Asger F
|
3d400cc57f
|
JS: basic model of closure Promises
|
2019-02-27 11:58:51 +00:00 |
|
Asger F
|
29d2d620e4
|
JS: add taint step through object/array spread operators
|
2019-02-26 11:43:59 +00:00 |
|
Asger F
|
93440014a0
|
JS: only propagate through first argument of truncate()
|
2019-02-25 17:11:55 +00:00 |
|
Asger F
|
fab0afd755
|
JS: model string functions from closure library
|
2019-02-25 16:08:47 +00:00 |
|
semmle-qlci
|
962416ffc2
|
Merge pull request #805 from asger-semmle/callback-taint-source
Approved by xiemaisi
|
2019-01-28 08:45:37 +00:00 |
|
semmle-qlci
|
d8947a71a5
|
Merge pull request #735 from asger-semmle/string-ops
Approved by xiemaisi
|
2019-01-25 15:15:19 +00:00 |
|
Asger F
|
77d748aa00
|
JS: "return" flow through callbacks
|
2019-01-21 10:39:35 +00:00 |
|
Asger F
|
b6626995cf
|
JS: bugfix in indexOf-based include test
|
2019-01-18 10:40:48 +00:00 |
|
Asger F
|
107ec3b687
|
JS: add test with self=this variable
|
2019-01-18 10:39:02 +00:00 |
|
Asger F
|
78bd76048a
|
JS: add test with closures
|
2019-01-18 10:39:02 +00:00 |
|
Asger F
|
0bb6692c19
|
JS: add 'this' as possible access path root
|
2019-01-18 10:39:02 +00:00 |
|
semmle-qlci
|
5e712b3ff6
|
Merge pull request #784 from asger-semmle/dedup-promiseTaintStep
Approved by esben-semmle
|
2019-01-18 08:52:09 +00:00 |
|
Asger F
|
7a344c8546
|
JS: Add resolved promise taint test case
|
2019-01-17 13:08:55 +00:00 |
|
Asger F
|
6d1eab8a4b
|
JS: support flow out of "this" in constructor call
|
2019-01-16 11:09:38 +00:00 |
|
Anders Schack-Mulligen
|
e58094c732
|
Javascript: Autoformat.
|
2019-01-11 11:02:42 +01:00 |
|
Max Schaefer
|
94a5722c2a
|
JavaScript: Model taint propagation through new Buffer and Buffer.from.
|
2018-11-29 09:52:31 +00:00 |
|
Esben Sparre Andreasen
|
a07c094437
|
JS: introduce TypeInferredCalleeWithAnalyzedReturnFlow
|
2018-11-06 16:04:46 +01:00 |
|
Esben Sparre Andreasen
|
8f3497a7bf
|
JS: improve tests for interprocedural type inference
|
2018-11-01 13:51:38 +01:00 |
|
Asger F
|
030bae9454
|
JS: Canonicalize ThisNode
|
2018-10-09 08:53:41 +01:00 |
|
Asger F
|
3ca7d6b4bf
|
JavaScript: address comments
|
2018-09-25 10:16:40 +01:00 |
|
Esben Sparre Andreasen
|
4c13e6b46b
|
JS: add additional array-specific taint steps
|
2018-09-13 21:36:53 +02:00 |
|
Esben Sparre Andreasen
|
86ab9adb06
|
JS: support push and sort taint steps for arrays
|
2018-08-30 09:14:06 +02:00 |
|
Pavel Avgustinov
|
b55526aa58
|
QL code and tests for C#/C++/JavaScript.
|
2018-08-02 17:53:23 +01:00 |
|