erik-krogh fc38bf0429 Merge branch 'main' into aliasFlow

2022-11-07 09:46:48 +01:00

..

lib

expand localFieldStep to use access-paths, and build access-paths in more cases

2022-09-13 21:43:06 +02:00

angularjs.js

Merge remote-tracking branch 'upstream/next' into qlucie/master

2019-01-04 10:35:57 +00:00

bad-code-sanitization.js

add qhelp for js/bad-code-sanitization

2020-06-16 16:23:41 +02:00

CodeInjection.expected

fix some more style-guide violations in the alert-messages

2022-10-07 11:22:22 +02:00

CodeInjection.qlref

JS: move CodeInjection tests into subfolder

2018-11-20 14:24:37 +00:00

eslint-escope-build.js

JS: move CodeInjection tests into subfolder

2018-11-20 14:24:37 +00:00

express.js

add JSON.stringify as a code-injection sanitizer

2022-02-07 13:34:18 +01:00

externs.js

JS: move CodeInjection tests into subfolder

2018-11-20 14:24:37 +00:00

HeuristicSourceCodeInjection.expected

recognize calls to Function where spread arguments are used

2022-09-07 22:55:51 +02:00

HeuristicSourceCodeInjection.ql

JS: Remove use of deprecated API

2021-08-12 09:30:43 +02:00

ImproperCodeSanitization.expected

fix some more style-guide violations in the alert-messages

2022-10-07 11:22:22 +02:00

ImproperCodeSanitization.qlref

add query to detect improperly sanitized code

2020-06-10 19:50:12 +02:00

module.js

JavaScript: Improve modelling of Module.prototype._compile sink.

2021-07-12 15:32:21 +01:00

NoSQLCodeInjection.js

type-track objects where the "$where" property has been written

2020-09-24 20:55:25 +02:00

react-native.js

JS: move CodeInjection tests into subfolder

2018-11-20 14:24:37 +00:00

react.js

add js/code-injection sink for script tags in React

2021-01-29 12:50:17 +01:00

template-sinks.js

add more template sinks for the js/code-injection query

2021-06-22 20:24:42 +02:00

tst.js

recognize calls to Function where spread arguments are used

2022-09-07 22:55:51 +02:00

UnsafeCodeConstruction.expected

Merge branch 'main' into aliasFlow

2022-11-07 09:46:48 +01:00

UnsafeCodeConstruction.qlref

add test for unsafe-code-construction query

2022-02-07 13:34:18 +01:00