4561 Commits

Author	SHA1	Message	Date
github-actions[bot]	8eb8daa4d4	Post-release preparation for codeql-cli-2.12.3	2023-02-16 17:23:25 +00:00
amammad	54582031d8	v1	2023-02-16 17:14:32 +01:00
Ahmed Farid	ccbb58966f	Update TimingAttack.qll	2023-02-16 14:15:04 +01:00
Ahmed Farid	a421e3a3a3	Update TimingAttackAgainstHeaderValue.ql	2023-02-16 14:14:43 +01:00
Ahmed Farid	f57861b6a3	Update TimingAttack.qll	2023-02-16 14:14:13 +01:00
Ahmed Farid	f70f5c7935	Update TimingAttackAgainstHeaderValue.ql	2023-02-16 14:03:26 +01:00
Ahmed Farid	4b3efa87dc	Update TimingAttack.qll	2023-02-16 14:01:29 +01:00
Ahmed Farid	005839b462	Update TimingAttack.qll	2023-02-16 12:49:40 +01:00
github-actions[bot]	b0315119c6	Release preparation for version 2.12.3	2023-02-16 11:49:06 +00:00
Ahmed Farid	01b865f75b	Update TimingAttack.qll	2023-02-16 01:36:06 +01:00
Ahmed Farid	fbfe23b7c4	Update TimingAttack.qll	2023-02-16 01:21:50 +01:00
Ahmed Farid	b8f9b2b424	Update TimingAttackAgainstHeaderValue.ql	2023-02-16 01:11:41 +01:00
Ahmed Farid	016136a2e3	Update TimingAttack.qll	2023-02-16 01:10:36 +01:00
erik-krogh	759854991a	fix various nits based on feedback	2023-02-15 11:10:43 +01:00
Rasmus Wriedt Larsen	dc5bb4fb77	Python: Update a few examples so queries work on them ... Fixes problem highlighted in https://github.com/github/codeql/issues/12156	2023-02-14 11:54:18 +01:00
Sim4n6	eed19a3e15	Fix autoformatting issues	2023-02-10 21:58:29 +01:00
Sim4n6	09df055d86	Fix the exists cast warning	2023-02-09 15:25:54 +01:00
Sim4n6	16ef50401b	Update python/ql/src/experimental/Security/UnsafeUnpackQuery.qll ... Co-authored-by: yoff <lerchedahl@gmail.com>	2023-02-09 14:59:28 +01:00
Sim4n6	4196230a8a	use if-then-else rather than nested exists	2023-02-08 21:46:50 +01:00
Sim4n6	9e285020a1	Comment modif + remove redundant cast	2023-02-08 21:14:53 +01:00
Rasmus Wriedt Larsen	23144f584a	Merge branch 'main' into call-graph-code	2023-02-08 16:17:34 +01:00
Sim4n6	ec82d61991	Add another frequently used step	2023-02-05 14:36:17 +01:00
erik-krogh	c5350ca6a0	add change-note	2023-02-03 14:47:58 +01:00
erik-krogh	7fcc548665	add py/shell-command-constructed-from-input, but without a source. ... It's a very direct port from Ruby, with only minor adjustments to fit the Python APIs	2023-02-03 14:47:55 +01:00
github-actions[bot]	faf21f3edb	Post-release preparation for codeql-cli-2.12.2	2023-02-02 23:01:04 +00:00
Sim4n6	1a8c9abee2	Incorporate Sink & Source as steps from TarSlipQry	2023-02-02 21:09:40 +01:00
github-actions[bot]	a4fa984792	Release preparation for version 2.12.2	2023-02-02 14:34:55 +00:00
Sim4n6	7079def7ce	Add an S3 source with Session or download_fileobj	2023-01-30 00:49:23 +01:00
Sim4n6	0707064ab5	Constrain the save/path step	2023-01-28 10:14:24 +01:00
Sim4n6	a4aaf0ec6f	Remove a write step & update the builtin open step	2023-01-28 09:53:54 +01:00
Sim4n6	0e2f37825d	Organize steps to correspond to the sample code	2023-01-27 23:58:03 +01:00
Sim4n6	ee213123ac	Add builtin open as an additional step	2023-01-27 18:16:11 +01:00
Sim4n6	0b27b1314a	Update python/ql/src/experimental/Security/UnsafeUnpackQuery.qll ... Co-authored-by: yoff <lerchedahl@gmail.com>	2023-01-27 16:12:08 +01:00
Sim4n6	8ef2aa00e7	Update python/ql/src/experimental/Security/UnsafeUnpackQuery.qll ... Co-authored-by: yoff <lerchedahl@gmail.com>	2023-01-27 16:07:39 +01:00
Sim4n6	207ed3da9c	Constrain the object & the call	2023-01-27 15:07:20 +01:00
Sim4n6	e41042418a	Update the import relative to the dataflow config	2023-01-27 13:46:57 +01:00
Sim4n6	bca053f855	Move the config query to the parent directory	2023-01-27 13:42:14 +01:00
Sim4n6	998f1bf215	Some reformatting	2023-01-26 18:54:36 +01:00
Sim4n6	1a211485a4	Restrain the source and add two steps.	2023-01-26 17:07:59 +01:00
Sim4n6	51b11de44a	Add a Django Upload examples	2023-01-26 15:16:24 +01:00
Sim4n6	54cc4d6498	Opt for any source from RemoteFlowSource.	2023-01-26 12:51:55 +01:00
Sim4n6	aaa0040612	Seperate the dataflow config from the query	2023-01-26 08:53:47 +01:00
Sim4n6	2e4cb63049	Optimize the Argparse filename as a source.	2023-01-26 01:00:01 +01:00
Sim4n6	9b5b0c60b8	Handle the download of a tarball using wget pkg.	2023-01-26 00:02:20 +01:00
Sim4n6	22af6f5182	Restrict download_file() to boto3 lib	2023-01-25 23:00:00 +01:00
Sim4n6	2d38993075	Add a missing "and"	2023-01-25 19:46:13 +01:00
Sim4n6	0ed480855a	Update python/ql/src/experimental/Security/CWE-022bis/UnsafeUnpack.ql ... Yes, definitely Co-authored-by: yoff <lerchedahl@gmail.com>	2023-01-25 19:44:28 +01:00
Sim4n6	b5a6f6e165	Merge pull request #1 from github/main ... Sync with the upstream	2023-01-25 19:13:35 +01:00
Rasmus Wriedt Larsen	753192bb4d	Merge branch 'main' into call-graph-code	2023-01-23 11:25:02 +01:00
github-actions[bot]	b62cb6ba84	Post-release preparation for codeql-cli-2.12.1	2023-01-20 19:49:56 +00:00