Napalys 0c52b5ad95 Added summary flow for StringFromCharCode

2025-04-09 14:24:43 +02:00

..

access-path-sanitizer.js

…

addexpr.js

…

advanced-callgraph.js

…

array-callback.js

…

array-mutation.js

JS: Fix: Ensure toSpliced with spread operator is flagged

2024-11-13 17:21:34 +01:00

arrays-init.js

JS: Remove taint step from array element to whole array

2024-08-27 11:35:26 +02:00

arrays.js

…

BasicTaintTracking.expected

Added summary flow for StringFromCharCode

2025-04-09 14:24:43 +02:00

BasicTaintTracking.ql

JS: Update testUtilities import

2024-12-19 15:25:39 +01:00

booleanOps.js

JS: Update TaintTracking test

2023-10-13 13:15:08 +02:00

bound-function.js

JS: Update TaintTracking test

2023-10-13 13:15:08 +02:00

call-apply.js

JS: Remove taint step from array element to whole array

2024-08-27 11:35:26 +02:00

callbacks.js

JS: Use type-pruning to restrict callback flow

2023-10-13 13:15:08 +02:00

capture-flow.js

JS: Update missed flow in capture-flow.js

2024-11-21 12:57:34 +01:00

captured-sanitizer.js

…

case.js

…

closure.js

…

constructor-calls.js

JS: Update TaintTracking test

2023-10-13 13:15:08 +02:00

DataFlowTracking.expected

JS: Add test case showing lack of flow through non-sanitising regexp

2025-02-28 13:58:08 +01:00

DataFlowTracking.ql

JS: Update testUtilities import

2024-12-19 15:25:39 +01:00

destruct.js

…

exceptions.js

JS: Update TaintTracking test

2023-10-13 13:15:08 +02:00

export-taint.js

JS: Add test for flow through dynamic imports

2024-08-26 15:15:49 +02:00

exportedReactComponent.jsx

…

factory-function.js

…

getters-and-setters.js

JS: Update TaintTracking test

2023-10-13 13:15:08 +02:00

implied-receiver.js

JS: Update TaintTracking test

2023-10-13 13:15:08 +02:00

import-taint.js

JS: Add test for flow through dynamic imports

2024-08-26 15:15:49 +02:00

importedReactComponent.jsx

…

indexOf.js

…

json-stringify.js

…

logical-and.js

JS: Add test case (with old expected data)

2024-02-14 10:45:51 +01:00

nested-props.js

JS: Update TaintTracking test

2023-10-13 13:15:08 +02:00

object-bypass-sanitizer.js

JS: Update TaintTracking test

2023-10-13 13:15:08 +02:00

partialCalls.js

JS: Update TaintTracking test

2023-10-13 13:15:08 +02:00

promise.js

JS: Add failing test for Promise.all()

2024-03-13 08:54:06 +01:00

refinement-sanitizer.js

…

regexp-sanitiser.js

JS: Sharpen up EnumerationRegExp

2025-02-28 13:58:11 +01:00

rxjs.js

…

sanitizer-function.js

…

sanitizer-guards.js

JS: Update TaintTracking test

2023-10-13 13:15:08 +02:00

spread.js

JS: Add a few more tests

2024-08-27 11:35:31 +02:00

static-capture-groups.js

…

string-immutable-operations.js

JS: Add: String.protytpe.toWellFormed to StringManipulationTaintStep

2024-11-20 17:42:25 +01:00

string-replace.js

…

stringification-read-steps.js

JS: Update TaintTracking test

2023-10-13 13:15:08 +02:00

summarize-store-load-in-call.js

…

thisAssignments.js

…

tst.js

JS: Make test not assume implicit through for maps

2024-12-19 15:25:45 +01:00

typed-arrays.js

Added summary flow for StringFromCharCode

2025-04-09 14:24:43 +02:00

use-use-after-implicit-read.js

JS: Update test to reflect implicit read flow has been fixed

2024-08-27 11:35:36 +02:00

xml.js

…