3837 Commits

Author	SHA1	Message	Date
Esben Sparre Andreasen	3be094ea5b	JS: polish js/incomplete-html-attribute-sanitization	2020-06-22 14:35:00 +02:00
Asger F	eca5e2df8a	Merge pull request #3702 from esbena/js/memory-exhaustion ... JS: add query js/memory-exhaustion	2020-06-19 20:35:57 +01:00
Erik Krogh Kristensen	0f5ef2c02a	Merge branch 'js-team-sprint' into https-fix	2020-06-19 14:57:44 +02:00
Erik Krogh Kristensen	a17d152ca4	Merge branch 'js-team-sprint' into priv-file-polish	2020-06-19 13:19:10 +02:00
Esben Sparre Andreasen	0463c427a5	Update javascript/ql/src/Security/CWE-770/ResourceExhaustion.qhelp ... Co-authored-by: mc <42146119+mchammer01@users.noreply.github.com>	2020-06-19 09:47:59 +02:00
Esben Sparre Andreasen	b8229ca362	Update javascript/ql/src/Security/CWE-770/ResourceExhaustion.qhelp ... Co-authored-by: mc <42146119+mchammer01@users.noreply.github.com>	2020-06-19 09:47:48 +02:00
Esben Sparre Andreasen	e73beccc0b	Update javascript/ql/src/Security/CWE-770/ResourceExhaustion.qhelp ... Co-authored-by: mc <42146119+mchammer01@users.noreply.github.com>	2020-06-19 09:47:26 +02:00
Esben Sparre Andreasen	2846666f32	Update javascript/ql/src/Security/CWE-770/ResourceExhaustion.qhelp ... Co-authored-by: mc <42146119+mchammer01@users.noreply.github.com>	2020-06-19 09:47:13 +02:00
Esben Sparre Andreasen	4557af3c30	Update javascript/ql/src/Security/CWE-770/ResourceExhaustion.qhelp ... Co-authored-by: mc <42146119+mchammer01@users.noreply.github.com>	2020-06-19 09:46:58 +02:00
Erik Krogh Kristensen	7d6dac479c	Merge branch 'js-team-sprint' into https-fix	2020-06-18 16:53:01 +02:00
Erik Krogh Kristensen	dcf617b235	Merge branch 'js-team-sprint' into bad-random-polish	2020-06-18 16:52:32 +02:00
Erik Krogh Kristensen	6b0adf18d1	rewrite sentence in private-file-exposure qhelp	2020-06-18 16:51:15 +02:00
Erik Krogh Kristensen	1556b62007	Merge branch 'js-team-sprint' into priv-file-polish	2020-06-18 16:40:53 +02:00
Erik Krogh Kristensen	9ba2c98ec0	Apply suggestions from doc review ... Co-authored-by: mc <42146119+mchammer01@users.noreply.github.com>	2020-06-18 16:38:52 +02:00
Esben Sparre Andreasen	ab01dda559	JS: another qhelp fixup	2020-06-18 13:01:02 +02:00
Esben Sparre Andreasen	c9f60d4c97	JS: add lodash sinks for js/resource-exhaustion	2020-06-18 13:01:02 +02:00
Esben Sparre Andreasen	96160a6334	JS: fixup qhelp	2020-06-18 13:01:02 +02:00
Esben Sparre Andreasen	3f67e90374	JS: rename query, support timeouts, add documentation, add to suite	2020-06-18 13:01:02 +02:00
Esben Sparre Andreasen	d9d8eb4805	JS: avoid type inference in the taint steps (just a nice to have)	2020-06-18 13:00:45 +02:00
Esben Sparre Andreasen	fa4e8914e6	JS: fixups	2020-06-18 13:00:45 +02:00
Esben Sparre Andreasen	7b97fd07a8	JS: add query js/memory-exhaustion	2020-06-18 13:00:45 +02:00
Erik Krogh Kristensen	27a20b263e	Merge branch 'https-fix' of github.com:erik-krogh/ql into https-fix	2020-06-17 21:06:21 +02:00
Erik Krogh Kristensen	7a1c161e9e	Merge branch 'js-team-sprint' into https-fix	2020-06-17 21:04:44 +02:00
