Asger Feldthaus
|
8a50d99f33
|
JS: Treat GeneratedCodeExpr as DirectEval in UnusedVariable.ql
|
2021-08-11 12:36:35 +02:00 |
|
Asger Feldthaus
|
623557ba39
|
JS: "this" in a template is not the global object
|
2021-08-11 12:36:35 +02:00 |
|
Asger Feldthaus
|
ee33c593e0
|
JS: Autoformat
|
2021-08-11 12:36:34 +02:00 |
|
Asger Feldthaus
|
0f27bffb05
|
JS: Add sinks for server-template tags in AngularJS templates
|
2021-08-11 12:36:34 +02:00 |
|
Asger Feldthaus
|
745f9b36e0
|
JS: Exclude non-code script tags
|
2021-08-11 12:36:34 +02:00 |
|
Asger Feldthaus
|
2412f530f9
|
JS: Add steps and sinks for pipes
|
2021-08-11 12:36:34 +02:00 |
|
Asger Feldthaus
|
23eeb49959
|
JS: Detect relevant templating syntax, and add sinks
|
2021-08-11 12:36:34 +02:00 |
|
Asger Feldthaus
|
f3b97f05c9
|
JS: Add steps to/from placeholder tags
|
2021-08-11 12:36:34 +02:00 |
|
Asger Feldthaus
|
f1c663b01b
|
JS: Add steps from instantiation site to placeholder expr
|
2021-08-11 12:36:34 +02:00 |
|
Asger Feldthaus
|
5659a8a30f
|
JS: Add template resolution logic
|
2021-08-11 12:36:34 +02:00 |
|
Asger Feldthaus
|
1474c0788b
|
JS: Introduce TemplateInstantiation
|
2021-08-11 12:36:34 +02:00 |
|
Asger Feldthaus
|
8fe2d84d53
|
JS: Move template-related classes to Templating file
|
2021-08-11 12:36:34 +02:00 |
|
Asger Feldthaus
|
f26e94c0db
|
JS: Rename to Angular-style template
|
2021-08-11 12:36:34 +02:00 |
|
Asger Feldthaus
|
8666bc1894
|
JS: Extract placeholders in HTML
|
2021-08-11 12:36:31 +02:00 |
|
Erik Krogh Kristensen
|
01a202fa10
|
fix cfg and dataflow for logical compound assignments
|
2021-08-10 12:17:59 +02:00 |
|
Asger Feldthaus
|
a7cdf532fa
|
JS: Parse mustache-style tags as expressions
|
2021-08-10 12:15:43 +02:00 |
|
Asger Feldthaus
|
d83f5a9cd7
|
JS: Update StringConcatenation tests after handling 0-arg join calls
|
2021-08-10 08:56:36 +02:00 |
|
Asger Feldthaus
|
a3e56dea5e
|
JS: Factor out StringOps::substringMethodName
|
2021-08-10 08:55:04 +02:00 |
|
Asger Feldthaus
|
1074d409fb
|
JS: Autoformat
|
2021-08-10 08:55:03 +02:00 |
|
Asger Feldthaus
|
f1bcfa287b
|
JS: Add more tests
|
2021-08-10 08:55:03 +02:00 |
|
Asger Feldthaus
|
4efea4316e
|
JS: Use TaintedUrlSuffix flow label in jQuery xss
|
2021-08-10 08:55:03 +02:00 |
|
Asger Feldthaus
|
2836d465e4
|
JS: Update locations in Angular2 test
|
2021-08-09 11:03:15 +02:00 |
|
Asger Feldthaus
|
00f4694616
|
JS: Recognize methods returning DOM objects
|
2021-08-04 16:25:56 +02:00 |
|
valeria-meli
|
0b5c8909dd
|
tests
|
2021-08-03 18:00:49 -03:00 |
|
valeria-meli
|
595ea6c383
|
files for qhelp
|
2021-08-03 18:00:29 -03:00 |
|
valeria-meli
|
57ac944319
|
rename folders
|
2021-08-03 17:39:48 -03:00 |
|
valeria-meli
|
92c874c2e2
|
rename query
|
2021-08-03 17:32:36 -03:00 |
