Asger F
294089fe35
JS: Use question-mark variant in all overlay annotations
2025-12-08 13:13:09 +01:00
Eliav2
6df789d114
Merge branch 'main' into 20823-globalVarRef-document-defaultView
2025-11-20 15:18:15 +02:00
Asger F
efa438a352
JS: Move identityFunctionStep back into CachedSteps module
2025-11-19 13:47:30 +01:00
eliav
8047450668
javascript: Update property access for `document.defaultView as getAPropertyRead
...
Changed the method for accessing `defaultView` from `getAPropertyReference` to `getAPropertyRead` to improve accuracy in data flow analysis for global variable references.
2025-11-17 01:05:58 +02:00
eliav
30cc91421d
javascript: Add support for document.defaultView in global variable references
...
Updated the data flow analysis to include `document.defaultView` as a source node for global variable references. Added a new test file `tst4.js` and updated existing tests to verify the inclusion of `defaultView` and its properties in the expected results.
2025-11-17 00:52:06 +02:00
Asger F
c7341f295d
JS: Fix bad join in BarrierGuards.qll
2025-11-13 09:46:27 +01:00
Asger F
578355ac27
JS: Fix bad join in CallGraphs.qll
2025-11-13 09:46:25 +01:00
Asger F
6498cd1b07
JS: Remove obsolete overlay[global] annotations
2025-11-13 09:46:18 +01:00
Asger F
0594f84dfc
JS: Improve join orders related to getABooleanValue()
2025-11-13 09:46:16 +01:00
Asger F
4645f327a5
JS: Avoid more bad joins due to locality
2025-11-13 09:46:14 +01:00
Asger F
e72232fd1d
JS: Add more overlay[caller?] annotations
2025-11-13 09:46:06 +01:00
Asger F
66febb263d
JS: Add some overlay[caller] and a pragma[nomagic] annotations
2025-11-13 09:46:05 +01:00
Asger F
23e42c89ee
JS: Overlay annotations for AST layer
2025-11-13 09:45:56 +01:00
Asger F
10c9b747a5
Merge pull request #20586 from asgerf/js/api-graphs-block-this
...
JS: Restrict receiver-flow in API graphs
2025-10-08 08:41:56 +02:00
Asger F
587ad5c600
JS: Refine criteria so that explicit this-passing is not affected
2025-10-06 11:43:18 +02:00
Simon Friis Vindum
7d6e2060e5
Adapt all languages to changes in shared library
2025-09-22 14:18:58 +02:00
Napalys Klicius
97a11de1e3
Merge pull request #20435 from Napalys/js/promisification_modeling
...
JS: Promisification library modeling and enhance flow
2025-09-16 14:07:53 +02:00
Asger F
45eff3dac8
Merge pull request #20399 from asgerf/js/default-interop2
...
JS: Refactor handling of ambiguous default imports
2025-09-16 13:02:22 +02:00
Asger F
65102a073a
Merge pull request #19770 from trailofbits/VF/async-package-improvements
...
Improve data flow in the `async` package
2025-09-16 08:55:52 +02:00
Napalys Klicius
0d23ab07db
JS: Add data flow modeling for promisified user-defined functions
2025-09-15 17:13:13 +02:00
Asger F
7a2391f848
JS: Deprecate Portals and delete tests
...
This is a super old attempt at model generation, from before MaD even existed. It's obsolete and just have to be removed.
2025-09-11 11:05:36 +02:00
Asger F
0752dbea9b
Merge pull request #20360 from asgerf/js/remove-angularjs-string-special-case
...
JS: Remove special treatment of strings in AngularJS code
2025-09-08 22:48:23 +02:00
Asger F
b5045b3407
Merge pull request #20363 from asgerf/js/remove-fallback-type
...
JS: Remove unused getFallbackTypeAnnotation()
2025-09-08 22:48:07 +02:00
Asger F
d8346ef106
JS: Remove unused getFallbackTypeAnnotation()
...
