5 Commits

Author	SHA1	Message	Date
Max Schaefer	3e26bc6446	JavaScript: Improve alert location and message for IncompleteSanitization. ... We now highlight the `replace` call (instead of the regular expression), and the alert message for the case of missing backslash escapes clarifies that it is talking about failure to escape backslashes in the input, not in the replacement text.	2019-02-08 09:13:40 +00:00
Esben Sparre Andreasen	a1d92bfa50	JS: generalize js/incomplete-sanitization to handle ConstantString	2018-12-11 13:39:15 +01:00
Max Schaefer	10166be535	JavaScript: Add new query DoubleEscaping.	2018-11-30 09:39:00 +00:00
Max Schaefer	41da997651	JavaScript: Teach IncompleteSanitization to recognize incomplete URL {en,de}coding.	2018-08-09 12:44:16 +01:00
Pavel Avgustinov	b55526aa58	QL code and tests for C#/C++/JavaScript.	2018-08-02 17:53:23 +01:00