Erik Krogh Kristensen 17c4bbbc4e allow parameters that end with "Command" in js/shell-command-constructed-from-input

2021-04-12 09:57:40 +02:00

..

lib

allow parameters that end with "Command" in js/shell-command-constructed-from-input

2021-04-12 09:57:40 +02:00

child_process-test.js

…

command-line-parameter-command-injection.js

add command parsing model for "commander"

2020-11-27 09:58:00 +00:00

CommandInjection.expected

add model for multiparty

2021-02-11 09:34:04 +01:00

CommandInjection.qlref

…

Consistency.expected

JS: fixup for execa.shell and execa.shellSync models

2020-12-22 09:06:18 +01:00

Consistency.ql

…

exec-sh2.js

JavaScript: Add two new command-injection tests.

2020-09-23 14:07:36 +01:00

exec-sh.js

JavaScript: Add two new command-injection tests.

2020-09-23 14:07:36 +01:00

execSeries.js

…

form-parsers.js

add model for multiparty

2021-02-11 09:34:04 +01:00

IndirectCommandInjection.expected

add command parsing model for "commander"

2020-11-27 09:58:00 +00:00

IndirectCommandInjection.qlref

…

other.js

…

package.json

…

ShellCommandInjectionFromEnvironment.expected

JS: fixup for execa.shell and execa.shellSync models

2020-12-22 09:06:18 +01:00

ShellCommandInjectionFromEnvironment.qlref

…

third-party-command-injection.js

…

tst_shell-command-injection-from-environment.js

consider quoted string concatenations as sanitizers for js/shell-command-injection-from-environment

2021-03-25 15:17:02 +01:00

UnsafeShellCommandConstruction.expected

treat "files" in a package.json as main modules, if "main" is not present

2021-04-08 14:42:12 +02:00

UnsafeShellCommandConstruction.qlref

…

uselesscat.js

…

UselessUseOfCat.expected

Merge pull request #5526 from erik-krogh/quotedShell

2021-04-07 08:39:01 +01:00

UselessUseOfCat.ql

…