1977 Commits

Author	SHA1	Message	Date
Asger F	a1b7096125	Merge pull request #18783 from asgerf/js/downward-calls ... JS: Resolve calls downward in class hierarchy	2025-02-20 09:01:58 +01:00
Asger F	58c8b5fa2b	Merge pull request #18790 from asgerf/js/no-implicit-array-taint ... JS: Do not taint whole array when storing into ArrayElement	2025-02-19 13:23:31 +01:00
Asger F	24e7aad6ba	JS: Overriden -> Overridden	2025-02-18 09:51:13 +01:00
Asger F	c958702830	JS: Accept some unproblematic consistency warnings	2025-02-17 20:30:07 +01:00
Asger F	08b9d934c0	JS: Add a negative test	2025-02-17 11:37:44 +01:00
Asger F	352924fb8c	JS: Handle a few other stringification contexts	2025-02-17 11:36:28 +01:00
Asger F	33ab7db98a	JS: Handle Array.prototype.toString calls	2025-02-17 11:25:03 +01:00
Asger F	a74b203c86	JS: Add test with implicit array stringification	2025-02-17 11:21:46 +01:00
Asger F	d87534c7d0	JS: Model Array#toString	2025-02-17 11:13:36 +01:00
Asger F	e8d1703224	JS: Add test for flow through Buffer.concat ... This flow was lost since the existing model of concat() boxes its return value in ArrayElement. There is no explicit model of Buffer.concat.	2025-02-17 11:12:51 +01:00
Asger F	97eb09fef8	JS: Accept updated test output	2025-02-17 10:19:49 +01:00
Asger F	ab5fc9f4d7	JS: Implement viableImplInCallContext	2025-02-14 13:25:19 +01:00
Asger F	ff7bc7c25e	JS: Track types of classes in data flow	2025-02-14 12:44:45 +01:00
Asger F	d3c4b5d493	JS: Add test with spurious flow due to up-down calls	2025-02-14 12:42:02 +01:00
Asger F	b8b2b9a470	JS: Resolve calls downward in the class hierarchy	2025-02-14 11:17:19 +01:00
Asger F	aff458d948	JS: Also add tests for upward calls and overriding	2025-02-14 11:17:17 +01:00
Asger F	9321d69034	JS: Add CG test showing lack of calls down to subclasses	2025-02-14 11:17:15 +01:00
Asger F	4043765008	JS: Avoid ambiguity in an inline CG annotation	2025-02-14 11:17:14 +01:00
Asger F	a61d42edc3	JS: Make inline CG tests report call target if NONE was given ... Previously it would only report a spurious callee if the target function was named. Now, if specifying 'calls:NONE' if will report any callee as spurious.	2025-02-14 11:17:13 +01:00
Asger F	26dcbf7a2a	JS: Migrate URLSearchParams model to flow summaries	2025-02-13 11:51:33 +01:00
Asger F	f531f4479b	JS: Add test for URL and URLSearchParams	2025-02-13 11:51:32 +01:00
Asger F	80824cfdc7	JS: Benign test output changes	2025-02-04 12:12:41 +01:00
Asger F	5e109ff457	JS: Update test output	2025-02-04 10:45:37 +01:00
Asger F	be082578d4	JS: Hoist function decls in a block to the top of the block	2025-02-03 15:21:08 +01:00
Asger F	29879297ee	JS: Add test showing missed call to later-defined function in block	2025-02-03 14:56:11 +01:00
Asger F	a0af4c9a84	Merge pull request #18622 from asgerf/js/typescript-tsconfig-names ... JS: Treat more file patterns as tsconfig-like files	2025-01-31 09:42:50 +01:00
Asger F	16f7373712	JS: Model dependency injection in Nest	2025-01-29 13:49:46 +01:00
Asger F	b07c5c6ee0	JS: Add test	2025-01-29 13:49:43 +01:00
Asger F	6d04425790	JS: Add test	2025-01-29 11:14:21 +01:00
Asger F	b015c88c79	JS: Add view-component-input threat model	2025-01-22 10:45:46 +01:00
Asger F	dd55460d7f	JS: Update test output	2025-01-21 14:03:30 +01:00
Asger F	f3b52adde6	JS: Add test showing DB-CHECK failure	2025-01-21 14:02:17 +01:00
Asger F	6cd9752289	Merge pull request #18467 from github/js/shared-dataflow-branch ... JS: Migrate to shared data flow library (targeting main!) 🚀	2025-01-16 11:28:57 +01:00
Asger F	fd5a3dad90	JS: One more test	2025-01-09 10:46:45 +01:00
Asger F	138b000891	JS: Coerce the local export node to an Identifier	2025-01-09 10:42:25 +01:00
Asger F	db98880163	JS: Add crash reproduction to test case	2025-01-09 10:39:30 +01:00
Asger F	4a6030c592	JS: Update expected with some absent result sets	2024-12-19 15:25:46 +01:00
Asger F	cd6ebb103e	JS: Make test not assume implicit through for maps	2024-12-19 15:25:45 +01:00
Asger F	dc2f39c399	JS: Add model of Map#groupBy	2024-12-19 15:25:43 +01:00
Asger F	de5e6ddeed	JS: Update with changes in TaintTracking test	2024-12-19 15:25:42 +01:00
Asger F	c204527c08	JS: Update Array test output (new tests added on main)	2024-12-19 15:25:41 +01:00
Asger F	33e8bd5032	JS: Update testUtilities import	2024-12-19 15:25:39 +01:00
Asger F	3acd4814de	Merge branch 'main' into js/shared-dataflow-merge-main	2024-12-19 10:14:38 +01:00
Asger F	db00dad033	JS: Avoid deprecation warnings in some tests	2024-12-16 15:35:49 +01:00
Asger F	69b361ae70	JS: Migrate a test to use flow state	2024-12-16 15:35:42 +01:00
Asger F	14ca1c134b	JS: Update TaintedUrlSuffix test	2024-12-13 10:08:07 +01:00
Michael Nebel	c3fe3e468c	Javascript: Update all test util paths to point to the new location.	2024-12-12 13:54:25 +01:00
Jeroen Ketema	3d8493757e	JS: Update expected test results	2024-12-03 19:19:01 +01:00
Asger F	3f0d0e3a05	JS: Deprecate DataFlow::BarrierGuardNode	2024-12-03 14:30:50 +01:00
Asger F	62c17d3f4e	JS: Update SanitizerGuardNode use in BasicTaintTracking test	2024-12-03 14:30:34 +01:00