Esben Sparre Andreasen
|
abe7aeef7c
|
Merge pull request #2643 from esbena/js/unsafe-jquery
JS: add query js/unsafe-jquery-plugin
|
2020-02-18 09:26:14 +01:00 |
|
Esben Sparre Andreasen
|
dcdaa96570
|
JS: remove unused imports
|
2020-02-07 14:10:50 +01:00 |
|
Esben Sparre Andreasen
|
cb30329b3d
|
JS: make DynamicPropertyAccess.qll from PrototypePollutionUtility.ql
|
2020-02-07 13:57:52 +01:00 |
|
Asger Feldthaus
|
a628f787e8
|
JS: Fix qldoc comment
|
2020-02-06 14:59:52 +00:00 |
|
Asger Feldthaus
|
f84af74d1d
|
JS: Handle more libraries
|
2020-02-06 14:59:52 +00:00 |
|
Asger Feldthaus
|
c559ab13e7
|
JS: Add test and handle parameter with source object
|
2020-02-06 14:59:52 +00:00 |
|
Asger Feldthaus
|
34a9dce33d
|
JS: Detect property enumeration through for-own
|
2020-02-06 14:59:52 +00:00 |
|
Asger Feldthaus
|
38ef07ce73
|
JS: Fix join ordering
|
2020-02-06 10:29:05 +00:00 |
|
Asger F
|
cf18bd7bb8
|
Update javascript/ql/src/Security/CWE-400/PrototypePollutionUtility.ql
Co-Authored-By: Esben Sparre Andreasen <esbena@github.com>
|
2020-02-05 09:48:16 +00:00 |
|
Asger Feldthaus
|
fd9975db85
|
JS: Address comments
|
2020-02-05 09:47:51 +00:00 |
|
Asger Feldthaus
|
3ccdaa94ad
|
JS: Expose argumentPassing as DataFlow::argumentPassingStep
|
2020-02-04 15:06:45 +00:00 |
|
Asger Feldthaus
|
c185cededf
|
JS: More pruning and more data flow
|
2020-02-04 15:06:42 +00:00 |
|
Erik Krogh Kristensen
|
5ff958a9cf
|
fix compilation of PrototypePollutionUtility after refactor
|
2020-02-03 09:39:41 +01:00 |
|
Esben Sparre Andreasen
|
7f25c1bf47
|
JS: address doc-review comments
|
2020-01-31 19:33:04 +01:00 |
|
Esben Sparre Andreasen
|
c70997febf
|
JS: address review comments for js/unsafe-jquery-plugin
|
2020-01-31 19:33:04 +01:00 |
|
Esben Sparre Andreasen
|
eaff78b37e
|
JS: change severity to warning
|
2020-01-31 19:33:04 +01:00 |
|
Esben Sparre Andreasen
|
fef918ac13
|
JS: add query "Unsafe jQuery plugin"
|
2020-01-31 19:33:04 +01:00 |
|
Erik Krogh Kristensen
|
72114a48f5
|
rename getASourceAccess to getAnAliasedSourceNode
|
2020-01-31 15:34:58 +01:00 |
|
Erik Krogh Kristensen
|
279c584bb8
|
fix FP in js/path-injection by recognizing more prefix checks
|
2020-01-31 11:03:11 +01:00 |
|
Asger F
|
701d9989be
|
Apply suggestions from code review
Co-Authored-By: Erik Krogh Kristensen <erik-krogh@github.com>
|
2020-01-28 12:46:51 +00:00 |
|
Asger F
|
310dd05185
|
Update javascript/ql/src/Security/CWE-352/MissingCsrfMiddleware.ql
Co-Authored-By: Erik Krogh Kristensen <erik-krogh@github.com>
|
2020-01-28 12:46:34 +00:00 |
|
Asger Feldthaus
|
b98db62e82
|
JS: Recognize req.user a cookie access
|
2020-01-24 09:44:20 +00:00 |
|
Asger Feldthaus
|
a68bb9ffd1
|
JS: Ignore calls and csrf/captcha access
|
2020-01-23 15:32:05 +00:00 |
|
Asger Feldthaus
|
b1ec3e1bf2
|
JS: Add test and dont check predecessors
|
2020-01-23 14:59:03 +00:00 |
|
Asger Feldthaus
|
406c6eb981
|
