Erik Krogh Kristensen d1d4ebb3b5 add values written to the global scope as exports

2022-02-07 13:34:18 +01:00

..

lib

add values written to the global scope as exports

2022-02-07 13:34:18 +01:00

angularjs.js

…

bad-code-sanitization.js

…

CodeInjection.expected

add code-injection sink for calls to node

2022-02-07 13:34:18 +01:00

CodeInjection.qlref

…

eslint-escope-build.js

…

express.js

add JSON.stringify as a code-injection sanitizer

2022-02-07 13:34:18 +01:00

externs.js

…

HeuristicSourceCodeInjection.expected

add code-injection sink for calls to node

2022-02-07 13:34:18 +01:00

HeuristicSourceCodeInjection.ql

JS: Remove use of deprecated API

2021-08-12 09:30:43 +02:00

ImproperCodeSanitization.expected

…

ImproperCodeSanitization.qlref

…

module.js

JavaScript: Improve modelling of Module.prototype._compile sink.

2021-07-12 15:32:21 +01:00

NoSQLCodeInjection.js

type-track objects where the "$where" property has been written

2020-09-24 20:55:25 +02:00

react-native.js

…

react.js

add js/code-injection sink for script tags in React

2021-01-29 12:50:17 +01:00

template-sinks.js

add more template sinks for the js/code-injection query

2021-06-22 20:24:42 +02:00

tst.js

…

UnsafeCodeConstruction.expected

add values written to the global scope as exports

2022-02-07 13:34:18 +01:00

UnsafeCodeConstruction.qlref

add test for unsafe-code-construction query

2022-02-07 13:34:18 +01:00