Esben Sparre Andreasen 8e6a19b3d3 JS: add DefaultParsedCommandLineArgumentsAsSource

2019-11-15 08:42:02 +01:00

..

child_process-test.js

JS: generalize js/command-line-injection to handle ConstantString

2018-12-11 13:39:15 +01:00

command-line-parameter-command-injection.js

JS: add DefaultParsedCommandLineArgumentsAsSource

2019-11-15 08:42:02 +01:00

CommandInjection.expected

JavaScript: Use type tracking instead of auxiliary data-flow configuration to track indirect command arguments.

2019-10-31 12:13:55 +00:00

CommandInjection.qlref

QL code and tests for C#/C++/JavaScript.

2018-08-02 17:53:23 +01:00

execSeries.js

JavaScript: Add example of indirect command injection.

2019-01-11 10:24:41 +00:00

IndirectCommandInjection.expected

JS: add DefaultParsedCommandLineArgumentsAsSource

2019-11-15 08:42:02 +01:00

IndirectCommandInjection.qlref

JS: add query js/indirect-command-line-injection

2019-07-31 09:24:25 +02:00

other.js

JS: add additional SystemCommandExecutors

2019-06-11 09:38:10 +02:00

ShellCommandInjectionFromEnvironment.expected

JavaScript: Use type tracking instead of auxiliary data-flow configuration to track indirect command arguments.

2019-10-31 12:13:55 +00:00

ShellCommandInjectionFromEnvironment.qlref

JS: add query js/shell-command-injection-from-environment

2019-10-21 23:31:55 +02:00

third-party-command-injection.js

JS: treat server responses as untrusted for command injections

2019-09-11 09:38:18 +02:00

tst_shell-command-injection-from-environment.js

JS: add query js/shell-command-injection-from-environment

2019-10-21 23:31:55 +02:00