Asger F
|
56bbba2241
|
JS: Sync with JS
|
2022-09-03 13:51:02 +02:00 |
|
Asger F
|
55fdf84d15
|
Ruby+JS: change LabelEntryPoint.toString()
fixup Ruby entry point tests
|
2022-09-03 13:24:45 +02:00 |
|
erik-krogh
|
c38062ce93
|
convert RelevantState to a class in the PrefixConstruction module
|
2022-09-02 20:26:31 +02:00 |
|
Edoardo Pirovano
|
8f332714f4
|
Merge pull request #10260 from github/edoardo/3.7-mergeback
Merge `rc/3.7` into `main`
|
2022-09-01 15:44:17 +01:00 |
|
Stephan Brandauer
|
81d02cc963
|
optimize performance of a helper-predicate
|
2022-09-01 16:05:36 +02:00 |
|
Stephan Brandauer
|
cdbab187ca
|
remove unused code
|
2022-09-01 16:05:36 +02:00 |
|
Stephan Brandauer
|
f59c48ebb9
|
autoformatter
|
2022-09-01 16:05:36 +02:00 |
|
Stephan Brandauer
|
caf39592d4
|
better documentation
|
2022-09-01 16:05:36 +02:00 |
|
Stephan Brandauer
|
b9cb60c2cb
|
Review comments
Co-authored-by: Henry Mercer <henrymercer@github.com>
|
2022-09-01 16:05:36 +02:00 |
|
Stephan Brandauer
|
ac097d5f2a
|
fix now-broken tests
|
2022-09-01 16:05:35 +02:00 |
|
Stephan Brandauer
|
068a948c05
|
fix ql-for-ql warnings
|
2022-09-01 16:05:35 +02:00 |
|
Stephan Brandauer
|
3aa4e29dae
|
remove obsolete features
|
2022-09-01 16:05:35 +02:00 |
|
Stephan Brandauer
|
ed75080072
|
add stringConcatenatedWith feature to help the model learn that string concatenation leaves are usually not sinks
|
2022-09-01 16:05:35 +02:00 |
|
Stephan Brandauer
|
9468f62620
|
add assignedToPropName feature to let the model improve number of false positives for XSS query
|
2022-09-01 16:05:35 +02:00 |
|
Stephan Brandauer
|
db73a62bc2
|
fix bug in InputArgumentIndex feature
|
2022-09-01 16:05:34 +02:00 |
|
Stephan Brandauer
|
67500f85ba
|
performance fixes
|
2022-09-01 16:05:34 +02:00 |
|
Stephan Brandauer
|
96919eea80
|
use ? for unknown parameternames
|
2022-09-01 16:05:34 +02:00 |
|
Stephan Brandauer
|
f8b3c27210
|
add documentations and rename a feature
|
2022-09-01 16:05:34 +02:00 |
|
Stephan Brandauer
|
3422bdee92
|
add functionInterfacesInFile and surroundingFunctionParameters features
|
2022-09-01 16:05:34 +02:00 |
|
Stephan Brandauer
|
3e860762e7
|
documentation for calleeImports ATM feature
|
2022-09-01 16:05:33 +02:00 |
|
Stephan Brandauer
|
93aa279b31
|
documentation for new feature
|
2022-09-01 16:05:33 +02:00 |
|
Stephan Brandauer
|
25db666087
|
ATM: new feature to list all imports in an endpoint's file
|
2022-09-01 16:05:33 +02:00 |
|
Esben Sparre Andreasen
|
d0faf71113
|
use proper import instead of inlining
|
2022-09-01 16:05:33 +02:00 |
|
Esben Sparre Andreasen
|
82069cfb75
|
remove Input_ArgumentIndexAndAccessPathFromCallee
|
2022-09-01 16:05:33 +02:00 |
|
Esben Sparre Andreasen
|
095beb3c71
|
add docstring examples
|
2022-09-01 16:05:32 +02:00 |
|
Esben Sparre Andreasen
|
548f0286f3
