19 Commits

Author	SHA1	Message	Date
Stephan Brandauer	3f13a5e082	fix a FN for prototype polluting function query	2022-04-28 22:00:09 +02:00
Erik Krogh Kristensen	ff73dbc35c	delete redundant imports	2022-04-22 12:55:28 +02:00
Khang. Võ Vĩ	f4581ae866	fix PrototypePollutingAssignment examples	2022-04-22 11:55:45 +07:00
Erik Krogh Kristensen	517e17d422	support more property writes in js/prototype-pollution-utility, and generalize ObjectDefinePropertyAsPropWrite	2022-02-22 13:23:34 +01:00
Erik Krogh Kristensen	5780161b2c	fix most issues found by ql/class-doc-style in JS	2022-01-20 15:10:16 +01:00
Erik Krogh Kristensen	cb9e14f544	add cwe-471 to js/prototype-pollution	2022-01-19 14:54:57 +01:00
Erik Krogh Kristensen	e4203a4109	add CWE-471 to the prototype-pollution queries	2022-01-19 14:26:34 +01:00
Erik Krogh Kristensen	d1238dfd8b	update alert message to distinguish between library input and remote flow	2021-10-27 20:35:38 +02:00
Asger Feldthaus	f6da030572	JS: Migrate to *Query.qll convention	2021-08-12 09:30:18 +02:00
Calum Grant	771e686946	Update security-severity scores	2021-06-15 13:25:17 +01:00
Calum Grant	a594afb828	Add security-severity metadata	2021-06-10 20:11:08 +01:00
Erik Krogh Kristensen	f7f88689c4	use strings in isTypeofGard	2020-12-22 13:55:32 +01:00
Erik Krogh Kristensen	6eb88b9e41	introduce and use TaintTracking::isTypeofGuard	2020-12-22 09:42:12 +01:00
Asger F	ed729a1963	Apply suggestions from code review ... Co-authored-by: mc <42146119+mchammer01@users.noreply.github.com>	2020-12-09 09:59:55 +00:00
Asger Feldthaus	fd293d07d7	JS: Address doc review	2020-12-09 09:58:52 +00:00
Asger Feldthaus	f96c425a72	JS: Deny -> block	2020-12-07 10:50:01 +00:00
Asger Feldthaus	479dcf56ad	JS: Update to use more inclusive language	2020-12-07 10:16:38 +00:00
Asger Feldthaus	ca38a1c8b9	JS: Update CWE tags	2020-12-07 10:16:38 +00:00
Asger Feldthaus	25161ed338	JS: Move all prototype pollution queries to CWE-915	2020-12-07 10:16:38 +00:00