Asger F 9ee7599aeb JS: Move AngularJSTemplateUrlSink to ClientSideUrlRedirection query ...

This is not perfect but at least we can be consistent about keeping URLs-that-lead-to-xss in the same query

2024-08-16 14:37:13 +02:00

..

dataflow

JS: Move AngularJSTemplateUrlSink to ClientSideUrlRedirection query

2024-08-16 14:37:13 +02:00

domains

Moved new query to 'experimental'

2024-07-09 16:38:01 +01:00

internal

Fix typos in sensitive data regex

2024-05-09 09:39:03 +01:00

regexp

delete outdated deprecations

2024-04-25 22:19:28 +02:00

CryptoAlgorithms.qll

JS, Python, Ruby: Make implicit this receivers explicit

2023-05-03 13:51:51 +02:00

FunctionalityFromUntrustedSource.qll

Formatting of QLL

2024-07-09 18:16:37 +01:00

IncompleteBlacklistSanitizer.qll

JS: Make implicit this receivers explicit

2023-05-03 15:31:00 +02:00

IncompleteMultiCharacterSanitizationQuery.qll

fix FP by requiring that the regular expression mention on of the chars important in the prefix

2023-07-01 20:30:09 +02:00

IncompleteMultiCharacterSanitizationSpecific.qll

use RegExpTreeView insteaed of RegexTreeView in JS

2022-11-22 12:55:48 +01:00

PasswordInConfigurationFileQuery.qll

rename more acronyms

2022-08-25 20:52:27 +02:00

SensitiveActions.qll

JS: do fewer regexp matches in SensitiveActions

2024-04-23 15:31:38 +01:00

TaintedObject.qll

add mongoose.Types.ObjectId.isValid as a sanitizer-guard for NoSQL injection

2023-06-12 16:38:11 +02:00

TaintedObjectCustomizations.qll

Packaging: Rafactor Javascript core libraries

2021-08-25 12:15:56 -07:00

TaintedUrlSuffix.qll

simplify TaintedUrlSuffix::source() to only consider window.location based sources

2022-03-16 22:32:09 +01:00

UselessUseOfCat.qll

Py/JS/RB: Use instanceof in more places

2022-12-12 16:06:57 +01:00