40697 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
Asger Feldthaus	65b44248f8	JS: Autoformat	2021-08-11 12:50:54 +02:00
Asger Feldthaus	4f4f524937	JS: Add test for upward traversal	2021-08-11 12:50:54 +02:00
Asger Feldthaus	b7339348ef	JS: Add tests for EJS includes	2021-08-11 12:50:54 +02:00
Asger Feldthaus	b1cadc8ae7	JS: Add test for AngularJS sinks	2021-08-11 12:50:54 +02:00
Asger Feldthaus	e61d534c59	JS: Add ambiguity test for template file resolution	2021-08-11 12:50:54 +02:00
Asger Feldthaus	308461a3e3	JS: Pass around base folder in file resolution	2021-08-11 12:50:54 +02:00
Asger Feldthaus	e8d10b983e	JS: Tests for template file resolution	2021-08-11 12:50:54 +02:00
Asger Feldthaus	28fe8da37c	JS: Add similar test for .njk file	2021-08-11 12:50:54 +02:00
Asger Feldthaus	1444ec5255	JS: Add similar test for hbs	2021-08-11 12:50:54 +02:00
Asger Feldthaus	7045fb4679	JS: Expand on test	2021-08-11 12:50:54 +02:00
Asger Feldthaus	ec5e0283d5	JS: Bump extractor version string	2021-08-11 12:50:54 +02:00
Asger Feldthaus	e3e24f9880	JS: Use separate ScopeManager for template exprs	2021-08-11 12:50:54 +02:00
Asger Feldthaus	b36e9e0e54	JS: Filter out common string literal sinks	2021-08-11 12:50:53 +02:00
Asger Feldthaus	f563a015a4	JS: Recognize .njk extension in QL	2021-08-11 12:50:53 +02:00
Asger Feldthaus	e19b6c2c3b	JS: Update taint step	2021-08-11 12:50:53 +02:00
Asger Feldthaus	13aa511364	JS: Support TemplatePlaceholderTag.getEnclosingExpr ... fixup! makeLocation	2021-08-11 12:50:52 +02:00
Asger Feldthaus	0a14de1741	JS: Also extract .njk files	2021-08-11 12:36:35 +02:00
Asger Feldthaus	14bada4bbe	JS: Model consolidate and factor in template syntax from call site	2021-08-11 12:36:35 +02:00
Asger Feldthaus	425bd7abf9	JS: Model template instantiation from Fastify, Hapi, and Koa	2021-08-11 12:36:35 +02:00
Asger Feldthaus	266c10462e	JS: More aggressive TemplateFileReference.getValue	2021-08-11 12:36:35 +02:00
Asger Feldthaus	bc73d9f431	JS: Support templates importing each other	2021-08-11 12:36:35 +02:00
Asger Feldthaus	bb80fdddbd	JS: Handle leading ../ in template resolution	2021-08-11 12:36:35 +02:00
Asger Feldthaus	6954a9ac23	JS: Treat EJS-include calls as template instantiations ... JS: Fixup EJS include call (API node)	2021-08-11 12:36:35 +02:00
Asger Feldthaus	248715c743	JS: Restrict FileAccessToHttp a bit	2021-08-11 12:36:35 +02:00
Asger Feldthaus	8a50d99f33	JS: Treat GeneratedCodeExpr as DirectEval in UnusedVariable.ql	2021-08-11 12:36:35 +02:00
Asger Feldthaus	623557ba39	JS: "this" in a template is not the global object	2021-08-11 12:36:35 +02:00
Asger Feldthaus	ee33c593e0	JS: Autoformat	2021-08-11 12:36:34 +02:00
Asger Feldthaus	0f27bffb05	JS: Add sinks for server-template tags in AngularJS templates	2021-08-11 12:36:34 +02:00
Asger Feldthaus	d6dbabf9e0	JS: Ignore empty char sequences	2021-08-11 12:36:34 +02:00
Asger Feldthaus	745f9b36e0	JS: Exclude non-code script tags	2021-08-11 12:36:34 +02:00
Asger Feldthaus	2412f530f9	JS: Add steps and sinks for pipes	2021-08-11 12:36:34 +02:00
Asger Feldthaus	23eeb49959	JS: Detect relevant templating syntax, and add sinks	2021-08-11 12:36:34 +02:00
Asger Feldthaus	f3b97f05c9	JS: Add steps to/from placeholder tags	2021-08-11 12:36:34 +02:00
Asger Feldthaus	f1c663b01b	JS: Add steps from instantiation site to placeholder expr	2021-08-11 12:36:34 +02:00
Asger Feldthaus	5659a8a30f	JS: Add template resolution logic	2021-08-11 12:36:34 +02:00
Asger Feldthaus	1474c0788b	JS: Introduce TemplateInstantiation	2021-08-11 12:36:34 +02:00
Asger Feldthaus	8fe2d84d53	JS: Move template-related classes to Templating file	2021-08-11 12:36:34 +02:00
Asger Feldthaus	f26e94c0db	JS: Rename to Angular-style template	2021-08-11 12:36:34 +02:00
Asger Feldthaus	66cec65bfb	JS: Format HTMLExtractor	2021-08-11 12:36:34 +02:00
Asger Feldthaus	8666bc1894	JS: Extract placeholders in HTML	2021-08-11 12:36:31 +02:00
Chris Smowton	d45d58804b	Merge pull request #6466 from github/workflow/coverage/update ... Update CSV framework coverage reports	2021-08-11 07:56:55 +01:00
github-actions[bot]	5db82651fe	Add changed framework coverage reports	2021-08-11 00:13:37 +00:00
jorgectf	e6ce10b5c5	Merge remote-tracking branch 'origin/main' into jty/python/nosqlInjection	2021-08-10 20:01:08 +02:00
Joe Farebrother	7462180dcd	Improve handling or array types	2021-08-10 16:52:38 +01:00
Joe Farebrother	207c753f6f	Update model for getAll	2021-08-10 15:05:02 +01:00
Tamas Vajk	2437546009	Merge branch 'main' into feature/service-stack	2021-08-10 15:16:17 +02:00
Alex Ford	4d6d6a4016	Merge pull request #236 from github/more-concepts ... Port some concepts to Concepts.qll	2021-08-10 12:42:40 +01:00
Tamas Vajk	243424063a	Add pragma inline to getMember/Method/Callable	2021-08-10 13:25:56 +02:00
Tamas Vajk	51661bfa62	Add pragma noinline to fix uselessUpcast check	2021-08-10 13:24:30 +02:00
Owen Mansel-Chan	2000985509	Remove duplicate test	2021-08-10 11:58:28 +01:00