6144 Commits

Author	SHA1	Message	Date
erik-krogh	f404f1ddce	add change-note	2022-09-22 13:11:49 +02:00
Asger F	df44076435	JS: Remove Portal-based flow summary implementation	2022-09-22 11:28:31 +02:00
Andrew Eisenberg	58e4861b45	Merge branch 'main' into rc/3.7	2022-09-20 12:43:20 -07:00
Erik Krogh Kristensen	0720fa75df	Merge pull request #10286 from erik-krogh/js-followMsg ... JS: change alert messages of path queries to use the same template	2022-09-20 16:12:45 +02:00
erik-krogh	fb5a04a71d	filter out "file read after existence check" from js/file-system-race	2022-09-19 13:26:10 +02:00
Erik Krogh Kristensen	a4cd913aea	Merge pull request #10312 from erik-krogh/fix-caseDiff ... ensure consistent casing of names	2022-09-19 10:43:12 +02:00
Asger F	ab296d4d62	Merge pull request #10396 from asgerf/js/regexp-always-matches-fp ... JS: Fix FP in js/regexp/always-matches	2022-09-19 09:32:00 +02:00
github-actions[bot]	67ce442674	Post-release preparation for codeql-cli-2.10.5	2022-09-16 14:23:44 +00:00
Philip Ginsbach	d1df2aa457	remove upper-case variable names	2022-09-15 18:08:50 +01:00
Asger F	eca2632a3e	JS: Add change note	2022-09-13 10:17:34 +02:00
Asger F	f411798101	JS: Fix typo in alert message	2022-09-13 10:13:34 +02:00
Asger F	b4e6fb781a	JS: Consider empty regexp to be obviously empty	2022-09-13 10:13:03 +02:00
erik-krogh	87fb01d55b	apply another suggestion from doc review	2022-09-12 15:36:02 +02:00
erik-krogh	afcb767f8d	Merge branch 'main' into js-followMsg	2022-09-12 13:21:16 +02:00
erik-krogh	6ec03d4738	apply suggestions from doc review	2022-09-12 13:16:39 +02:00
Erik Krogh Kristensen	3384521fb6	Merge pull request #10357 from erik-krogh/typos ... make a shared library of the typo database	2022-09-12 11:24:03 +02:00
erik-krogh	6a2fa2e37d	add -dev to the codeql/typos version	2022-09-09 12:33:43 +02:00
erik-krogh	26d8553f6e	ensure consistent casing of names	2022-09-09 10:34:14 +02:00
Erik Krogh Kristensen	9893650f7c	Merge pull request #8604 from erik-krogh/httpNode ... JS: refactor most library models away from AST nodes	2022-09-09 10:04:17 +02:00
erik-krogh	1ec77136ec	depend on an explicit version of the typo database	2022-09-09 08:37:38 +02:00
erik-krogh	88f295fbb1	make a shared library of the typo database	2022-09-08 15:49:43 +02:00
github-actions[bot]	a9d80a5a48	Release preparation for version 2.10.5	2022-09-08 11:35:54 +00:00
erik-krogh	a35fe1ffab	Merge branch 'main' into js-followMsg	2022-09-08 13:09:15 +02:00
Asger F	5c12780b1c	JS: Change note	2022-09-07 13:45:38 +02:00
erik-krogh	24f2e3cc07	update alert-messages of the sensitive data queries to match #10314	2022-09-06 12:25:36 +02:00
erik-krogh	0776687991	fix leftover todo in js/insecure-temporary-file	2022-09-06 10:05:50 +02:00
Erik Krogh Kristensen	b4968eb645	refactor the SensitiveExpr to be a dataflow node	2022-09-05 16:11:54 +02:00
Erik Krogh Kristensen	aa9261f1b1	convert the AngularJS model to use DataFlow nodes	2022-09-05 16:11:54 +02:00
Erik Krogh Kristensen	9cb7522bc1	change RouteSetup to a DataFlow::Node	2022-09-05 15:45:31 +02:00
erik-krogh	aa56ca37ae	make the alert messages of taint-tracking queries more consistent	2022-09-05 14:04:52 +02:00
Edoardo Pirovano	8f332714f4	Merge pull request #10260 from github/edoardo/3.7-mergeback ... Merge `rc/3.7` into `main`	2022-09-01 15:44:17 +01:00
github-actions[bot]	3b4ad3c4f1	Post-release preparation for codeql-cli-2.10.4	2022-08-26 09:32:11 +00:00
erik-krogh	cc7a9ef97a	rename more acronyms	2022-08-25 20:52:27 +02:00
Erik Krogh Kristensen	06afe9c0f4	Merge pull request #9816 from erik-krogh/msgConsis ... Make alert messages consistent across languages	2022-08-25 15:20:01 +02:00
github-actions[bot]	0f63bc077f	Release preparation for version 2.10.4	2022-08-25 12:52:26 +00:00
erik-krogh	f1799ae3d2	print the endpointExample in the alert-messsage, and only report one working example	2022-08-24 13:09:48 +02:00
erik-krogh	a50234adb0	apply suggestion from review	2022-08-23 15:41:37 +02:00
erik-krogh	afadcd9b45	use a more detailed alert message in bitwise-sign-check	2022-08-23 11:18:45 +02:00
erik-krogh	f7846a598e	add change-notes	2022-08-23 07:54:01 +02:00
erik-krogh	60908de089	update js/nested-loops-with-same-variable to match cpp	2022-08-22 21:41:46 +02:00
erik-krogh	20625ae60d	update {js/go/py}/xpath-injection to match csharp/java	2022-08-22 21:41:46 +02:00
erik-krogh	b5458b2125	update js/insecure-randomness to match csharp	2022-08-22 21:41:46 +02:00
erik-krogh	9cdd8cc8f5	update js/tainted-format-string to match ruby/java	2022-08-22 21:41:46 +02:00
erik-krogh	9395f156de	update {js/py}/command-line-injection to match csharp/java	2022-08-22 21:41:46 +02:00
erik-krogh	3553f3d9b8	update {rb/py/js/go}/path-injection to match java/csharp	2022-08-22 21:41:45 +02:00
erik-krogh	39c1832995	update {cpp/js}/bitwise-sign-check to match java	2022-08-22 21:41:45 +02:00
erik-krogh	b471a401cc	update {rb/js/java}/unused-parameter to match python	2022-08-22 21:41:45 +02:00
erik-krogh	594fbc678e	update js/zip-slip to match java/go/csharp	2022-08-22 21:41:45 +02:00
erik-krogh	0aebc90b61	don't lowercase the endpointExample, and correctly handle root states	2022-08-21 18:38:47 +02:00
erik-krogh	d052b1e3c9	also support regular expressions without repetitions	2022-08-19 19:21:44 +02:00