Max Schaefer
0de9eed71c
Merge pull request #32 from asger-semmle/export-import-flow
...
TypeScript: bugfixes for import-assign statement
2018-08-08 16:35:43 +01:00
Max Schaefer
355302eac4
Merge pull request #29 from esben-semmle/js/fixup-angularjs-filter-argument-index
...
JS: fix an off-by-one error in the AngularJS expression AST
2018-08-08 14:03:55 +01:00
Max Schaefer
854dc0cbeb
Merge pull request #28 from esben-semmle/js/whitelist-empty-functions
...
JS: permit some calls with spurious arguments to empty functions
2018-08-08 14:03:18 +01:00
Asger F
94bac1253d
TypeScript: bugfixes for import-assign statement
2018-08-08 12:02:28 +01:00
Esben Sparre Andreasen
4e98ce21b4
JS: permit some calls with spurious arguments to empty functions
2018-08-08 10:13:02 +02:00
Max Schaefer
1a5585c83c
Merge pull request #21 from esben-semmle/js/urilibraries-members
...
JS: refactor UriLibraries.qll models to use `DataFlow::moduleMember`
2018-08-08 09:08:04 +01:00
Esben Sparre Andreasen
343b922c29
JS: fix an off-by-one error in the AngularJS expression AST
2018-08-08 09:58:57 +02:00
semmle-qlci
4d97570a1a
Merge pull request #17 from xiemaisi/js/rename-unused-var
...
Approved by esben-semmle
2018-08-07 15:01:37 +01:00
Esben Sparre Andreasen
3b00b9b8da
JS: refactor UriLibraries.qll models to use DataFlow::moduleMember
2018-08-07 12:58:09 +02:00
semmle-qlci
6533ddfeaf
Merge pull request #20 from esben-semmle/js/more-auth-calls-and-rate-limiters
...
Approved by xiemaisi
2018-08-07 09:42:07 +01:00
Esben Sparre Andreasen
c06edd3745
Merge pull request #15 from xiemaisi/js/call-graph-data-flow
...
JavaScript: Lift call graph library to data flow graph.
2018-08-07 07:56:08 +02:00
Esben Sparre Andreasen
b6951d8249
JS: add tests for improved js/missing-rate-limiting
2018-08-06 15:15:44 +02:00
Esben Sparre Andreasen
f7ab29aa2b
JS: support "express-rate-limit" non-constructor calls
2018-08-06 15:15:44 +02:00
Esben Sparre Andreasen
c6cfca3131
JS: add "verify" as an Authorization call word
2018-08-06 15:15:44 +02:00
Max Schaefer
06f43748b8
JavaScript: Generalize description of js/unused-local-variable.
...
The query also flags unused imports, functions and classes (which, of course, are just unused variables at the end of the day). This is now made more explicit in the description.
2018-08-06 09:34:38 +01:00
Max Schaefer
33741045f6
JavaScrip: Move deprecated HTMLComments query to compatibility suite.
2018-08-06 09:17:11 +01:00
Max Schaefer
9ba3d80bad
JavaScript: Lift call graph library to data flow graph.
2018-08-06 08:34:06 +01:00
Asger F
156b94e436
JavaScript: Add model of JSON parsers
2018-08-03 15:27:35 +01:00
Pavel Avgustinov
b55526aa58
QL code and tests for C#/C++/JavaScript.
2018-08-02 17:53:23 +01:00
