amammad
|
8a80a734d8
|
fix an accident :)
|
2023-06-26 20:20:00 +10:00 |
|
Jorge
|
08b9a5e2b2
|
Add missing ;
|
2023-06-23 23:10:06 +02:00 |
|
Jorge
|
3c980db93a
|
Format webix.js
|
2023-06-23 18:08:01 +02:00 |
|
Kevin Stubbings
|
3605269e13
|
Add webix copy function
|
2023-06-22 22:16:28 -07:00 |
|
amammad
|
307187f6c1
|
V1
|
2023-06-23 06:06:37 +10:00 |
|
jorgectf
|
6947e99c15
|
Add models for webix
Co-authored-by: Kevin Stubbings <Kwstubbs@users.noreply.github.com>
|
2023-06-22 01:07:33 +02:00 |
|
Asger F
|
f737054216
|
Merge pull request #13380 from asgerf/js/fix-sink-kind
JS: Fix invalid source kind in test
|
2023-06-14 12:56:58 +02:00 |
|
Asger F
|
5aea6fc16c
|
JS: Remove dataExtensions clause from test qlpack
|
2023-06-14 10:42:31 +02:00 |
|
Asger F
|
21831516f4
|
JS: use test-local data extensions
|
2023-06-14 10:38:33 +02:00 |
|
erik-krogh
|
3fd9f26b52
|
use consistent indentation in mongoose.js
|
2023-06-12 16:40:42 +02:00 |
|
erik-krogh
|
cd6f738f72
|
add mongoose.Types.ObjectId.isValid as a sanitizer-guard for NoSQL injection
|
2023-06-12 16:38:11 +02:00 |
|
Asger F
|
76a8e9827e
|
Merge pull request #13283 from asgerf/js/restrict-regex-search-function
JS: Be more conservative about flagging "search" call arguments as regex
|
2023-06-08 10:50:51 +02:00 |
|
Erik Krogh Kristensen
|
6ba7f9a238
|
Merge pull request #13352 from erik-krogh/once-again-deps-not-py-cpp
delete old deprecations
|
2023-06-07 13:00:57 +02:00 |
|
Asger F
|
17f9239c33
|
JS: Fix invalid source kind in test
|
2023-06-06 13:40:06 +02:00 |
|
Erik Krogh Kristensen
|
0e6693bdea
|
Merge pull request #12874 from erik-krogh/ts51
JS: Add support for TS 5.1
|
2023-06-06 11:51:51 +02:00 |
|
Erik Krogh Kristensen
|
b78cd48954
|
Merge pull request #13329 from erik-krogh/sqlhelp
JS: improve the sql-injection help page
|
2023-06-06 08:44:44 +02:00 |
|
Erik Krogh Kristensen
|
219ec9d05d
|
Merge pull request #13127 from erik-krogh/polReDoS
ReDoS: revert new superlinear algorithm.
|
2023-06-02 16:10:24 +02:00 |
|
erik-krogh
|
3584e85fe8
|
JS: fix tutorial
|
2023-06-02 11:58:08 +02:00 |
|
erik-krogh
|
44b6366586
|
delete old deprecations
|
2023-06-02 11:58:08 +02:00 |
|
erik-krogh
|
1b44b59842
|
add stress test
|
2023-06-01 23:20:23 +02:00 |
|
erik-krogh
|
97afa5733b
|
add support for namespaced JSX attributes
|
2023-06-01 21:52:14 +02:00 |
|
Jami
|
3886ebffa9
|
Merge branch 'main' into jcogs33/update-javascript-sink-kinds
|
2023-06-01 14:09:10 -04:00 |
|
erik-krogh
|
b343dcaadd
|
put string/object in the alert-message for sql-injection
|
2023-05-31 08:06:04 +02:00 |
|
Asger F
|
c637b6f59a
|
JS: Update test for RegExpAlwaysMatches
|
2023-05-26 14:10:26 +02:00 |
|
Asger F
|
9df9ca2916
|
JS: Update test and expectations for MissingRegExpAnchor
|
2023-05-26 14:07:34 +02:00 |
|
Asger F
|
40daa9c906
|
JS: Update RegExpInjection test and expectations
|
2023-05-26 14:05:36 +02:00 |
|
Erik Krogh Kristensen
|
796e71f8be
|
