JS: decoding JWT without signature verification#14088

Merged

erik-krogh merged 28 commits into

github:mainfrom

am0o0:amammad-js-JWT

Jun 20, 2024

Commits on Aug 29, 2023

Commits on Aug 30, 2023

change Source to ConstantString, it seems that we have some duplicate results now, ConstantString is suggested as a better alternative for finding constant sources
am0o0
committed

Commits on Oct 17, 2023

add sanitizers to hardcoded query
am0o0
committed

Commits on Oct 19, 2023

remove hardcoded JWT secret-key query
am0o0
committed

Commits on Nov 2, 2023

Commits on Nov 7, 2023

update tests, updated qldoc and examples, upgrade all libraries to path-problem, update jsonwebtoken source and sinks
am0o0
committed

Commits on Nov 22, 2023

add a temporary Query file to demonstrate unsuccessful usage of two DataFlow configs
am0o0
committed

Commits on Nov 24, 2023

add query to detect strapi CVe too
am0o0
committed

Commits on May 21, 2024

Commits on May 25, 2024

Commits on Jun 6, 2024

Commits on Jun 7, 2024