This private predicate was unused, but due to its recursive self-reference it was not reported as an unused predicate.
2025-09-04 13:40:49 +02:00
Michael Nebel
8009ddebce
Merge pull request #20329 from michaelnebel/javascript/ql4ql
...
JS: Fix some Ql4Ql violations.
2025-09-04 13:01:37 +02:00
Asger F
5b0ef40a3e
JS: Remove special treatment of strings in AngularJS code
...
String literals are already SourceNodes. But we need to add template literals as well
2025-09-04 11:06:22 +02:00
Asger F
1ea843f23c
Merge pull request #20323 from asgerf/js/remove-totalorder
...
JS: Remove totalorder()
2025-09-02 22:08:33 +02:00
Michael Nebel
8b10ad49d7
JS: Fix some Ql4Ql violations.
2025-09-01 15:17:53 +02:00
Asger F
45b8158fe5
JS: Remove totalorder()
...
This was once as input to the shared data flow library, but has since been removed from the input signature.
2025-09-01 13:39:54 +02:00
Anders Schack-Mulligen
f459ddc40a
Languages: Adapt to api changes.
2025-09-01 11:26:33 +02:00
Anders Schack-Mulligen
bb3abc815f
SSA: Update input to use member predicates.
2025-09-01 11:19:48 +02:00
Asger F
dcf63fc434
JS: Remove synthetic locations
2025-08-27 11:20:24 +02:00
Anders Schack-Mulligen
3b8234ecec
SSA: Update data flow integration and BarrierGuard interface to use GuardValue.
2025-07-28 11:29:12 +02:00
Vasco-jofra
8c4dbca23c
Improve data flow in the async library
2025-06-15 17:59:49 +02:00
Asger F
423ffc78db
Merge pull request #19078 from asgerf/js/name-resolution
...
JS: QL-side type/name resolution for TypeScript and JSDoc
2025-06-11 14:17:11 +02:00
Asger F
57fad7e6c9
JS: Add SatisfiesExpr
2025-06-04 22:17:40 +02:00
Anders Schack-Mulligen
1d30103559
SSA: Distinguish between has and controls branch edge.
2025-05-23 09:56:22 +02:00
Asger F
e07a03619d
JS: Mark type-annotated nodes as SourceNode
2025-05-20 13:20:24 +02:00
Asger F
167f752301
JS: Also propagate through promise types
2025-05-20 13:20:21 +02:00
Asger F
b923eac9be
JS: Use underlying types in DataFlow::Node
2025-05-20 13:20:04 +02:00
Napalys Klicius
f6a8909bfe
Merge pull request #19356 from Napalys/js/merge_classes
...
JS: Merge `ES6Class` to `FunctionStyleClass`
2025-05-16 10:31:33 +02:00
Asger F
169ae19015
Merge pull request #19391 from asgerf/js/typescript-path-resolution
...
JS: Overhaul import resolution
2025-05-13 15:46:38 +02:00
Napalys Klicius
30694c11d6
Removed code duplication
2025-05-02 13:44:07 +02:00
Asger F
b8be1bcee8
JS: Avoid duplication with constructor body
2025-05-02 13:44:03 +02:00
Napalys Klicius
c430a36b4c
Refactored merge StandardClassNode into ClassNode
2025-05-01 19:12:12 +02:00
Asger F
a44bdf3be2
JS: Generate summaries from summaryModel, and only generate steps as a fallback
2025-05-01 15:22:47 +02:00
Napalys Klicius
c7d764f666
Brought back FunctionStyleClass marked as deprecated
2025-05-01 11:16:04 +02:00
Napalys Klicius
9bab59363c
Fix class instance method detection in constructor receiver
2025-05-01 09:14:39 +02:00
Napalys Klicius
c0917434eb
Removed code duplication
2025-05-01 09:14:36 +02:00
Napalys Klicius
7fec3aec95
Renamed FunctionStyleClass class to StandardClassNode
2025-04-30 18:51:46 +02:00
