Asger F
|
92a681213d
|
JS: Step through jQuery callback return values
|
2023-03-27 11:17:27 +02:00 |
|
Asger F
|
bc2a772f3b
|
JS: Add test case showing false negative
|
2023-03-27 11:08:39 +02:00 |
|
erik-krogh
|
e189b36e3f
|
materialize less strings when ranking states
|
2023-03-23 10:35:58 +01:00 |
|
Alex Ford
|
0f267e012a
|
Merge pull request #12631 from alexrford/js/weak-cryptographic-algorithm_space
JS: add a missing space in alert message for `js/weak-cryptographic-algorithm`
|
2023-03-22 14:12:35 +00:00 |
|
erik-krogh
|
2bba9057a0
|
better callgraph support for global variables
|
2023-03-22 13:49:33 +01:00 |
|
Alex Ford
|
b000b9b5c0
|
JS: add a missing space in alert message for js/weak-cryptographic-algorithm
|
2023-03-22 11:12:13 +00:00 |
|
erik-krogh
|
b071d3557e
|
JS/PY/RB: add a worst-case test, that now performs OK
|
2023-03-22 10:13:18 +01:00 |
|
erik-krogh
|
801e0ff050
|
ReDoS: implement a better super-linear algorithm, with better worst-case performance
|
2023-03-22 10:13:16 +01:00 |
|
erik-krogh
|
34fe1a8f5e
|
use SSA in the GetLaterAccess module
|
2023-03-21 15:19:15 +01:00 |
|
Erik Krogh Kristensen
|
0f813ce2e8
|
Merge pull request #12543 from erik-krogh/reg-perf
ReDoS: restrict the edges considered in polynomial-redos for complex regular expressions
|
2023-03-20 15:48:35 +01:00 |
|
Erik Krogh Kristensen
|
540542ceb5
|
Merge pull request #12518 from erik-krogh/more-express-sources
JS: recognize more express URL related sources
|
2023-03-20 08:49:11 +01:00 |
|
Asger F
|
86a06bde72
|
JS: Flag crypto operations with weak block mode
|
2023-03-16 14:52:52 +01:00 |
|
Asger F
|
e907d685f4
|
JS: Add crypto test with AES-ECB
|
2023-03-16 14:52:18 +01:00 |
|
erik-krogh
|
54ec047433
|
ReDoS: put an artificial limitation on the analysis in polynomial-redos for large regular expressions
|
2023-03-16 12:20:53 +01:00 |
|
erik-krogh
|
a72436f6f1
|
recognize more express URL related sources
|
2023-03-15 10:14:31 +01:00 |
|
Asger F
|
8ab3f39b5e
|
Merge pull request #12423 from asgerf/js/trusted-types-global-flow
JS: Track trusted types policy callbacks
|
2023-03-14 13:09:50 +01:00 |
|
Asger F
|
856b50735d
|
JS: Expand test case
|
2023-03-07 13:04:26 +01:00 |
|
Asger F
|
d4b4d22378
|
JS: Step through HTML sanitizers in SQL injection query
|
2023-03-06 15:10:26 +01:00 |
|
erik-krogh
|
a6c9af4182
|
add the html argument to the jQuery functions as an XSS sink
|
2023-03-03 11:09:53 +01:00 |
|
erik-krogh
|
94870b838f
|
add failing test
|
2023-03-03 11:08:33 +01:00 |
|
Erik Krogh Kristensen
|
50aa5e072a
|
Merge pull request #12177 from erik-krogh/alias-html
JS: More precise type-test sanitizer guards in unsafe-html-construction
|
2023-02-27 18:16:11 +01:00 |
|
Erik Krogh Kristensen
|
927c322b7b
|
Merge pull request #11769 from erik-krogh/moreSan
JS: Sanitizer for `sanitizer(x) === true`
|
2023-02-27 15:48:34 +01:00 |
|
erik-krogh
|
0e60fc5512
|
Merge branch 'main' into alias-html
|
2023-02-27 09:16:25 +01:00 |
|
Erik Krogh Kristensen
|
f8f926ad50
|
Merge pull request #12175 from erik-krogh/reg-input
JS: add process.env and process.argv etc. as source for `js/regex-injection`
|
2023-02-27 09:12:02 +01:00 |
|
erik-krogh
|
51ddb55d7b
|
use tainted-object to precisely model that plain object are fine, but their properties are not
|
2023-02-15 15:02:03 +01:00 |
|
erik-krogh
|
b7305fd229
|
also consider relative exports when finding library inputs
