JavaScript: Convert security queries to path queries where applicable.#462

Merged

semmle-qlci merged 14 commits into

github:masterfrom

xiemaisi:js/security-paths

Nov 14, 2018

Commits on Nov 14, 2018

JavaScript: Remove a few unnecessary imports.
Max Schaefer
committed
JavaScript: Refactor `HostHeaderPoisoningInEmailGeneration` query.
Max Schaefer
committed
JavaScript: Refactor security queries for uniformity.
Max Schaefer
committed
JavaScript: Make all taint-based security queries have `@kind path-problem`.
Max Schaefer
committed
JavaScript: Add explicit `nodes` query predicate in `PathGraph`.
Max Schaefer
committed
JavaScript: Add `import DataFlow::PathGraph`.
Max Schaefer
committed
JavaScript: Move from `Node` to `PathNode`.
Max Schaefer
committed
JavaScript: Adjust `ConditionalBypass` query.
Max Schaefer
committed
JavaScript: Select `source` and `sink` in all path queries.
Max Schaefer
committed
JavaScript: Select `Node`s (instead of `PathNode`s) everywhere.
Max Schaefer
committed
JavaScript: Remove `ReflectdXssPath.ql`, which is now spurious.
Max Schaefer
committed
JavaScript: Update expectd test output for security path queries to include `nodes` and `edges` query predicates.
Max Schaefer
committed
JavaScript: Introduce two more short-circuiting conjuncts.
Max Schaefer
committed
JavaScript: Add change note.
Max Schaefer
committed