Erik Krogh Kristensen
|
a188c6f804
|
qldoc changes and renaming
|
2020-04-01 11:12:54 +02:00 |
|
Erik Krogh Kristensen
|
546431c83d
|
dataflow and typetracking steps for Maps and Sets
|
2020-03-31 11:21:34 +02:00 |
|
Erik Krogh Kristensen
|
14740d4ccc
|
move existing array taint stracking into Arrays.qll
|
2020-03-09 09:20:45 +01:00 |
|
Asger Feldthaus
|
418f841749
|
JS: Handle imports through lazy-cache
|
2020-02-06 14:59:52 +00:00 |
|
Erik Krogh Kristensen
|
b526a2ea0f
|
implement a model of WebSocket and ws based on the EventEmitter model
|
2020-01-22 14:46:53 +01:00 |
|
Erik Krogh Kristensen
|
110302678c
|
add model for EventEmitter in NodeJS, and base the Electron::IPC model on top of the new EventEmitter model
|
2019-12-09 14:27:35 +01:00 |
|
Erik Krogh Kristensen
|
5a0cabb039
|
Merge remote-tracking branch 'upstream/master' into typeAheadSink
|
2019-11-26 14:37:40 +01:00 |
|
Erik Krogh Kristensen
|
4a94c49d37
|
changes based on review feedback
|
2019-11-26 13:40:48 +01:00 |
|
Erik Krogh Kristensen
|
c7235bb372
|
add sources and sinks for typeahead.js
|
2019-11-25 10:46:54 +01:00 |
|
Erik Krogh Kristensen
|
7d825af9a3
|
Added an XSS sink for Handlebars.SafeString
|
2019-11-22 15:56:21 +01:00 |
|
Esben Sparre Andreasen
|
bea59ec8ad
|
JS: add some parsed torrent properties as remote flow sources
|
2019-11-14 13:54:19 +01:00 |
|
Asger F
|
8544850945
|
JS: Generalize StringOps::Includes to ::InclusionTest
|
2019-11-07 14:35:17 +00:00 |
|
Asger F
|
13da242576
|
JS: Add GlobalAccessPaths library
|
2019-07-23 17:08:02 +01:00 |
|
Esben Sparre Andreasen
|
299d4c6e93
|
JS: add additional SystemCommandExecutors
|
2019-06-11 09:38:10 +02:00 |
|
Asger F
|
454fff1398
|
JS: Implement getAnUnderlyingType().
|
2019-04-26 16:56:04 +01:00 |
|
Asger F
|
967752c6c1
|
JS: Add TypeAnnotations class
|
2019-04-26 16:56:04 +01:00 |
|
semmle-qlci
|
ccbb7ce04b
|
Merge pull request #1224 from asger-semmle/cheerio
Approved by esben-semmle
|
2019-04-11 15:21:44 +01:00 |
|
semmle-qlci
|
9f13b6be18
|
Merge pull request #1234 from xiemaisi/js/customizations-qll
Approved by esben-semmle
|
2019-04-11 08:31:28 +01:00 |
|
Max Schaefer
|
078151f9d1
|
JavaScript: Add an (empty) Customizations.qll module.
Somewhat analogous to the `Options.qll` module in C++; see module
comments for further explanation.
|
2019-04-10 18:26:27 -07:00 |
|
Asger F
|
0fcdf91d4a
|
JS: Add model of cheerio
|
2019-04-09 12:21:54 +01:00 |
|
Asger F
|
3da76cb798
|
JS: add model of ShellJS
|
2019-04-04 11:44:56 +01:00 |
|
Asger F
|
06b0851072
|
JS: Add Firebase model
|
2019-03-27 13:21:45 +00:00 |
|
Max Schaefer
|
28d8011bcf
|
JavaScript: Add models for popular base64 transcoders.
|
2019-03-13 08:20:58 +00:00 |
|
Max Schaefer
|
739705865b
|
JavaScript: Add basic model of socket.io.
|
2019-02-26 15:53:29 +00:00 |
|
Asger F
|
fab0afd755
|
JS: model string functions from closure library
|
2019-02-25 16:08:47 +00:00 |
|
Max Schaefer
|
be67d5129a
|
JavaScript: Add QL library support for E4X.
