Erik Krogh Kristensen 2b2d691e45 don't treated a property from a tainted object as tainted when there exists a dominating write

2020-06-25 23:00:52 +02:00

..

lib

don't treated a property from a tainted object as tainted when there exists a dominating write

2020-06-25 23:00:52 +02:00

child_process-test.js

add test of webpack-dev-server and monorepo import

2020-06-19 14:15:46 +02:00

command-line-parameter-command-injection.js

use simpler taint-step for DestructingPattern

2020-06-11 23:16:46 +02:00

CommandInjection.expected

add test of webpack-dev-server and monorepo import

2020-06-19 14:15:46 +02:00

CommandInjection.qlref

QL code and tests for C#/C++/JavaScript.

2018-08-02 17:53:23 +01:00

execSeries.js

JavaScript: Add example of indirect command injection.

2019-01-11 10:24:41 +00:00

IndirectCommandInjection.expected

use simpler taint-step for DestructingPattern

2020-06-11 23:16:46 +02:00

IndirectCommandInjection.qlref

JS: add query js/indirect-command-line-injection

2019-07-31 09:24:25 +02:00

other.js

JavaScript: Add more models of packages that execute commands over SSH.

2020-05-18 12:08:14 +01:00

package.json

add test cases for js/shell-command-constructed-from-input

2020-05-17 10:32:27 +02:00

ShellCommandInjectionFromEnvironment.expected

JavaScript: Use type tracking instead of auxiliary data-flow configuration to track indirect command arguments.

2019-10-31 12:13:55 +00:00

ShellCommandInjectionFromEnvironment.qlref

JS: add query js/shell-command-injection-from-environment

2019-10-21 23:31:55 +02:00

third-party-command-injection.js

JS: treat server responses as untrusted for command injections

2019-09-11 09:38:18 +02:00

tst_shell-command-injection-from-environment.js

JS: add query js/shell-command-injection-from-environment

2019-10-21 23:31:55 +02:00

UnsafeShellCommandConstruction.expected

don't treated a property from a tainted object as tainted when there exists a dominating write

2020-06-25 23:00:52 +02:00

UnsafeShellCommandConstruction.qlref

add test cases for js/shell-command-constructed-from-input

2020-05-17 10:32:27 +02:00

uselesscat.js

add tests for third party command execution libraries (and two small fixes)

2020-02-25 10:50:59 +01:00

UselessUseOfCat.expected

add test cases for js/shell-command-constructed-from-input

2020-05-17 10:32:27 +02:00

UselessUseOfCat.ql

JS: Autoformat again

2020-03-04 19:28:24 +00:00