Asger F 32022ccbda JS: Port UnsafeCodeConstruction

2023-10-13 13:15:05 +02:00

..

lib

expand localFieldStep to use access-paths, and build access-paths in more cases

2022-09-13 21:43:06 +02:00

webix

Adapt Webix modeling to support HTML use-cases

2023-06-28 15:26:30 +02:00

actions.js

JS: Restrict getInput to indirect command injection query

2023-05-03 16:10:03 +02:00

angularjs.js

Merge remote-tracking branch 'upstream/next' into qlucie/master

2019-01-04 10:35:57 +00:00

bad-code-sanitization.js

add qhelp for js/bad-code-sanitization

2020-06-16 16:23:41 +02:00

CodeInjection.expected

JS: Port CodeInjection

2023-10-13 13:15:03 +02:00

CodeInjection.qlref

JS: move CodeInjection tests into subfolder

2018-11-20 14:24:37 +00:00

eslint-escope-build.js

JS: move CodeInjection tests into subfolder

2018-11-20 14:24:37 +00:00

express.js

add test for express-ws as a source

2023-02-13 15:26:50 +01:00

externs.js

JS: move CodeInjection tests into subfolder

2018-11-20 14:24:37 +00:00

HeuristicSourceCodeInjection.expected

Adapt Webix modeling to support HTML use-cases

2023-06-28 15:26:30 +02:00

HeuristicSourceCodeInjection.ql

JS: Remove use of deprecated API

2021-08-12 09:30:43 +02:00

ImproperCodeSanitization.expected

JS: Port ImproperCodeSanitization

2023-10-13 13:15:05 +02:00

ImproperCodeSanitization.qlref

add query to detect improperly sanitized code

2020-06-10 19:50:12 +02:00

module.js

JavaScript: Improve modelling of Module.prototype._compile sink.

2021-07-12 15:32:21 +01:00

NoSQLCodeInjection.js

type-track objects where the "$where" property has been written

2020-09-24 20:55:25 +02:00

react-native.js

JS: move CodeInjection tests into subfolder

2018-11-20 14:24:37 +00:00

react.js

add js/code-injection sink for script tags in React

2021-01-29 12:50:17 +01:00

template-sinks.js

Adapt Webix modeling to support HTML use-cases

2023-06-28 15:26:30 +02:00

tst.js

recognize calls to Function where spread arguments are used

2022-09-07 22:55:51 +02:00

UnsafeCodeConstruction.expected

JS: Port UnsafeCodeConstruction

2023-10-13 13:15:05 +02:00

UnsafeCodeConstruction.qlref

add test for unsafe-code-construction query

2022-02-07 13:34:18 +01:00