Erik Krogh Kristensen
|
c8cf958c8a
|
add test cases for js/shell-command-constructed-from-input
|
2020-05-17 10:32:27 +02:00 |
|
Erik Krogh Kristensen
|
a1a6826278
|
support non-SourceNode in IndirectCommandArgument#argumentList
|
2020-05-16 23:15:37 +02:00 |
|
semmle-qlci
|
8d41ce1630
|
Merge pull request #3480 from erik-krogh/moreSlip
Approved by esbena
|
2020-05-16 21:17:27 +01:00 |
|
semmle-qlci
|
a536069059
|
Merge pull request #3408 from esbena/js/unsafe-html-expansion
Approved by asgerf, mchammer01
|
2020-05-15 08:24:12 +01:00 |
|
Erik Krogh Kristensen
|
e7d1b12ac8
|
add test
|
2020-05-14 20:31:23 +02:00 |
|
Erik Krogh Kristensen
|
b12e21edcc
|
add test for new zipslip sanitizer
|
2020-05-14 10:11:37 +02:00 |
|
Erik Krogh Kristensen
|
4175d36269
|
add test case
|
2020-05-14 09:46:54 +02:00 |
|
Esben Sparre Andreasen
|
7722d77c86
|
JS: add the NoSQL $where as a sink for js/code-injection
|
2020-05-13 08:30:22 +02:00 |
|
Esben Sparre Andreasen
|
20cf04442c
|
JS: model marsdb and minimongo
|
2020-05-13 08:28:59 +02:00 |
|
Erik Krogh Kristensen
|
d46148c045
|
add test case
|
2020-05-12 14:23:28 +02:00 |
|
Esben Sparre Andreasen
|
344f0c36b0
|
JS: update expected output
|
2020-05-06 11:18:14 +02:00 |
|
Esben Sparre Andreasen
|
304b013f88
|
JS: query and tests for unsafe HTML expansion
|
2020-05-05 10:32:16 +02:00 |
|
Esben Sparre Andreasen
|
04b5a794f1
|
Merge pull request #3313 from esbena/js/typical-bad-sanitizer
New query: Incomplete HTML attribute sanitization
|
2020-04-27 14:31:13 +02:00 |
|
Esben Sparre Andreasen
|
89613dbd23
|
JS: add query for incomplete HTML attribute sanitization
|
2020-04-24 09:17:46 +02:00 |
|
Erik Krogh Kristensen
|
ee43db1b58
|
slightly expand the $().each model
|
2020-04-23 16:49:47 +02:00 |
|
Erik Krogh Kristensen
|
448ed150df
|
allow the empty string to flow to a JQuery XSS sink
|
2020-04-23 16:45:37 +02:00 |
|
Erik Krogh Kristensen
|
ce106981b3
|
add tests
|
2020-04-23 14:24:33 +02:00 |
|
Erik Krogh Kristensen
|
d8c498bd15
|
add NOT OK comment
Co-Authored-By: Esben Sparre Andreasen <esbena@github.com>
|
2020-04-23 12:17:25 +02:00 |
|
Erik Krogh Kristensen
|
e1423b0fa5
|
add test for jGrowl
|
2020-04-23 11:58:06 +02:00 |
|
Erik Krogh Kristensen
|
ac26741816
|
reuse existing SanitizerGuard from UnsafeJQueryPlugin
|
2020-04-22 14:16:15 +02:00 |
|
Erik Krogh Kristensen
|
8811455d49
|
Merge remote-tracking branch 'upstream/master' into XssDom
|
2020-04-22 10:20:40 +02:00 |
|
Erik Krogh Kristensen
|
59b94b3d1b
|
revert back to having 2 separate cases in JQuery::MethodCall
|
2020-04-21 13:08:06 +02:00 |
|
Erik Krogh Kristensen
|
12f4ce8111
|
merge two cases of jQuery method calls
|
2020-04-20 13:28:55 +02:00 |
|
Erik Krogh Kristensen
|
14b551f887
|
Xss through DOM
|
2020-04-17 10:54:14 +02:00 |
|
Erik Krogh Kristensen
|
eca98b42d2
|
basic support for util.promisify for NodeJSFileSystemAccess
|
2020-04-17 09:54:37 +02:00 |
|
Erik Krogh Kristensen
|
e8dc77d508
|
add support for util.promisify with child_process calls
