Erik Krogh Kristensen
|
1b81526691
|
Merge remote-tracking branch 'upstream/master' into exceptionXss
|
2019-11-17 09:29:54 +01:00 |
|
Erik Krogh Kristensen
|
a59a414e0b
|
update expected output
|
2019-11-16 15:20:42 +01:00 |
|
Erik Krogh Kristensen
|
8ff515a58d
|
address review feedback on MaskingReplacer
|
2019-11-16 15:20:42 +01:00 |
|
Erik Krogh Kristensen
|
4ec2070e48
|
remove property reads on process.env as a taint step, and add a barrier for masking replace calls
|
2019-11-16 15:20:42 +01:00 |
|
Erik Krogh Kristensen
|
92dc759cf9
|
remove type cast, and fix expected test results
|
2019-11-16 15:20:42 +01:00 |
|
Erik Krogh Kristensen
|
850278c62f
|
some changes based on review. And change to only flag unknown reads of process.env
|
2019-11-16 15:20:42 +01:00 |
|
Erik Krogh Kristensen
|
68c30aaef3
|
add flowlabels to js/clear-text-logging
|
2019-11-16 15:20:42 +01:00 |
|
Erik Krogh Kristensen
|
14e4decffa
|
changes based on review feedback. No flow-labels yet
|
2019-11-16 15:20:42 +01:00 |
|
Erik Krogh Kristensen
|
297c71a64b
|
add process.env as source for js/clear-text-logging
|
2019-11-16 15:20:41 +01:00 |
|
Erik Krogh Kristensen
|
4073dfaf24
|
remove redundant code
|
2019-11-15 16:17:18 +01:00 |
|
Erik Krogh Kristensen
|
d36312cf9f
|
update expected output
|
2019-11-15 16:08:13 +01:00 |
|
Erik Krogh Kristensen
|
3edd65f9ab
|
changed the exceptional taint-steps to step through each call-site
|
2019-11-15 16:05:15 +01:00 |
|
Erik Krogh Kristensen
|
e95cceef1d
|
import all the shared XSS sources and sinks
|
2019-11-15 15:41:53 +01:00 |
|
Erik Krogh Kristensen
|
65a018ceed
|
use flow labels to avoid dual configurations
|
2019-11-15 14:37:46 +01:00 |
|
Erik Krogh Kristensen
|
8d2ae136b0
|
move String.prototype.match taint step to a general AdditionalTaintStep
|
2019-11-15 12:52:54 +01:00 |
|
semmle-qlci
|
2f63b89941
|
Merge pull request #2338 from esbena/js/model-get-them-args
Approved by max-schaefer
|
2019-11-15 11:50:45 +00:00 |
|
Asger F
|
e01a9846d8
|
JS: Update test annotations
|
2019-11-15 09:27:20 +00:00 |
|
Asger F
|
153d34638b
|
JS: Fix a FP
|
2019-11-15 09:27:20 +00:00 |
|
Asger F
|
8c5b9b9195
|
JS: Add missing post-anchor case to MissingRegExpAnchor
|
2019-11-15 09:27:20 +00:00 |
|
Asger F
|
17ad97812e
|
JS: Fix FPs from TLDs without a domain name
|
2019-11-15 09:27:20 +00:00 |
|
Asger F
|
e45c361d64
|
JS: Port IncompleteHostnameRegExp
|
2019-11-15 09:27:20 +00:00 |
|
Asger F
|
9ecab1b5d5
|
JS: Port unanchored RegExp query but for hostnames only
|
2019-11-15 09:27:20 +00:00 |
|
Asger F
|
e5f2f9e43e
|
JS: Do not flag semi-anchored regexps in .replace()
|
2019-11-15 09:27:20 +00:00 |
|
Asger F
|
cae09a447b
|
JS: Update test case
|
2019-11-15 09:27:20 +00:00 |
|
Asger F
|
3e37950170
|
JS: Whitelist one more FP case
|
2019-11-15 09:27:20 +00:00 |
|
Asger F
|
2b151cd587
|
JS: Include anchor direction in message
|
2019-11-15 09:27:20 +00:00 |
|
Asger F
|
3e952cf564
|
JS: Restrict semi-anchored regex query more
|
2019-11-15 09:27:19 +00:00 |
