Erik Krogh Kristensen
|
7d6dac479c
|
Merge branch 'js-team-sprint' into https-fix
|
2020-06-18 16:53:01 +02:00 |
|
semmle-qlci
|
20e96799e2
|
Merge pull request #3661 from erik-krogh/build-leaks
Approved by asgerf, mchammer01
|
2020-06-18 15:32:45 +01:00 |
|
Erik Krogh Kristensen
|
27a20b263e
|
Merge branch 'https-fix' of github.com:erik-krogh/ql into https-fix
|
2020-06-17 21:06:21 +02:00 |
|
Erik Krogh Kristensen
|
7a1c161e9e
|
Merge branch 'js-team-sprint' into https-fix
|
2020-06-17 21:04:44 +02:00 |
|
Erik Krogh Kristensen
|
bdda587247
|
Merge branch 'js-team-sprint' into build-leaks
|
2020-06-17 19:51:30 +02:00 |
|
Erik Krogh Kristensen
|
6d6f29eb85
|
Merge pull request #3726 from erik-krogh/bad-code-polish
JS: Bad code polish
|
2020-06-17 19:45:37 +02:00 |
|
Erik Krogh Kristensen
|
a465fef7aa
|
shorten sentence in qhelp
|
2020-06-17 17:24:18 +02:00 |
|
Erik Krogh Kristensen
|
7aa911b9f4
|
add reference to cwe-116 in change-note
|
2020-06-17 17:20:46 +02:00 |
|
Erik Krogh Kristensen
|
abd9aab109
|
code-injection -> code injection
|
2020-06-17 17:20:46 +02:00 |
|
Erik Krogh Kristensen
|
45e2b94eb5
|
Apply suggestions from doc review
Co-authored-by: mc <42146119+mchammer01@users.noreply.github.com>
|
2020-06-17 17:19:44 +02:00 |
|
Erik Krogh Kristensen
|
69888f90c6
|
add dot after bullet-point
|
2020-06-17 17:15:39 +02:00 |
|
Erik Krogh Kristensen
|
fb5e13b456
|
Apply suggestions from doc review
Co-authored-by: mc <42146119+mchammer01@users.noreply.github.com>
|
2020-06-16 23:45:45 +02:00 |
|
Erik Krogh Kristensen
|
210e71cd93
|
update expected output
|
2020-06-16 21:52:59 +02:00 |
|
Erik Krogh Kristensen
|
ac1a0d9925
|
Merge pull request #3725 from erik-krogh/yargs-changenote
JS: add changenote for yargs
|
2020-06-16 16:28:43 +02:00 |
|
Erik Krogh Kristensen
|
02c825351c
|
add change note for js/bad-code-sanitization
|
2020-06-16 16:25:30 +02:00 |
|
Erik Krogh Kristensen
|
5ce17bea60
|
add qhelp for js/bad-code-sanitization
|
2020-06-16 16:23:41 +02:00 |
|
Erik Krogh Kristensen
|
a0951f76b6
|
add additional taint steps when type-tracking RemoteFlowSource
|
2020-06-16 14:55:07 +02:00 |
|
Erik Krogh Kristensen
|
cb5b946546
|
add changenote for yargs
|
2020-06-16 14:37:53 +02:00 |
|
Erik Krogh Kristensen
|
5e060fa6a8
|
Apply suggestions from code review
Co-authored-by: Asger F <asgerf@github.com>
|
2020-06-15 23:47:40 +02:00 |
|
Erik Krogh Kristensen
|
315faaffee
|
small corrections in documentation
Co-authored-by: Asger F <asgerf@github.com>
|
2020-06-15 23:40:27 +02:00 |
|
Erik Krogh Kristensen
|
e8db624e74
|
add .jar and .war to the list of sensitive files for js/insecure-download
|
2020-06-15 16:48:07 +02:00 |
|
Erik Krogh Kristensen
|
d2716c532c
|
qhelp
|
2020-06-15 14:59:48 +02:00 |
|
Erik Krogh Kristensen
|
dc09a68eb4
|
add change-note
|
2020-06-15 14:30:34 +02:00 |
|
Erik Krogh Kristensen
|
8682918779
|
add change note
|
2020-06-15 13:47:43 +02:00 |
