Napalys Klicius b2346183d6 Merge pull request #20148 from Napalys/js/reg-exp-env-variable-threat-model ...

JS: Exclude environment variables from `js/regex-injection` query by default

2025-08-18 09:32:15 +02:00

..

dataflow

Exlucde environmental variables from default detection in regexp injection

2025-07-31 12:09:30 +02:00

domains

Moved new query to 'experimental'

2024-07-09 16:38:01 +01:00

regexp

JS: Provide more precise related locations

2025-02-11 14:12:03 +01:00

CommonFlowState.qll

JS: Migrate TaintedObject to a CommonFlowState

2024-12-13 10:08:08 +01:00

CryptoAlgorithms.qll

JS: Fix import

2025-07-16 14:41:50 +02:00

FunctionalityFromUntrustedSource.qll

Formatting of QLL

2024-07-09 18:16:37 +01:00

IncompleteBlacklistSanitizer.qll

JS: Now BadHtmlSanitizers new RegExp with unknown flags is also flagged.

2024-11-28 11:26:36 +01:00

IncompleteMultiCharacterSanitizationQuery.qll

fix FP by requiring that the regular expression mention on of the chars important in the prefix

2023-07-01 20:30:09 +02:00

IncompleteMultiCharacterSanitizationSpecific.qll

use RegExpTreeView insteaed of RegexTreeView in JS

2022-11-22 12:55:48 +01:00

PasswordInConfigurationFileQuery.qll

rename more acronyms

2022-08-25 20:52:27 +02:00

SensitiveActions.qll

Use shared SensitiveDataHeuristics

2025-07-14 11:38:47 +02:00

TaintedObject.qll

JS: Mass rename to node1,state1,node2,state2 naming convention

2024-12-16 15:35:46 +01:00

TaintedObjectCustomizations.qll

JS: Migrate TaintedObject to a CommonFlowState

2024-12-13 10:08:08 +01:00

TaintedUrlSuffix.qll

JS: Use flow state in barrier and step relations

2024-12-13 10:08:02 +01:00

TaintedUrlSuffixCustomizations.qll

JS: Model query-string parsers that strip off ? or #

2025-02-11 10:41:23 +01:00

UselessUseOfCat.qll

Py/JS/RB: Use instanceof in more places

2022-12-12 16:06:57 +01:00