Eas-1673#31

Closed

aliner-wang wants to merge 551 commits intoatlassian-labs:mainfrom aliner-wang:EAS-1673

+5,095-3,784

This pull request is big! We're only showing the most recent 250 commits

Commits on Jan 8, 2024

Commits on Jan 9, 2024

Commits on Jan 11, 2024

chore: updated main.rs file to remove vscode notes
aliner-wang
committed
resolving merge conflicts for rebase
aliner-wang
committed
added more todo statements and cleaned up struct definitions
aliner-wang
committed
resolving merge conflicts for rebase
aliner-wang
committed
resolving merge conflicts
aliner-wang
committed
resolving merge conflicts
aliner-wang
committed
resolving merge conflicts
aliner-wang
committed
resolving merge conflicts
aliner-wang
committed
added new modules for additional endpoints in user invokable modules
aliner-wang
committed
added methods for adding additional user invokable endpoints to vector for scanning.
aliner-wang
committed
resolving merge conflicts
aliner-wang
committed
changed entrypoints to entrypoint. Working on other comments
aliner-wang
committed
resolving merge conflicts
aliner-wang
committed
resolving merge conflicts
aliner-wang
committed
finished updating methods to check functions_to_scan and update entrypoint struct when needed. TODO: test and toggle function call in main.rs
aliner-wang
committed
resolving merge conflicts
aliner-wang
committed
updated search_suggestion in customfield to be an optional value.
aliner-wang
committed
modified into_analyzable_functions with Josh and implementation in main.rs
aliner-wang
committed
added new structs for user non-invokable modules
aliner-wang
committed
added more todo statements and cleaned up struct definitions
aliner-wang
committed
created iterators of all known user non-invokable functions to be scanned. And updated alternate_functions to track using entrypoints struct. Todo: capture additional entrypoints for user invokable…
aliner-wang
committed
fixed all the red squigglies
aliner-wang
committed
added user-invokable module with additional entry points for macros. Adding more modules. Writing tests next?
aliner-wang
committed
added test to deserialize macros with additional entry points like config and export
aliner-wang
committed
edited main to iterate over vector of functions. TODO: edit add_funcs in main.rs and test into_analyzble_function use case in main.rs
aliner-wang
committed
added new modules for additional endpoints in user invokable modules
aliner-wang
committed
added methods for adding additional user invokable endpoints to vector for scanning.
aliner-wang
committed
removed callback mod and abstracted structs to use MacroMod to represent {function: str} entry points. Added missing entrypoints on jira:customField and implmented scanning for those
aliner-wang
committed
changed entrypoints to entrypoint. Working on other comments
aliner-wang
committed
updated struct serde features and rust attributes. Updated customField with optional values
aliner-wang
committed
abstracted structs to use a CommonKeys struct that holds: key, function, and resolver for less code duplication. Updated into_analayzable method to update values based on functions specified in fun…
aliner-wang
committed
finished updating methods to check functions_to_scan and update entrypoint struct when needed. TODO: test and toggle function call in main.rs
aliner-wang
committed
commented out consumer filter
aliner-wang
committed
updated search_suggestion in customfield to be an optional value.
aliner-wang
committed
modified into_analyzable_functions with Josh and implementation in main.rs
aliner-wang
committed
rebased EAS-1893
aliner-wang
committed
chore: updated main.rs file to remove vscode notes
aliner-wang
committed
Merge remote-tracking branch 'refs/remotes/origin/EAS-1893' into EAS-1893
aliner-wang
committed
chore: tried rebasing to change all author's on commits. Partially worked
aliner-wang
committed
rebased EAS-1893 - changing author attempt
aliner-wang
committed
chore: resetting head on EAS-1673 to minimize commits
aliner-wang
committed
Merge branch 'main' into EAS-1673
aliner-wang
authored

Commits on Jan 12, 2024

Commits on Jan 26, 2024

feat: resolving PR comments in progress
aliner-wang
committed

Commits on Feb 5, 2024

Commits on Feb 6, 2024

Commits on Feb 7, 2024

feat: new trait implemented to append functions. Updated into_analyzable_functions to use trait.
aliner-wang
committed

