492 Commits

Author	SHA1	Message	Date
jos	967e65cceb	Refactored usage of properties .isNode, .isSymbolNode, etc. into using functions like type.isNode(x) for security	2017-08-12 14:38:03 +02:00
jos	949261f92b	Refactored usage of properties .isRange, .isIndex, .isResultSet, and .isHelp for their (safe) function equivalents	2017-08-12 13:31:09 +02:00
jos	fa01e993af	Refactored x && x.isMatrix === true into type.isMatrix(x), same with isDenseMatrix and isSparseMatrix	2017-08-12 13:24:39 +02:00
jos	e10dd5bce5	Refactored x && x.isBigNumber === true into type.isBigNumber(x)	2017-08-12 11:54:53 +02:00
jos	26e70a4acd	Refactored x.isComplex === true into type.isComplex(x)	2017-08-12 11:32:40 +02:00
jos	a18f2068f3	Fixed toString of a parsed expression tree containing an immediately invoked function assignment not being wrapped in parenthesis	2017-08-12 11:03:19 +02:00
jos	9666c16378	Fixed #846: Issues in the functions map, forEach, and filter when used in the expression parser	2017-07-29 14:05:27 +02:00
jos	469e6bf3cf	Fixed #895: added support for the dollar character $ in symbol names	2017-07-10 20:29:30 +02:00
Jos de Jong	69f3e882d7	Merge pull request #888 from ThomasBrierley/prototyped-scopes ... Prototyped Scopes	2017-07-05 22:01:29 +02:00
jos	485cb88866	Use getSafeProperty in help	2017-06-30 14:27:28 +02:00
jos	142e200992	Added docs for set functions to the expression parser	2017-06-30 12:04:47 +02:00
Jos de Jong	000b748108	Merge pull request #889 from HarrySarson/single-quotes ... Syntax error includes hint if single quotes are used for a string	2017-06-30 11:38:47 +02:00
jos	6bbff5f54f	Improved natural sorting for numeric types, matrix types, and objects	2017-06-30 11:16:42 +02:00
Harry Sarson	43ae05bbc5	remove " from end of error message	2017-06-29 23:55:44 +01:00
Harry Sarson	291b96d83e	Syntax error includes hint if single quotes are used for a string	2017-06-29 23:49:16 +01:00
Thomas Brierley	955c72bebf	Update isSafeProperty interface	2017-06-29 14:56:47 +01:00
jos	aaa609d046	Fixed wrong function name of map.transform.js	2017-06-26 19:12:53 +02:00
jos	0557e7ae1f	Back to compareNatural WIP (see #837)	2017-06-25 21:02:59 +02:00
jos	08695ef1c7	Use strict unequal in xor	2017-06-24 20:38:25 +02:00
jos	3545d9000e	Fixed undefined Unit in SymbolNode	2017-06-24 15:14:01 +02:00
jos	af58fd2294	Decouple SymbolNode from Unit	2017-06-24 14:55:12 +02:00
jos	16b0d620a1	Removed redundant dependency on math	2017-06-24 13:43:21 +02:00
jos	151bc655d6	Implemented a first version of math.compareNatural	2017-06-18 21:13:31 +02:00
Nekomajin42	9678d1a067	Change escape-goat to native escape function	2017-06-06 12:06:58 +02:00
Nekomajin42	e7aa5b4ec9	fix the escaping errors	2017-06-01 16:02:20 +02:00
Nekomajin42	e18cca6153	Revert "Revert "Use escape goat"" ... This reverts commit f83c88237f02edf7595e375606c1a0eaaa6ce50c.	2017-06-01 08:36:04 +02:00
Nekomajin42	f83c88237f	Revert "Use escape goat" ... This reverts commit 51e1b601b64d0bb782590e95c7a74bbb7fb179ff.	2017-06-01 08:35:47 +02:00
Nekomajin42	51e1b601b6	Use escape goat	2017-06-01 08:19:16 +02:00
Nekomajin42	7301b6fcf9	Implement toHTML() to Nodes ... toHTML() method to each Node, and update in the docs	2017-05-21 15:47:43 +02:00
jos	f61bb6cf94	Fixed #856: function subset not returning non-primitive scalars from Arrays correctly	2017-05-16 21:41:03 +02:00
jos	27660d8c00	Some more security measures	2017-05-05 21:08:23 +02:00
jos	85ac1a0aa4	Some more security measures	2017-05-05 20:53:20 +02:00
jos	aef6203049	Use safe function arguments internally	2017-05-05 17:25:21 +02:00
jos	73b774a51b	Use safe map, forEach, join	2017-05-05 12:32:21 +02:00
jos	19faeac16c	Escape function names and properties	2017-04-24 21:36:00 +02:00
jos	c259c936ec	Refactored compile into a factory function	2017-04-22 17:12:38 +02:00
jos	a7bd4cd833	Register _compile as separate functions	2017-04-22 16:49:22 +02:00
jos	b9c3b334e1	Refactored customs.js into a regular js file instead of factory	2017-04-22 13:04:29 +02:00
jos	720d443f79	Released v3.12.0	2017-04-17 20:38:53 +02:00
jos	fa06a452b9	Only return undefined in case of plain objects	2017-04-08 16:44:21 +02:00
jos	ee6efa3768	Only allow accessing/assigning properties on plain objects. Only allow calling known methods.	2017-04-08 15:32:10 +02:00
jos	25db18caec	Fixed a security vulnerability	2017-04-03 20:43:52 +02:00
jos	1092489440	Some refactoring	2017-04-03 01:32:15 +02:00
jos	5c4b105c7e	Fixed a security vulnerability in the expression parser	2017-04-03 01:29:13 +02:00
jos	fbe6e62faf	Fixed more security vulnerabilities	2017-04-02 19:51:11 +02:00
jos	ebb3c9bd0e	Fixed #821, #822: security vulnerabilities in the expression parser	2017-04-02 14:57:21 +02:00
jos	3c3517daa6	More security fixes + unit tests	2017-03-31 13:41:37 +02:00
jos	52462a8e29	Released v3.10.2	2017-03-31 10:26:04 +02:00
jos	2f45600905	Fixed a security vulnerability in the expression parser allowing execution of arbitrary JavaScript	2017-03-31 10:18:14 +02:00
jos	b283accfa5	Refer to quantileSeq in docs of median	2017-02-20 20:50:37 +01:00