Merge pull request #13176 from MaxSchlueter/fixquery12
Fix "Introducing the JavaScript libraries" query12.qll and add test case
|
2023-05-24 10:56:53 +02:00 |
|
Max Schlueter
|
40aa9417d0
|
Fix query12 and add test case
|
2023-05-23 11:52:51 +02:00 |
|
erik-krogh
|
f7419c9250
|
add expected output
|
2023-05-23 09:56:06 +02:00 |
|
erik-krogh
|
f85b3e13c2
|
update expected output
|
2023-05-23 09:56:06 +02:00 |
|
Erik Krogh Kristensen
|
e658177c31
|
Merge pull request #12975 from tyage/support-sub-modules
JS: Support sub modules
|
2023-05-23 09:24:43 +02:00 |
|
Erik Krogh Kristensen
|
3647b9cfeb
|
Merge pull request #13196 from erik-krogh/indirectCommand
JS: require arguments to be shell interpreted to be flagged by indirect-command-injection
|
2023-05-22 11:53:57 +02:00 |
|
erik-krogh
|
3293a55e8f
|
require arguments to be shell interpreted to be flagged by indirect-command-injection
|
2023-05-17 11:07:45 +02:00 |
|
Asger F
|
f94fdc6348
|
JS: Remove mention of TrackedNode in docs
|
2023-05-17 10:37:12 +02:00 |
|
Jami Cogswell
|
7880e9e92c
|
JS: update 'command-line-injection' sink kind to 'command-injection'
|
2023-05-16 15:45:55 -04:00 |
|
Asger F
|
20e8ee8423
|
Merge pull request #12748 from JarLob/yi
JS: Add more sources, more unit tests, fixes to the GitHub Actions injection query
|
2023-05-15 11:03:00 +02:00 |
|
Kasper Svendsen
|
fe2f36a1fe
|
JS: Make implicit this receivers explicit
|
2023-05-12 12:12:48 +02:00 |
|
Kasper Svendsen
|
7dd9906e95
|
JS: Enable implicit this receiver warnings
|
2023-05-12 09:49:14 +02:00 |
|
Kasper Svendsen
|
189f8515c0
|
JS: Make implicit this receivers explicit
|
2023-05-12 09:49:14 +02:00 |
|
Asger F
|
c376eeb133
|
Merge pull request #12978 from asgerf/js/github-actions-sources
JS: Add sources and sinks related to GitHub Actions
|
2023-05-10 09:55:24 +02:00 |
|
Asger F
|
1a9956354e
|
JS: Restrict getInput to indirect command injection query
|
2023-05-03 16:10:03 +02:00 |
|
Kasper Svendsen
|
67950c8e6b
|
JS: Make implicit this receivers explicit
|
2023-05-03 15:31:00 +02:00 |
|
Asger F
|
b9ad4177f9
|
JS: List safe environment variables in IndirectCommandInjection
|
2023-05-03 10:48:14 +02:00 |
|
tyage
|
0d991574ec
|
Fix typo in test
|
2023-05-02 12:00:42 +09:00 |
|
Asger F
|
08785a4063
|
JS: Add sources from actions/core
|
2023-05-01 11:42:17 +02:00 |
|
Asger F
|
cb95dbfa14
|
JS: Add tests
|
2023-05-01 11:42:17 +02:00 |
|
Asger F
|
2c89f9747b
|
Merge pull request #12949 from asgerf/js/angular-native
JS: Add a few more DOM element sources
|
2023-05-01 11:08:45 +02:00 |
|
Asger F
|
e9f1e99526
|
Merge pull request #12887 from asgerf/js/unsafe-yaml-deserialization
JS: Update model of js-yaml
|
2023-05-01 09:57:20 +02:00 |
|
tyage
|
71952fe551
|
JS: Add test for sub module
|
2023-04-30 18:18:35 +09:00 |
|
Erik Krogh Kristensen
|
3d41cd583f
|
Merge pull request #12963 from tyage/track-interfile-use-router
JS: Track interfile useRouter
|
2023-04-28 22:41:43 +02:00 |
|