This repository was archived by the owner on Jan 5, 2023. It is now read-only.

Add CWE-79: HTML template escaping passthrough#493

Merged

smowton merged 20 commits intogithub:mainfrom

gagliardetto:html-template-escaping-passthrough

Apr 8, 2021

Commits on Apr 8, 2021

Add CWE-79: HTML template escaping passthrough

gagliardetto
authored and
smowton
committed
Apply suggestions from code review

authored and
smowton
committed
Remove DummySource

gagliardetto
authored and
smowton
committed
Fixes from code review

gagliardetto
authored and
smowton
committed
Improve naming.

gagliardetto
authored and
smowton
committed
Refactor flow logic to ensure `untrusted` flows to `conversion`, and `conversion` flows to `template-exec`.

gagliardetto
authored and
smowton
committed
Remove DummySource

gagliardetto
authored and
smowton
committed
Fix test

gagliardetto
authored and
smowton
committed
Fix test

gagliardetto
authored and
smowton
committed
Cleanup

gagliardetto
authored and
smowton
committed
Improve comments and naming.

gagliardetto
authored and
smowton
committed
Use TaintTracking an TaintTracking2

gagliardetto
authored and
smowton
committed
Fix test

gagliardetto
authored and
smowton
committed
Use only one instance of TaintTracking.

gagliardetto
authored and
smowton
committed
Add missing docs

gagliardetto
authored and
smowton
committed
Add isSanitizer predicate to FlowConfFromUntrustedToTemplateExecutionCall, and a test for it

gagliardetto
authored and
smowton
committed
Add NumericType sanitizer

gagliardetto
authored and
smowton
committed
Apply suggestions from code review

gagliardetto
and
smowton
committed
Use DataFlow::Node as parameters

gagliardetto
authored and
smowton
committed
Use PassthroughTypeName instead of string

gagliardetto
authored and
smowton
committed