Erik Krogh Kristensen 53b26eba17 Merge pull request #8724 from erik-krogh/postMessage ...

JS: promote the `js/missing-origin-verification` query

2022-05-09 12:28:58 +02:00

..

addEventListener.js

add InclusionTest to PostMessageEventSanitizer

2022-04-12 14:12:36 +02:00

angular2-client.ts

JS: Add test for new sink

2021-01-18 10:55:34 +00:00

classnames.js

JS: Add model of classnames and clsx

2020-10-28 13:56:35 +00:00

clipboard.ts

merge Clipboard.qll and DragAndDrop.qll, and support InputEvent

2022-04-18 22:17:31 +02:00

ConsistencyDomBasedXss.expected

JavaScript: Learn that receivers of DOM event handlers are themselves DOM nodes.

2021-02-25 09:06:58 +00:00

ConsistencyDomBasedXss.ql

JS: Remove use of deprecated API

2021-08-12 09:30:43 +02:00

custom-element.js

JS: Recognize subclasses of HTMLElement in domValueRef

2022-04-07 09:57:31 +02:00

d3.js

JS: Add model of d3

2021-03-11 10:05:05 +00:00

dates.js

add support for moment/dayjs/luxon instances returned by @date-io adapters

2021-06-22 10:42:24 +02:00

dragAndDrop.ts

included ClipboardEvent and DragEvent as XSS sources

2022-04-11 16:37:00 -05:00

encodeuri.js

JS: Split CWE-079 tests into their own folders

2020-10-16 17:32:36 +01:00

event-handler-receiver.js

JavaScript: Add new tests for recognising receiver of event handler as DOM element.

2021-02-25 09:04:46 +00:00

express.js

moving jsdom sink to js/xss

2020-11-05 16:10:33 +01:00

externs.js

JS: Recognize methods returning DOM objects

2021-08-04 16:25:56 +02:00

jquery.js

JS: Add more tests

2021-08-10 08:55:03 +02:00

jwt-server.js

model the verify function in jsonwebtoken

2020-11-10 10:41:39 +01:00

jwt.js

add model for jwt-decode

2020-11-10 10:41:36 +01:00

nodemailer.js

JS: Split CWE-079 tests into their own folders

2020-10-16 17:32:36 +01:00

optionalSanitizer.js

JS: Split CWE-079 tests into their own folders

2020-10-16 17:32:36 +01:00

react-create-context.js

JS: Add model of react hooks and react-router

2020-10-28 11:57:11 +00:00

react-native.js

JS: Split CWE-079 tests into their own folders

2020-10-16 17:32:36 +01:00

react-provide-context.js

JS: Add model of react hooks and react-router

2020-10-28 11:57:11 +00:00

react-use-context.js

JS: Add test and fix for contextType

2020-10-28 16:23:36 +00:00

react-use-state.js

JS: Add model of react hooks and react-router

2020-10-28 11:57:11 +00:00

sanitiser.js

JS: Add test case for insufficient replace-sanitizer

2021-03-17 15:20:40 +00:00

stored-xss.js

JS: Split CWE-079 tests into their own folders

2020-10-16 17:32:36 +01:00

string-manipulations.js

JS: Split CWE-079 tests into their own folders

2020-10-16 17:32:36 +01:00

tooltip.jsx

add xss sink for react-tooltip

2021-07-14 20:03:50 +02:00

translate.js

JS: Split CWE-079 tests into their own folders

2020-10-16 17:32:36 +01:00

trusted-types.js

JS: Use return value of trusted type policy callback as a sink

2021-12-14 13:28:46 +01:00

tst3.js

add client-side-url sinks that may execute JavaScript as XSS sinks

2022-03-16 22:32:08 +01:00

tst.js

refactor the js/xss query to use three flowlabels and one configuration

2022-03-16 22:32:08 +01:00

typeahead.js

JS: Split CWE-079 tests into their own folders

2020-10-16 17:32:36 +01:00

v-html.vue

JS: Split CWE-079 tests into their own folders

2020-10-16 17:32:36 +01:00

various-concat-obfuscations.js

JS: add tests for some syntactic XSS vector obfuscations

2021-02-01 10:20:23 +01:00

winjs.js

JS: Split CWE-079 tests into their own folders

2020-10-16 17:32:36 +01:00

xmlRequest.js

improve the got model

2021-11-15 21:52:12 +01:00

Xss.expected

merge Clipboard.qll and DragAndDrop.qll, and support InputEvent

2022-04-18 22:17:31 +02:00

Xss.qlref

JS: Split CWE-079 tests into their own folders

2020-10-16 17:32:36 +01:00

XssWithAdditionalSources.expected

merge Clipboard.qll and DragAndDrop.qll, and support InputEvent

2022-04-18 22:17:31 +02:00

XssWithAdditionalSources.ql

JS: Remove use of deprecated API

2021-08-12 09:30:43 +02:00