9 Commits

Author	SHA1	Message	Date
Asger F	5aa948cd17	JS: Add angular.merge sink to prototype pollution query	2019-09-04 16:14:51 +01:00
Esben Sparre Andreasen	eb13ab52cf	JS: sharpen js/prototype-pollution with version analysis	2019-05-27 22:32:32 +02:00
Esben Sparre Andreasen	1cea29d89f	JS: improve prototype pollution tests	2019-05-27 22:32:32 +02:00
Asger F	aaf503837d	JS: Move prototype pollution into real query	2019-05-13 15:20:25 +01:00
Asger F	48ca4ae0d8	JS: prototype pollution query template	2019-04-16 17:40:41 +01:00
Max Schaefer	f1c538a97b	JavaScript: Restrict RemotePropertyInjection query to avoid double-reporting. ... This query now only flags user-controlled property and header writes, method calls are handled by the new unsafe/unvalidated method call queries.	2018-11-28 08:16:31 +00:00
Asger F	8aff66616b	JS: suppress similar alerts from RemotePropertyInjection	2018-11-20 15:57:18 +00:00
Max Schaefer	9221b62ded	JavaScript: Update expectd test output for security path queries to include nodes and edges query predicates.	2018-11-14 09:32:31 +00:00
Pavel Avgustinov	b55526aa58	QL code and tests for C#/C++/JavaScript.	2018-08-02 17:53:23 +01:00