Stephan Brandauer fb66ccff39 handlebars taint step: conservatively assume unknown templates have no flow to helpers

2022-04-13 09:27:59 +02:00

..

Consistency.expected

JS: Use getAMatchedString instead of getConstantString

2021-11-08 15:35:35 +01:00

Consistency.ql

JS: Remove use of deprecated API

2021-08-12 09:30:43 +02:00

express.js

add file write model for express-fileupload mv

2021-12-10 15:05:34 +01:00

fs.js

…

handlebars.js

handlebars taint step: conservatively assume unknown templates have no flow to helpers

2022-04-13 09:27:59 +02:00

my-async-fs-module.js

detect fs modules that pass through a reduce call

2021-03-25 14:47:43 +01:00

my-fs-module.js

…

normalizedPaths.js

JS: Add test

2021-11-08 15:32:43 +01:00

other-fs-libraries.js

add mkdirp as a sink for tainted-path

2021-07-14 19:32:22 +02:00

prettier.js

add support for the prettier API

2021-06-02 15:33:08 +02:00

pupeteer.js

…

tainted-access-paths.js

update test for 'node:' prefix

2022-01-25 14:25:44 +01:00

tainted-array-steps.js

…

tainted-require.js

add another test for the resolve library

2021-06-06 22:54:12 +02:00

tainted-sendFile.js

…

tainted-string-steps.js

…

TaintedPath-es6.js

…

TaintedPath.expected

handlebars taint step: conservatively assume unknown templates have no flow to helpers

2022-04-13 09:27:59 +02:00

TaintedPath.js

add the cwd option to shell executions as a sink to js/path-injection

2021-08-23 07:32:05 +02:00

TaintedPath.qlref

…

torrents.js

…

typescript.ts

…

views.js

…