285 Commits

Author	SHA1	Message	Date
jos	ed5f2cebaf	Security fixes in isSafeMethod and some others	2017-05-27 19:51:12 +02:00
jos	e80ab2d36c	Fixed unit tests	2017-05-26 17:14:08 +02:00
jos	627bb2a79d	Disabled function chain	2017-05-26 17:11:52 +02:00
jos	959b010242	Simplified isSafeMethod	2017-05-26 16:43:03 +02:00
jos	64498eddd6	Fixed #861: physical constants not available in the expression parser	2017-05-25 16:13:42 +02:00
jos	f61bb6cf94	Fixed #856: function subset not returning non-primitive scalars from Arrays correctly	2017-05-16 21:41:03 +02:00
jos	04ceed6c75	Merge branch 'security' into develop	2017-05-12 20:47:54 +02:00
jos	5991c24620	Fixed broken unit tests	2017-05-12 13:36:03 +02:00
jos	29d632f1d9	Fixed creating units with an alias not working within the expression parser	2017-05-12 13:28:13 +02:00
jos	11eda850da	Fixed security vulnerabilities	2017-05-12 09:01:31 +02:00
jos	27660d8c00	Some more security measures	2017-05-05 21:08:23 +02:00
jos	85ac1a0aa4	Some more security measures	2017-05-05 20:53:20 +02:00
jos	aef6203049	Use safe function arguments internally	2017-05-05 17:25:21 +02:00
jos	73b774a51b	Use safe map, forEach, join	2017-05-05 12:32:21 +02:00
jos	9dfbac5565	Fixed a broken unit test on node 0.1, 0.12	2017-04-24 21:57:06 +02:00
jos	19faeac16c	Escape function names and properties	2017-04-24 21:36:00 +02:00
jos	8e8e02bec9	Don't clone config itself, only it's childs	2017-04-22 20:14:52 +02:00
jos	c259c936ec	Refactored compile into a factory function	2017-04-22 17:12:38 +02:00
jos	a7bd4cd833	Register _compile as separate functions	2017-04-22 16:49:22 +02:00
jos	bddf93cf57	Added some more unit tests	2017-04-22 16:48:45 +02:00
jos	c2c1888012	Fixed security vulnerabilities in math.subset	2017-04-22 13:58:26 +02:00
jos	4be0c66534	Added another (failing) security test	2017-04-15 20:26:47 +02:00
jos	d34194be2c	Added some (failing) security tests	2017-04-10 20:30:09 +02:00
jos	ee6efa3768	Only allow accessing/assigning properties on plain objects. Only allow calling known methods.	2017-04-08 15:32:10 +02:00
jos	42012688cb	Released v3.11.4	2017-04-03 21:09:05 +02:00
jos	25db18caec	Fixed a security vulnerability	2017-04-03 20:43:52 +02:00
jos	5c4b105c7e	Fixed a security vulnerability in the expression parser	2017-04-03 01:29:13 +02:00
jos	2a1cca3442	Released v3.11.1	2017-04-02 20:13:38 +02:00
jos	fbe6e62faf	Fixed more security vulnerabilities	2017-04-02 19:51:11 +02:00
jos	ebb3c9bd0e	Fixed #821, #822: security vulnerabilities in the expression parser	2017-04-02 14:57:21 +02:00
jos	37613aca0c	Moved security related tests into a separate file	2017-04-02 13:18:55 +02:00
jos	3c3517daa6	More security fixes + unit tests	2017-03-31 13:41:37 +02:00
jos	43c4fe9c46	Added a few more unit tests	2017-03-31 10:51:11 +02:00
jos	b7a065b538	Removed a redundant console.log in the tests	2017-03-31 10:47:04 +02:00
jos	2f45600905	Fixed a security vulnerability in the expression parser allowing execution of arbitrary JavaScript	2017-03-31 10:18:14 +02:00
jos	bd52740e61	Fixed #795: Parse error in case of a multi-line expression with just comments	2017-02-15 22:05:38 +01:00
jos	f8370bdaf1	Fixed #790: Expression parser did not pass function arguments of enclosing functions via scope to functions having rawArgs = true	2017-02-05 13:50:06 +01:00
jos	572ec25665	Added another unit test (see #762)	2016-12-20 19:47:53 +01:00
jos	79993ceac7	Fixed #765: FunctionAssignmentNode.toString() returning a string incompatible with the function assignment syntax	2016-12-18 13:29:21 +01:00
jos	a5df5e4c47	Fixed #762: expression parser failing to invoke a function returned by a function	2016-12-10 11:41:38 +01:00
jos	7152142661	Fixed #732: Allow letter-like unicode characters like Ohm \u2126	2016-11-18 19:19:17 +01:00
jos	e0123c7355	Implemented a method cloneDeep for the expression Nodes. See #745.	2016-11-18 15:37:07 +01:00
Max Bruckner	493bd7f6b0	OperatorNode: Support more than two operands in toTex/String ... Only for multiplication and addition though.	2016-11-13 15:50:32 +07:00
Max Bruckner	ed86eedf32	test cloning of implicit multiplication	2016-11-11 13:20:57 +07:00
jos	4306200c4c	Implemented method Node.equals(other) for all nodes of the expression parser	2016-11-05 16:27:23 +01:00
jos	064eb31381	Fixed #715: Parser now exposes test functions like isAlpha which can be replaced in order to adjust the allowed characters in variables names	2016-10-21 16:33:38 +02:00
jos	80c55add2a	Parser not throwing an error for invalid implicit multiplications like -2 2 and 2^3 4	2016-10-21 15:23:20 +02:00
jos	7742b36c5c	Some more fixes regarding numbers ending with a decimal mark (like 2.). See #711.	2016-09-20 21:35:19 +02:00
jos	9199ae58ae	Fixed #711: parser accepts numbers ending with a decimal mark again like 2..	2016-09-20 21:02:28 +02:00
jos	92918ed9b2	Fixed #707: The expression parser no longer accepts numbers ending with a dot like 2.	2016-09-07 21:10:20 +02:00