9667 Коммитов

Автор	SHA1	Сообщение	Дата
Esben Sparre Andreasen	8ee943f264	JS: restrict alert location to a single line	2018-08-08 10:50:42 +02:00
Esben Sparre Andreasen	e1947f04df	JS: change alert location for js/incomplete-object-initialization	2018-08-08 10:43:52 +02:00
Esben Sparre Andreasen	4e98ce21b4	JS: permit some calls with spurious arguments to empty functions	2018-08-08 10:13:02 +02:00
Max Schaefer	1a5585c83c	Merge pull request #21 from esben-semmle/js/urilibraries-members ... JS: refactor UriLibraries.qll models to use `DataFlow::moduleMember`	2018-08-08 09:08:04 +01:00
Esben Sparre Andreasen	343b922c29	JS: fix an off-by-one error in the AngularJS expression AST	2018-08-08 09:58:57 +02:00
semmle-qlci	4d97570a1a	Merge pull request #17 from xiemaisi/js/rename-unused-var ... Approved by esben-semmle	2018-08-07 15:01:37 +01:00
Esben Sparre Andreasen	3b00b9b8da	JS: refactor UriLibraries.qll models to use `DataFlow::moduleMember`	2018-08-07 12:58:09 +02:00
semmle-qlci	6533ddfeaf	Merge pull request #20 from esben-semmle/js/more-auth-calls-and-rate-limiters ... Approved by xiemaisi	2018-08-07 09:42:07 +01:00
Esben Sparre Andreasen	c06edd3745	Merge pull request #15 from xiemaisi/js/call-graph-data-flow ... JavaScript: Lift call graph library to data flow graph.	2018-08-07 07:56:08 +02:00
Esben Sparre Andreasen	b6951d8249	JS: add tests for improved js/missing-rate-limiting	2018-08-06 15:15:44 +02:00
Esben Sparre Andreasen	f7ab29aa2b	JS: support "express-rate-limit" non-constructor calls	2018-08-06 15:15:44 +02:00
Esben Sparre Andreasen	c6cfca3131	JS: add "verify" as an `Authorization` call word	2018-08-06 15:15:44 +02:00
Max Schaefer	06f43748b8	JavaScript: Generalize description of `js/unused-local-variable`. ... The query also flags unused imports, functions and classes (which, of course, are just unused variables at the end of the day). This is now made more explicit in the description.	2018-08-06 09:34:38 +01:00
Max Schaefer	33741045f6	JavaScrip: Move deprecated `HTMLComments` query to `compatibility` suite.	2018-08-06 09:17:11 +01:00
Max Schaefer	9ba3d80bad	JavaScript: Lift call graph library to data flow graph.	2018-08-06 08:34:06 +01:00
Asger F	156b94e436	JavaScript: Add model of JSON parsers	2018-08-03 15:27:35 +01:00
Pavel Avgustinov	b55526aa58	QL code and tests for C#/C++/JavaScript.	2018-08-02 17:53:23 +01:00