3658 Commits

Author	SHA1	Message	Date
Kasper Svendsen	67950c8e6b	JS: Make implicit this receivers explicit	2023-05-03 15:31:00 +02:00
Asger F	2c89f9747b	Merge pull request #12949 from asgerf/js/angular-native ... JS: Add a few more DOM element sources	2023-05-01 11:08:45 +02:00
Asger F	e9f1e99526	Merge pull request #12887 from asgerf/js/unsafe-yaml-deserialization ... JS: Update model of js-yaml	2023-05-01 09:57:20 +02:00
Erik Krogh Kristensen	3d41cd583f	Merge pull request #12963 from tyage/track-interfile-use-router ... JS: Track interfile useRouter	2023-04-28 22:41:43 +02:00
Asger F	d1c8e0abd7	Merge pull request #12951 from asgerf/js/json-with-comments ... JS: Stop complaining about comments in JSON files	2023-04-28 20:53:35 +02:00
tyage	933b55d37d	Track interfile useRouter	2023-04-28 15:49:26 +09:00
Asger F	8a9308c8b0	JS: Update test output	2023-04-28 07:55:20 +02:00
Asger F	0c8f895e0f	JS: Add one more test	2023-04-27 21:06:20 +02:00
Asger F	97a942de80	JS: Update test output	2023-04-27 21:04:35 +02:00
Asger F	682ff23e04	JS: Update Express test	2023-04-27 16:36:04 +02:00
Asger F	410719fd9e	Update JSONError.expected	2023-04-27 10:57:38 +02:00
Asger F	cf1e87de9e	JS: Track DOM elements out of collections	2023-04-26 14:55:34 +02:00
Asger F	1f228a049f	JS: Add test for iterating over DOM collections	2023-04-26 14:54:38 +02:00
Asger F	0d74d88b7b	JS: Add new sink to test	2023-04-26 14:33:04 +02:00
Asger F	4df05b4e74	JS: Shift line numbers in test	2023-04-26 14:33:04 +02:00
Asger F	611a7060b4	JS: Add tests	2023-04-26 12:46:20 +02:00
Asger F	a446c5452d	JS: Update test output	2023-04-26 11:44:56 +02:00
Asger F	ff67118097	JS: Add hanging test case	2023-04-25 11:27:40 +02:00
Tom Hvitved	f6d000eb20	Merge pull request #12805 from hvitved/remove-queries-xml ... Remove all `queries.xml` files	2023-04-18 10:52:14 +02:00
Asger F	13b1e97caa	JS: Fix the ExtendCall restriction	2023-04-17 12:30:08 +02:00
Asger F	eafef91dbc	JS: Update test output after ExtendCall restriction	2023-04-17 12:28:23 +02:00
Asger F	024760610a	JS: Add prototype pollution test	2023-04-17 12:27:34 +02:00
Asger F	04079752f7	JS: update test output after adding 'this' sanitizer	2023-04-17 12:15:46 +02:00
Asger F	f87f6c8556	JS: Add test to unsafe jquery plugin	2023-04-17 12:15:05 +02:00
Asger F	62dca44ee5	Update UntrustedDataToExternalAPI.expected	2023-04-17 08:23:04 +02:00
Asger F	b0d4b31103	JS: Trim whitespace in test	2023-04-17 08:23:04 +02:00
Asger F	c7f16cd224	JS: Add test	2023-04-17 08:23:03 +02:00
Erik Krogh Kristensen	cece307c60	Merge pull request #12802 from erik-krogh/history-xss ... JS: add browser history as XSS sink	2023-04-14 13:35:19 +02:00
Tom Hvitved	3cc9dec9c8	Remove all queries.xml files	2023-04-13 11:18:58 +02:00
Asger F	b819f55203	Merge pull request #12792 from asgerf/js/redux-model-perf ... JS: add getForwardingFunction and use to sharpen useSelector model	2023-04-12 14:09:59 +02:00
erik-krogh	b1957623c1	add browser history as XSS sink	2023-04-12 13:38:18 +02:00
Asger F	2c65a49d7c	JS: Add getForwardingFunction() to API graphs	2023-04-11 14:00:30 +02:00
Asger F	4ce03d4dc4	JS: Restrict useSelector steps to local callbacks	2023-04-11 13:33:46 +02:00
Asger F	3cc931306f	JS: Add test for selector nodes with multiple access paths	2023-04-11 13:33:27 +02:00
tyage	320cb99dbf	Add replace method test	2023-04-08 18:31:48 +09:00
tyage	668e1accaa	Remove unnecessary whiteline	2023-04-08 18:24:31 +09:00
tyage	7f9b8557ac	Add Next.js router push as XSS sink	2023-04-08 18:18:34 +09:00
Erik Krogh Kristensen	b382465078	Merge pull request #12679 from ctbellanti/improved-certificate-validation ... JS: Improved coverage for disabled certificate validation	2023-03-30 16:24:33 +02:00
erik-krogh	47783326c2	add test for https.createServer in DisablingCertificateValidation.ql	2023-03-30 14:15:25 +02:00
Asger F	43174cfe3a	Merge pull request #12668 from asgerf/js/jquery-callback-sinks ... JS: fix handling of jQuery sinks involving callback	2023-03-30 12:42:53 +02:00
Erik Krogh Kristensen	451f6f01bb	Merge pull request #12633 from erik-krogh/more-global-flow ... JS: better callgraph support for global variables	2023-03-28 15:19:50 +02:00
Erik Krogh Kristensen	d3c3f2dc90	Merge pull request #12628 from erik-krogh/betterReDoS ... ReDoS: better super-linear algorithm	2023-03-27 15:26:49 +02:00
Asger F	92a681213d	JS: Step through jQuery callback return values	2023-03-27 11:17:27 +02:00
Asger F	bc2a772f3b	JS: Add test case showing false negative	2023-03-27 11:08:39 +02:00
erik-krogh	e189b36e3f	materialize less strings when ranking states	2023-03-23 10:35:58 +01:00
erik-krogh	0462e2a6ea	update some expected output	2023-03-22 20:47:53 +01:00
Alex Ford	0f267e012a	Merge pull request #12631 from alexrford/js/weak-cryptographic-algorithm_space ... JS: add a missing space in alert message for `js/weak-cryptographic-algorithm`	2023-03-22 14:12:35 +00:00
erik-krogh	2bba9057a0	better callgraph support for global variables	2023-03-22 13:49:33 +01:00
Alex Ford	b000b9b5c0	JS: add a missing space in alert message for js/weak-cryptographic-algorithm	2023-03-22 11:12:13 +00:00
erik-krogh	b071d3557e	JS/PY/RB: add a worst-case test, that now performs OK	2023-03-22 10:13:18 +01:00