|
2020-04-15 19:16:30 +02:00 |
|
Asger Feldthaus
|
2c6beadf68
|
JS: Recognize more forms of scheme checks
|
2020-04-06 12:30:03 +01:00 |
|
Erik Krogh Kristensen
|
9c2053168b
|
writing out the truth table for DotDotSlashPrefixRemovingReplace
|
2020-04-03 15:46:47 +02:00 |
|
Erik Krogh Kristensen
|
94751c1b31
|
dst can be relative for "../" replace call
|
2020-04-03 11:08:31 +02:00 |
|
Erik Krogh Kristensen
|
e46cde17a1
|
add a "../" removing taint-step for js/path-injection
|
2020-04-03 09:42:05 +02:00 |
|
Erik Krogh Kristensen
|
4864e77430
|
Merge branch 'master' of git.semmle.com:Semmle/ql into UrlSearch
|
2020-03-27 15:59:29 +01:00 |
|
Erik Krogh Kristensen
|
58af63d8cc
|
add test case for XSS on url suffix
|
2020-03-27 10:02:24 +01:00 |
|
semmle-qlci
|
cf5b1f0cd5
|
Merge pull request #3019 from erik-krogh/ArrayStep
Approved by asgerf
|
2020-03-25 12:08:44 +00:00 |
|
Erik Krogh Kristensen
|
fa710c5864
|
Merge remote-tracking branch 'upstream/master' into UrlSearch
|
2020-03-24 00:23:15 +01:00 |
|
Asger F
|
6c2842bd49
|
Merge pull request #2919 from asger-semmle/js/property-barriers
JS: Make sanitizers no longer block taint inside an object
|
2020-03-23 11:43:18 +00:00 |
|
semmle-qlci
|
deb20fc37f
|
Merge pull request #3076 from esbena/js/even-more-mongoose-improvements
Approved by erik-krogh
|
2020-03-19 12:03:53 +00:00 |
|
Asger Feldthaus
|
7393844699
|
JS: Update some queries that used data as source
|
2020-03-18 11:55:13 +00:00 |
|
Asger Feldthaus
|
506ddaf3f4
|
JS: Add explanation for test failure
|
2020-03-18 11:55:13 +00:00 |
|
Asger Feldthaus
|
028022158d
|
JS: Add variant of test that passes
|
2020-03-18 11:55:13 +00:00 |
|
Asger Feldthaus
|
a7e337ab28
|
JS: Add some lines in test case
|
2020-03-18 11:55:13 +00:00 |
|
Asger Feldthaus
|
3e68072e38
|
JS: Accept test case change
|
2020-03-18 11:55:13 +00:00 |
|
Esben Sparre Andreasen
|
833d1b1ab0
|
JS: fixup mongoose test
|
2020-03-16 22:11:22 +01:00 |
|
Esben Sparre Andreasen
|
9d9926fdbf
|
JS: model Mongoose Document for additional js/nosql-injection sinks
|
2020-03-16 22:11:22 +01:00 |
|
Esben Sparre Andreasen
|
55ab519fbe
|
JS: add Mongoose Document tests
|
2020-03-16 22:11:22 +01:00 |
|
Esben Sparre Andreasen
|
dc27a8f52c
|
JS: model mongoose Model on createConnection.<model/models>
|
2020-03-16 22:11:22 +01:00 |
|
Esben Sparre Andreasen
|
730396df12
|
JS: add Mongoose createConnection tests
|
2020-03-16 22:11:22 +01:00 |
|
Erik Krogh Kristensen
|
4f39c28741
|
Merge branch 'master' of git.semmle.com:Semmle/ql into CustomTrack
|
2020-03-14 14:37:52 +01:00 |
|
Esben Sparre Andreasen
|
4d6aa20990
|
Merge pull request #3004 from esbena/js/additional-mongodb-and-mongoose-injection-sinks
JS: Mongoose and MongoDB improvements
|
2020-03-14 12:31:43 +01:00 |
|
Erik Krogh Kristensen
|
fa26ce9f4b
|
update expected output
|
2020-03-11 09:36:12 +01:00 |
|
Erik Krogh Kristensen
|
62ae484545
|
autoformat and update expected output
|
2020-03-10 14:01:40 +01:00 |
|