Commits on Feb 9, 2024

Commits on Feb 12, 2024

feat: use IR 2.0 with AuthN checker

jwong33
authored and
aliner-wang
committed
refactor(analyzer): remove dead code

jwong33
authored and
aliner-wang
committed
refactor: clean up unused code

jwong33
authored and
aliner-wang
committed
fix(parser): parse files with decorators

jwong101
authored and
aliner-wang
committed
feat: EAS-1592 mistakingly classifies resolvers exposed from consumers as user reachable

gersbach
authored and
aliner-wang
committed
removing changes to files

gersbach
authored and
aliner-wang
committed
removing changes to files

gersbach
authored and
aliner-wang
committed
adding ir for insering symbols

gersbach
authored and
aliner-wang
committed
adding projections instead of assignment

gersbach
authored and
aliner-wang
committed
reverting changes that are unneeded

gersbach
authored and
aliner-wang
committed
basic checker

gersbach
authored and
aliner-wang
committed
moving inst checking to the transfer block

gersbach
authored and
aliner-wang
committed
wip

gersbach
authored and
aliner-wang
committed
definition analysis

gersbach
authored and
aliner-wang
committed
wip

gersbach
authored and
aliner-wang
committed
updates to parsing worklist arguments

gersbach
authored and
aliner-wang
committed
correclty resolving permissions

gersbach
authored and
aliner-wang
committed
fix bug with adding arguments

gersbach
authored and
aliner-wang
committed
various updates

gersbach
authored and
aliner-wang
committed
fix to the worklist

gersbach
authored and
aliner-wang
committed
converting defid to varid

gersbach
authored and
aliner-wang
committed
wip

gersbach
authored and
aliner-wang
committed
wip

gersbach
authored and
aliner-wang
committed
Update crates/forge_analyzer/src/checkers.rs

authored and
aliner-wang
committed
wip

gersbach
authored and
aliner-wang
committed
wip

gersbach
authored and
aliner-wang
committed
fix to not reading the second argument

gersbach
authored and
aliner-wang
committed
wip

gersbach
authored and
aliner-wang
committed
fix to unlimited looping beteween visit blocks

gersbach
authored and
aliner-wang
committed
fix to unlimited looping beteween visit blocks

gersbach
authored and
aliner-wang
committed
cleaning up

gersbach
authored and
aliner-wang
committed
wip

gersbach
authored and
aliner-wang
committed
fix to the issue of not resolving default exports

gersbach
authored and
aliner-wang
committed
removing unneeded comments

gersbach
authored and
aliner-wang
committed
small updates

gersbach
authored and
aliner-wang
committed
removing unneeded file

gersbach
authored and
aliner-wang
committed
fixes to projections

gersbach
authored and
aliner-wang
committed
lowering functions that are called with handlers

gersbach
authored and
aliner-wang
committed
Update crates/forge_analyzer/src/interp.rs

authored and
aliner-wang
committed
fixes to comments

gersbach
authored and
aliner-wang
committed
lowering then and array functions

gersbach
authored and
aliner-wang
committed
updates to pr

gersbach
authored and
aliner-wang
committed
handling lowering of useEffect functions

gersbach
authored and
aliner-wang
committed
cleaning up

gersbach
authored and
aliner-wang
committed
feat: generate check name based on stacktrace

jwong101
authored and
aliner-wang
committed
handling default and nodejs exports

gersbach
authored and
aliner-wang
committed
cleaning up

gersbach
authored and
aliner-wang
committed
more code

gersbach
authored and
aliner-wang
committed
formatitng

gersbach
authored and
aliner-wang
committed
fixes to comments on pr

gersbach
authored and
aliner-wang
committed
formatting

gersbach
authored and
aliner-wang
committed
fixes to pr

gersbach
authored and
aliner-wang
committed
prevents scan if the code is transplied

gersbach
authored and
aliner-wang
committed
cleaning up code

gersbach
authored and
aliner-wang
committed
wip

gersbach
authored and
aliner-wang
committed
final permission resolver

gersbach
authored and
aliner-wang
committed
cleaning up

gersbach
authored and
aliner-wang
committed
fixed to pr

gersbach
authored and
aliner-wang
committed
erros with defintion analysis -- correct intermixing of exprs and quasis

gersbach
authored and
aliner-wang
committed
working module exports

gersbach
authored and
aliner-wang
committed
formatting

gersbach
authored and
aliner-wang
committed
working body definition analysis

gersbach
authored and
aliner-wang
committed
cleaning up codebase

gersbach
authored and
aliner-wang
committed
failed attemp to put the definition analysis into the interp

gersbach
authored and
aliner-wang
committed
working definition analysis seperated analysis and permission checker

gersbach
authored and
aliner-wang
committed
finalize secret scanner

gersbach
authored and
aliner-wang
committed
patch to definition analysis

gersbach
authored and
aliner-wang
committed
formatting

gersbach
authored and
aliner-wang
committed
cleaning up

gersbach
authored and
aliner-wang
committed
functioning definition export

gersbach
authored and
aliner-wang
committed
fix bug for exporting default classes

gersbach
authored and
aliner-wang
committed
improvments to performance

gersbach
authored and
aliner-wang
committed
working global lowerer

gersbach
authored and
aliner-wang
committed
fix to permission checker

gersbach
authored and
aliner-wang
committed
formatting

gersbach
authored and
aliner-wang
committed
currnet

gersbach
authored and
aliner-wang
committed
chore: move test module directly below the permission_resolver module and only build during testing.

