7289 Commits

Author	SHA1	Message	Date
Max Schaefer	4e1a2c8317	Revert "JS: Recognize DomSanitizer from @angular/core" ... This reverts commit ff1d0cc4c7.	2022-09-02 13:44:44 +01:00
Henry Mercer	f34f8d3dc3	Remove NoSQL sinks since September 2018	2022-09-02 13:44:30 +01:00
Esben Sparre Andreasen	61b0c57ea7	Remove additional Xss sinks	2022-09-02 13:44:14 +01:00
Esben Sparre Andreasen	3b710f6632	Remove additional SQL sinks	2022-09-02 13:43:52 +01:00
Esben Sparre Andreasen	7722164383	Remove additional path-injection sinks	2022-09-02 13:43:37 +01:00
Esben Sparre Andreasen	1da7eeb006	Remove pseudo-properties	2022-09-02 13:42:18 +01:00
Esben Sparre Andreasen	e6c33029dd	Remove 2020 sinks from SqlInjection.ql	2022-09-02 13:38:37 +01:00
Esben Sparre Andreasen	bc8162e5d9	Remove 2020 sinks from Xss.ql	2022-09-02 13:29:05 +01:00
Esben Sparre Andreasen	d44afeaf38	Remove 2020 sinks from TaintedPath.ql	2022-09-02 13:28:14 +01:00
Stephan Brandauer	81d02cc963	optimize performance of a helper-predicate	2022-09-01 16:05:36 +02:00
Stephan Brandauer	cdbab187ca	remove unused code	2022-09-01 16:05:36 +02:00
Stephan Brandauer	f59c48ebb9	autoformatter	2022-09-01 16:05:36 +02:00
Stephan Brandauer	caf39592d4	better documentation	2022-09-01 16:05:36 +02:00
Stephan Brandauer	b9cb60c2cb	Review comments ... Co-authored-by: Henry Mercer <henrymercer@github.com>	2022-09-01 16:05:36 +02:00
Stephan Brandauer	ac097d5f2a	fix now-broken tests	2022-09-01 16:05:35 +02:00
Stephan Brandauer	068a948c05	fix ql-for-ql warnings	2022-09-01 16:05:35 +02:00
Stephan Brandauer	3aa4e29dae	remove obsolete features	2022-09-01 16:05:35 +02:00
Stephan Brandauer	ed75080072	add stringConcatenatedWith feature to help the model learn that string concatenation leaves are usually not sinks	2022-09-01 16:05:35 +02:00
Stephan Brandauer	9468f62620	add assignedToPropName feature to let the model improve number of false positives for XSS query	2022-09-01 16:05:35 +02:00
Stephan Brandauer	db73a62bc2	fix bug in InputArgumentIndex feature	2022-09-01 16:05:34 +02:00
Stephan Brandauer	67500f85ba	performance fixes	2022-09-01 16:05:34 +02:00
Stephan Brandauer	96919eea80	use ? for unknown parameternames	2022-09-01 16:05:34 +02:00
Stephan Brandauer	f8b3c27210	add documentations and rename a feature	2022-09-01 16:05:34 +02:00
Stephan Brandauer	3422bdee92	add functionInterfacesInFile and surroundingFunctionParameters features	2022-09-01 16:05:34 +02:00
Stephan Brandauer	3e860762e7	documentation for calleeImports ATM feature	2022-09-01 16:05:33 +02:00
Stephan Brandauer	93aa279b31	documentation for new feature	2022-09-01 16:05:33 +02:00
Stephan Brandauer	25db666087	ATM: new feature to list all imports in an endpoint's file	2022-09-01 16:05:33 +02:00
Esben Sparre Andreasen	d0faf71113	use proper import instead of inlining	2022-09-01 16:05:33 +02:00
Esben Sparre Andreasen	82069cfb75	remove Input_ArgumentIndexAndAccessPathFromCallee	2022-09-01 16:05:33 +02:00
Esben Sparre Andreasen	095beb3c71	add docstring examples	2022-09-01 16:05:32 +02:00
Esben Sparre Andreasen	548f0286f3	address review comments	2022-09-01 16:05:32 +02:00
Esben Sparre Andreasen	57041aad7c	Apply suggestions from code review ... Co-authored-by: Henry Mercer <henrymercer@github.com>	2022-09-01 16:05:32 +02:00
Esben Sparre Andreasen	5ac608d503	fix semantic merge conflict	2022-09-01 16:05:32 +02:00
Esben Sparre Andreasen	c95ab031ef	rename new features	2022-09-01 16:05:32 +02:00
Esben Sparre Andreasen	6533260614	add more features	2022-09-01 16:05:31 +02:00
Esben Sparre Andreasen	c4c4d288cb	improve feature documentation	2022-09-01 16:05:31 +02:00
Esben Sparre Andreasen	a8c3cb29ec	improve feature tests with more cases	2022-09-01 16:05:31 +02:00
Esben Sparre Andreasen	86b2b79b43	improve access path strings	2022-09-01 16:05:31 +02:00
Esben Sparre Andreasen	e0870e0b96	support import in getSimpleAccessPath	2022-09-01 16:05:31 +02:00
Esben Sparre Andreasen	e7de6cb4a7	support await in getSimpleAccessPath	2022-09-01 16:05:30 +02:00
Esben Sparre Andreasen	1db2117be4	avoid using new feautes by default	2022-09-01 16:05:30 +02:00
Esben Sparre Andreasen	7c2bfef253	add CompareFeatures.ql	2022-09-01 16:05:30 +02:00
Esben Sparre Andreasen	41b35eaa49	add generic tests for features	2022-09-01 16:05:30 +02:00
Esben Sparre Andreasen	f3cdb12dcf	Document EndpointFeatures.qll	2022-09-01 16:05:30 +02:00
Esben Sparre Andreasen	482d169667	add ParameterAccessPathSimpleFromArgumentTraversal	2022-09-01 16:05:29 +02:00
Esben Sparre Andreasen	dbc89fd9ab	improve getSimpleAccessPath	2022-09-01 16:05:29 +02:00
Esben Sparre Andreasen	0db7c39c34	refactor calleeAccessPath feature to class	2022-09-01 16:05:29 +02:00
Stephan Brandauer	aa41bbb96c	refactor getACallBasedTokenFeature to class-use	2022-09-01 16:05:29 +02:00
Esben Sparre Andreasen	5204346e1f	Add CalleeAccessPathSimpleFromArgumentTraversal	2022-09-01 16:05:28 +02:00
Esben Sparre Andreasen	e1a38bd4d6	refactor EndpointFeatures.ql to use classes	2022-09-01 16:05:28 +02:00