|
address review comments
|
2022-09-01 16:05:32 +02:00 |
|
Esben Sparre Andreasen
|
57041aad7c
|
Apply suggestions from code review
Co-authored-by: Henry Mercer <henrymercer@github.com>
|
2022-09-01 16:05:32 +02:00 |
|
Esben Sparre Andreasen
|
5ac608d503
|
fix semantic merge conflict
|
2022-09-01 16:05:32 +02:00 |
|
Esben Sparre Andreasen
|
c95ab031ef
|
rename new features
|
2022-09-01 16:05:32 +02:00 |
|
Esben Sparre Andreasen
|
6533260614
|
add more features
|
2022-09-01 16:05:31 +02:00 |
|
Esben Sparre Andreasen
|
c4c4d288cb
|
improve feature documentation
|
2022-09-01 16:05:31 +02:00 |
|
Esben Sparre Andreasen
|
a8c3cb29ec
|
improve feature tests with more cases
|
2022-09-01 16:05:31 +02:00 |
|
Esben Sparre Andreasen
|
86b2b79b43
|
improve access path strings
|
2022-09-01 16:05:31 +02:00 |
|
Esben Sparre Andreasen
|
e0870e0b96
|
support import in getSimpleAccessPath
|
2022-09-01 16:05:31 +02:00 |
|
Esben Sparre Andreasen
|
e7de6cb4a7
|
support await in getSimpleAccessPath
|
2022-09-01 16:05:30 +02:00 |
|
Esben Sparre Andreasen
|
1db2117be4
|
avoid using new feautes by default
|
2022-09-01 16:05:30 +02:00 |
|
Esben Sparre Andreasen
|
7c2bfef253
|
add CompareFeatures.ql
|
2022-09-01 16:05:30 +02:00 |
|
Esben Sparre Andreasen
|
41b35eaa49
|
add generic tests for features
|
2022-09-01 16:05:30 +02:00 |
|
Esben Sparre Andreasen
|
f3cdb12dcf
|
Document EndpointFeatures.qll
|
2022-09-01 16:05:30 +02:00 |
|
Esben Sparre Andreasen
|
482d169667
|
add ParameterAccessPathSimpleFromArgumentTraversal
|
2022-09-01 16:05:29 +02:00 |
|
Esben Sparre Andreasen
|
dbc89fd9ab
|
improve getSimpleAccessPath
|
2022-09-01 16:05:29 +02:00 |
|
Esben Sparre Andreasen
|
0db7c39c34
|
refactor calleeAccessPath feature to class
|
2022-09-01 16:05:29 +02:00 |
|
Stephan Brandauer
|
aa41bbb96c
|
refactor getACallBasedTokenFeature to class-use
|
2022-09-01 16:05:29 +02:00 |
|
Esben Sparre Andreasen
|
5204346e1f
|
Add CalleeAccessPathSimpleFromArgumentTraversal
|
2022-09-01 16:05:28 +02:00 |
|
Esben Sparre Andreasen
|
e1a38bd4d6
|
refactor EndpointFeatures.ql to use classes
|
2022-09-01 16:05:28 +02:00 |
|
Henry Mercer
|
c65ae88c6d
|
Merge branch 'main' into codeql-ci/js/ml-powered-pack-release-0.3.2
|
2022-09-01 12:41:45 +01:00 |
|
github-actions[bot]
|
8d0ca9c772
|
JS: Bump version of ML-powered library and query packs to 0.3.3
|
2022-09-01 11:39:32 +00:00 |
|
github-actions[bot]
|
d577392dee
|
JS: Bump patch version of ML-powered library and query packs
|
2022-09-01 11:28:25 +00:00 |
|
Ian Lynagh
|
7dc5bdafe3
|
Merge pull request #10186 from github/post-release-prep/codeql-cli-2.10.4
Post-release preparation for codeql-cli-2.10.4
|
2022-08-31 17:29:57 +01:00 |
|
Asger F
|
32c8688805
|
JS: Make API graph more sparse for escaping class instance members
|
2022-08-30 20:24:55 +02:00 |
|