7852 Commits

Author	SHA1	Message	Date
erik-krogh	1c0f2251e2	Merge branch 'main' into msgConsis	2022-08-24 14:38:57 +02:00
Erik Krogh Kristensen	28d58be1b6	Merge pull request #10126 from erik-krogh/myApply ... JS: precise flow through calls to `.apply()`	2022-08-24 12:55:36 +02:00
Erik Krogh Kristensen	4df2e5d937	Merge pull request #10096 from erik-krogh/acronyms-part1 ... make acronyms camelcase	2022-08-24 09:33:53 +02:00
erik-krogh	27fcc90a97	Merge branch 'main' into msgConsis	2022-08-24 09:21:43 +02:00
erik-krogh	a50234adb0	apply suggestion from review	2022-08-23 15:41:37 +02:00
erik-krogh	1a7d3ee831	update expected output after changing queries	2022-08-23 12:35:32 +02:00
erik-krogh	afadcd9b45	use a more detailed alert message in bitwise-sign-check	2022-08-23 11:18:45 +02:00
erik-krogh	82d9180892	only have one deprecated alias for XmlDtd	2022-08-23 10:38:23 +02:00
erik-krogh	a57981ea69	apply suggestions from review	2022-08-23 10:18:14 +02:00
erik-krogh	45e78a355f	ensure call-apply.js is seen as a module	2022-08-23 10:11:46 +02:00
erik-krogh	b5f9012033	fix deprecation warnings in ATM tests	2022-08-23 08:08:39 +02:00
erik-krogh	f7846a598e	add change-notes	2022-08-23 07:54:01 +02:00
erik-krogh	78ba7650b3	change the change-notes	2022-08-23 07:28:46 +02:00
erik-krogh	7e0bd5bde4	update expected output of tests	2022-08-22 21:41:47 +02:00
erik-krogh	60908de089	update js/nested-loops-with-same-variable to match cpp	2022-08-22 21:41:46 +02:00
erik-krogh	20625ae60d	update {js/go/py}/xpath-injection to match csharp/java	2022-08-22 21:41:46 +02:00
erik-krogh	b5458b2125	update js/insecure-randomness to match csharp	2022-08-22 21:41:46 +02:00
erik-krogh	9cdd8cc8f5	update js/tainted-format-string to match ruby/java	2022-08-22 21:41:46 +02:00
erik-krogh	9395f156de	update {js/py}/command-line-injection to match csharp/java	2022-08-22 21:41:46 +02:00
erik-krogh	3553f3d9b8	update {rb/py/js/go}/path-injection to match java/csharp	2022-08-22 21:41:45 +02:00
erik-krogh	39c1832995	update {cpp/js}/bitwise-sign-check to match java	2022-08-22 21:41:45 +02:00
erik-krogh	b471a401cc	update {rb/js/java}/unused-parameter to match python	2022-08-22 21:41:45 +02:00
erik-krogh	594fbc678e	update js/zip-slip to match java/go/csharp	2022-08-22 21:41:45 +02:00
erik-krogh	28083ebe09	run the implicit-this patch	2022-08-22 21:23:31 +02:00
erik-krogh	a593a52b5e	add missing qldoc (that was already missing?)	2022-08-22 21:22:39 +02:00
erik-krogh	e89e0eb7fb	make some acronyms camelCase	2022-08-22 21:22:35 +02:00
erik-krogh	9c95dcc126	add change-note	2022-08-22 14:09:19 +02:00
erik-krogh	2ac5441aec	rename the XMLDTD class to XmlDTD	2022-08-22 14:09:19 +02:00
erik-krogh	1a89ddae5d	update some comments from XML to Xml	2022-08-22 14:09:19 +02:00
erik-krogh	ce9f69a639	rename all occurrences of XML to Xml	2022-08-22 14:08:31 +02:00
erik-krogh	2fd09d34de	improve performance of global dataflow by inlining a step predicate	2022-08-22 08:35:19 +02:00
erik-krogh	2f11f3760e	simplify getALibraryInputParameter by adding more general dataflow for the arguments object	2022-08-22 08:32:43 +02:00
Erik Krogh Kristensen	11b039c1f1	add tests	2022-08-22 08:29:28 +02:00
Erik Krogh Kristensen	31c09ba678	implement flow for .apply() by adding a ReflectiveParametersNode data-flow node	2022-08-22 08:29:28 +02:00
Erik Krogh Kristensen	d86b7f6c54	recognize an access to the arguments object as library-input	2022-08-22 08:29:24 +02:00
Erik Krogh Kristensen	7b1ef7473e	change ArrayCreationStep to a PreCallGraphStep and unrestrict the storeStep	2022-08-22 08:15:54 +02:00
Tom Hvitved	663096fe3a	Remove redundant overrides	2022-08-19 13:57:41 +02:00
Asger F	349331d6ca	Merge pull request #10082 from asgerf/js/exports-handling2 ... JS: Handle nested conditions in "exports" section	2022-08-18 11:10:59 +02:00
Harry Maclean	70ec70940a	Merge pull request #8142 from github/hmac/incomplete-multi-char-sanitization	2022-08-18 10:02:39 +12:00
Erik Krogh Kristensen	e93ff8672c	Merge pull request #10075 from erik-krogh/depOld ... delete old deprecations	2022-08-17 21:21:57 +02:00
erik-krogh	6b9f01535b	change All to Most in the change-notes	2022-08-17 15:34:57 +02:00
Mathias Vorreiter Pedersen	1eb0f6a12e	Merge pull request #10081 from erik-krogh/desugar ... add desugered to the typo database	2022-08-17 13:56:59 +01:00
Erik Krogh Kristensen	bd4947fdbd	Merge pull request #10046 from erik-krogh/protoFunc ... JS: generalize `BarrierGuardFunction`to work on function that have multiple parameters	2022-08-17 14:50:54 +02:00
erik-krogh	2622c78766	add change-notes	2022-08-17 13:55:16 +02:00
erik-krogh	b2e3d8bb86	remove some more legacy code that existed to support deprecated code	2022-08-17 13:32:39 +02:00
erik-krogh	6ac898bad4	add desugered to the typo database	2022-08-17 13:13:43 +02:00
Harry Maclean	1f4dad4167	Update for rename of ReDoSUtil to NfaUtils	2022-08-17 16:03:49 +12:00
Harry Maclean	f1a546c4d6	Rename IncompleteMultiCharacterSanitization[Query]	2022-08-17 16:03:49 +12:00
Harry Maclean	e48158b9ad	JS: Share more code with Ruby	2022-08-17 16:03:49 +12:00
Harry Maclean	b7d9bf4066	Share IncompleteMultiCharacterSanitization JS/Ruby ... Most of the classes and predicates in this query can be shared between the two languages. There's just a few language-specific things that we place in IncompleteMultiCharacterSanitizationSpecific.	2022-08-17 16:03:46 +12:00