codeql

access-path-sanitizer.js

JS: step through refinements in AccessPaths

2019-04-12 11:12:50 +01:00

addexpr.js

JS: Fix flow through +=

2019-04-05 13:55:48 +01:00

advanced-callgraph.js

JS: improve tests for interprocedural type inference

2018-11-01 13:51:38 +01:00

array-callback.js

JS: Add test

2019-06-25 14:15:06 +01:00

array-mutation.js

JS: Fix: Ensure toSpliced with spread operator is flagged

2024-11-13 17:21:34 +01:00

arrays-init.js

JS: Remove taint step from array element to whole array

2024-08-27 11:35:26 +02:00

arrays.js

add flow step for Array.prototype.at

2022-05-24 12:41:27 +02:00

BasicTaintTracking.expected

JS: Sharpen up EnumerationRegExp

2025-02-28 13:58:11 +01:00

BasicTaintTracking.ql

JS: Update testUtilities import

2024-12-19 15:25:39 +01:00

booleanOps.js

JS: Update TaintTracking test

2023-10-13 13:15:08 +02:00

bound-function.js

JS: Update TaintTracking test

2023-10-13 13:15:08 +02:00

call-apply.js

JS: Remove taint step from array element to whole array

2024-08-27 11:35:26 +02:00

callbacks.js

JS: Use type-pruning to restrict callback flow

2023-10-13 13:15:08 +02:00

capture-flow.js

JS: Update missed flow in capture-flow.js

2024-11-21 12:57:34 +01:00

captured-sanitizer.js

JS: Add test

2019-04-18 11:26:39 +01:00

case.js

add support for many more case changing libraries

2021-07-12 14:09:34 +02:00

closure.js

JS: only propagate through first argument of truncate()

2019-02-25 17:11:55 +00:00

constructor-calls.js

JS: Update TaintTracking test

2023-10-13 13:15:08 +02:00

DataFlowTracking.expected

JS: Add test case showing lack of flow through non-sanitising regexp

2025-02-28 13:58:08 +01:00

DataFlowTracking.ql

JS: Update testUtilities import

2024-12-19 15:25:39 +01:00

destruct.js

JS: Add taint step through destructuring for-of loop

2019-08-02 20:35:21 +01:00

exceptions.js

JS: Update TaintTracking test

2023-10-13 13:15:08 +02:00

export-taint.js

JS: Add test for flow through dynamic imports

2024-08-26 15:15:49 +02:00

exportedReactComponent.jsx

JS: Type-track react component factories

2020-01-28 10:22:04 +00:00

factory-function.js

JS: Add test

2021-12-10 09:38:29 +01:00

getters-and-setters.js

JS: Update TaintTracking test

2023-10-13 13:15:08 +02:00

implied-receiver.js

JS: Update TaintTracking test

2023-10-13 13:15:08 +02:00

import-taint.js

JS: Add test for flow through dynamic imports

2024-08-26 15:15:49 +02:00

importedReactComponent.jsx

JS: Type-track react component factories

2020-01-28 10:22:04 +00:00

indexOf.js

JS: bugfix in indexOf-based include test

2019-01-18 10:40:48 +00:00

json-stringify.js

add support for the fast-json-stringify library

2021-07-12 11:13:01 +02:00

logical-and.js

JS: Add test case (with old expected data)

2024-02-14 10:45:51 +01:00

nested-props.js

JS: Update TaintTracking test

2023-10-13 13:15:08 +02:00

object-bypass-sanitizer.js

JS: Update TaintTracking test

2023-10-13 13:15:08 +02:00

partialCalls.js

JS: Update TaintTracking test

2023-10-13 13:15:08 +02:00

promise.js

JS: Add failing test for Promise.all()

2024-03-13 08:54:06 +01:00

refinement-sanitizer.js

JS: Add reproduction test case

2022-12-05 15:11:43 +01:00

regexp-sanitiser.js

JS: Sharpen up EnumerationRegExp

2025-02-28 13:58:11 +01:00

rxjs.js

assume that all pipe elements that return something, return outputs

2021-04-28 12:36:07 +02:00

sanitizer-function.js

JS: Handle multiple and/or operators in SanitizerFunction

2019-11-01 15:23:38 +00:00

sanitizer-guards.js

JS: Update TaintTracking test

2023-10-13 13:15:08 +02:00

spread.js

JS: Add a few more tests

2024-08-27 11:35:31 +02:00

static-capture-groups.js

JS: Propagate into RegExp.$x

2020-06-26 18:58:43 +01:00

string-immutable-operations.js

JS: Add: String.protytpe.toWellFormed to StringManipulationTaintStep

2024-11-20 17:42:25 +01:00

string-replace.js

JS: Add tests for flow through replace

2021-03-17 15:20:40 +00:00

stringification-read-steps.js

JS: Update TaintTracking test

2023-10-13 13:15:08 +02:00

summarize-store-load-in-call.js

JS: Add test showing missing flow

2022-03-17 17:30:46 +01:00

thisAssignments.js

JS: Canonicalize ThisNode

2018-10-09 08:53:41 +01:00

tst.js

JS: Make test not assume implicit through for maps

2024-12-19 15:25:45 +01:00

use-use-after-implicit-read.js

JS: Update test to reflect implicit read flow has been fixed

2024-08-27 11:35:36 +02:00

xml.js

use more API nodes in XmlParsers, and recognize more results from parsing XML

2021-04-14 11:48:31 +02:00