221 Commits

Author	SHA1	Message	Date
Sergey	6a3cb82b83	Adding support for Content	2017-03-01 01:13:14 -03:00
Sergey	dc0e2e3bb3	Improved the rule to catch escaped values	2017-03-01 01:13:14 -03:00
Sergey	7d9cd70e55	Added support for DotExpression and Arguments list	2017-03-01 01:13:14 -03:00
Sergey	72122470c7	Small fixes	2017-03-01 01:13:14 -03:00
Sergey	a942459225	Grammar with support for VFEL methods	2017-03-01 01:13:14 -03:00
Sergey	f5d382951d	Get rid of last reference to #$	2017-03-01 01:13:14 -03:00
Sergey	31ad724404	Fixed BOM and random spacing	2017-03-01 01:13:14 -03:00
Sergey	cdf29e8b86	Adding support for html style tag	2017-03-01 01:13:14 -03:00
Sergey	c345b67f0f	Cleanup	2017-03-01 01:13:14 -03:00
Sergey	8a6f8c2110	One more unit test	2017-03-01 01:13:14 -03:00
Sergey	fc5c440190	Code style cleanup	2017-03-01 01:13:14 -03:00
Sergey	f799cf2e5b	Renaming rules to security, fixing leading whitespaces	2017-03-01 01:12:42 -03:00
Sergey	1218cd5c5b	Fixed up parser unit tests	2017-03-01 01:12:42 -03:00
Sergey	b7974d0486	XSS in apex:outputText	2017-03-01 01:12:42 -03:00
Sergey	63f6e618f9	Support for mixed merge fields	2017-03-01 01:12:42 -03:00
Sergey	2f396cf44e	Cleanup	2017-03-01 01:12:42 -03:00
Sergey	a0b1ca00b9	First rule	2017-03-01 01:12:42 -03:00
Sergey	ea083c60ce	Fixed script tag and removed unneeded content AST node	2017-03-01 01:12:42 -03:00
Sergey	dfa6da7f6c	Fixed CompilationUnit not getting called	2017-03-01 01:12:42 -03:00
Sergey	d73bc4e15f	Initial commit	2017-03-01 01:12:42 -03:00
Sergey	2af071ab86	Improving detection of safe resources	2017-02-28 16:04:19 -08:00
Sergey	ea0fcb63f5	Renamed Escaping	2017-02-28 14:13:06 -08:00
Sergey	64bd577362	Moving Pattern to final static	2017-02-28 14:11:49 -08:00
Sergey	a700612552	Using EnumSet	2017-02-28 14:08:25 -08:00
Sergey	329e51c718	Adding a unit test and bug fix	2017-02-28 13:56:05 -08:00
Sergey	5ebf17e423	Small refactoring	2017-02-28 13:46:21 -08:00
Sergey	02e544045a	Whitelisting ObjectType	2017-02-28 13:36:33 -08:00
Sergey	3bbd5ca1b5	Literal starting with http	2017-02-28 13:32:50 -08:00
Sergey	e2a695687d	Whitelisting Labels	2017-02-28 13:28:24 -08:00
Sergey	b0a1cfb3ef	any case http	2017-02-28 13:18:37 -08:00
Sergey	6bafe94b94	Whitelisting of http	2017-02-28 13:17:54 -08:00
Sergey	a4f77dfe25	Additional negative test	2017-02-28 09:47:27 -08:00
Sergey	a7cf5319c3	Typo fix and tests	2017-02-28 09:45:11 -08:00
Sergey	3969644e85	Refactoring	2017-02-27 13:44:26 -08:00
Sergey	1a20e2c6c8	Fixing tests	2017-02-27 13:38:34 -08:00
Sergey	cd2eb5dcf1	Parser fix for EL in no quote context	2017-02-27 13:33:00 -08:00
Sergey	a99b45e7aa	Fixing unit test order	2017-02-27 11:33:16 -08:00
Sergey	35c70127a6	Reduced FPs with id and size	2017-02-27 11:23:29 -08:00
Sergey	58fc65e38a	small comment	2017-02-22 13:01:32 -08:00
Sergey	78232a9b34	Reducing FPs with URLFor	2017-02-22 12:59:12 -08:00
Sergey	553c82baab	Proper node reporting	2017-02-22 12:48:38 -08:00
Sergey	646865973d	Style check fixes	2017-02-22 11:50:19 -08:00
Sergey	ec456fefa0	Context aware escaping	2017-02-22 11:47:25 -08:00
Sergey	be7329e22f	Style fixes	2017-02-22 10:25:16 -08:00
Sergey	21355be85d	Support for optional args in EL	2017-02-22 10:02:10 -08:00
Sergey	f5a59207af	Support for EL with no quotes	2017-02-22 09:47:07 -08:00
Sergey	c14ef0e70e	Improved dot notation and empty EL	2017-02-21 16:50:34 -08:00
Sergey	7ba708f42c	Revert	2017-02-21 16:33:17 -08:00
Sergey	442c7e2b11	Cleanup	2017-02-21 16:32:38 -08:00
Sergey	e40aa19176	Fixed floats support	2017-02-21 16:29:45 -08:00