Max Schaefer
9160fbf106
Merge pull request #2435 from asger-semmle/phi-edge-barrier-guards
...
JS: Phi edge barrier guards
2020-01-06 14:14:18 +00:00
semmle-qlci
f48e4bc2a0
Merge pull request #2580 from asger-semmle/typescript-unbounded-recursion
...
Approved by max-schaefer
2020-01-06 14:00:55 +00:00
semmle-qlci
0c0073fb02
Merge pull request #2582 from asger-semmle/spurious-css-import
...
Approved by max-schaefer
2020-01-06 14:00:08 +00:00
semmle-qlci
39531c6516
Merge pull request #2574 from max-schaefer/js/fix-17
...
Approved by erik-krogh
2020-01-06 12:43:56 +00:00
Asger F
4d25bfc038
JS: Fix copy pasta
2020-01-06 11:37:21 +00:00
Asger F
142c83f38f
JS: Add negative dominance test
2020-01-06 11:37:21 +00:00
Asger F
aa6572b5c8
JS: Sanitize phi edges from barrier guards
2020-01-06 11:37:21 +00:00
Asger F
0b04f0d8f7
JS: Add test case for phi input
2020-01-06 11:37:20 +00:00
semmle-qlci
48deb30756
Merge pull request #2573 from max-schaefer/js/generalise-alert-suppression
...
Approved by asgerf
2020-01-06 10:43:17 +00:00
semmle-qlci
5dcc5b3b1e
Merge pull request #2581 from erik-krogh/FlowUselessExpr
...
Approved by max-schaefer
2020-01-06 08:33:36 +00:00
semmle-qlci
dc7863ce29
Merge pull request #2579 from asger-semmle/typescript-trace-resolution
...
Approved by max-schaefer
2020-01-03 12:57:43 +00:00
Asger F
4772798d7b
JS: do not resolve arbitrary extensions to JavaScript files
2020-01-03 11:37:51 +00:00
Asger F
c5f73cb868
JS: Add test showing spurious .css import
2020-01-03 10:59:10 +00:00
Asger F
f31d47c66e
TS: explain test case
2020-01-03 10:48:15 +00:00
Erik Krogh Kristensen
c22d3d0b3a
add test for block-level flow type annotations
2020-01-03 11:07:35 +01:00
semmle-qlci
06d812a6ff
Merge pull request #2556 from erik-krogh/RegexpVoidCxt
...
Approved by max-schaefer
2020-01-03 08:38:56 +00:00
Asger F
202746e92d
TS: Guard getTypeAtLocation with try/catch
2020-01-02 16:31:23 +00:00
Asger F
0388e9ca0c
TS: Add regression test
2020-01-02 16:28:49 +00:00
Asger F
2ca0e7d232
TS: Disable output from tracing
2020-01-02 15:38:10 +00:00
Asger F
8f478f7caf
TS: Add test with traceResolution: true
2020-01-02 15:04:30 +00:00
Max Schaefer
8d1ad5c5f3
JavaScript: Alert suppression through single-line /* */ style comments.
2020-01-02 10:45:20 +00:00
Erik Krogh Kristensen
d1a77d6993
refactor isInterpretedAsRegExp to directly work on a DataFlow node
2020-01-02 11:18:14 +01:00
Max Schaefer
de02bb4a0d
JavaScript: Prevent joining on configuration in onPath.
2020-01-02 09:49:09 +00:00
Max Schaefer
2a55ba5d4f
JavaScript: Fix join order in PathNode.getASuccessor.
2020-01-02 09:48:57 +00:00
semmle-qlci
f921cf7d01
Merge pull request #2512 from erik-krogh/moarExceptions
...
Approved by esbena, max-schaefer
2019-12-20 20:31:50 +00:00
Erik Krogh Kristensen
a0b5aa5ae4
more precise heuristic to identify allowed call targets
2019-12-20 10:51:39 +01:00
Erik Krogh Kristensen
15d74b7d03
remove FP from js/regexpinjection where no regexp was constructed
2019-12-19 10:47:03 +01:00
Tom Hvitved
29cd6a9e30
Sync XML.qll
2019-12-19 10:29:30 +01:00
semmle-qlci
339066ce04
Merge pull request #2552 from erik-krogh/ImportMeta
...
Approved by max-schaefer
2019-12-18 15:38:58 +00:00
Erik Krogh Kristensen
4fdfa51e44
add support for import.meta expressions in JavaScript
2019-12-18 10:45:54 +01:00
Erik Krogh Kristensen
bf56797ad7
update expected output of tests
2019-12-17 16:27:55 +01:00
Erik Krogh Kristensen
f140820511
fix FP related to block-level flow type annotations
2019-12-17 16:10:20 +01:00
Erik Krogh Kristensen
9dd7d1c6d7
changes based on review feedback
2019-12-17 13:19:53 +01:00
Erik Krogh Kristensen
f9ddd5891a
minor documentation fixes
...
Co-Authored-By: Max Schaefer <54907921+max-schaefer@users.noreply.github.com >
2019-12-17 13:05:20 +01:00
Max Schaefer
09ee106333
Java/JavaScript: Add two deprecated predicates to XML.qll.
...
This makes XML.qll identical across C++, Java, JavaScript and Python.
2019-12-17 10:15:43 +00:00
Max Schaefer
923e36ba4f
C++/Java/JavaScript/Python: Make qldoc consistent.
2019-12-17 10:15:43 +00:00
Max Schaefer
a2fe678464
C++/Java/JavaScript/Python: Unify imports in XML.qll.
2019-12-17 10:15:43 +00:00
Erik Krogh Kristensen
8f17db6670
changes based on review feedback
2019-12-16 14:43:29 +01:00
Erik Krogh Kristensen
7c931452d9
autoformat
2019-12-16 13:45:42 +01:00
Erik Krogh Kristensen
3ca3fa7e9e
add quotes on code in documentation
...
Co-Authored-By: Esben Sparre Andreasen <esbena@github.com >
2019-12-16 13:32:01 +01:00
Erik Krogh Kristensen
8c0b6f26da
Merge remote-tracking branch 'upstream/master' into moarExceptions
2019-12-16 08:35:45 +01:00
Erik Krogh Kristensen
904976c7ac
update tests after removing control-flow checks from error-callbacks
2019-12-16 08:30:21 +01:00
Erik Krogh Kristensen
1efe2ba167
inline ifStmt field
2019-12-13 19:00:54 +01:00
Erik Krogh Kristensen
3b2cc4674e
autoformat
2019-12-13 11:44:52 +01:00
Erik Krogh Kristensen
e164f46330
changes based on review feedback
2019-12-13 11:44:31 +01:00
Erik Krogh Kristensen
f35dc5d274
Merge remote-tracking branch 'upstream/master' into moarExceptions
2019-12-12 16:13:52 +01:00
Erik Krogh Kristensen
17358606cb
change callback to rely on an behavior heuristic rather than a naming heuristic
2019-12-12 16:12:37 +01:00
Erik Krogh Kristensen
08d0cb795b
revert the introduction of getEnclosingCall
2019-12-12 15:14:02 +01:00
Max Schaefer
dfeca63677
JavaScript: Fix characteristic predicate of XMLParent.
...
The database type `@xmlparent` is defined a bit too loosely in that it includes all of `@file`, not just XML files. Fixing that would involve fiddling with the extractor/dbscheme, so I have opted to fix it at the QL level instead.
2019-12-12 12:38:29 +00:00
Erik Krogh Kristensen
f537e28389
add pragma to internalBlocks predicate to fix performance
2019-12-11 15:19:30 +01:00
