erik-krogh
|
175d3acf4d
|
reword alert-message go/user-controlled-bypass to avoid using "here"
|
2022-09-20 22:51:35 +02:00 |
|
erik-krogh
|
83bedc0320
|
be more specific about what the source is in go/suspicious-character-in-regex, which also avoids using "here" in the alert-message
|
2022-09-20 22:51:35 +02:00 |
|
erik-krogh
|
1be14962a0
|
use "depends to" for a taint-tracking query
|
2022-09-20 22:51:35 +02:00 |
|
erik-krogh
|
c241185c21
|
avoid more instances of "this location" and "here" in alert-messages
|
2022-09-20 22:51:35 +02:00 |
|
erik-krogh
|
2602a38d94
|
update expected test output
|
2022-09-20 22:51:35 +02:00 |
|
erik-krogh
|
3cf5516df6
|
make the alert messages of taint-tracking queries more consistent
|
2022-09-20 22:51:35 +02:00 |
|
erik-krogh
|
e2a41cf49f
|
fix most ql/alert-message-style-violation
|
2022-09-20 22:51:35 +02:00 |
|
Andrew Eisenberg
|
58e4861b45
|
Merge branch 'main' into rc/3.7
|
2022-09-20 12:43:20 -07:00 |
|
erik-krogh
|
49d1e584a8
|
deprecate a source class that wasn't used anywhere
|
2022-09-19 15:07:18 +02:00 |
|
erik-krogh
|
f6ada6e022
|
use sanitizer class in the insecure-randomness query
|
2022-09-19 15:07:00 +02:00 |
|
Erik Krogh Kristensen
|
a4cd913aea
|
Merge pull request #10312 from erik-krogh/fix-caseDiff
ensure consistent casing of names
|
2022-09-19 10:43:12 +02:00 |
|
github-actions[bot]
|
67ce442674
|
Post-release preparation for codeql-cli-2.10.5
|
2022-09-16 14:23:44 +00:00 |
|
Rasmus Wriedt Larsen
|
ca66a29b18
|
Go: Rewrite ::Range patterns to use instanceof
|
2022-09-13 15:48:17 +02:00 |
|
Rasmus Wriedt Larsen
|
6f5701f9c7
|
Go: Rewrite concepts to use extends ... instanceof ...
|
2022-09-13 15:36:16 +02:00 |
|
erik-krogh
|
bae4490620
|
add change-note
|
2022-09-12 12:12:18 +02:00 |
|
Cornelius Riemenschneider
|
bc7fcaa06f
|
Go: Remove the legacy tracer configuration files.
|
2022-09-09 11:13:01 +02:00 |
|
erik-krogh
|
26d8553f6e
|
ensure consistent casing of names
|
2022-09-09 10:34:14 +02:00 |
|
github-actions[bot]
|
a9d80a5a48
|
Release preparation for version 2.10.5
|
2022-09-08 11:35:54 +00:00 |
|
Erik Krogh Kristensen
|
6cee635cb5
|
Merge pull request #10180 from erik-krogh/fixTags
Add missing security tags
|
2022-09-02 08:04:57 +02:00 |
|
Edoardo Pirovano
|
8f332714f4
|
Merge pull request #10260 from github/edoardo/3.7-mergeback
Merge `rc/3.7` into `main`
|
2022-09-01 15:44:17 +01:00 |
|
erik-krogh
|
d0814aa37c
|
Go: add change-note for go
|
2022-08-29 13:10:23 +02:00 |
|
erik-krogh
|
33ba01927f
|
Go: add CWE tag and @security-severity tag to go/insecure-hostkeycallback
|
2022-08-29 13:10:23 +02:00 |
|
github-actions[bot]
|
3b4ad3c4f1
|
Post-release preparation for codeql-cli-2.10.4
|
2022-08-26 09:32:11 +00:00 |
|
erik-krogh
|
cc7a9ef97a
|
rename more acronyms
|
2022-08-25 20:52:27 +02:00 |
|
Ian Lynagh
|
711e769382
|
Update go/ql/lib/change-notes/released/0.2.4.md
Co-authored-by: Jeroen Ketema <93738568+jketema@users.noreply.github.com>
