Erik Krogh Kristensen
|
bf56797ad7
|
update expected output of tests
|
2019-12-17 16:27:55 +01:00 |
|
Erik Krogh Kristensen
|
7c931452d9
|
autoformat
|
2019-12-16 13:45:42 +01:00 |
|
Erik Krogh Kristensen
|
904976c7ac
|
update tests after removing control-flow checks from error-callbacks
|
2019-12-16 08:30:21 +01:00 |
|
Erik Krogh Kristensen
|
f35dc5d274
|
Merge remote-tracking branch 'upstream/master' into moarExceptions
|
2019-12-12 16:13:52 +01:00 |
|
Erik Krogh Kristensen
|
08d0cb795b
|
revert the introduction of getEnclosingCall
|
2019-12-12 15:14:02 +01:00 |
|
Erik Krogh Kristensen
|
62512dd3e9
|
expand the js/exception-xss to handle more types of exceptional flow
|
2019-12-11 10:43:50 +01:00 |
|
Asger F
|
2acd616e6f
|
JS: Review comments
|
2019-12-06 11:53:06 +00:00 |
|
Erik Krogh Kristensen
|
f40d79271d
|
cleanup module imports and update expected outputs
|
2019-11-22 13:55:47 +01:00 |
|
Erik Krogh Kristensen
|
1ba777a45d
|
remove deep taint of objects
|
2019-11-19 15:50:50 +01:00 |
|
Erik Krogh Kristensen
|
9fa7393d56
|
add support for try-statements with no catch block
|
2019-11-19 13:37:35 +01:00 |
|
Erik Krogh Kristensen
|
91674f681b
|
refactoring to remove duplicated code and simplify the ExceptionXss query
|
2019-11-19 08:54:51 +01:00 |
|
Erik Krogh Kristensen
|
4073dfaf24
|
remove redundant code
|
2019-11-15 16:17:18 +01:00 |
|
Erik Krogh Kristensen
|
3edd65f9ab
|
changed the exceptional taint-steps to step through each call-site
|
2019-11-15 16:05:15 +01:00 |
|
Erik Krogh Kristensen
|
e95cceef1d
|
import all the shared XSS sources and sinks
|
2019-11-15 15:41:53 +01:00 |
|
Erik Krogh Kristensen
|
65a018ceed
|
use flow labels to avoid dual configurations
|
2019-11-15 14:37:46 +01:00 |
|
Erik Krogh Kristensen
|
8d2ae136b0
|
move String.prototype.match taint step to a general AdditionalTaintStep
|
2019-11-15 12:52:54 +01:00 |
|
Erik Krogh Kristensen
|
7137a64b7d
|
Added query for detecting XSS that happens through an exception
|
2019-11-14 17:04:00 +01:00 |
|