23 Commits

Author	SHA1	Message	Date
jos	ed5f2cebaf	Security fixes in isSafeMethod and some others	2017-05-27 19:51:12 +02:00
jos	e80ab2d36c	Fixed unit tests	2017-05-26 17:14:08 +02:00
jos	627bb2a79d	Disabled function chain	2017-05-26 17:11:52 +02:00
jos	959b010242	Simplified isSafeMethod	2017-05-26 16:43:03 +02:00
jos	11eda850da	Fixed security vulnerabilities	2017-05-12 09:01:31 +02:00
jos	27660d8c00	Some more security measures	2017-05-05 21:08:23 +02:00
jos	85ac1a0aa4	Some more security measures	2017-05-05 20:53:20 +02:00
jos	aef6203049	Use safe function arguments internally	2017-05-05 17:25:21 +02:00
jos	73b774a51b	Use safe map, forEach, join	2017-05-05 12:32:21 +02:00
jos	9dfbac5565	Fixed a broken unit test on node 0.1, 0.12	2017-04-24 21:57:06 +02:00
jos	19faeac16c	Escape function names and properties	2017-04-24 21:36:00 +02:00
jos	bddf93cf57	Added some more unit tests	2017-04-22 16:48:45 +02:00
jos	c2c1888012	Fixed security vulnerabilities in math.subset	2017-04-22 13:58:26 +02:00
jos	4be0c66534	Added another (failing) security test	2017-04-15 20:26:47 +02:00
jos	d34194be2c	Added some (failing) security tests	2017-04-10 20:30:09 +02:00
jos	ee6efa3768	Only allow accessing/assigning properties on plain objects. Only allow calling known methods.	2017-04-08 15:32:10 +02:00
jos	42012688cb	Released v3.11.4	2017-04-03 21:09:05 +02:00
jos	25db18caec	Fixed a security vulnerability	2017-04-03 20:43:52 +02:00
jos	5c4b105c7e	Fixed a security vulnerability in the expression parser	2017-04-03 01:29:13 +02:00
jos	2a1cca3442	Released v3.11.1	2017-04-02 20:13:38 +02:00
jos	fbe6e62faf	Fixed more security vulnerabilities	2017-04-02 19:51:11 +02:00
jos	ebb3c9bd0e	Fixed #821, #822: security vulnerabilities in the expression parser	2017-04-02 14:57:21 +02:00
jos	37613aca0c	Moved security related tests into a separate file	2017-04-02 13:18:55 +02:00