|
Erik Krogh Kristensen
|
fe9aa241a1
|
add qhelp
|
2020-06-15 13:47:39 +02:00 |
|
Erik Krogh Kristensen
|
4d1920eec1
|
add .js and .py files to js/insecure-download
|
2020-06-15 12:48:50 +02:00 |
|
semmle-qlci
|
b6b838774e
|
Merge pull request #3704 from asger-semmle/js/cve-serve
Approved by esbena
|
2020-06-15 09:54:17 +01:00 |
|
Asger Feldthaus
|
315f3389d1
|
JS: Autoformat test
|
2020-06-12 19:58:05 +01:00 |
|
Asger F
|
d844e0025a
|
Merge pull request #3651 from esbena/js/bad-multicharacter-sanitization
JS: initial version of IncompleteMultiCharacterSanitization.ql
|
2020-06-12 16:25:22 +01:00 |
|
Asger Feldthaus
|
b9cd157c0f
|
JS: Autoformat
|
2020-06-12 15:36:02 +01:00 |
|
Esben Sparre Andreasen
|
678bb7c128
|
JS: simplify loop detection
|
2020-06-12 14:56:08 +02:00 |
|
Asger Feldthaus
|
eaf6be5fea
|
JS: Fix lazy qldoc
|
2020-06-12 13:29:35 +01:00 |
|
Asger Feldthaus
|
91d98c0d00
|
JS: Change note
|
2020-06-12 13:12:55 +01:00 |
|
Asger Feldthaus
|
5548606f21
|
JS: Add test
|
2020-06-12 13:02:33 +01:00 |
|
Erik Krogh Kristensen
|
01c51eea89
|
Merge pull request #3680 from erik-krogh/bad-code-sanitizer
JS: Add query to detect bad code sanitizers
|
2020-06-12 14:00:21 +02:00 |
|
Asger Feldthaus
|
4795b87daa
|
JS: Add model of Micro
|
2020-06-12 12:45:11 +01:00 |
|
Asger Feldthaus
|
230f78afb6
|
JS: Step through path.{format, parse}
|
2020-06-12 12:26:45 +01:00 |
|
semmle-qlci
|
2342d3dba3
|
Merge pull request #3662 from asger-semmle/js/package-export-fixes
Approved by esbena
|
2020-06-12 12:18:23 +01:00 |
|
Erik Krogh Kristensen
|
f0ec2eb37b
|
add missing qldoc
|
2020-06-12 11:47:53 +02:00 |
|
Erik Krogh Kristensen
|
c9fc1a378d
|
Merge pull request #3663 from erik-krogh/bad-crypto
JS: Introduce query to detect biased random number generators
|
2020-06-12 11:32:12 +02:00 |
|
Erik Krogh Kristensen
|
1751fb6c47
|
add missing qldoc
|
2020-06-12 11:30:22 +02:00 |
|
Erik Krogh Kristensen
|
adabd2daca
|
add qldoc and customizations module
|
2020-06-12 11:26:49 +02:00 |
|
Erik Krogh Kristensen
|
908edb39b9
|
unsecure -> insecure
|
2020-06-12 11:02:26 +02:00 |
|
Erik Krogh Kristensen
|
86b23b239e
|
Merge pull request #3656 from erik-krogh/destruct-yargs
JS: support rest-patterns inside property patterns
|
2020-06-12 10:57:24 +02:00 |
|
Erik Krogh Kristensen
|
57d2226080
|
typo
|
2020-06-12 10:55:29 +02:00 |
|
Erik Krogh Kristensen
|
9780fcf8fe
|
fix ftp protocol regexp
|
2020-06-12 10:54:56 +02:00 |
|
Erik Krogh Kristensen
|
3f957103ed
|
improve alert message - and autoformat
|
2020-06-12 10:53:19 +02:00 |
|
Erik Krogh Kristensen
|
056a7e87ff
|
refactor into customizations module - and move curl download to a ClientRequest
|
2020-06-12 10:51:09 +02:00 |
|
Erik Krogh Kristensen
|
8225adcaea
|
move TODOs
|
2020-06-12 10:28:06 +02:00 |
|
Erik Krogh Kristensen
|
02c4a0477d
|
add tests for js/build-artifact-leak
|
2020-06-12 10:21:37 +02:00 |
|