Asger Feldthaus
|
7393844699
|
JS: Update some queries that used data as source
|
2020-03-18 11:55:13 +00:00 |
|
Asger Feldthaus
|
506ddaf3f4
|
JS: Add explanation for test failure
|
2020-03-18 11:55:13 +00:00 |
|
Asger Feldthaus
|
028022158d
|
JS: Add variant of test that passes
|
2020-03-18 11:55:13 +00:00 |
|
Asger Feldthaus
|
a7e337ab28
|
JS: Add some lines in test case
|
2020-03-18 11:55:13 +00:00 |
|
Asger Feldthaus
|
3e68072e38
|
JS: Accept test case change
|
2020-03-18 11:55:13 +00:00 |
|
Asger Feldthaus
|
18eea96cf8
|
JS: Autoformat
|
2020-03-18 11:55:13 +00:00 |
|
Asger Feldthaus
|
a9901a44e8
|
JS: Update TaintBarriers/isBarrier test
|
2020-03-18 11:55:13 +00:00 |
|
Asger Feldthaus
|
0edb765958
|
JS: Split test case function in two
|
2020-03-18 11:55:13 +00:00 |
|
Asger Feldthaus
|
4e75fe3977
|
JS: Update some qldoc comments
|
2020-03-18 11:55:13 +00:00 |
|
Asger Feldthaus
|
a195429471
|
JS: Add test with non-guard sanitizer
|
2020-03-18 11:55:12 +00:00 |
|
Asger Feldthaus
|
83606e7b60
|
JS: Dont use data label in taint-tracking configs
|
2020-03-18 11:55:12 +00:00 |
|
Asger Feldthaus
|
8da0584b12
|
JS: Add test
|
2020-03-18 11:55:12 +00:00 |
|
semmle-qlci
|
8792d0d248
|
Merge pull request #3070 from erik-krogh/DataPerf
Approved by asgerf
|
2020-03-17 13:47:09 +00:00 |
|
semmle-qlci
|
fa08258c14
|
Merge pull request #3036 from erik-krogh/CustomTrack
Approved by asgerf
|
2020-03-17 13:44:51 +00:00 |
|
semmle-qlci
|
ea46873bfe
|
Merge pull request #3065 from erik-krogh/PathSinks
Approved by esbena
|
2020-03-17 13:00:00 +00:00 |
|
Erik Krogh Kristensen
|
1dfe9e9c2a
|
changes based on review
|
2020-03-17 11:28:29 +01:00 |
|
Erik Krogh Kristensen
|
9a3176d3cc
|
Apply suggestions from code review
Co-Authored-By: Esben Sparre Andreasen <esbena@github.com>
|
2020-03-17 11:26:35 +01:00 |
|
Erik Krogh Kristensen
|
095d4d711a
|
change import to an absolute import to fix warning
|
2020-03-17 11:21:46 +01:00 |
|
Erik Krogh Kristensen
|
d7b69fcfea
|
autoformat
|
2020-03-17 09:52:08 +01:00 |
|
Esben Sparre Andreasen
|
7dc80664e6
|
Merge pull request #3045 from Semmle/esbena-patch-2
JS: loosen qldoc for `barrierGuardIsRelevant`
|
2020-03-16 22:28:22 +01:00 |
|
Erik Krogh Kristensen
|
7145a57db3
|
refactor StepSummary into an internal .qll
|
2020-03-16 17:52:04 +01:00 |
|
Erik Krogh Kristensen
|
cd6fe8115d
|
Update javascript/ql/src/semmle/javascript/Promises.qll
Co-Authored-By: Asger F <asgerf@github.com>
|
2020-03-16 16:27:50 +01:00 |
|
Erik Krogh Kristensen
|
f2548aa3b1
|
add more models for file related sinks and sources
|
2020-03-16 11:07:23 +01:00 |
|
Erik Krogh Kristensen
|
557b642a8e
|
add isRelevant check on flowStep predicate
|
2020-03-16 11:01:20 +01:00 |
|
semmle-qlci
|
1d4dd2b2f7
|
Merge pull request #3057 from esbena/js/infer-this-as-exports
Approved by asgerf
|
2020-03-15 12:55:12 +00:00 |
|
semmle-qlci
|
7e093a8e5c
|
Merge pull request #3041 from erik-krogh/JQueryAjax