|
2023-02-14 21:08:13 +01:00 |
|
erik-krogh
|
393649b7ce
|
don't call environment variables for command-line arguments
|
2023-02-14 14:27:41 +01:00 |
|
erik-krogh
|
36478124ae
|
add process.env and process.argv etc. as source for js/regex-injection
|
2023-02-14 14:21:53 +01:00 |
|
erik-krogh
|
943bdeca6d
|
make appliesTo recursive
|
2023-02-14 14:16:45 +01:00 |
|
erik-krogh
|
9549cac3e5
|
add an additional barrier guard that finds "=== true" versions of previous barrier guards
|
2023-02-14 14:15:23 +01:00 |
|
erik-krogh
|
c355a26657
|
add failing test
|
2023-02-14 14:12:35 +01:00 |
|
Erik Krogh Kristensen
|
2f8c9a5a2c
|
Merge pull request #12171 from erik-krogh/reg-dot
JS: dont recognize regexps that match dot as sanitizers
|
2023-02-14 14:10:44 +01:00 |
|
Erik Krogh Kristensen
|
e3e2df3247
|
Merge pull request #12166 from erik-krogh/more-html-san
JS: add `HtmlSanitizer` as a sanitizer DOMBasedXss
|
2023-02-14 14:09:56 +01:00 |
|
Erik Krogh Kristensen
|
028fcc7edf
|
Merge pull request #11959 from erik-krogh/ssrfSan
JS: add encodeURIComponent as a sanitizer for request-forgery
|
2023-02-14 13:39:53 +01:00 |
|
Erik Krogh Kristensen
|
a498936f16
|
Merge pull request #12170 from erik-krogh/more-lib
JS: More library inputs
|
2023-02-14 13:38:00 +01:00 |
|
erik-krogh
|
c17d057520
|
default to index.js when no main: is specified in package.json, and recognize more classes as library inputs
|
2023-02-13 21:24:41 +01:00 |
|
erik-krogh
|
68656274f4
|
dont recognize regexps that match dot as sanitizers
|
2023-02-13 17:36:51 +01:00 |
|
erik-krogh
|
6192544fb4
|
add test for express-ws as a source
|
2023-02-13 15:26:50 +01:00 |
|
erik-krogh
|
b85bfc8ba6
|
add HtmlSanitizer as a sanitizer for DOMBasedXss
|
2023-02-13 11:57:29 +01:00 |
|
erik-krogh
|
c258e44772
|
add failing test for spurious edge through sanitizer
|
2023-02-13 11:49:57 +01:00 |
|
erik-krogh
|
02da718786
|
add code-injection sink for node-pty
|
2023-01-30 15:14:25 +01:00 |
|
Erik Krogh Kristensen
|
99bad77972
|
Merge pull request #11906 from erik-krogh/moreStem
JS: expand what is parsed as the stem of a pathexpr
|
2023-01-25 08:44:44 +01:00 |
|
Erik Krogh Kristensen
|
fc66c905ff
|
Merge pull request #11859 from erik-krogh/moreShell
JS: slightly broaden the regular expression that recognizes bad string-concats used as shell commands
|
2023-01-23 22:26:17 +01:00 |
|
Erik Krogh Kristensen
|
a10b45e0db
|
Merge pull request #11927 from mvogelgesang/express-rate-limit
JS: Updated express-rate-limit example to match implementation examples f…
|
2023-01-23 14:37:50 +01:00 |
|
erik-krogh
|
3cece50f78
|
add encodeURIComponent as a sanitizer for request-forgery
|
2023-01-23 13:53:53 +01:00 |
|
erik-krogh
|
be8ef1b324
|
add failing test
|
2023-01-23 13:52:36 +01:00 |
|
Erik Krogh Kristensen
|
1ee9957838
|
Merge pull request #9807 from erik-krogh/endFilter
JS: recognize "-->" as a bad tag filter
|
2023-01-23 10:06:50 +01:00 |
|
Mark Vogelgesang
|
c9119848d9
|
Updated express-rate-limit example to match implementation examples found on packages README
|
2023-01-18 14:42:40 -05:00 |
|
erik-krogh
|
4b74dec18f
|
expand what is parsed as the stem of a pathexpr
|
2023-01-17 21:28:21 +01:00 |
|
Erik Krogh Kristensen
|
8ccc384043
|
Merge pull request #11858 from erik-krogh/moreSpawn
JS: track shell:true more in js/shell-command-constructed-from-input
|
2023-01-16 13:24:50 +01:00 |
|