Asger F
|
65cbd47a2d
|
Merge pull request #1314 from xiemaisi/js/fix-hardcoded-pw-fps
JavaScript: Further broaden the whitelist in `PasswordInConfigurationFile`.
|
2019-05-16 14:42:09 +01:00 |
|
Asger F
|
9293010e4c
|
JS: Fix some FPs in IncorrectSuffixCheck
|
2019-05-16 10:56:17 +01:00 |
|
Asger F
|
8fe2319a23
|
JS: Fix lurking cartesian product in Express
|
2019-05-15 18:07:24 +01:00 |
|
Asger F
|
682f2790cd
|
JS: Address comments
|
2019-05-15 10:09:56 +01:00 |
|
Asger F
|
778244878a
|
JS: Normalize whitespace
|
2019-05-14 10:31:28 +01:00 |
|
Asger F
|
fd9765b99f
|
JS: Add qhelp
|
2019-05-13 17:31:12 +01:00 |
|
Asger F
|
0c715f7540
|
JS: Lower precision to medium
|
2019-05-13 15:20:40 +01:00 |
|
Asger F
|
aaf503837d
|
JS: Move prototype pollution into real query
|
2019-05-13 15:20:25 +01:00 |
|
Asger F
|
4db7aa6ed2
|
JS: Relax type inference to account for overriding
|
2019-05-13 10:18:19 +01:00 |
|
Max Schaefer
|
9ec366cf88
|
JavaScript: Move support for optional catch to ES2019.
|
2019-05-10 08:27:25 +01:00 |
|
Max Schaefer
|
d93d68d7f5
|
JavaScript: Add parser support for Unicode newlines in string literals.
|
2019-05-10 08:16:20 +01:00 |
|
Max Schaefer
|
86a7fa3abb
|
JavaScript: Make extractor default to ECMA 2019.
Also introduces an enum constant for ECMA 2020 (not used anywhere yet).
|
2019-05-10 08:09:46 +01:00 |
|
Max Schaefer
|
b478c0ddaa
|
JavaScript: Further broaden the whitelist in PasswordInConfigurationFile.
|
2019-05-09 17:07:59 +01:00 |
|
semmle-qlci
|
9653fbd4f7
|
Merge pull request #1311 from emarteca/unreachableThrows
Approved by xiemaisi
|
2019-05-09 10:37:41 +01:00 |
|
Ellen Arteca
|
a12d12d59a
|
JavaScript: Update UnreachableStmt query so unreachable throws no longer gives an alert
|
2019-05-08 16:25:54 +01:00 |
|
Asger F
|
27e8ea85f7
|
JS: Fix bug from sorting lines
|
2019-05-08 10:42:14 +01:00 |
|
Max Schaefer
|
c16e9a77f3
|
JavaScript: Fix a few false positives in PasswordInConfigurationFile.
|
2019-05-08 08:26:05 +01:00 |
|
Asger F
|
86885f4ff0
|
JS: Address comments
|
2019-05-07 18:00:36 +01:00 |
|
Asger F
|
7c9d20ae81
|
JS: Implement for TrackedNode to maintain consistency
|
2019-05-07 17:38:43 +01:00 |
|
Asger F
|
a3cf07af7e
|
JS: Add flow steps through iteration callback
|
2019-05-07 13:52:31 +01:00 |
|
Asger F
|
e7bf485807
|
JS: Add another interprocedural flow test case
|
2019-05-07 10:33:01 +01:00 |
|
Asger F
|
3cbd6d3786
|
JS: Test case for nested statements
|
2019-05-07 10:26:30 +01:00 |
|
Asger F
|
f3a4acf0b2
|
JS: Add async functions to test
|
2019-05-07 10:11:42 +01:00 |
|
Asger F
|
1f897b4b63
|
JS: step through Error constructor and accept the potential FP
|
2019-05-07 10:11:41 +01:00 |
|
Asger F
|
b0090c2fe6
|
JS: Add test case for flow through new Error()
|
2019-05-07 10:11:41 +01:00 |
