275 Commits

Author	SHA1	Message	Date
jos	27660d8c00	Some more security measures	2017-05-05 21:08:23 +02:00
jos	85ac1a0aa4	Some more security measures	2017-05-05 20:53:20 +02:00
jos	aef6203049	Use safe function arguments internally	2017-05-05 17:25:21 +02:00
jos	73b774a51b	Use safe map, forEach, join	2017-05-05 12:32:21 +02:00
jos	9dfbac5565	Fixed a broken unit test on node 0.1, 0.12	2017-04-24 21:57:06 +02:00
jos	19faeac16c	Escape function names and properties	2017-04-24 21:36:00 +02:00
jos	8e8e02bec9	Don't clone config itself, only it's childs	2017-04-22 20:14:52 +02:00
jos	c259c936ec	Refactored compile into a factory function	2017-04-22 17:12:38 +02:00
jos	a7bd4cd833	Register _compile as separate functions	2017-04-22 16:49:22 +02:00
jos	bddf93cf57	Added some more unit tests	2017-04-22 16:48:45 +02:00
jos	c2c1888012	Fixed security vulnerabilities in math.subset	2017-04-22 13:58:26 +02:00
jos	4be0c66534	Added another (failing) security test	2017-04-15 20:26:47 +02:00
jos	d34194be2c	Added some (failing) security tests	2017-04-10 20:30:09 +02:00
jos	ee6efa3768	Only allow accessing/assigning properties on plain objects. Only allow calling known methods.	2017-04-08 15:32:10 +02:00
jos	42012688cb	Released v3.11.4	2017-04-03 21:09:05 +02:00
jos	25db18caec	Fixed a security vulnerability	2017-04-03 20:43:52 +02:00
jos	5c4b105c7e	Fixed a security vulnerability in the expression parser	2017-04-03 01:29:13 +02:00
jos	2a1cca3442	Released v3.11.1	2017-04-02 20:13:38 +02:00
jos	fbe6e62faf	Fixed more security vulnerabilities	2017-04-02 19:51:11 +02:00
jos	ebb3c9bd0e	Fixed #821, #822: security vulnerabilities in the expression parser	2017-04-02 14:57:21 +02:00
jos	37613aca0c	Moved security related tests into a separate file	2017-04-02 13:18:55 +02:00
jos	3c3517daa6	More security fixes + unit tests	2017-03-31 13:41:37 +02:00
jos	43c4fe9c46	Added a few more unit tests	2017-03-31 10:51:11 +02:00
jos	b7a065b538	Removed a redundant console.log in the tests	2017-03-31 10:47:04 +02:00
jos	2f45600905	Fixed a security vulnerability in the expression parser allowing execution of arbitrary JavaScript	2017-03-31 10:18:14 +02:00
jos	bd52740e61	Fixed #795: Parse error in case of a multi-line expression with just comments	2017-02-15 22:05:38 +01:00
jos	f8370bdaf1	Fixed #790: Expression parser did not pass function arguments of enclosing functions via scope to functions having rawArgs = true	2017-02-05 13:50:06 +01:00
jos	572ec25665	Added another unit test (see #762)	2016-12-20 19:47:53 +01:00
jos	79993ceac7	Fixed #765: FunctionAssignmentNode.toString() returning a string incompatible with the function assignment syntax	2016-12-18 13:29:21 +01:00
jos	a5df5e4c47	Fixed #762: expression parser failing to invoke a function returned by a function	2016-12-10 11:41:38 +01:00
jos	7152142661	Fixed #732: Allow letter-like unicode characters like Ohm \u2126	2016-11-18 19:19:17 +01:00
jos	e0123c7355	Implemented a method cloneDeep for the expression Nodes. See #745.	2016-11-18 15:37:07 +01:00
Max Bruckner	493bd7f6b0	OperatorNode: Support more than two operands in toTex/String ... Only for multiplication and addition though.	2016-11-13 15:50:32 +07:00
Max Bruckner	ed86eedf32	test cloning of implicit multiplication	2016-11-11 13:20:57 +07:00
jos	4306200c4c	Implemented method Node.equals(other) for all nodes of the expression parser	2016-11-05 16:27:23 +01:00
jos	064eb31381	Fixed #715: Parser now exposes test functions like isAlpha which can be replaced in order to adjust the allowed characters in variables names	2016-10-21 16:33:38 +02:00
jos	80c55add2a	Parser not throwing an error for invalid implicit multiplications like -2 2 and 2^3 4	2016-10-21 15:23:20 +02:00
jos	7742b36c5c	Some more fixes regarding numbers ending with a decimal mark (like 2.). See #711.	2016-09-20 21:35:19 +02:00
jos	9199ae58ae	Fixed #711: parser accepts numbers ending with a decimal mark again like 2..	2016-09-20 21:02:28 +02:00
jos	92918ed9b2	Fixed #707: The expression parser no longer accepts numbers ending with a dot like 2.	2016-09-07 21:10:20 +02:00
jos	23d1786cb2	Comments of expressions are are now stored in the parsed nodes, see #690	2016-08-23 21:12:39 +02:00
jos	730a10749e	FunctionAssignmentNode creates a TypedFunction	2016-05-22 14:25:48 +02:00
jos	5edecb56c8	Removed the check on the number of arguments from functions defined in the expression parser (see #665)	2016-05-18 21:08:40 +02:00
jos	66716819a7	Fixed #644: implemented method Parser.getAll() to retrieve all defined variables	2016-04-16 09:55:48 +02:00
jos	cb4a1a98cb	Fixed #641: Bug in expression parser parsing implicit multiplication with wrong precedence in specific cases	2016-04-16 09:43:24 +02:00
jos	5b682d6040	Fixed #625: Unit in (inch) not always working due to ambiguity with ... the operator `a in b` (alias of `a to b`)	2016-04-03 14:06:43 +02:00
jos	8b39e1b336	Fixed #629: expression parser throws an error when passing a number with decimal exponent instead of parsing them as implicit multiplication	2016-04-03 12:46:58 +02:00
jos	26e1e26555	Fixed #635: Node.toString options where not passed to function arguments	2016-04-03 11:31:08 +02:00
jos	924a8e480f	Fixed #632: problem with escaped backslashes at the end of strings	2016-04-03 11:17:06 +02:00
jos	77736f554b	Fixed #621: a bug in parsing implicit multiplications like (2)(3)+4	2016-03-22 20:23:07 +01:00