tyage 7f9b8557ac Add Next.js router push as XSS sink

2023-04-08 18:18:34 +09:00

..

dataflow

Add Next.js router push as XSS sink

2023-04-08 18:18:34 +09:00

internal

sync files

2023-02-13 10:44:12 +01:00

performance

do private imports of the deprecated Dep modules

2022-11-22 12:39:56 +01:00

regexp

recognize an infinite repetition of a char-class like regex as a char-class like regex

2023-01-09 17:25:08 +01:00

BadTagFilterQuery.qll

use RegExpTreeView insteaed of RegexTreeView in JS

2022-11-22 12:55:48 +01:00

CryptoAlgorithms.qll

CryptoAlgorithms: make CryptographicAlgorithm#matchesName hold only if that algorithm is the most specific match

2023-02-03 14:15:32 +00:00

IncompleteBlacklistSanitizer.qll

JavaScript: Autoformat

2023-03-10 09:41:20 +01:00

IncompleteMultiCharacterSanitizationQuery.qll

JS/Python/Ruby: s/a HTML/an HTML/

2022-09-30 10:37:52 +01:00

IncompleteMultiCharacterSanitizationSpecific.qll

use RegExpTreeView insteaed of RegexTreeView in JS

2022-11-22 12:55:48 +01:00

OverlyLargeRangeQuery.qll

use RegExpTreeView insteaed of RegexTreeView in JS

2022-11-22 12:55:48 +01:00

PasswordInConfigurationFileQuery.qll

rename more acronyms

2022-08-25 20:52:27 +02:00

SensitiveActions.qll

recognize another kind of dummy passwords to fix an FP in hardcoded-credentials

2022-09-29 21:25:40 +02:00

TaintedObject.qll

ensure consistent casing of names

2022-09-09 10:34:14 +02:00

TaintedObjectCustomizations.qll

Packaging: Rafactor Javascript core libraries

2021-08-25 12:15:56 -07:00

TaintedUrlSuffix.qll

simplify TaintedUrlSuffix::source() to only consider window.location based sources

2022-03-16 22:32:09 +01:00

UselessUseOfCat.qll

Py/JS/RB: Use instanceof in more places

2022-12-12 16:06:57 +01:00