|
2019-02-24 20:45:41 +00:00 |
|
Asger F
|
e4b230ba60
|
Revert "Merge pull request #897 from Semmle/revert-817-closure-modules"
This reverts commit 95185345fd, reversing
changes made to b8be66ec48.
|
2019-02-07 11:58:38 +00:00 |
|
Max Schaefer
|
812cba0fe3
|
Merge pull request #828 from esben-semmle/js/vue-support-1
JS: basic Vue support
|
2019-02-07 08:00:17 +00:00 |
|
Asger F
|
e46e2b2515
|
Revert "JS: Add support for Closure modules"
|
2019-02-06 17:30:45 +00:00 |
|
Esben Sparre Andreasen
|
235625d03a
|
Merge branch 'master' into js/vue-support-1
|
2019-02-06 16:57:16 +01:00 |
|
Esben Sparre Andreasen
|
ddf9ca2505
|
JS: introduce base Vue model
|
2019-02-06 09:37:23 +01:00 |
|
Asger F
|
2ae926462c
|
JS: Move closure code into a module
|
2019-02-04 14:21:34 +00:00 |
|
Asger F
|
d603824feb
|
JS: add StringOps::StartsWith and StringOps::Includes
|
2019-01-18 10:40:18 +00:00 |
|
Max Schaefer
|
5d1d94ebf1
|
JavaScript: Remove deprecated old call graph library.
|
2019-01-09 09:23:59 +00:00 |
|
Max Schaefer
|
feb9693fea
|
JavaScript: Remove old data flow library.
|
2019-01-09 09:23:59 +00:00 |
|
Esben Sparre Andreasen
|
45b207c21b
|
JS: introduce models of three cookie libraries
|
2018-12-06 14:53:22 +01:00 |
|
Asger F
|
a374540c55
|
JS: Range analysis library
|
2018-11-29 11:22:13 +00:00 |
|
Max Schaefer
|
fa8736adbc
|
JavaScript: Introduce aliases for compatibility with other language libraries.
|
2018-11-09 11:27:14 +00:00 |
|
Asger F
|
b40fa3845f
|
JS: add model of async package
|
2018-11-06 12:12:43 +00:00 |
|
Asger F
|
f7775f36a8
|
JS: Add EmailClients lib
|
2018-09-27 10:20:35 +01:00 |
|
semmle-qlci
|
4aca8f4fd3
|
Merge pull request #201 from asger-semmle/string-concatenation-squashed
Approved by esben-semmle
|
2018-09-19 21:59:17 +01:00 |
|
Asger F
|
e2cdf5d7ed
|
JavaScript: add string concatenation library
|
2018-09-17 12:47:37 +01:00 |
|
Esben Sparre Andreasen
|
444a09a17c
|
JS: add models of five file system libraries
|
2018-09-14 15:30:44 +02:00 |
|
Esben Sparre Andreasen
|
0da14fccbd
|
JS: renaming UrlRequests.qll -> ClientRequests.qll
|
2018-09-05 09:20:45 +02:00 |
|
Esben Sparre Andreasen
|
2104cf55e3
|
JS: add models of URL requests
|
2018-09-04 09:25:42 +02:00 |
|
Max Schaefer
|
20bff709b1
|
Merge pull request #136 from esben-semmle/js/composed-function-taint
JS: model composed functions (RC)
|
2018-09-03 08:18:20 +01:00 |
|
Esben Sparre Andreasen
|
df97132519
|
JS: add model for property projection
|
2018-08-30 09:39:02 +02:00 |
|
Esben Sparre Andreasen
|
dc72788746
|
JS: add a model of some function composition libraries
|
2018-08-30 08:17:01 +02:00 |
|
semmle-qlci
|
7e7e30c01c
|
Merge pull request #73 from esben-semmle/js/cleartext-logging-query
Approved by xiemaisi
|
2018-08-22 08:04:36 +01:00 |
|
Esben Sparre Andreasen
|
c058b91587
|
JS: extract PrintfStyleCall out of TaintedFormatString
|
2018-08-21 09:02:35 +02:00 |
|