Erik Krogh Kristensen 50aa5e072a Merge pull request #12177 from erik-krogh/alias-html ...

JS: More precise type-test sanitizer guards in unsafe-html-construction

2023-02-27 18:16:11 +01:00

..

dataflow

make appliesTo recursive

2023-02-14 14:16:45 +01:00

dependencies

Py/JS/RB: Use instanceof in more places

2022-12-12 16:06:57 +01:00

explore

…

filters

…

frameworks

Merge branch 'main' into js-use-shared-cryptography

2023-02-15 17:13:53 +00:00

heuristics

Merge pull request #10663 from pwntester/restify_improvements

2022-12-15 11:08:22 +01:00

internal

Merge branch 'main' into js-use-shared-cryptography

2023-02-15 17:13:53 +00:00

linters

…

meta

…

security

Merge pull request #12177 from erik-krogh/alias-html

2023-02-27 18:16:11 +01:00

Actions.qll

…

Aliases.qll

…

AMD.qll

…

ApiGraphs.qll

simplifications inspired by review

2023-01-13 13:18:52 +01:00

Arrays.qll

…

AST.qll

…

Base64.qll

…

BasicBlocks.qll

…

CanonicalNames.qll

…

CFG.qll

…

CharacterEscapes.qll

…

Classes.qll

…

Closure.qll

Py/JS/RB: Use instanceof in more places

2022-12-12 16:06:57 +01:00

Collections.qll

…

Comments.qll

…

Concepts.qll

JS: fix qldoc

2023-02-16 11:00:37 +00:00

Constants.qll

…

DefensiveProgramming.qll

Py/JS/RB: Use instanceof in more places

2022-12-12 16:06:57 +01:00

DefUse.qll

JavaScript: Remove omittable exists variables

2023-01-10 13:37:21 +01:00

DOM.qll

fix that the TypeTracker was unrestricted for the base-case of nonFirstLocationType

2023-01-10 13:39:50 +01:00

DynamicPropertyAccess.qll

…

E4X.qll

…

EmailClients.qll

…

Errors.qll

…

ES2015Modules.qll

…

Expr.qll

add getBoolValue() as a utility predicate on BooleanLiteral

2023-02-14 14:12:35 +01:00

Extend.qll

…

Externs.qll

…

Files.qll

…

Functions.qll

JavaScript: Remove omittable exists variables

2023-01-10 13:37:21 +01:00

GeneratedCode.qll

Py/JS/RB: Use instanceof in more places

2022-12-12 16:06:57 +01:00

Generators.qll

…

GlobalAccessPaths.qll

…

HTML.qll

…

HtmlSanitizers.qll

…

InclusionTests.qll

…

JSDoc.qll

…

JSON.qll

…

JsonParsers.qll

…

JsonSchema.qll

…

JsonStringifiers.qll

…

JSX.qll

…

Lines.qll

…

Locations.qll

…

MembershipCandidates.qll

dont recognize regexps that match dot as sanitizers

2023-02-13 17:36:51 +01:00

Modules.qll

…

NodeJS.qll

JavaScript: Remove omittable exists variables

2023-01-10 13:37:21 +01:00

NodeModuleResolutionImpl.qll

also consider relative exports when finding library inputs

2023-02-14 21:08:13 +01:00

NPM.qll

add explicit this

2023-02-15 10:44:57 +01:00

PackageExports.qll

also consider relative exports when finding library inputs

2023-02-14 21:08:13 +01:00

Paths.qll

…

PrintAst.qll

fix errors in JS printAst

2023-01-12 15:37:52 +01:00

Promises.qll

…

RangeAnalysis.qll

…

Regexp.qll

share {js,rb}/regex/missing-regexp-anchor

2022-12-18 17:23:41 +01:00

RestrictedLocations.qll

…

Routing.qll

JavaScript: Remove omittable exists variables

2023-01-10 13:37:21 +01:00

SourceMaps.qll

…

SSA.qll

…

StandardLibrary.qll

…

Stmt.qll

…

StringConcatenation.qll

…

StringOps.qll

…

Templates.qll

…

Tokens.qll

…

TypeAnnotations.qll

…

TypeScript.qll

add support for satisfies-expressions

2022-11-15 22:07:24 +01:00

Unit.qll

…

Util.qll

…

Variables.qll

…

XML.qll

…

YAML.qll

…