Erik Krogh Kristensen ca435763b0 separate message for double and single quotes

2021-02-01 23:54:12 +01:00

..

IncompleteBlacklistSanitizer.expected

separate message for double and single quotes

2021-02-01 23:54:12 +01:00

IncompleteBlacklistSanitizer.ql

JS: add query for incomplete HTML attribute sanitization

2020-04-24 09:17:46 +02:00

IncompleteHtmlAttributeSanitization.expected

separate message for double and single quotes

2021-02-01 23:54:12 +01:00

IncompleteHtmlAttributeSanitization.qlref

JS: add query for incomplete HTML attribute sanitization

2020-04-24 09:17:46 +02:00

IncompleteMultiCharacterSanitization.expected

JS: only select non-nullable terms in the broken sanitizer

2021-01-12 08:50:19 +01:00

IncompleteMultiCharacterSanitization.qlref

JS: initial version of IncompleteMultiCharacterSanitization.ql

2020-06-09 08:59:59 +02:00

IncompleteSanitization.expected

JavaScript: Teach IncompleteSanitization to flag incomplete path sanitizers.

2019-11-19 15:06:16 +00:00

IncompleteSanitization.qlref

JavaScript: Add new query DoubleEscaping.

2018-11-30 09:39:00 +00:00

tst-multi-character-sanitization.js

JS: rewrite js/incomplete-multi-character-sanitization

2021-01-11 11:26:45 +01:00

tst.js

support html attribute concatenations with single quotes

2021-01-29 10:37:37 +01:00

UnsafeHtmlExpansion.expected

JS: update expected output

2020-05-06 11:18:14 +02:00

UnsafeHtmlExpansion.js

JS: query and tests for unsafe HTML expansion

2020-05-05 10:32:16 +02:00

UnsafeHtmlExpansion.qlref

JS: query and tests for unsafe HTML expansion

2020-05-05 10:32:16 +02:00