Max Schaefer e194021c3b Merge pull request #629 from esben-semmle/js/persistent-read-taint ...

JS: add persistent storage taint steps

2018-12-13 08:24:42 +00:00

..

addEventListener.js

JS: Canonicalize ThisNode

2018-10-09 08:53:41 +01:00

cookies.js

QL code and tests for C#/C++/JavaScript.

2018-08-02 17:53:23 +01:00

etherpad.js

QL code and tests for C#/C++/JavaScript.

2018-08-02 17:53:23 +01:00

externs.js

QL code and tests for C#/C++/JavaScript.

2018-08-02 17:53:23 +01:00

formatting.js

JS: mark PrintfStyleCall as a taint step

2018-08-21 09:02:35 +02:00

jquery.js

QL code and tests for C#/C++/JavaScript.

2018-08-02 17:53:23 +01:00

nodemailer.js

JS: add email HTML body as XSS sink

2018-11-07 11:31:40 +00:00

partial.js

JavaScript: Fix modelling of _.partial.

2018-10-31 06:31:59 -04:00

promises.js

QL code and tests for C#/C++/JavaScript.

2018-08-02 17:53:23 +01:00

react-native.js

JavaScript: Add WebView-related taint sinks for CodeInjection, DomBasedXss and ServerSideUrlRedirect.

2018-08-10 15:59:27 +01:00

ReflectedXss.expected

JavaScript: Update expectd test output for security path queries to include nodes and edges query predicates.

2018-11-14 09:32:31 +00:00

ReflectedXss.js

QL code and tests for C#/C++/JavaScript.

2018-08-02 17:53:23 +01:00

ReflectedXss.qlref

QL code and tests for C#/C++/JavaScript.

2018-08-02 17:53:23 +01:00

ReflectedXssGood2.js

QL code and tests for C#/C++/JavaScript.

2018-08-02 17:53:23 +01:00

ReflectedXssGood.js

QL code and tests for C#/C++/JavaScript.

2018-08-02 17:53:23 +01:00

ReflectedXssWithCustomSanitizer_old.expected

JavaScript: Fix modelling of _.partial.

2018-10-31 06:31:59 -04:00

ReflectedXssWithCustomSanitizer_old.ql

QL code and tests for C#/C++/JavaScript.

2018-08-02 17:53:23 +01:00

ReflectedXssWithCustomSanitizer.expected

JavaScript: Fix modelling of _.partial.

2018-10-31 06:31:59 -04:00

ReflectedXssWithCustomSanitizer.ql

QL code and tests for C#/C++/JavaScript.

2018-08-02 17:53:23 +01:00

stored-xss.js

JS: introduce DOM::PersistentWebStorage

2018-12-06 14:53:22 +01:00

StoredXss.expected

Merge pull request #629 from esben-semmle/js/persistent-read-taint

2018-12-13 08:24:42 +00:00

StoredXss.qlref

JS: add query: js/stored-xss

2018-09-14 15:30:44 +02:00

string-manipulations.js

QL code and tests for C#/C++/JavaScript.

2018-08-02 17:53:23 +01:00

translate.js

QL code and tests for C#/C++/JavaScript.

2018-08-02 17:53:23 +01:00

tst2.js

QL code and tests for C#/C++/JavaScript.

2018-08-02 17:53:23 +01:00

tst.js

JS: restrict when a variable reference is considered a source

2018-12-12 12:28:26 +00:00

winjs.js

JavaScript: Teach Xss query about WinJS HTML injection functions.

2018-12-06 09:13:21 +00:00

xss-through-filenames.js

JS: add query: js/stored-xss

2018-09-14 15:30:44 +02:00

Xss.expected

Merge pull request #629 from esben-semmle/js/persistent-read-taint

2018-12-13 08:24:42 +00:00

Xss.qlref

QL code and tests for C#/C++/JavaScript.

2018-08-02 17:53:23 +01:00