erik-krogh a9f2b3fad6 promote PropsTaintStep to a PreCallGraphStep

2024-01-04 10:45:22 +01:00

..

pages

make query parameters in ServerSideProps and next/router

2022-10-26 14:41:07 +09:00

addEventListener.js

add InclusionTest to PostMessageEventSanitizer

2022-04-12 14:12:36 +02:00

angular2-client.ts

JS: Add test for new sink

2021-01-18 10:55:34 +00:00

classnames.js

add domNode.innerHTML += sink as a DOM sink

2022-09-05 16:11:55 +02:00

clipboard.ts

merge Clipboard.qll and DragAndDrop.qll, and support InputEvent

2022-04-18 22:17:31 +02:00

ConsistencyDomBasedXss.expected

JS: Step through jQuery callback return values

2023-03-27 11:17:27 +02:00

ConsistencyDomBasedXss.ql

JS: Remove use of deprecated API

2021-08-12 09:30:43 +02:00

custom-element.js

JS: Recognize subclasses of HTMLElement in domValueRef

2022-04-07 09:57:31 +02:00

d3.js

JS: Add model of d3

2021-03-11 10:05:05 +00:00

dates.js

add support for moment/dayjs/luxon instances returned by @date-io adapters

2021-06-22 10:42:24 +02:00

dragAndDrop.ts

included ClipboardEvent and DragEvent as XSS sources

2022-04-11 16:37:00 -05:00

encodeuri.js

JS: Split CWE-079 tests into their own folders

2020-10-16 17:32:36 +01:00

event-handler-receiver.js

JavaScript: Add new tests for recognising receiver of event handler as DOM element.

2021-02-25 09:04:46 +00:00

express.js

moving jsdom sink to js/xss

2020-11-05 16:10:33 +01:00

externs.js

JS: Recognize methods returning DOM objects

2021-08-04 16:25:56 +02:00

jquery.js

JS: Add test case showing false negative

2023-03-27 11:08:39 +02:00

json-stringify.jsx

accept test result Xss.qlref

2022-10-06 18:23:10 +09:00

jwt-server.js

model the verify function in jsonwebtoken

2020-11-10 10:41:39 +01:00

jwt.js

add model for jwt-decode

2020-11-10 10:41:36 +01:00

nodemailer.js

JS: Split CWE-079 tests into their own folders

2020-10-16 17:32:36 +01:00

optionalSanitizer.js

JS: Split CWE-079 tests into their own folders

2020-10-16 17:32:36 +01:00

package.json

add test for context.params

2022-10-26 10:53:11 +09:00

react-create-context.js

JS: Add model of react hooks and react-router

2020-10-28 11:57:11 +00:00

react-native.js

JS: Split CWE-079 tests into their own folders

2020-10-16 17:32:36 +01:00

react-provide-context.js

JS: Add model of react hooks and react-router

2020-10-28 11:57:11 +00:00

react-use-context.js

JS: Add test and fix for contextType

2020-10-28 16:23:36 +00:00

react-use-router-lib.js

Track interfile useRouter

2023-04-28 15:49:26 +09:00

react-use-router.js

Track interfile useRouter

2023-04-28 15:49:26 +09:00

react-use-state.js

JS: Add model of react hooks and react-router

2020-10-28 11:57:11 +00:00

sanitiser.js

JS: Add test case for insufficient replace-sanitizer

2021-03-17 15:20:40 +00:00

stored-xss.js

JS: Split CWE-079 tests into their own folders

2020-10-16 17:32:36 +01:00

string-manipulations.js

JS: Split CWE-079 tests into their own folders

2020-10-16 17:32:36 +01:00

tooltip.jsx

promote PropsTaintStep to a PreCallGraphStep

2024-01-04 10:45:22 +01:00

translate.js

JS: Split CWE-079 tests into their own folders

2020-10-16 17:32:36 +01:00

trusted-types-lib.js

JS: Expand test case

2023-03-07 13:04:26 +01:00

trusted-types.js

JS: Expand test case

2023-03-07 13:04:26 +01:00

tst3.js

add client-side-url sinks that may execute JavaScript as XSS sinks

2022-03-16 22:32:08 +01:00

tst.js

JS: Trim whitespace in test

2023-04-17 08:23:04 +02:00

typeahead.js

JS: Split CWE-079 tests into their own folders

2020-10-16 17:32:36 +01:00

v-html.vue

JS: Split CWE-079 tests into their own folders

2020-10-16 17:32:36 +01:00

various-concat-obfuscations.js

JS: add tests for some syntactic XSS vector obfuscations

2021-02-01 10:20:23 +01:00

winjs.js

JS: Split CWE-079 tests into their own folders

2020-10-16 17:32:36 +01:00

xmlRequest.js

improve the got model

2021-11-15 21:52:12 +01:00

Xss.expected

promote PropsTaintStep to a PreCallGraphStep

2024-01-04 10:45:22 +01:00

Xss.qlref

JS: Split CWE-079 tests into their own folders

2020-10-16 17:32:36 +01:00

XssWithAdditionalSources.expected

promote PropsTaintStep to a PreCallGraphStep

2024-01-04 10:45:22 +01:00

XssWithAdditionalSources.ql

JS: Remove use of deprecated API

2021-08-12 09:30:43 +02:00