|
Asger F
|
36cefd8fc6
|
JS: Track taint through exceptions
|
2019-05-07 10:11:41 +01:00 |
|
Max Schaefer
|
e0e6224987
|
Merge pull request #1298 from asger-semmle/full-mode-fixes-rc120
TS: Backport full-mode fixes to rc/1.20
|
2019-05-03 13:57:47 +01:00 |
|
Asger F
|
5ed3c50dbe
|
TS: Workaround issue with infer types
|
2019-05-02 13:28:30 +01:00 |
|
Asger F
|
c7300fa197
|
TS: Add workaround for 'globalThis' getProperties() crash
|
2019-05-02 13:28:30 +01:00 |
|
Asger F
|
9934996f9b
|
TS: Fix handling of 'export ='
|
2019-05-02 13:07:29 +01:00 |
|
Asger F
|
15299aba7d
|
TS: Workaround issue with infer types
|
2019-04-30 16:07:45 +01:00 |
|
Asger F
|
5c8dd7eedd
|
TS: Add workaround for 'globalThis' getProperties() crash
|
2019-04-30 12:44:58 +01:00 |
|
Asger F
|
686d72c356
|
TS: Fix handling of 'export ='
|
2019-04-30 12:41:59 +01:00 |
|
Asger F
|
11c07a3217
|
TS: Update to TypeScript 3.4.5
|
2019-04-30 12:41:59 +01:00 |
|
semmle-qlci
|
3f70d91a11
|
Merge pull request #1288 from xiemaisi/js/fix-end-node-labels
Approved by asger-semmle
|
2019-04-30 07:32:29 +01:00 |
|
Max Schaefer
|
7ca5cc22d8
|
Merge pull request #1257 from asger-semmle/jsdoc
JS: Add common interface between TypeExpr and JSDocTypeExpr
|
2019-04-29 16:20:17 +01:00 |
|
Max Schaefer
|
8a34ea8b71
|
Merge pull request #1284 from esben-semmle/js/fix-azure-performance
JS: fix azure performance
|
2019-04-29 13:15:16 +01:00 |
|
semmle-qlci
|
52d6626547
|
Merge pull request #1242 from esben-semmle/js/whitelist-trailing-newline-removal
Approved by xiemaisi
|
2019-04-29 07:35:15 +01:00 |
|
Asger F
|
3e7bac465b
|
JS: fix join ordering in SimpleParameter.getJSDocTag
|
2019-04-26 16:56:04 +01:00 |
|
Asger F
|
db3060d336
|
JS: Add missing override
|
2019-04-26 16:56:04 +01:00 |
|
Asger F
|
a17756c3d5
|
JS: Fix formatting
|
2019-04-26 16:56:04 +01:00 |
|
Asger F
|
2f98acaf6e
|
JS: upgrade script
|
2019-04-26 16:56:04 +01:00 |
|
Asger F
|
f99db08542
|
JS: Update trap files
|
2019-04-26 16:56:04 +01:00 |
|
Asger F
|
9086dfdc6f
|
JS: TypeAnnotation.getType() for backwards compatibility
|
2019-04-26 16:56:04 +01:00 |
|
Asger F
|
e9fcb670ff
|
JS: Provide source locations for JSDocTypeExpr
|
2019-04-26 16:56:04 +01:00 |
|
Asger F
|
cf8c327a10
|
JS: make TypeAnnotation extend Locatable
|
2019-04-26 16:56:04 +01:00 |
|
Max Schaefer
|
c44f99a204
|
Update javascript/ql/src/semmle/javascript/Variables.qll
Co-Authored-By: asger-semmle <42069257+asger-semmle@users.noreply.github.com>
|
2019-04-26 16:56:04 +01:00 |
|
Asger F
|
6eb8c692b1
|
JS: Add partial backwards compatibility with ASTNode
|
2019-04-26 16:56:04 +01:00 |
|
Asger F
|
e295c3a224
|
JS: Add JSDoc test
|
2019-04-26 16:56:04 +01:00 |
|
Asger F
|
6b2b64cb2e
|
JS: test case with unresolved types in TS
|
2019-04-26 16:56:04 +01:00 |
|