Erik Krogh Kristensen	218338b4f1	Merge branch 'js-team-sprint' into bad-random-polish	2020-06-17 21:04:00 +02:00
Erik Krogh Kristensen	73f26956a6	Merge branch 'js-team-sprint' into priv-file-polish	2020-06-17 21:03:09 +02:00
Erik Krogh Kristensen	bdda587247	Merge branch 'js-team-sprint' into build-leaks	2020-06-17 19:51:30 +02:00
Erik Krogh Kristensen	a465fef7aa	shorten sentence in qhelp	2020-06-17 17:24:18 +02:00
Erik Krogh Kristensen	abd9aab109	code-injection -> code injection	2020-06-17 17:20:46 +02:00
Erik Krogh Kristensen	45e2b94eb5	Apply suggestions from doc review ... Co-authored-by: mc <42146119+mchammer01@users.noreply.github.com>	2020-06-17 17:19:44 +02:00
Erik Krogh Kristensen	69888f90c6	add dot after bullet-point	2020-06-17 17:15:39 +02:00
Erik Krogh Kristensen	b0be0eb805	fix qhelp links	2020-06-17 11:50:44 +02:00
Erik Krogh Kristensen	fa0a8c3423	add documentation examples as tests	2020-06-17 11:37:32 +02:00
Erik Krogh Kristensen	b42824640d	add qhelp for js/exposure-of-private-files	2020-06-17 11:29:24 +02:00
Erik Krogh Kristensen	639907967f	add home/rootdir as leaking folders	2020-06-17 10:46:42 +02:00
Erik Krogh Kristensen	6675ddae12	add more libraries that serve static files to js/exposure-of-private-files	2020-06-17 10:00:59 +02:00
Erik Krogh Kristensen	fb5e13b456	Apply suggestions from doc review ... Co-authored-by: mc <42146119+mchammer01@users.noreply.github.com>	2020-06-16 23:45:45 +02:00
Erik Krogh Kristensen	d811518a2e	fixed from doc review, and add fixed example for js/biased-cryptographic-random using a secure library	2020-06-16 23:26:54 +02:00
Erik Krogh Kristensen	210e71cd93	update expected output	2020-06-16 21:52:59 +02:00
Erik Krogh Kristensen	5ce17bea60	add qhelp for js/bad-code-sanitization	2020-06-16 16:23:41 +02:00
Erik Krogh Kristensen	a0951f76b6	add additional taint steps when type-tracking RemoteFlowSource	2020-06-16 14:55:07 +02:00
Erik Krogh Kristensen	696879653a	add qhelp to js/biased-cryptographic-random	2020-06-16 11:10:09 +02:00
Erik Krogh Kristensen	5e060fa6a8	Apply suggestions from code review ... Co-authored-by: Asger F <asgerf@github.com>	2020-06-15 23:47:40 +02:00
Erik Krogh Kristensen	315faaffee	small corrections in documentation ... Co-authored-by: Asger F <asgerf@github.com>	2020-06-15 23:40:27 +02:00
Erik Krogh Kristensen	3ef5dc74a1	add backtracking to find division that end up being rounded	2020-06-15 17:10:10 +02:00
Erik Krogh Kristensen	e8db624e74	add .jar and .war to the list of sensitive files for js/insecure-download	2020-06-15 16:48:07 +02:00
Erik Krogh Kristensen	d2716c532c	qhelp	2020-06-15 14:59:48 +02:00
Erik Krogh Kristensen	fe9aa241a1	add qhelp	2020-06-15 13:47:39 +02:00
Erik Krogh Kristensen	4d1920eec1	add .js and .py files to js/insecure-download	2020-06-15 12:48:50 +02:00
semmle-qlci	b6b838774e	Merge pull request #3704 from asger-semmle/js/cve-serve ... Approved by esbena	2020-06-15 09:54:17 +01:00
Asger Feldthaus	315f3389d1	JS: Autoformat test	2020-06-12 19:58:05 +01:00