|
2022-08-25 14:25:30 +01:00 |
|
Ian Lynagh
|
b951e94d85
|
Update go/ql/lib/CHANGELOG.md
Co-authored-by: Jeroen Ketema <93738568+jketema@users.noreply.github.com>
|
2022-08-25 14:25:20 +01:00 |
|
Erik Krogh Kristensen
|
06afe9c0f4
|
Merge pull request #9816 from erik-krogh/msgConsis
Make alert messages consistent across languages
|
2022-08-25 15:20:01 +02:00 |
|
github-actions[bot]
|
0f63bc077f
|
Release preparation for version 2.10.4
|
2022-08-25 12:52:26 +00:00 |
|
Ian Lynagh
|
3fcfd32eb1
|
Make *.ql non-executable
|
2022-08-24 16:55:11 +01:00 |
|
Ian Lynagh
|
b9a4b5ab9a
|
Make *.qlref non-executable
|
2022-08-24 16:53:16 +01:00 |
|
Ian Lynagh
|
344863d896
|
Make *.qhelp non-executable
|
2022-08-24 16:38:15 +01:00 |
|
erik-krogh
|
1c0f2251e2
|
Merge branch 'main' into msgConsis
|
2022-08-24 14:38:57 +02:00 |
|
Michael Nebel
|
c514c8838d
|
Merge pull request #9867 from michaelnebel/csharp/nosummary
C#: Negative summaries (ie. no flow through)
|
2022-08-24 12:06:05 +02:00 |
|
Arthur Baars
|
acff279e8d
|
Merge pull request #10147 from github/aibaars-fix-go
Go: fix tracing spec for windows
|
2022-08-24 11:17:34 +02:00 |
|
Michael Nebel
|
761ed283b6
|
C#/Java/Ruby/Swift: Address review comments.
|
2022-08-24 09:58:54 +02:00 |
|
Michael Nebel
|
2e273f2273
|
C#: Re-arange the import order, such that CsvValidation follows ExternalFlow directly.
|
2022-08-24 09:58:54 +02:00 |
|
Michael Nebel
|
37976d56bc
|
C#/Java/Go/Swift: Move CsvValidation back into ExternalFlow.
|
2022-08-24 09:58:53 +02:00 |
|
Michael Nebel
|
2c2e09b20b
|
Go: Add summary model validation on the kind column.
|
2022-08-24 09:58:52 +02:00 |
|
Michael Nebel
|
37f01fe10e
|
Go: Re-factor CSV validation into separate file.
|
2022-08-24 09:58:52 +02:00 |
|
Arthur Baars
|
8996c54b8e
|
Go: fix tracing spec for windows
|
2022-08-23 20:00:10 +02:00 |
|
erik-krogh
|
f7846a598e
|
add change-notes
|
2022-08-23 07:54:01 +02:00 |
|
erik-krogh
|
7e0bd5bde4
|
update expected output of tests
|
2022-08-22 21:41:47 +02:00 |
|
erik-krogh
|
20625ae60d
|
update {js/go/py}/xpath-injection to match csharp/java
|
2022-08-22 21:41:46 +02:00 |
|
erik-krogh
|
2d0a4c3d83
|
update {go/py}/stack-trace-exposure to match javascript
|
2022-08-22 21:41:46 +02:00 |
|
erik-krogh
|
151529d08f
|
correct the query-id of the experimental go/pam-auth-bypass query
|
2022-08-22 21:41:46 +02:00 |
|
erik-krogh
|
3553f3d9b8
|
update {rb/py/js/go}/path-injection to match java/csharp
|
2022-08-22 21:41:45 +02:00 |
|
erik-krogh
|
28083ebe09
|
run the implicit-this patch
|
2022-08-22 21:23:31 +02:00 |
|
erik-krogh
|
a593a52b5e
|
add missing qldoc (that was already missing?)
|
2022-08-22 21:22:39 +02:00 |
|
erik-krogh
|
e89e0eb7fb
|
make some acronyms camelCase
|
2022-08-22 21:22:35 +02:00 |
|
Chris Smowton
|
25195bb0ba
|
Merge pull request #10103 from smowton/smowton/feature/golang-1.19-support
Go: support go 1.19
|
2022-08-22 16:49:11 +01:00 |
|