-06-21 12:45:13 +01:00 |
|
semmle-qlci
|
4d779026d2
|
Merge pull request #1479 from xiemaisi/js/remove-circularity
Approved by asger-semmle
|
2019-06-21 09:03:13 +01:00 |
|
Max Schaefer
|
4370f25b32
|
JavaScript: Remove dependency of module import on globalVarRef.
|
2019-06-20 21:08:34 +01:00 |
|
Max Schaefer
|
544a55dd0e
|
JavaScript: Fix potential null-pointer exception in YAML extractor.
`ScalarEvent.getStyle()` is documented as returning `null` for plain
scalars, so we need to handle that specially (cf
https://github.com/Semmle/ql/blob/master/javascript/ql/src/semmle/javascript/YAML.qll#L100
for the corresponding code in the library, which expects plain style to
be encoded as zero).
|
2019-06-20 17:04:47 +01:00 |
|
Ellen Arteca
|
99c32f08fb
|
JavaScript: Recognize imports from TypeScript type annotations
|
2019-06-20 10:45:30 +01:00 |
|
Asger F
|
52f31dcb07
|
TS: Rely on ts.sys.readFile for decoding
|
2019-06-19 11:57:22 +01:00 |
|
Mark Shannon
|
77030c4dde
|
Merge branch 'rc/1.21' into 'master'
|
2019-06-13 12:32:45 +01:00 |
|
semmle-qlci
|
8a43fdc806
|
Merge pull request #1448 from xiemaisi/js/fix-access-paths-perf-regression
Approved by esben-semmle
|
2019-06-13 10:13:27 +01:00 |
|
semmle-qlci
|
bffc3307b5
|
Merge pull request #1450 from esben-semmle/js/classify-json-js-as-generated
Approved by xiemaisi
|
2019-06-13 09:45:37 +01:00 |
|
semmle-qlci
|
7332446ee1
|
Merge pull request #1444 from esben-semmle/js/express-node-inheritance
Approved by xiemaisi
|
2019-06-12 21:43:44 +01:00 |
|
semmle-qlci
|
913544600a
|
Merge pull request #1449 from xiemaisi/js/fix-http-response-sink-perf-regression
Approved by esben-semmle
|
2019-06-12 21:36:23 +01:00 |
|
Max Schaefer
|
60964efce5
|
JavaScript: Avoid bad context pushing in ReflectedXss::HttpResponseSink.
|
2019-06-12 16:20:35 +01:00 |
|