Asger F
9a8cb1a55b
Merge pull request #19007 from asgerf/js/api-graph-awaited-return
...
JS: Fix bug in API graphs getPromised() missing async function returns
2025-03-14 10:36:16 +01:00
Napalys
de5c7efd63
Added test case for unescape.
2025-03-13 13:47:42 +01:00
Asger F
08ee51cbc4
JS: Move some promise-related store steps into PromiseFlow::storeStep
...
API graphs calls PromiseFlow::storeStep to propagate promises, which means it missed a store steps added elsewhere in the old promise library model.
We want API graphs to rely on type-tracking steps in general, like in Ruby, but for now just fixing the bug.
2025-03-13 12:53:04 +01:00
Napalys Klicius
40903a9643
Merge pull request #18975 from Napalys/js/tanstack_angular
...
JS: Update Angular Client Request's with API graph and `Tanstack` Angular modeling
2025-03-12 15:30:26 +01:00
Asger F
8599ab2503
JS: Fix attributes nodes missing an enclosing callable
2025-03-11 16:47:48 +01:00
Asger F
e8c5e4d006
Merge branch 'main' into js/test-suite
2025-03-11 13:17:08 +01:00
Napalys Klicius
a4f2264f17
Merge pull request #18899 from Napalys/js/ecma-2024-regex
...
JS: Add ECMAScript 2024 `v` Flag Operators for Regex Parsing
2025-03-11 12:50:44 +01:00
Napalys
c001435258
Refactor Angular2 API to use httpClientApiNode for HttpClient method calls
2025-03-11 12:32:24 +01:00
Napalys Klicius
7c9edff33c
Merge pull request #18964 from Napalys/js/mark_down_table
...
JS: Refactor `markdown-table` library modeling
2025-03-11 09:02:56 +01:00
Asger F
b583e52a87
Merge pull request #18962 from asgerf/js/local-type-indirection
...
JS: Unfold local type aliases in getAnUnderlyingType
2025-03-11 08:54:03 +01:00
Erik Krogh Kristensen
e6884cf705
Merge pull request #18959 from erik-krogh/faster-routing
...
JS: ensure the result from getPathFromFork is unique (to avoid a blowup)
2025-03-10 21:45:14 +01:00
Napalys
13c701948a
Refactor Markdown taint steps and update expected results for reflected XSS tests
2025-03-10 19:27:36 +01:00
Erik Krogh Kristensen
b945466b9f
Merge pull request #18892 from asgerf/js/membership-regexp-test
...
JS: Sharpen up EnumerationRegExp
2025-03-10 16:21:54 +01:00
Asger F
f7d2abf3e3
JS: Unfold local type aliases in getAnUnderlyingType
2025-03-10 16:09:16 +01:00
Napalys
9c8e0a5537
Applied changes from comments.
...
Co-authored-by: Asgerf <asgerf@github.com >
2025-03-10 13:29:05 +01:00
erik-krogh
b70643b1a1
ensure the result from getPathFromFork is unique (to avoid a blowup)
2025-03-10 12:53:51 +01:00
Napalys
f48eab903f
Add RegExpSubtraction class to support subtraction terms in regex
2025-03-10 11:18:10 +01:00
Napalys
8cbc0aea05
Add RegExpQuotedString class to support quoted string escapes in regex
2025-03-10 11:18:03 +01:00
Napalys
e0f20b2bd1
Add RegExpIntersection class to support intersection terms in regex
2025-03-07 08:58:19 +01:00
Anders Schack-Mulligen
c6761db2fc
SSA: Replace the Guards interface in the SSA data flow integration.
2025-03-05 13:29:31 +01:00
Asger F
c3ad805fe8
JS: Sharpen up EnumerationRegExp
2025-02-28 13:58:11 +01:00
Asger F
29659647ea
JS: Fix barrier guards for ServerSideUrlRedirect
...
The barrier guards for ServerSideUrlRedirect were lost when it was ported to ConfigSig, and the aforementioned spurious alert was a result of that.
The query had two guards: a proper barrier guard and a heuristic one for functions named 'isLocalURL'. We should move away from the heuristic name-based sanitiser guards, so I'm only reinstating the proper barrier guard.
Therefore updating the test to test the real barrier guard.
