87 Commits

Author	SHA1	Message	Date
Asger Feldthaus	1d1149f4cd	JS: Test and QLDoc for RxJS model	2021-01-21 12:08:22 +00:00
Asger Feldthaus	0496642b0b	JS: Add test for captured flow into callback	2020-12-07 10:34:27 +00:00
Erik Krogh Kristensen	65a1769d43	Merge branch 'main' into asyncCalls	2020-08-21 14:58:27 +02:00
Erik Krogh Kristensen	9bcac10d9e	summarize exceptions thrown by immidiatly awaited function calls	2020-08-10 13:28:25 +02:00
Erik Krogh Kristensen	aab2e6f803	update name of test file	2020-08-07 18:20:22 +02:00
Erik Krogh Kristensen	8f06e9651f	update expected output	2020-08-07 17:40:58 +02:00
Erik Krogh Kristensen	cc94c5ec60	remove imprecise return-flow from async functions	2020-08-07 17:33:24 +02:00
Erik Krogh Kristensen	f70cb2e7b3	add test for new JSON serializers	2020-08-05 12:14:56 +02:00
Asger Feldthaus	06dd3ab2ca	JS: Propagate into RegExp.$x	2020-06-26 18:58:43 +01:00
Asger Feldthaus	17af8f7650	JS: Add test for taint propagating into RegExp.$1	2020-06-26 18:58:43 +01:00
Esben Sparre Andreasen	f9ed64fc45	Merge branch 'master' into js/membershiptest	2020-06-02 08:54:44 +02:00
Asger Feldthaus	75be3b7ecb	JS: Add test case for missed captured flow	2020-05-21 16:14:13 +01:00
Esben Sparre Andreasen	ddb545c182	JS: introduce MembershipTests.qll and use in two locations	2020-05-18 09:50:00 +02:00
Asger Feldthaus	0edb765958	JS: Split test case function in two	2020-03-18 11:55:13 +00:00
Asger Feldthaus	a195429471	JS: Add test with non-guard sanitizer	2020-03-18 11:55:12 +00:00
Asger Feldthaus	83606e7b60	JS: Dont use data label in taint-tracking configs	2020-03-18 11:55:12 +00:00
Asger Feldthaus	8da0584b12	JS: Add test	2020-03-18 11:55:12 +00:00
Asger Feldthaus	98524556c3	JS: Add some tests	2020-03-03 11:32:23 +00:00
Asger Feldthaus	b780bc4d59	JS: Also track into callbacks	2020-02-21 13:51:22 +00:00
Asger Feldthaus	e8e649102f	JS: Also propagate out of returns	2020-02-21 13:51:22 +00:00
Erik Krogh Kristensen	1ece6b9afe	update expected output of tests	2020-02-07 12:57:51 +01:00
Erik Krogh Kristensen	2865723059	add test for new barrier	2020-02-06 15:44:33 +01:00
Asger Feldthaus	b306571d52	JS: Type-track react component factories	2020-01-28 10:22:04 +00:00
Asger F	4d25bfc038	JS: Fix copy pasta	2020-01-06 11:37:21 +00:00
Asger F	142c83f38f	JS: Add negative dominance test	2020-01-06 11:37:21 +00:00
Asger F	aa6572b5c8	JS: Sanitize phi edges from barrier guards	2020-01-06 11:37:21 +00:00
Asger F	0b04f0d8f7	JS: Add test case for phi input	2020-01-06 11:37:20 +00:00
semmle-qlci	e65271dfad	Merge pull request #2251 from asger-semmle/barrier-guard-improvements ... Approved by esbena	2019-11-07 15:50:23 +00:00
semmle-qlci	3a7f9a588d	Merge pull request #2267 from max-schaefer/js/qltest-extractor-options ... Approved by asger-semmle	2019-11-07 11:36:45 +00:00
Max Schaefer	3e92d0ffb5	JavaScript: Remove redundant --experimental extractor options.	2019-11-05 15:59:24 +00:00
Erik Krogh Kristensen	16b63b3d01	move deferred model to the query where it is used	2019-11-05 15:45:17 +01:00
Asger F	f48d16fcb7	JS: Support barrier guards that are reflective calls	2019-11-01 15:23:38 +00:00
Asger F	e2b0ec5696	JS: Handle multiple and/or operators in SanitizerFunction	2019-11-01 15:23:38 +00:00
Erik Krogh Kristensen	31009d979d	add type tracking to detect instances	2019-10-11 12:04:34 +02:00
Erik Krogh Kristensen	c7eb0f17a9	add TaintTracking test for new Deferred model	2019-10-09 13:59:00 +02:00
Asger F	9f2f10fa15	JS: Make type inference flow go through ssa definition node	2019-09-02 16:45:06 +01:00
Asger F	9e949d0f44	JS: Add taint step through destructuring for-of loop	2019-08-02 20:35:21 +01:00
Asger F	cf23c50f0c	JS: Add convenience layer ... Adds getASpreadArgument() and defines getCalleeName() for reflective calls to be the name of the property being invoked, if there is one.	2019-07-11 10:55:28 +01:00
Asger F	83908464e0	JS: more taint steps through array manipulation	2019-07-11 10:55:28 +01:00
Asger F	aa4d28028e	JS: Add test	2019-06-25 14:15:06 +01:00
semmle-qlci	0fa06e5c8d	Merge pull request #1180 from asger-semmle/tainted-path-squashed ... Approved by xiemaisi	2019-05-30 17:20:19 +01:00
Asger F	6617747185	JS: Update DataFlowTracking output for booleanOps.js	2019-05-28 11:19:23 +01:00
Asger F	1ec3475457	JS: All of TaintedPath	2019-05-23 09:23:47 +01:00
Asger F	de2f323172	JS: Mark unused parameter nodes as incomplete	2019-05-21 16:53:39 +01:00
Asger F	69dbbcf1c8	JS: Mark destructuring nodes as incomplete	2019-05-21 16:52:35 +01:00
Asger F	faa47029d5	JS: Mark exceptional nodes as incomplete	2019-05-21 13:51:59 +01:00
Asger F	68ae409947	JS: Test for mismatch between taint and type inference	2019-05-21 13:26:02 +01:00
Asger F	d4880540e8	JS: Update .expected after rebasing	2019-05-20 11:21:50 +01:00
Asger F	9989fcee21	JS: Add DataFlow::Configuration test	2019-05-20 09:22:02 +01:00
Asger F	87e0831872	JS: Fix flow for nested destructurings	2019-05-20 09:22:02 +01:00