Commits

Breadcrumbs

History for

one99b9d3

User selector

All users

All time

Commit History

Commits on Oct 10, 2018

• JS: polish characters of NodeJSFileSystemAccess*Call

  

  Esben Sparre Andreasen

  committed
  e99b9d3

  Copy full SHA for e99b9d3

• JS: replace HTTP::RequestBody with ClientRequest.getADataNode

  

  Esben Sparre Andreasen

  committed
  4e4597a

  Copy full SHA for 4e4597a

• JS: introduce ClientRequest.getADataNode

  

  Esben Sparre Andreasen

  committed
  0fc56e4

  Copy full SHA for 0fc56e4

• JS: remove useless externs definitions for tests

  

  Esben Sparre Andreasen

  committed
  3b2440e

  Copy full SHA for 3b2440e

• JS: restructure FileSystemWriteAccess/FileSystemReadAccess API

  

  Esben Sparre Andreasen

  committed
  a3ec739

  Copy full SHA for a3ec739

• JS: polish HttpToFileAccess.ql

  

  Esben Sparre Andreasen

  committed
  b00aa36

  Copy full SHA for b00aa36

• JS: polish FileAccessToHttp.ql

  

  Esben Sparre Andreasen

  committed
  d261915

  Copy full SHA for d261915

• Merge pull request #294 from asger-semmle/canonical-this-source

  Show description for 8d8148d
  

  Max Schaefer

  authored
  8d8148d

  Copy full SHA for 8d8148d

• Merge pull request #296 from esben-semmle/js/more-array-creation

  Show description for 355786c
  

  Max Schaefer

  authored
  355786c

  Copy full SHA for 355786c

Commits on Oct 9, 2018

• JS: rename ReactComponent::getAThisAccess -> getAThisNode

  asger-semmle

  committed
  9fb73f4

  Copy full SHA for 9fb73f4

• JS: update additional QL test output

  asger-semmle

  committed
  fd58039

  Copy full SHA for fd58039

• JS: Canonicalize ThisNode

  asger-semmle

  committed
  030bae9

  Copy full SHA for 030bae9

• JS: Replace some uses AnalyzedValueNode with AnalyzedNode

  asger-semmle

  committed
  3bc5e3b

  Copy full SHA for 3bc5e3b

Commits on Oct 8, 2018

• Merge pull request #273 from asger-semmle/csrf-sources

  Show description for e354694
  

  Max Schaefer

  authored
  e354694

  Copy full SHA for e354694

• Merge pull request #227 from xiemaisi/js/taint-kinds

  Show description for d2af4ab
  asger-semmle

  authored
  d2af4ab

  Copy full SHA for d2af4ab

• JS: use DataFlow::ArrayCreationNode in additional places

  

  Esben Sparre Andreasen

  committed
  70cd03d

  Copy full SHA for 70cd03d

• JS: recognize binding decorators on classes

  

  Esben Sparre Andreasen

  committed
  a668f90

  Copy full SHA for a668f90

Commits on Oct 4, 2018

• Merge pull request #132 from denislevin/denisl/js/HttpToFileAccessTest

  Show description for 98254e8
  semmle-qlci

  authored
  98254e8

  Copy full SHA for 98254e8

• JS: include referer header as reflected XSS source

  asger-semmle

  committed
  c2a5f99

  Copy full SHA for c2a5f99

• JS: Move isThirdPartyControllable into RequestInputAccess

  asger-semmle

  committed
  dc26bdc

  Copy full SHA for dc26bdc

• Merge pull request #275 from xiemaisi/js/workaround-for-nested-imports

  Show description for bea86e5
  semmle-qlci

  authored
  bea86e5

  Copy full SHA for bea86e5

Commits on Oct 3, 2018

• JavaScript: Add `TaintKind` as an alias to `FlowLabel`.

  

  Max Schaefer

  committed
  e326dd4

  Copy full SHA for e326dd4

• JavaScript: Address review comments.

  

  Max Schaefer

  committed
  86ee58d

  Copy full SHA for 86ee58d

• JavaScript: Restrict default sink flow labels to `StandardFlowLabel`.

  

  Max Schaefer

  committed
  a8a8754

  Copy full SHA for a8a8754

• JavaScript: Properly handle value-preserving paths.

  Show description for 5727b2a
  

  Max Schaefer

  committed
  5727b2a

  Copy full SHA for 5727b2a

• JavaScript: Add new tests.

  

  Max Schaefer

  committed
  910d6de

  Copy full SHA for 910d6de

• JavaScript: Make `PathSummary.toString` more useful.

  

  Max Schaefer

  committed
  3affe92

  Copy full SHA for 3affe92

• JavaScript: Simplify `onPath` predicate.

  

  Max Schaefer

  committed
  dad13c9

  Copy full SHA for dad13c9

• JavaScript: Simplify a few helper predicates.

  

  Max Schaefer

  committed
  8d471f0

  Copy full SHA for 8d471f0

• JavaScript: Use custom flow labels in `ClientSideUrlRedirect`.

  

  Max Schaefer

  committed
  017ae49

  Copy full SHA for 017ae49

• JavaScript: Introduce flow labels.

  

  Max Schaefer

  committed
  f4ea8bc

  Copy full SHA for f4ea8bc

• JavaScript: Rename a predicate in `CommandInjection.qll`.

  

  Max Schaefer

  committed
  4e4ef52

  Copy full SHA for 4e4ef52

• JavaScript: Respect barriers on return edges.

  

  Max Schaefer

  committed
  f3239cb

  Copy full SHA for f3239cb

• JavaScript: Add test case for type inference in the presence of non-toplevel imports.

  

  Max Schaefer

  committed
  8b7bb8c

  Copy full SHA for 8b7bb8c

• JavaScript: Generalise code that assumes imports only appear at the toplevel.

  

  Max Schaefer

  committed
  db32dc2

  Copy full SHA for db32dc2