Max Schaefer dfffa1e237 Apply suggestions from code review ...

Co-authored-by: Sam Browning <106113886+sabrowning1@users.noreply.github.com>

2023-11-21 10:07:11 +00:00

..

examples

Apply suggestions from code review

2023-11-21 10:07:11 +00:00

Consistency.expected

JS: Use getAMatchedString instead of getConstantString

2021-11-08 15:35:35 +01:00

Consistency.ql

JS: Remove use of deprecated API

2021-08-12 09:30:43 +02:00

express.js

add file write model for express-fileupload mv

2021-12-10 15:05:34 +01:00

fs.js

JS: Add test for fs/promises

2023-07-10 12:05:03 +02:00

handlebars.js

handlebars taint step: conservatively assume unknown templates have no flow to helpers

2022-04-13 09:27:59 +02:00

my-async-fs-module.js

detect fs modules that pass through a reduce call

2021-03-25 14:47:43 +01:00

my-fs-module.js

JS: add tests for the fs-module and friends

2020-02-28 12:21:10 +01:00

normalizedPaths.js

JS: Fix whitespace

2023-07-10 12:07:13 +02:00

other-fs-libraries.js

JS: Add test for fs/promises

2023-07-10 12:05:03 +02:00

prettier.js

add support for the prettier API

2021-06-02 15:33:08 +02:00

pupeteer.js

add model for puppeteer

2021-03-17 10:03:51 +01:00

tainted-access-paths.js

add model for chownr

2022-06-29 22:09:23 +02:00

tainted-array-steps.js

adjust comments to reflect that tainted-path have no array-steps

2020-06-04 16:15:37 +02:00

tainted-require.js

add another test for the resolve library

2021-06-06 22:54:12 +02:00

tainted-sendFile.js

JS: Update test

2019-10-25 09:57:10 +01:00

tainted-string-steps.js

update TaintedPath to use new consistency checking

2020-06-04 11:00:40 +02:00

TaintedPath-es6.js

JS: Unbreak TaintedPath

2019-02-28 15:45:26 -05:00

TaintedPath.expected

Update qhelp for js/path-injection.

2023-11-20 11:58:00 +00:00

TaintedPath.js

add the cwd option to shell executions as a sink to js/path-injection

2021-08-23 07:32:05 +02:00

TaintedPath.qlref

JS: Unbreak TaintedPath

2019-02-28 15:45:26 -05:00

torrents.js

JS: add security tests for malicious torrents

2019-11-14 13:54:19 +01:00

typescript.ts

better support for the &&=, ||=, and ??= operators

2020-08-13 09:22:32 +02:00

views.js

JS: Unbreak TaintedPath

2019-02-28 15:45:26 -05:00