1966 Commits

Author	SHA1	Message	Date
Asger F	58c8b5fa2b	Merge pull request #18790 from asgerf/js/no-implicit-array-taint ... JS: Do not taint whole array when storing into ArrayElement	2025-02-19 13:23:31 +01:00
Asger F	c958702830	JS: Accept some unproblematic consistency warnings	2025-02-17 20:30:07 +01:00
Asger F	08b9d934c0	JS: Add a negative test	2025-02-17 11:37:44 +01:00
Asger F	352924fb8c	JS: Handle a few other stringification contexts	2025-02-17 11:36:28 +01:00
Asger F	33ab7db98a	JS: Handle Array.prototype.toString calls	2025-02-17 11:25:03 +01:00
Asger F	a74b203c86	JS: Add test with implicit array stringification	2025-02-17 11:21:46 +01:00
Asger F	d87534c7d0	JS: Model Array#toString	2025-02-17 11:13:36 +01:00
Asger F	e8d1703224	JS: Add test for flow through Buffer.concat ... This flow was lost since the existing model of concat() boxes its return value in ArrayElement. There is no explicit model of Buffer.concat.	2025-02-17 11:12:51 +01:00
Asger F	26dcbf7a2a	JS: Migrate URLSearchParams model to flow summaries	2025-02-13 11:51:33 +01:00
Asger F	f531f4479b	JS: Add test for URL and URLSearchParams	2025-02-13 11:51:32 +01:00
Asger F	80824cfdc7	JS: Benign test output changes	2025-02-04 12:12:41 +01:00
Asger F	5e109ff457	JS: Update test output	2025-02-04 10:45:37 +01:00
Asger F	be082578d4	JS: Hoist function decls in a block to the top of the block	2025-02-03 15:21:08 +01:00
Asger F	29879297ee	JS: Add test showing missed call to later-defined function in block	2025-02-03 14:56:11 +01:00
Asger F	a0af4c9a84	Merge pull request #18622 from asgerf/js/typescript-tsconfig-names ... JS: Treat more file patterns as tsconfig-like files	2025-01-31 09:42:50 +01:00
Asger F	16f7373712	JS: Model dependency injection in Nest	2025-01-29 13:49:46 +01:00
Asger F	b07c5c6ee0	JS: Add test	2025-01-29 13:49:43 +01:00
Asger F	6d04425790	JS: Add test	2025-01-29 11:14:21 +01:00
Asger F	b015c88c79	JS: Add view-component-input threat model	2025-01-22 10:45:46 +01:00
Asger F	dd55460d7f	JS: Update test output	2025-01-21 14:03:30 +01:00
Asger F	f3b52adde6	JS: Add test showing DB-CHECK failure	2025-01-21 14:02:17 +01:00
Asger F	6cd9752289	Merge pull request #18467 from github/js/shared-dataflow-branch ... JS: Migrate to shared data flow library (targeting main!) 🚀	2025-01-16 11:28:57 +01:00
Asger F	fd5a3dad90	JS: One more test	2025-01-09 10:46:45 +01:00
Asger F	138b000891	JS: Coerce the local export node to an Identifier	2025-01-09 10:42:25 +01:00
Asger F	db98880163	JS: Add crash reproduction to test case	2025-01-09 10:39:30 +01:00
Asger F	4a6030c592	JS: Update expected with some absent result sets	2024-12-19 15:25:46 +01:00
Asger F	cd6ebb103e	JS: Make test not assume implicit through for maps	2024-12-19 15:25:45 +01:00
Asger F	dc2f39c399	JS: Add model of Map#groupBy	2024-12-19 15:25:43 +01:00
Asger F	de5e6ddeed	JS: Update with changes in TaintTracking test	2024-12-19 15:25:42 +01:00
Asger F	c204527c08	JS: Update Array test output (new tests added on main)	2024-12-19 15:25:41 +01:00
Asger F	33e8bd5032	JS: Update testUtilities import	2024-12-19 15:25:39 +01:00
Asger F	3acd4814de	Merge branch 'main' into js/shared-dataflow-merge-main	2024-12-19 10:14:38 +01:00
Asger F	db00dad033	JS: Avoid deprecation warnings in some tests	2024-12-16 15:35:49 +01:00
Asger F	69b361ae70	JS: Migrate a test to use flow state	2024-12-16 15:35:42 +01:00
Asger F	14ca1c134b	JS: Update TaintedUrlSuffix test	2024-12-13 10:08:07 +01:00
Michael Nebel	c3fe3e468c	Javascript: Update all test util paths to point to the new location.	2024-12-12 13:54:25 +01:00
Jeroen Ketema	3d8493757e	JS: Update expected test results	2024-12-03 19:19:01 +01:00
Asger F	3f0d0e3a05	JS: Deprecate DataFlow::BarrierGuardNode	2024-12-03 14:30:50 +01:00
Asger F	62c17d3f4e	JS: Update SanitizerGuardNode use in BasicTaintTracking test	2024-12-03 14:30:34 +01:00
Asger F	2ef652da2c	JS: Add more deprecation annotations in tests	2024-12-03 14:30:31 +01:00
Asger F	08d25c122d	JS: Deprecate more uses of ConsistencyConfiguration	2024-12-03 14:30:27 +01:00
Asger F	0ce1fe767d	JS: Deprecate ConsistencyChecking to avoid deprecation warnings	2024-12-03 14:30:23 +01:00
Asger F	4d7401a074	JS: Deprecate tests for deprecated APIs ... Mainly adds 'deprecated' in front of a bunch of tests for deprecated APIs.	2024-12-03 14:30:12 +01:00
Asger F	3548544970	JS: Avoid some uses of deprecated guard classes in tests	2024-12-03 14:30:11 +01:00
Asger F	a568d8c086	JS: Port threat-model test to ConfigSig	2024-12-03 14:30:10 +01:00
Asger F	054558d7b5	JS: Include content properties in type-tracker properties ... Reminder: we have two PropertyName classes because the one in Contents.qll can't depend on DataFlow::Node.	2024-12-03 09:58:54 +01:00
Asger F	8bca66493f	JS: Add test showing lack of inclusion in PropertyName	2024-12-03 09:57:02 +01:00
Asger F	9c6b6981e2	JS: Add test to restrict dependencies	2024-11-29 14:23:56 +01:00
Asger F	2f0c80a98b	JS: Include summary steps in type tracking	2024-11-29 14:23:55 +01:00
Asger F	440cbb7f0a	JS: Add inline-expectation test for type tracking	2024-11-29 14:23:54 +01:00