Erik Krogh Kristensen e2fbf8a68c add files uploaded with multer as RemoteFlowSource

2021-02-11 09:33:15 +01:00

..

lib

support sanitizers that sanitize individual chars in js/shell-command-constructed-from-input

2021-01-07 13:58:25 +01:00

child_process-test.js

introduce conistency-checking for CWE-078

2020-07-06 12:47:56 +02:00

command-line-parameter-command-injection.js

add command parsing model for "commander"

2020-11-27 09:58:00 +00:00

CommandInjection.expected

add files uploaded with multer as RemoteFlowSource

2021-02-11 09:33:15 +01:00

CommandInjection.qlref

QL code and tests for C#/C++/JavaScript.

2018-08-02 17:53:23 +01:00

Consistency.expected

JS: fixup for execa.shell and execa.shellSync models

2020-12-22 09:06:18 +01:00

Consistency.ql

introduce conistency-checking for CWE-078

2020-07-06 12:47:56 +02:00

exec-sh2.js

JavaScript: Add two new command-injection tests.

2020-09-23 14:07:36 +01:00

exec-sh.js

JavaScript: Add two new command-injection tests.

2020-09-23 14:07:36 +01:00

execSeries.js

introduce conistency-checking for CWE-078

2020-07-06 12:47:56 +02:00

form-parsers.js

add files uploaded with multer as RemoteFlowSource

2021-02-11 09:33:15 +01:00

IndirectCommandInjection.expected

add command parsing model for "commander"

2020-11-27 09:58:00 +00:00

IndirectCommandInjection.qlref

JS: add query js/indirect-command-line-injection

2019-07-31 09:24:25 +02:00

other.js

JavaScript: Add partial model for opener.

2020-07-27 11:42:32 +01:00

package.json

add test cases for js/shell-command-constructed-from-input

2020-05-17 10:32:27 +02:00

ShellCommandInjectionFromEnvironment.expected

JS: fixup for execa.shell and execa.shellSync models

2020-12-22 09:06:18 +01:00

ShellCommandInjectionFromEnvironment.qlref

JS: add query js/shell-command-injection-from-environment

2019-10-21 23:31:55 +02:00

third-party-command-injection.js

JS: treat server responses as untrusted for command injections

2019-09-11 09:38:18 +02:00

tst_shell-command-injection-from-environment.js

JS: add execa.shell tests

2020-12-22 09:01:43 +01:00

UnsafeShellCommandConstruction.expected

support sanitizers that sanitize individual chars in js/shell-command-constructed-from-input

2021-01-07 13:58:25 +01:00

UnsafeShellCommandConstruction.qlref

add test cases for js/shell-command-constructed-from-input

2020-05-17 10:32:27 +02:00

uselesscat.js

introduce conistency-checking for CWE-078

2020-07-06 12:47:56 +02:00

UselessUseOfCat.expected

JS: add execa.shell tests

2020-12-22 09:01:43 +01:00

UselessUseOfCat.ql

introduce conistency-checking for CWE-078

2020-07-06 12:47:56 +02:00