3881 Commits

Author	SHA1	Message	Date
erik-krogh	dde9a7cd7e	Merge branch 'main' into ts53-ts	2023-11-20 20:31:00 +01:00
Max Schaefer	d147faba4e	Update qhelp for js/path-injection.	2023-11-20 11:58:00 +00:00
Rasmus Wriedt Larsen	43d9d2ceb7	Merge pull request #14603 from github/max-schaefer/broken-crypto-algorithm-link ... JavaScript/Python/Ruby: Improve alert message for `*/weak-cryptographic-algorithm`.	2023-11-08 14:29:24 +01:00
amammad	36f0a78450	fix typeorm test.ts according to Review	2023-11-06 16:23:35 +01:00
amammad	d7f1e19d40	fix sqlite.js test according to Review	2023-11-06 15:22:36 +01:00
amammad	cc5dd3180a	fix better-sqlite3 tests according to Review	2023-11-06 15:18:55 +01:00
Arthur Baars	7f4bcdfa64	Rename test files	2023-11-06 13:38:33 +01:00
Arthur Baars	4192d09e5c	Add tests for deprecated 'assert' syntax	2023-11-06 13:38:33 +01:00
Arthur Baars	b4d89f7554	Replace 'assert' with 'with' in QL test files	2023-11-06 13:38:33 +01:00
erik-krogh	688afddaf2	Re-order expected test output of all JS tests	2023-10-31 16:38:22 +01:00
Arthur Baars	5cc94e1105	Express.js: add req.path as remote input source	2023-10-31 12:44:26 +01:00
Arthur Baars	21b7a51d0a	Add test case for req.path	2023-10-31 12:44:25 +01:00
Arthur Baars	1479509d93	Re-order expected test ouput	2023-10-31 12:44:25 +01:00
Max Schaefer	104700f6d3	Address review comment.	2023-10-27 10:19:28 +01:00
erik-krogh	302199a74a	fix TypeExprKinds crashing on a ThisExpression	2023-10-26 16:33:54 +02:00
Max Schaefer	741735cc83	Port changes to JavaScript.	2023-10-26 14:47:24 +01:00
Max Schaefer	2c7291336d	Move test files into right directory.	2023-10-26 12:16:52 +01:00
Max Schaefer	bb146a1758	JavaScript: Add support for rateLimit export from express-rate-limit package.	2023-10-26 12:14:57 +01:00
amammad	e3dbdc3887	add custom query builder and active record querybuilder support	2023-10-22 21:39:59 +02:00
Arthur Baars	0e3369f93f	Merge pull request #14484 from aibaars/ts53-js ... JS: Support import attributes	2023-10-16 10:47:49 +02:00
Arthur Baars	a9a21aa313	Rename DynamicImportExpr::getImport{Attributes => Options}	2023-10-12 13:00:39 +02:00
Arthur Baars	a1c1f7b910	Add tests for deprecated 'assert' syntax	2023-10-12 13:00:39 +02:00
Arthur Baars	f38d2e1b89	Replace 'assert' with 'with' in QL test files	2023-10-12 13:00:39 +02:00
Arthur Baars	c28004f2a6	Rename 'getImportAssertion()' to 'getImportAttributes()' in QL library	2023-10-12 13:00:39 +02:00
amammad	242f7e1c53	update pg :)	2023-10-10 11:42:32 +02:00
amammad	18edef6ea4	add better-sqlite3 tests	2023-10-10 11:20:17 +02:00
erik-krogh	7ca0996912	add a taint-tracking tests for calls to tagged template strings	2023-10-06 21:39:42 +02:00
erik-krogh	9b6501787a	add API-graph test for the new tagged template calls	2023-10-06 21:25:34 +02:00
erik-krogh	18e6a5491c	recognize tagged templates as DataFlow::CallNode	2023-10-06 21:14:00 +02:00
erik-krogh	951ed01d6b	combine the library-tests/CallGraphs/FullTest tests into one file	2023-10-06 20:57:09 +02:00
Asger F	162c477236	JS: Add AmdModuleDefinition::Range	2023-10-04 20:38:37 +02:00
amammad	58f4cd77dc	add TypeORM to javascript.qll file ... add tests improvement on comments	2023-09-29 01:23:22 +10:00
erik-krogh	fdd349c1a3	fix out of bounds string access in isUsingDecl	2023-09-13 20:11:21 +02:00
Max Schaefer	e722e3288f	Merge pull request #13771 from github/max-schaefer/server-side-url-redirect-help ... JavaScript: Improve query help for `js/server-side-unvalidated-url-redirection`.	2023-09-13 13:20:48 +01:00
Max Schaefer	a9e81672f0	Make suggestion to replace example.com more explicit.	2023-09-12 16:54:05 +01:00
Max Schaefer	a02f373e79	Use better sanitiser.	2023-09-06 14:06:16 +01:00
erik-krogh	984795ee46	fix off-by-one	2023-08-30 13:29:23 +02:00
erik-krogh	2643ab3dbf	using is not a keyword	2023-08-30 08:44:59 +02:00
erik-krogh	78487d437f	add test for await using in TypeScript	2023-08-28 13:30:35 +02:00
erik-krogh	be2712698b	add support for await using in the JS parser	2023-08-28 09:34:13 +02:00
erik-krogh	cb66d62959	add test for the new type-stuff in TS 5.2 we get for free	2023-08-24 20:30:26 +02:00
erik-krogh	dc454d3a72	add support for the new using keyword in TypeScript	2023-08-24 20:30:26 +02:00
erik-krogh	a7d92b3473	add JS support the using keyword	2023-08-24 20:30:26 +02:00
Asger F	2b540e251a	Merge pull request #14007 from asgerf/js/import-path-string ... JS: Follow immediate predecessors in path resolution	2023-08-23 15:28:22 +02:00
Asger F	c6a757e085	JS: More robust handling of cyclic aliases	2023-08-23 14:11:07 +02:00
Asger F	794a459c1b	JS: Add reproduction test	2023-08-23 14:11:07 +02:00
Asger F	dec6039469	JS: Follow immediate predecessors in path resolution	2023-08-23 09:53:51 +02:00
Max Schaefer	87364137df	Use more sensible validator in example.	2023-08-21 15:14:01 +01:00
erik-krogh	0bce42410a	support arbitrary codepoints in NfaUtils.qll	2023-08-08 22:14:51 +02:00
erik-krogh	92db7b047c	escape unicode chars in the output for the ReDoS queries	2023-08-08 00:15:54 +02:00