Esben Sparre Andreasen 9ffc02944d add file write model for express-fileupload mv

2021-12-10 15:05:34 +01:00

..

Consistency.expected

JS: Use getAMatchedString instead of getConstantString

2021-11-08 15:35:35 +01:00

Consistency.ql

JS: Remove use of deprecated API

2021-08-12 09:30:43 +02:00

express.js

add file write model for express-fileupload mv

2021-12-10 15:05:34 +01:00

fs.js

JS: Unbreak TaintedPath

2019-02-28 15:45:26 -05:00

my-async-fs-module.js

detect fs modules that pass through a reduce call

2021-03-25 14:47:43 +01:00

my-fs-module.js

JS: add tests for the fs-module and friends

2020-02-28 12:21:10 +01:00

normalizedPaths.js

JS: Add test

2021-11-08 15:32:43 +01:00

other-fs-libraries.js

add mkdirp as a sink for tainted-path

2021-07-14 19:32:22 +02:00

prettier.js

add support for the prettier API

2021-06-02 15:33:08 +02:00

pupeteer.js

add model for puppeteer

2021-03-17 10:03:51 +01:00

tainted-access-paths.js

require that a write must dominate the enclosing stmt of a read

2020-06-25 23:00:52 +02:00

tainted-array-steps.js

adjust comments to reflect that tainted-path have no array-steps

2020-06-04 16:15:37 +02:00

tainted-require.js

add another test for the resolve library

2021-06-06 22:54:12 +02:00

tainted-sendFile.js

JS: Update test

2019-10-25 09:57:10 +01:00

tainted-string-steps.js

update TaintedPath to use new consistency checking

2020-06-04 11:00:40 +02:00

TaintedPath-es6.js

JS: Unbreak TaintedPath

2019-02-28 15:45:26 -05:00

TaintedPath.expected

add file write model for express-fileupload mv

2021-12-10 15:05:34 +01:00

TaintedPath.js

add the cwd option to shell executions as a sink to js/path-injection

2021-08-23 07:32:05 +02:00

TaintedPath.qlref

JS: Unbreak TaintedPath

2019-02-28 15:45:26 -05:00

torrents.js

JS: add security tests for malicious torrents

2019-11-14 13:54:19 +01:00

typescript.ts

better support for the &&=, ||=, and ??= operators

2020-08-13 09:22:32 +02:00

views.js

JS: Unbreak TaintedPath

2019-02-28 15:45:26 -05:00