Approved by esbena
|
2020-03-14 22:31:59 +00:00 |
|
semmle-qlci
|
ff03478ae8
|
Merge pull request #3049 from asger-semmle/js/fix-cyclic-join
Approved by erik-krogh
|
2020-03-14 16:19:25 +00:00 |
|
Erik Krogh Kristensen
|
486efbab77
|
refactor based on review
|
2020-03-14 14:53:38 +01:00 |
|
Erik Krogh Kristensen
|
4f39c28741
|
Merge branch 'master' of git.semmle.com:Semmle/ql into CustomTrack
|
2020-03-14 14:37:52 +01:00 |
|
semmle-qlci
|
20cae302fd
|
Merge pull request #3054 from erik-krogh/NoDeferred
Approved by asgerf
|
2020-03-14 13:36:16 +00:00 |
|
Esben Sparre Andreasen
|
4d6aa20990
|
Merge pull request #3004 from esbena/js/additional-mongodb-and-mongoose-injection-sinks
JS: Mongoose and MongoDB improvements
|
2020-03-14 12:31:43 +01:00 |
|
Esben Sparre Andreasen
|
2fac7434df
|
JS: infer this to be module.exports in node modules
|
2020-03-13 14:10:35 +01:00 |
|
Esben Sparre Andreasen
|
ae8d38236b
|
JS: add some tests for this
|
2020-03-13 14:09:23 +01:00 |
|
semmle-qlci
|
25b9fcfafd
|
Merge pull request #3058 from asger-semmle/js/may-receive-argument-fix
Approved by max-schaefer
|
2020-03-13 11:49:49 +00:00 |
|
Erik Krogh Kristensen
|
799c3eb06c
|
remove model of Deferred
|
2020-03-12 16:38:20 +01:00 |
|
Erik Krogh Kristensen
|
59d2d6d4fd
|
autoformat
|
2020-03-12 14:48:16 +01:00 |
|
Asger Feldthaus
|
4391b70b5f
|
JS: Fix perf issue in mayReceiveArgument
|
2020-03-12 13:45:34 +00:00 |
|
Erik Krogh Kristensen
|
172c5ccaca
|
changes based on review
|
2020-03-12 11:04:33 +01:00 |
|
Erik Krogh Kristensen
|
d32d14f572
|
model responseText and responseXml on jqXHR objects
|
2020-03-11 17:00:44 +01:00 |
|
Erik Krogh Kristensen
|
26d8e33434
|
Autoformat
|
2020-03-11 16:42:48 +01:00 |
|
Erik Krogh Kristensen
|
e88dac3dea
|
remove FP for js/redundant-operation
|
2020-03-11 14:42:32 +01:00 |
|
Asger Feldthaus
|
6645df93ad
|
JS: Blacklist another cyclic property
|
2020-03-11 13:09:37 +00:00 |
|
semmle-qlci
|
1d5fba85f9
|
Merge pull request #3034 from esbena/js/sharpen-useless-regexp-character-escape
Approved by asgerf
|
2020-03-11 12:29:45 +00:00 |
|
Erik Krogh Kristensen
|
cb5ef7dbed
|
add basic support for jqXHR with ajax calls
|
2020-03-11 13:05:41 +01:00 |
|
Erik Krogh Kristensen
|
b987f2cf29
|
autoformat
|
2020-03-11 10:54:20 +01:00 |
|
Erik Krogh Kristensen
|
7f147221f5
|
refactor to include promise tracking as a core part of type tracking
|
2020-03-11 10:44:11 +01:00 |
|
Esben Sparre Andreasen
|
4dac835bb0
|
JS: loosen qldoc for barrierGuardIsRelevant
|
2020-03-11 07:54:38 +01:00 |
|
Erik Krogh Kristensen
|
13e855910e
|
add more ClientRequest models for JQuery
|
2020-03-10 17:21:22 +01:00 |
|
semmle-qlci
|
e3fed39f88
|
Merge pull request #3000 from asger-semmle/js/late-barrier-guards
Approved by erik-krogh
|
2020-03-10 15:38:35 +00:00 |
|
Esben Sparre Andreasen
|
5c8800a1c7
|
JS: make autoformatter happy
|
2020-03-10 13:11:31 +01:00 |
|