|
Asger F
|
0726bd8cac
|
JS: Add double semi-anchored test case
|
2019-11-15 09:27:19 +00:00 |
|
Asger F
|
9fa9729470
|
JS: Shift line numbers in SemiAnchoredRegExp testcase
|
2019-11-15 09:27:19 +00:00 |
|
Asger F
|
8bc89ee254
|
JS: Update semi-anchored regex query
|
2019-11-15 09:27:19 +00:00 |
|
Esben Sparre Andreasen
|
8e6a19b3d3
|
JS: add DefaultParsedCommandLineArgumentsAsSource
|
2019-11-15 08:42:02 +01:00 |
|
Esben Sparre Andreasen
|
2ea7d141c8
|
Merge pull request #2310 from max-schaefer/js/insufficient-url-scheme-check
JavaScript: Add query `IncompleteUrlSchemeCheck`
|
2019-11-14 22:13:02 +01:00 |
|
Erik Krogh Kristensen
|
7137a64b7d
|
Added query for detecting XSS that happens through an exception
|
2019-11-14 17:04:00 +01:00 |
|
Esben Sparre Andreasen
|
cc768345d0
|
JS: add security tests for malicious torrents
|
2019-11-14 13:54:19 +01:00 |
|
Max Schaefer
|
ab583b7994
|
JavaScript: Add query IncompleteUrlSchemeCheck.ql.
|
2019-11-13 10:27:18 +00:00 |
|
Max Schaefer
|
155cea7b5b
|
Revert "JavaScript: Improve double-escaping query"
|
2019-11-12 22:54:12 +00:00 |
|
semmle-qlci
|
3a7f9a588d
|
Merge pull request #2267 from max-schaefer/js/qltest-extractor-options
Approved by asger-semmle
|
2019-11-07 11:36:45 +00:00 |
|
Max Schaefer
|
8fdf6298b9
|
JavaScript: Remove --platform node extractor options.
|
2019-11-06 13:01:28 +00:00 |
|
Max Schaefer
|
3e92d0ffb5
|
JavaScript: Remove redundant --experimental extractor options.
|
2019-11-05 15:59:24 +00:00 |
|
semmle-qlci
|
eb6e8866fa
|
Merge pull request #2247 from max-schaefer/odasa-8149
Approved by asger-semmle, esbena
|
2019-11-05 09:40:54 +00:00 |
|
Max Schaefer
|
8aae1f443f
|
JavaScript: Use type tracking instead of auxiliary data-flow configuration to track indirect command arguments.
|
2019-10-31 12:13:55 +00:00 |
|
semmle-qlci
|
2a3980222b
|
Merge pull request #2201 from max-schaefer/js/avoid-duplicate-source-and-sink-nodes
Approved by asger-semmle
|
2019-10-31 10:47:30 +00:00 |
|
Max Schaefer
|
bb0771b36c
|
JavaScript: Deal with escape-unescape-escape (and similar) chains.
|
2019-10-30 14:49:01 +00:00 |
|
Max Schaefer
|
8c133ff61d
|
JavaScript: Deal with (un-)escaping on captured variables.
|
2019-10-30 14:46:50 +00:00 |
|
Max Schaefer
|
a8214ce7ee
|
JavaScript: Fix regexes for escaping schemes.
|
2019-10-30 14:15:59 +00:00 |
|
Max Schaefer
|
5349e0f881
|
JavaScript: Recognise wrapped chains of replacements.
|
2019-10-30 13:14:38 +00:00 |
|
Max Schaefer
|
02d16b1dc9
|
JavaScript: Recognise wrapped string replacement functions.
|
2019-10-30 13:01:17 +00:00 |
|
Max Schaefer
|
aaeca32519
|
JavaScript: Recognize string escaping using .replace with a callback.
|
2019-10-30 12:45:32 +00:00 |
|
Max Schaefer
|
bd1c99d8a4
|
JavaScript: Recognise JSON.stringify and JSON.parse as escaper/unescaper.
|
2019-10-30 12:38:05 +00:00 |
|
semmle-qlci
|
a778efe71e
|
Merge pull request #2216 from asger-semmle/xss-encodeURIComponent
Approved by max-schaefer
|
2019-10-30 11:49:31 +00:00 |
|