5 Commits

Author	SHA1	Message	Date
Esben Sparre Andreasen	364ba1b4ac	JS: use RegExpLiteral as a SourceNode	2019-04-01 09:19:25 +02:00
Esben Sparre Andreasen	7923c9d77c	JS: add tests for missing flow of regular expressions	2019-04-01 09:19:25 +02:00
Max Schaefer	3e26bc6446	JavaScript: Improve alert location and message for IncompleteSanitization. ... We now highlight the `replace` call (instead of the regular expression), and the alert message for the case of missing backslash escapes clarifies that it is talking about failure to escape backslashes in the input, not in the replacement text.	2019-02-08 09:13:40 +00:00
Esben Sparre Andreasen	a1d92bfa50	JS: generalize js/incomplete-sanitization to handle ConstantString	2018-12-11 13:39:15 +01:00
Max Schaefer	10166be535	JavaScript: Add new query DoubleEscaping.	2018-11-30 09:39:00 +00:00