jwong101
authored and
aliner-wang
committed
cleaning up codebase

gersbach
authored and
aliner-wang
committed
refractoring to a value manager

gersbach
authored and
aliner-wang
committed
feat: recognize manual authorization for custom fields

jwong101
authored and
aliner-wang
committed
fix: lower while loop body

jwong101
authored and
aliner-wang
committed
fix: remove stacker usage in interp

jwong101
authored and
aliner-wang
committed
chore: added additional known common package functions in forge apps for secret scanner

awang7
authored and
aliner-wang
committed
feat: added scanning in secret scanner for packages imported using star method

awang7
authored and
aliner-wang
committed
feat: added crypto-js to secretdata.yaml scanning list. And updated DVFA with test cases

awang7
authored and
aliner-wang
committed
feat: updated secretdata.yaml with new flag identifier to catch object exports. added new scanning pathway for star imports where prop path is identifier or method with children object imports.

awang7
authored and
aliner-wang
committed
fixed: revised fix_import to check for default and named functions. Added more test cases for named imports. todo: add more edge cases and review is_import

awang7
authored and
aliner-wang
committed
chore: cleaned up test cases in util.js. Added verify to secretdata.yaml. Todo: resolve edge case where same secret scanner vuln got reported twice - after adding jsonwebtoken funtion verify

awang7
authored and
aliner-wang
committed
chore: bump deps

jwong101
authored and
aliner-wang
committed
chore: bump swc version

jwong101
authored and
aliner-wang
committed
fix: swc compile errors

jwong101
authored and
aliner-wang
committed
refactor: rebuilt as_intrinsic to be sleaker and more organized. Tests passes in utils.js.

awang7
authored and
aliner-wang
committed
fix: resolving PR comments. Pushing fixes to see which comments are left

awang7
authored and
aliner-wang
committed
fix: removed the unwrap() on self.default and made add_defult return a DefId

awang7
authored and
aliner-wang
committed
fix: clean up some code

jwong101
authored and
aliner-wang
committed
feat: add initial implementation of the prototype pollution scanner

jwong101
authored and
aliner-wang
committed
feat: enable new scanners by default

jwong101
authored and
aliner-wang
committed
fix: use correct check name in secret scanner vulner report

jwong101
authored and
aliner-wang
committed
NEW: Fresh branch branching off of EAS-1893 to whitelist admin module functions

awang7
authored and
aliner-wang
committed
feat: tracking functions exposed in jira:adminPage module added. TODO: test whether they are being tagged.

awang7
authored and
aliner-wang
committed
rebasing EAS-1673 to be head of EAS-1893

awang7
authored and
aliner-wang
committed
chore: cleaning up and reverting iterator to og name.

awang7
authored and
aliner-wang
committed
feat: wrote smol test to check for admin flag based on current behavior

awang7
authored and
aliner-wang
committed
chore: cleaning up and reverting iterator to og name.

awang7
authored and
aliner-wang
committed
chore: resolving more conflicts

awang7
authored and
aliner-wang
committed
fix: update checker spawning to use new entrypoint flags

jwong101
authored and
aliner-wang
committed
chore: remove unused imports in forge_loader

jwong101
authored and
aliner-wang
committed
chore: resolved error. Fixed local tests that were failing
aliner-wang
committed
feat: resolving PR comments in progress
aliner-wang
committed
feat: implmented helper function append_function. And updated existing modules to add to Btreeset with helper function
aliner-wang
committed
fix: added compass and confluence modules to get deserialized. Todo: finish updating into_analyzable_functions to add functions from new modules. Then add jira modules and functions associated
aliner-wang
committed
feat: added rest of jira modules. Updated into_analyzable_functions to accomodate functions from new modules.
aliner-wang
committed
resolve: destructured ForgeModule struct to address comment on tracking all and new modules. Added compass_admin_page check to module function check
aliner-wang
committed
fixx addressed most comments. Updated fields to be optional or a struct. removed data_provider. Todo: resolve copy issue and add JSM modules
aliner-wang
committed
resolve: uadded JSM modules with functions. And updated into_analyzable_functions to destructure self as refs and handle optional properties in modules that could hold functions. TODO: resolve trai…
aliner-wang
committed
feat: new trait implemented to append functions. Updated into_analyzable_functions to use trait.
aliner-wang
committed
rebase: final step to merge diverging branches and resolve conflicts
aliner-wang
committed