Esben Sparre Andreasen 85b9003af4 JS: add Mootools XSS sinks

2021-07-01 09:17:27 +02:00

..

addEventListener.js

JS: Split CWE-079 tests into their own folders

2020-10-16 17:32:36 +01:00

angular2-client.ts

JS: Add test for new sink

2021-01-18 10:55:34 +00:00

classnames.js

JS: Add model of classnames and clsx

2020-10-28 13:56:35 +00:00

ConsistencyDomBasedXss.expected

JavaScript: Learn that receivers of DOM event handlers are themselves DOM nodes.

2021-02-25 09:06:58 +00:00

ConsistencyDomBasedXss.ql

JS: Split CWE-079 tests into their own folders

2020-10-16 17:32:36 +01:00

d3.js

JS: Add model of d3

2021-03-11 10:05:05 +00:00

dates.js

add support for moment/dayjs/luxon instances returned by @date-io adapters

2021-06-22 10:42:24 +02:00

encodeuri.js

JS: Split CWE-079 tests into their own folders

2020-10-16 17:32:36 +01:00

event-handler-receiver.js

JavaScript: Add new tests for recognising receiver of event handler as DOM element.

2021-02-25 09:04:46 +00:00

express.js

moving jsdom sink to js/xss

2020-11-05 16:10:33 +01:00

externs.js

JavaScript: Learn that receivers of DOM event handlers are themselves DOM nodes.

2021-02-25 09:06:58 +00:00

jquery.js

JS: Add test case

2020-10-20 10:53:15 +01:00

jwt-server.js

model the verify function in jsonwebtoken

2020-11-10 10:41:39 +01:00

jwt.js

add model for jwt-decode

2020-11-10 10:41:36 +01:00

nodemailer.js

JS: Split CWE-079 tests into their own folders

2020-10-16 17:32:36 +01:00

optionalSanitizer.js

JS: Split CWE-079 tests into their own folders

2020-10-16 17:32:36 +01:00

react-create-context.js

JS: Add model of react hooks and react-router

2020-10-28 11:57:11 +00:00

react-native.js

JS: Split CWE-079 tests into their own folders

2020-10-16 17:32:36 +01:00

react-provide-context.js

JS: Add model of react hooks and react-router

2020-10-28 11:57:11 +00:00

react-use-context.js

JS: Add test and fix for contextType

2020-10-28 16:23:36 +00:00

react-use-state.js

JS: Add model of react hooks and react-router

2020-10-28 11:57:11 +00:00

sanitiser.js

JS: Add test case for insufficient replace-sanitizer

2021-03-17 15:20:40 +00:00

stored-xss.js

JS: Split CWE-079 tests into their own folders

2020-10-16 17:32:36 +01:00

string-manipulations.js

JS: Split CWE-079 tests into their own folders

2020-10-16 17:32:36 +01:00

translate.js

JS: Split CWE-079 tests into their own folders

2020-10-16 17:32:36 +01:00

tst3.js

JS: Split CWE-079 tests into their own folders

2020-10-16 17:32:36 +01:00

tst.js

JS: add Mootools XSS sinks

2021-07-01 09:17:27 +02:00

typeahead.js

JS: Split CWE-079 tests into their own folders

2020-10-16 17:32:36 +01:00

v-html.vue

JS: Split CWE-079 tests into their own folders

2020-10-16 17:32:36 +01:00

various-concat-obfuscations.js

JS: add tests for some syntactic XSS vector obfuscations

2021-02-01 10:20:23 +01:00

winjs.js

JS: Split CWE-079 tests into their own folders

2020-10-16 17:32:36 +01:00

xmlRequest.js

add test

2021-03-12 00:03:20 +01:00

Xss.expected

JS: add Mootools XSS sinks

2021-07-01 09:17:27 +02:00

Xss.qlref

JS: Split CWE-079 tests into their own folders

2020-10-16 17:32:36 +01:00

XssWithAdditionalSources.expected

JS: add Mootools XSS sinks

2021-07-01 09:17:27 +02:00

XssWithAdditionalSources.ql

JS: Move $() sink into separate dataflow config

2020-10-20 10:52:33 +01:00