1989 Commits

Author	SHA1	Message	Date
Napalys Klicius	a4f2264f17	Merge pull request #18899 from Napalys/js/ecma-2024-regex ... JS: Add ECMAScript 2024 `v` Flag Operators for Regex Parsing	2025-03-11 12:50:44 +01:00
Asger F	b583e52a87	Merge pull request #18962 from asgerf/js/local-type-indirection ... JS: Unfold local type aliases in getAnUnderlyingType	2025-03-11 08:54:03 +01:00
Asger F	f7d2abf3e3	JS: Unfold local type aliases in getAnUnderlyingType	2025-03-10 16:09:16 +01:00
Asger F	91e9b23cf7	JS: Add test showing FN source	2025-03-10 16:08:55 +01:00
Napalys	f48eab903f	Add RegExpSubtraction class to support subtraction terms in regex	2025-03-10 11:18:10 +01:00
Napalys	8cbc0aea05	Add RegExpQuotedString class to support quoted string escapes in regex	2025-03-10 11:18:03 +01:00
Napalys	e0f20b2bd1	Add RegExpIntersection class to support intersection terms in regex	2025-03-07 08:58:19 +01:00
Napalys	9cc26208d4	Add test cases for v flag operators in RegExp library-tests.	2025-03-07 08:32:10 +01:00
Asger F	c3ad805fe8	JS: Sharpen up EnumerationRegExp	2025-02-28 13:58:11 +01:00
Asger F	d97d67359b	JS: Add test case showing lack of flow through non-sanitising regexp	2025-02-28 13:58:08 +01:00
Anders Schack-Mulligen	b2a595596b	JS: Remove irrelevant comment.	2025-02-25 11:33:16 +01:00
Anders Schack-Mulligen	449150e6b5	JS: Accept fixed FP flow.	2025-02-25 10:42:21 +01:00
Asger F	a1b7096125	Merge pull request #18783 from asgerf/js/downward-calls ... JS: Resolve calls downward in class hierarchy	2025-02-20 09:01:58 +01:00
Asger F	58c8b5fa2b	Merge pull request #18790 from asgerf/js/no-implicit-array-taint ... JS: Do not taint whole array when storing into ArrayElement	2025-02-19 13:23:31 +01:00
Asger F	24e7aad6ba	JS: Overriden -> Overridden	2025-02-18 09:51:13 +01:00
Asger F	c958702830	JS: Accept some unproblematic consistency warnings	2025-02-17 20:30:07 +01:00
Asger F	08b9d934c0	JS: Add a negative test	2025-02-17 11:37:44 +01:00
Asger F	352924fb8c	JS: Handle a few other stringification contexts	2025-02-17 11:36:28 +01:00
Asger F	33ab7db98a	JS: Handle Array.prototype.toString calls	2025-02-17 11:25:03 +01:00
Asger F	a74b203c86	JS: Add test with implicit array stringification	2025-02-17 11:21:46 +01:00
Asger F	d87534c7d0	JS: Model Array#toString	2025-02-17 11:13:36 +01:00
Asger F	e8d1703224	JS: Add test for flow through Buffer.concat ... This flow was lost since the existing model of concat() boxes its return value in ArrayElement. There is no explicit model of Buffer.concat.	2025-02-17 11:12:51 +01:00
Asger F	97eb09fef8	JS: Accept updated test output	2025-02-17 10:19:49 +01:00
Asger F	ab5fc9f4d7	JS: Implement viableImplInCallContext	2025-02-14 13:25:19 +01:00
Asger F	ff7bc7c25e	JS: Track types of classes in data flow	2025-02-14 12:44:45 +01:00
Asger F	d3c4b5d493	JS: Add test with spurious flow due to up-down calls	2025-02-14 12:42:02 +01:00
Asger F	b8b2b9a470	JS: Resolve calls downward in the class hierarchy	2025-02-14 11:17:19 +01:00
Asger F	aff458d948	JS: Also add tests for upward calls and overriding	2025-02-14 11:17:17 +01:00
Asger F	9321d69034	JS: Add CG test showing lack of calls down to subclasses	2025-02-14 11:17:15 +01:00
Asger F	4043765008	JS: Avoid ambiguity in an inline CG annotation	2025-02-14 11:17:14 +01:00
Asger F	a61d42edc3	JS: Make inline CG tests report call target if NONE was given ... Previously it would only report a spurious callee if the target function was named. Now, if specifying 'calls:NONE' if will report any callee as spurious.	2025-02-14 11:17:13 +01:00
Asger F	26dcbf7a2a	JS: Migrate URLSearchParams model to flow summaries	2025-02-13 11:51:33 +01:00
Asger F	f531f4479b	JS: Add test for URL and URLSearchParams	2025-02-13 11:51:32 +01:00
Asger F	80824cfdc7	JS: Benign test output changes	2025-02-04 12:12:41 +01:00
Asger F	5e109ff457	JS: Update test output	2025-02-04 10:45:37 +01:00
Asger F	be082578d4	JS: Hoist function decls in a block to the top of the block	2025-02-03 15:21:08 +01:00
Asger F	29879297ee	JS: Add test showing missed call to later-defined function in block	2025-02-03 14:56:11 +01:00
Asger F	a0af4c9a84	Merge pull request #18622 from asgerf/js/typescript-tsconfig-names ... JS: Treat more file patterns as tsconfig-like files	2025-01-31 09:42:50 +01:00
Asger F	16f7373712	JS: Model dependency injection in Nest	2025-01-29 13:49:46 +01:00
Asger F	b07c5c6ee0	JS: Add test	2025-01-29 13:49:43 +01:00
Asger F	6d04425790	JS: Add test	2025-01-29 11:14:21 +01:00
Asger F	b015c88c79	JS: Add view-component-input threat model	2025-01-22 10:45:46 +01:00
Asger F	dd55460d7f	JS: Update test output	2025-01-21 14:03:30 +01:00
Asger F	f3b52adde6	JS: Add test showing DB-CHECK failure	2025-01-21 14:02:17 +01:00
Asger F	6cd9752289	Merge pull request #18467 from github/js/shared-dataflow-branch ... JS: Migrate to shared data flow library (targeting main!) 🚀	2025-01-16 11:28:57 +01:00
Asger F	fd5a3dad90	JS: One more test	2025-01-09 10:46:45 +01:00
Asger F	138b000891	JS: Coerce the local export node to an Identifier	2025-01-09 10:42:25 +01:00
Asger F	db98880163	JS: Add crash reproduction to test case	2025-01-09 10:39:30 +01:00
Asger F	4a6030c592	JS: Update expected with some absent result sets	2024-12-19 15:25:46 +01:00
Asger F	cd6ebb103e	JS: Make test not assume implicit through for maps	2024-12-19 15:25:45 +01:00