Asger Feldthaus
fbb5d14263
JS: Update angular test output
2021-01-18 12:19:09 +00:00
Asger Feldthaus
bb6bd9168e
JS: Update HTML TRAP tests output
2021-01-18 12:19:09 +00:00
Asger Feldthaus
2a7b4487f1
JS: More auto format
2021-01-18 12:19:09 +00:00
Asger Feldthaus
d8c9dba990
JS: Autoformat
2021-01-18 12:19:09 +00:00
Asger Feldthaus
5f4016be76
JS: Cache Import.getImportedModule
2021-01-18 12:19:09 +00:00
Asger Feldthaus
c5f2c04f16
JS: Add upgrade script
2021-01-18 12:19:09 +00:00
Asger Feldthaus
1b4a4ea2fa
JS: Bump extractor version string
2021-01-18 12:19:09 +00:00
Asger Feldthaus
44c5d36e83
JS: Simple RxJS model
2021-01-18 12:19:09 +00:00
Asger Feldthaus
00cd0644f0
JS: Implement getAResponseDataNode
2021-01-18 12:19:09 +00:00
Asger Feldthaus
2f3cef177b
JS: More steps in Angular2 model
2021-01-18 12:19:09 +00:00
Asger Feldthaus
c8901b62f5
JS: Add test for $any step
2021-01-18 12:19:08 +00:00
Asger Feldthaus
2ba98da107
JS: Only extract local vars in TemplateTopLevel
...
Angular template expressions cannot refer to global variables, any
unqualified identifier is a reference to a property provided by the
component.
We extract them as implicitly declared local variables which the
QL model can then connect with data flow steps.
2021-01-18 12:19:08 +00:00
Asger Feldthaus
faad466aa8
JS: Add ScopeKind enum
2021-01-18 12:19:08 +00:00
Asger Feldthaus
07cfceee19
JS: TRAP test for angular templates
2021-01-18 12:19:08 +00:00
Asger Feldthaus
3c0867125b
JS: Remove FP in TargetBlank
2021-01-18 12:19:08 +00:00
Asger Feldthaus
97f7cb4dc1
JS: Track location information using SourceMaps
2021-01-18 12:19:08 +00:00
Asger Feldthaus
898d22d2f4
JS: Simplify HTML element access
2021-01-18 12:19:08 +00:00
Asger Feldthaus
f24af58a60
JS: Extract mapping from HTML node to parent Expression
2021-01-18 12:19:08 +00:00
Asger Feldthaus
3b666a5646
JS: Extract mapping from TopLevel to parent HTML node
2021-01-18 12:19:08 +00:00
Asger Feldthaus
8848ee2d10
JS: Extract HTML from inline templates
2021-01-18 12:19:08 +00:00
Asger Feldthaus
6bf9345258
JS: Add test for class with locally-unused field
2021-01-18 12:19:08 +00:00
Asger Feldthaus
cc952bd2a4
JS: Reorganize test a bit
2021-01-18 12:19:08 +00:00
Asger Feldthaus
1ab36dc81f
JS: Flow through *ngFor loops
2021-01-18 12:19:08 +00:00
Asger Feldthaus
29dd8470d5
JS: Fix offset of *ngFor snippet
2021-01-18 12:18:27 +00:00
Asger Feldthaus
0da207a5f9
JS: Update test with pipes
2021-01-18 12:18:27 +00:00
Asger Feldthaus
d80313be4f
JS: Model pipe classes
2021-01-18 12:18:27 +00:00
Asger Feldthaus
debb5691a1
JS: Make PipeRefExpr a SourceNode
2021-01-18 12:18:27 +00:00
Asger Feldthaus
fcb8124376
JS: Expose data flow node for field declaration
2021-01-18 12:18:26 +00:00
Asger Feldthaus
9ee893c9c1
JS: Add data flow steps in Angular2 model
2021-01-18 12:16:13 +00:00
Asger Feldthaus
77fcf3d8a2
JS: Support postfix "!" operator in templates
2021-01-18 12:16:13 +00:00
Asger Feldthaus
c08ba1416d
JS: Add new SourceType for angular templates
2021-01-18 12:16:13 +00:00
Asger Feldthaus
b1d45a6773
JS: Mark angular pipe refs as incomplete
2021-01-18 12:16:13 +00:00
Asger Feldthaus
4b5a861ee6
JS: Add TopLevelKind enum
2021-01-18 12:16:13 +00:00
Asger Feldthaus
9b99f56d44
JS: isAngularTemplateAttributeName
2021-01-18 12:16:13 +00:00
Asger Feldthaus
ed27c8b13f
JS: Add test and fix bug in pipe parser
2021-01-18 12:16:13 +00:00
Asger Feldthaus
16a2a60b9a
JS: Add AngularPipeRef
2021-01-18 12:16:13 +00:00
Asger Feldthaus
928a382ad5
JS: Add parser for angular expressions
2021-01-18 12:16:13 +00:00
Asger Feldthaus
3db6069372
JS: Add test for new sink
2021-01-18 10:55:34 +00:00
Asger Feldthaus
2752b4ba64
JS: Shift line numbers in test
2021-01-18 10:54:39 +00:00
Asger Feldthaus
ff1d0cc4c7
JS: Recognize DomSanitizer from @angular/core
2021-01-18 10:54:27 +00:00
Rasmus Lerchedahl Petersen
66426bf0cc
Python: Add tests for iterable unpacking
...
in for-iterations and comprehensions.
2021-01-18 09:36:13 +01:00
Tamas Vajk
8400a3862b
Add DB upgrade folder
2021-01-18 09:19:27 +01:00
Tamas Vajk
ce58514453
Change release note date
2021-01-18 09:19:27 +01:00
Tamas Vajk
c0b31cbfe7
Add new stats file
2021-01-18 09:19:27 +01:00
Tamas Vajk
f235a28295
C# Add relational patterns extraction
2021-01-18 09:19:27 +01:00
Rasmus Lerchedahl Petersen
175e43d6f2
Python: Slight refactor
2021-01-18 09:12:05 +01:00
luchua-bc
048167d39a
Revamp the query to reduce FPs introduced by wrapper calls
2021-01-18 04:23:30 +00:00
Artem Smotrakov
7d2d27394b
Java: Added a source and a taint step for JexlInjectionConfig
...
- Added TaintedSpringRequestBody source
- Added returningTaintedDataFromBean() taint step
- Added tests
2021-01-17 22:28:42 +01:00
Artem Smotrakov
99401f6e84
Java: Query for detecting JEXL injections
2021-01-17 14:19:26 +01:00
Rasmus Lerchedahl Petersen
5f189a7e43
Python: Address reviews
2021-01-15 20:18:37 +01:00