|
valeria-meli
|
0e4865c40c
|
Merge branch 'main' into javascript/ssrf
|
2021-08-03 17:17:50 -03:00 |
|
CodeQL CI
|
07f6ce7f3b
|
Merge pull request #6398 from erik-krogh/authHeader
Approved by esbena
|
2021-08-03 02:04:35 -07:00 |
|
CodeQL CI
|
394d3349ac
|
Merge pull request #6213 from asgerf/js/vuex
Approved by erik-krogh
|
2021-08-03 01:49:06 -07:00 |
|
Erik Krogh Kristensen
|
6b579dfad3
|
normalize auth-headers to lowercase
|
2021-08-03 09:09:47 +02:00 |
|
Asger Feldthaus
|
c88d213f37
|
JS: Use appendToNamespace
|
2021-08-03 08:52:19 +02:00 |
|
Asger Feldthaus
|
f5f255d93d
|
JS: Rename getPrefix -> getNamespace
|
2021-08-03 08:51:35 +02:00 |
|
Asger F
|
ff17d298b0
|
Apply suggestions from code review
Co-authored-by: Erik Krogh Kristensen <erik-krogh@github.com>
|
2021-08-03 08:45:56 +02:00 |
|
Erik Krogh Kristensen
|
87c0c60c22
|
don't report dummy authentication headers as hardcoded-crendentials
|
2021-08-02 22:56:14 +02:00 |
|
Erik Krogh Kristensen
|
f719e0ca1b
|
remove nunjucks template URLs from the target-blank query
|
2021-08-02 22:46:59 +02:00 |
|
valeria-meli
|
f3c0bf7826
|
copy-paste from our repo
|
2021-07-27 18:09:11 -03:00 |
|
Erik Krogh Kristensen
|
6da1007f67
|
mark new redos tests correctly
|
2021-07-16 13:37:47 +02:00 |
|
Erik Krogh Kristensen
|
b2b736db10
|
add more tests for non-empty positive lookaheads
|
2021-07-16 13:25:37 +02:00 |
|
Erik Krogh Kristensen
|
36de24aecb
|
use API nodes instead of type-tracking in the pino model
|
2021-07-16 11:32:32 +02:00 |
|
Erik Krogh Kristensen
|
178d3de824
|
Merge branch 'main' into logs
|
2021-07-16 11:21:25 +02:00 |
|
CodeQL CI
|
a02a82caac
|
Merge pull request #6284 from erik-krogh/qs
Approved by asgerf
|
2021-07-16 02:11:59 -07:00 |
|
CodeQL CI
|
c1d0e52492
|
Merge pull request #6286 from erik-krogh/mkdirp
Approved by asgerf
|
2021-07-16 02:11:07 -07:00 |
|
CodeQL CI
|
6c2c51a767
|
Merge pull request #6287 from erik-krogh/react-tooltip
Approved by asgerf
|
2021-07-16 02:10:36 -07:00 |
|
CodeQL CI
|
d4fa1f7d96
|
Merge pull request #6295 from erik-krogh/sort-keys
Approved by asgerf
|
2021-07-16 02:09:47 -07:00 |
|
CodeQL CI
|
520337577b
|
Merge pull request #6298 from erik-krogh/ansi-to-html
Approved by asgerf
|
2021-07-16 02:09:03 -07:00 |
|
CodeQL CI
|
f4f8ce0d36
|
Merge pull request #6294 from erik-krogh/arrify
Approved by asgerf
|
2021-07-16 02:08:19 -07:00 |
|
CodeQL CI
|
8ef57366c4
|
Merge pull request #6278 from erik-krogh/toUnicodeInAngular
Approved by asgerf
|
2021-07-16 02:07:18 -07:00 |
|
Asger Feldthaus
|
be8c574d5c
|
JS: Add test and comment for access path termination criteria
|
2021-07-16 09:42:59 +02:00 |
|
Asger Feldthaus
|
0247de76af
|
JS: Add a .vue file to vuex test
|
2021-07-16 09:31:47 +02:00 |
|