2025-02-28 13:28:43 +01:00
Asger F
319ee2ccd5
JS: Track deep flow through qs.stringify
2025-02-28 13:28:04 +01:00
Asger F
cf33db78cc
JS: Fix the spurious flow
2025-02-28 13:28:02 +01:00
Asger F
baa7e35589
Merge pull request #18834 from Napalys/js/tanstack
...
JS: Support 'response' threat model and @tanstack/react-query
2025-02-25 16:16:06 +01:00
Napalys
bf77ffef37
Applied comment
...
Co-authored-by: Asgerf <asgerf@github.com >
2025-02-25 13:57:39 +01:00
Napalys
e2927b2fad
Updated tanstack to use API graph.
2025-02-25 11:48:44 +01:00
Anders Schack-Mulligen
57c4fd6f25
JS: Combine phi reads and ssa input nodes into SynthReadNode class.
2025-02-25 09:23:53 +01:00
Anders Schack-Mulligen
1af753cd0c
JS: Use shared barrier guard for falsy check.
2025-02-24 13:00:06 +01:00
Anders Schack-Mulligen
09b2aeb53a
SSA: Replace use-use step implementation in data-flow integration.
2025-02-24 10:58:14 +01:00
Anders Schack-Mulligen
4e515bc2f5
JS: Remove reference to isInputInto
2025-02-21 14:48:24 +01:00
Napalys
ab0241c1de
Added missing doc strings for Tanstack queries
2025-02-21 13:32:49 +01:00
Napalys
1227a7eedc
Add Tanstack framework support and enhance data flow tracking for fetch responses
2025-02-21 13:24:00 +01:00
Asger F
a1b7096125
Merge pull request #18783 from asgerf/js/downward-calls
...
JS: Resolve calls downward in class hierarchy
2025-02-20 09:01:58 +01:00
Asger F
58c8b5fa2b
Merge pull request #18790 from asgerf/js/no-implicit-array-taint
...
JS: Do not taint whole array when storing into ArrayElement
2025-02-19 13:23:31 +01:00
Asger F
e1c280500e
Merge pull request #18749 from Kwstubbs/express
...
JS: Add result.download to Express as Path Traversal Sink
2025-02-19 09:08:36 +01:00
Asger F
804a1a6cb0
JS: Handle array of sorting criteria
2025-02-18 16:58:04 +01:00
Asger F
7486742c37
JS: Fix model of _.sortBy
2025-02-18 16:53:40 +01:00
Asger F
ad4522c781
JS: Make 'typeStrongerThan' transitive
2025-02-18 16:04:48 +01:00
Asger F
e40ee821c2
JS: Update a qldoc comment
2025-02-18 16:02:47 +01:00
Asger F
e610683377
JS: Linter fix
2025-02-18 09:25:23 +01:00
Asger F
a54f0a74f1
JS: Target post-update node instead of getALocalSource
...
getAPropertyWrite() contains getALocalSource() under the the hood. Don't rely on that to find the successor of a mutation.
2025-02-17 15:00:02 +01:00
Asger F
6e074c301f
JS: Port lodash callback steps to flow summaries
...
Not all of lodash, just the callbacks we already modeled plus a few easy ones
2025-02-17 14:54:45 +01:00
Erik Krogh Kristensen
7fa41c438f
Merge pull request #18794 from erik-krogh/v-flag
...
JS: Add support for the regex V flag
2025-02-17 13:56:48 +01:00
Asger F
4e325d9f1c
JS: Convert some exception steps to legacy
2025-02-17 11:53:50 +01:00
Asger F
352924fb8c
JS: Handle a few other stringification contexts
2025-02-17 11:36:28 +01:00
Asger F
33ab7db98a
JS: Handle Array.prototype.toString calls
2025-02-17 11:25:03 +01:00
Asger F
d87534c7d0
JS: Model Array#toString
2025-02-17 11:13:36 +01:00
Asger F
0ca9b2285b
Merge pull request #18740 from asgerf/js/more-precise-diff-informed
...
JS: Provide more precise related locations
2025-02-17 10:27:15 +01:00
Napalys
3ec038e7b6
JS: Added predicate to check if v flag is used on regular expression
2025-02-16 18:31:08 +01:00
