Asger F
0e40717358
JS: recognize res.sendfile root option
2018-12-19 10:25:15 +00:00
Asger F
02978c97f1
JS: whitelist $(location) in simple cases
2018-12-18 13:11:42 +00:00
Jonas Jensen
5ac5aa0c2a
Merge remote-tracking branch 'upstream/master' into mergeback-20181217
2018-12-17 13:42:45 +01:00
Asger F
7adf1d9958
Merge pull request #631 from esben-semmle/js/bad-url-regexing
...
JS: add query: js/incomplete-url-regexp
2018-12-17 11:53:22 +00:00
Esben Sparre Andreasen
c6b4e29b93
JS: add "host" as a sink for js/request-forgery
2018-12-17 10:32:30 +01:00
Esben Sparre Andreasen
60fe0176ed
JS: add ClientRequest::getHost
2018-12-17 10:32:30 +01:00
Esben Sparre Andreasen
3a5962aa34
JS: minor fixups in ClientRequests.qll
2018-12-17 10:32:30 +01:00
Max Schaefer
5ccad6ffc2
JavaScript: Minor improvements.
2018-12-14 11:56:59 +00:00
Aditya Sharad
7bc729a7dc
Merge master into next.
2018-12-14 10:16:47 +00:00
semmle-qlci
936094d0b6
Merge pull request #671 from xiemaisi/js/more-unhelpful-magic
...
Approved by asger-semmle
2018-12-14 08:44:45 +00:00
semmle-qlci
7f21f145e2
Merge pull request #678 from asger-semmle/function-receiver
...
Approved by xiemaisi
2018-12-14 08:39:04 +00:00
Aditya Sharad
f71e5ac338
Merge master into next.
2018-12-13 17:57:31 +00:00
Asger F
cb349348e7
JS: rename getThisParameter to getReceiver
2018-12-13 10:19:44 +00:00
Max Schaefer
e194021c3b
Merge pull request #629 from esben-semmle/js/persistent-read-taint
...
JS: add persistent storage taint steps
2018-12-13 08:24:42 +00:00
Max Schaefer
969fe6e4f1
Merge pull request #657 from esben-semmle/js/classify-more-files
...
JS: classify additional files
2018-12-13 08:20:33 +00:00
Max Schaefer
e8c8360ad1
Merge pull request #659 from esben-semmle/js/more-constant-string-usage
...
JS: replace StringLiteral with ConstantString in two queries
2018-12-13 08:19:22 +00:00
Max Schaefer
54bb9d185f
Merge pull request #632 from asger-semmle/pseudo-random-bytes
...
JS: add crypto.pseudoRandomBytes as source in InsecureRandomness.ql
2018-12-13 08:14:40 +00:00
Aditya Sharad
f92456fcad
Merge master into next.
...
Conflict in `cpp/ql/test/library-tests/sideEffects/functions/sideEffects.expected`,
resolved by accepting test output (combining changes).
2018-12-12 17:26:18 +00:00
Asger F
635a3cb1ec
JS: add FunctionNode.getThisParameter
2018-12-12 16:26:02 +00:00
Asger F
a96c53f9b8
JS: restrict when a variable reference is considered a source
2018-12-12 12:28:26 +00:00
Asger F
14621760bb
JS: add window.name as DOM-based remote flow source
2018-12-12 12:22:39 +00:00
Max Schaefer
faaca21996
JavaScript: Avoid more unhelpful magic.
2018-12-12 08:40:21 +00:00
Asger F
a01a9dc5cc
JS: add crypto.pseudoRandomBytes as source in InsecureRandomness.ql
2018-12-11 16:06:22 +00:00
Esben Sparre Andreasen
376ed7a4d2
JS: generalize js/command-line-injection to handle ConstantString
2018-12-11 13:39:15 +01:00
Esben Sparre Andreasen
1bc73ab592
JS: address review comments
2018-12-11 13:03:17 +01:00
Esben Sparre Andreasen
73aa223b08
JS: handle additional multi-license file patterns
2018-12-11 09:55:38 +01:00
Esben Sparre Andreasen
edbef289a7
JS: improve whitespace handling for multi-license file recognition
2018-12-11 09:30:10 +01:00
Esben Sparre Andreasen
e016098f86
JS: support purs classification
2018-12-11 09:17:01 +01:00
Esben Sparre Andreasen
3879e57f18
JS: support <meta name="generator"/> classification
2018-12-11 09:12:39 +01:00
Esben Sparre Andreasen
a295dfd2c5
JS: support AutoRest classification
2018-12-11 08:54:19 +01:00
Esben Sparre Andreasen
7c6e28d917
JS: introduce near-empty RegularExpressions.qll
2018-12-10 22:22:54 +01:00
Esben Sparre Andreasen
6d6379fc09
JS: address review comments
2018-12-10 22:03:52 +01:00
semmle-qlci
3397533045
Merge pull request #628 from xiemaisi/js/setUnsafeHTML
...
Approved by esben-semmle
2018-12-06 13:58:52 +00:00
Esben Sparre Andreasen
45b207c21b
JS: introduce models of three cookie libraries
2018-12-06 14:53:22 +01:00
Esben Sparre Andreasen
28b4a78430
JS: introduce DOM::PersistentWebStorage
2018-12-06 14:53:22 +01:00
Esben Sparre Andreasen
7fb752784a
JS: introduce persistent read/write pairs as a taint step
2018-12-06 10:36:10 +01:00
Max Schaefer
ef347b3870
JavaScript: Teach Xss query about WinJS HTML injection functions.
2018-12-06 09:13:21 +00:00
Aditya Sharad
3caf4e52a7
Merge rc/1.19 into next.
2018-12-04 12:39:41 +00:00
Esben Sparre Andreasen
679db191f5
JS: move shared conjunct up
2018-12-04 10:55:24 +01:00
Esben Sparre Andreasen
a342fa36c6
JS: support React getSnapshotBeforeUpdate
2018-12-04 10:48:35 +01:00
Esben Sparre Andreasen
67b1487384
JS: support React shouldComponentUpdate
2018-12-04 10:48:35 +01:00
Esben Sparre Andreasen
417dac7ad6
JS: support React getDerivedStateFromProps
2018-12-04 10:48:35 +01:00
Esben Sparre Andreasen
9ff3d2ef1f
JS: introduce ReactComponent::getStaticMethod
2018-12-04 10:48:35 +01:00
Esben Sparre Andreasen
104eafec2f
JS: cleanup for all HTTP::RouteHandlerCandidates
2018-12-03 10:13:08 +01:00
Esben Sparre Andreasen
a3bd072590
JS: add Hapi::RouteHandlerCandidate
2018-12-03 09:22:21 +01:00
Esben Sparre Andreasen
fd489271b7
JS: refactor Hapi::RouteSetup
2018-12-03 09:22:21 +01:00
Max Schaefer
dfcf767090
Merge pull request #440 from asger-semmle/range-analysis
...
JS: Range analysis for dead code detection
2018-11-30 15:01:34 +00:00
semmle-qlci
dbeb2dfa0e
Merge pull request #585 from xiemaisi/js/join-order-fiddling
...
Approved by esben-semmle
2018-11-30 14:59:53 +00:00
Max Schaefer
3ed40d5da1
Merge branch 'master' into range-analysis
2018-11-30 09:36:40 +00:00
Max Schaefer
dcad2a3431
JavaScript: Simplify an if condition.
...
By pulling this out of the condition we can avoid computing its negation for the `else` branch, which could previously lead to quite an enormous pipeline.
2018-11-30 09:32:31 +00:00