JS: Sharpen missing CSRF middleware query
|
2020-01-23 14:22:49 +00:00 |
|
Asger F
|
7a1d068f1c
|
Update javascript/ql/src/Security/CWE-400/PrototypePollutionUtility.qhelp
Co-Authored-By: mc <42146119+mchammer01@users.noreply.github.com>
|
2020-01-16 09:47:18 +00:00 |
|
Asger Feldthaus
|
2245882441
|
JS: Add change note and fix cwe tags
|
2020-01-14 10:53:40 +00:00 |
|
Asger Feldthaus
|
d76859b7df
|
JS: Address review comments
|
2020-01-14 10:53:00 +00:00 |
|
Asger F
|
9bd3c4a11c
|
JS: Add sanitizer for "in" exprs
|
2020-01-14 10:53:00 +00:00 |
|
Asger F
|
bd9405ab84
|
JS: Guard against more FPs
|
2020-01-14 10:52:59 +00:00 |
|
Asger F
|
738123d3f5
|
JS: More sanitizers
|
2020-01-14 10:52:59 +00:00 |
|
Asger F
|
f7543aec95
|
JS: Support Reflect.ownKeys
|
2020-01-14 10:52:59 +00:00 |
|
Asger F
|
8af233307a
|
JS: Support enumeration through Object.entries
|
2020-01-14 10:52:59 +00:00 |
|
Asger F
|
ac2f0a8e11
|
JS: Do not require flow from key -> rhs
|
2020-01-14 10:52:59 +00:00 |
|
Asger F
|
96bf9db200
|
JS: Add another test and more barriers
|
2020-01-14 10:52:59 +00:00 |
|
Asger F
|
bc7871078a
|
JS: Fix FPs from Object.create(null)
|
2020-01-14 10:52:59 +00:00 |
|
Asger F
|
654f145772
|
JS: Add PrototypePollutionUtility query
|
2020-01-14 10:52:59 +00:00 |
|
Erik Krogh Kristensen
|
e27a69960d
|
update description
|
2019-11-27 11:17:19 +01:00 |
|
Erik Krogh Kristensen
|
b5a57986c6
|
small changes based on review feedback
|
2019-11-26 15:57:31 +01:00 |
|
Erik Krogh Kristensen
|
f284b3a2bb
|
Merge remote-tracking branch 'upstream/master' into exceptionXss
|
2019-11-26 10:54:04 +01:00 |
|
Erik Krogh Kristensen
|
7ee12a3420
|
change doc based on review feedback
|
2019-11-26 10:48:24 +01:00 |
|
Erik Krogh Kristensen
|
f40d79271d
|
cleanup module imports and update expected outputs
|
2019-11-22 13:55:47 +01:00 |
|
Max Schaefer
|
1951461f55
|
JavaScript: Simplify DoubleEscaping.
Undo previous work on generalising the concept of a replacement, which did not work out.
|
2019-11-22 09:24:34 +00:00 |
|
Max Schaefer
|
ff002a7af4
|
JavaScript: Whitelist more harmless incomplete escapes.
|
2019-11-22 09:24:34 +00:00 |
|
Max Schaefer
|
659cc812fe
|
JavaScript: Rephrase two predicates to help the optimiser.
|
2019-11-22 09:24:34 +00:00 |
|
Max Schaefer
|
db3eaa23ef
|
JavaScript: Introduce modelling of String.prototype.replace and use it in two queries.
|
2019-11-22 09:24:34 +00:00 |
|
Max Schaefer
|
12ea81af9c
|
JavaScript: Move getAMatchedConstant(RegExpTerm) into the library.
|
2019-11-22 09:24:34 +00:00 |
|
Max Schaefer
|
a5a5debdc7
|
JavaScript: Move getStringValue(RegExpLiteral) into the library.
|
2019-11-22 09:24:34 +00:00 |
|
Max Schaefer
|
0edb70f373
|
JavaScript: Deal with escape-unescape-escape (and similar) chains.
|
2019-11-22 09:24:34 +00:00 |
|
Max Schaefer
|
cb54618a5d
|
JavaScript: Deal with (un-)escaping on captured variables.
|
2019-11-22 09:24:34 +00:00 |
|