Max Schaefer 9d3a9d71f1 JavaScript: Add basic support for reasoning about reflective parameter accesses. ...

Currently, only `arguments[c]` for a constant value `c` is supported.

This allows us to detect the prototype-pollution vulnerabilities in (old versions of) `extend`, `jquery`, and `node.extend`.

2020-05-26 09:59:29 +01:00

..

argumentPassing.expected

JavaScript: Add basic support for reasoning about reflective parameter accesses.

2020-05-26 09:59:29 +01:00

argumentPassing.ql

JavaScript: Add test for FlowSteps::argumentPassing predicate.

2020-05-26 09:51:06 +01:00

arguments.js

JavaScript: Add basic support for reasoning about reflective parameter accesses.

2020-05-26 09:59:29 +01:00

enclosingExpr.expected

JS: Update test output

2020-05-18 22:45:59 +01:00

enclosingExpr.ql

add test for getEnclosingExpr

2019-11-07 14:29:31 +01:00

eval.js

QL code and tests for C#/C++/JavaScript.

2018-08-02 17:53:23 +01:00

flowStep.expected

JS: Update test output

2020-05-18 22:45:59 +01:00

flowStep.ql

QL code and tests for C#/C++/JavaScript.

2018-08-02 17:53:23 +01:00

getIntValue.expected

JS: Rename test files to avoid clash

2020-03-26 11:59:57 +00:00

getIntValue.ql

JS: add DataFlow::Node.getIntValue()

2019-02-12 13:38:46 +00:00

incomplete.expected

JS: Fix perf issue from overriding isIncomplete

2020-05-18 22:45:59 +01:00

incomplete.ql

Javascript: Autoformat.

2019-01-11 11:02:42 +01:00

noBasicBlock.expected

JS: Update DataFlow tests

2019-08-30 18:19:19 +01:00

noBasicBlock.ql

JS: Implement getBasicBlock() for exceptional nodes

2019-07-18 10:01:28 +01:00

options

JavaScript: Add options files with --experimental extractor options.

2019-11-06 13:01:23 +00:00

parameters.expected

JS: Rename test files to avoid clash

2020-03-26 11:59:57 +00:00

parameters.ql

JS: ensure parameters always have a dataflow node

2018-10-31 10:28:31 +00:00

sources.expected

JS: Rename test files to avoid clash

2020-03-26 11:59:57 +00:00

sources.js

JS: Add test

2019-11-05 10:06:21 +00:00

sources.ql

QL code and tests for C#/C++/JavaScript.

2018-08-02 17:53:23 +01:00

tst2.ts

JS: Rename test files to avoid clash

2020-03-26 11:59:57 +00:00

tst.js

JavaScript: Remove remaining --experimental extractor options.

2019-11-06 12:54:44 +00:00