Maiky
|
2d88ac1846
|
Suggested Changes
|
2023-07-27 23:40:52 +02:00 |
|
Maiky
|
f5e17d7d39
|
Add additional Filter Methods
|
2023-07-27 23:04:55 +02:00 |
|
Owen Mansel-Chan
|
9b2b58a823
|
Sync files
|
2023-07-26 21:48:10 +01:00 |
|
Brandon Stewart
|
f241498cab
|
correct additional pascalcase issue
|
2023-07-26 17:55:56 +00:00 |
|
Brandon Stewart
|
1a83554b0c
|
correct typo
|
2023-07-26 17:54:42 +00:00 |
|
Brandon Stewart
|
346a2f269e
|
Update UnsafeHmacComparison.ql
|
2023-07-26 13:48:42 -04:00 |
|
Brandon Stewart
|
42adbe0cd4
|
address linter
|
2023-07-26 17:43:34 +00:00 |
|
Brandon Stewart
|
adddc58b61
|
address linter
|
2023-07-26 17:38:06 +00:00 |
|
Brandon Stewart
|
494e7d9a3f
|
add unsafe HMAC comparison query and qlhelp file
|
2023-07-26 17:28:22 +00:00 |
|
github-actions[bot]
|
f91b7a9342
|
Post-release preparation for codeql-cli-2.14.1
|
2023-07-21 16:16:25 +00:00 |
|
github-actions[bot]
|
c936a920b0
|
Release preparation for version 2.14.1
|
2023-07-20 16:32:27 +00:00 |
|
Anders Schack-Mulligen
|
e72a0b2f8c
|
Dataflow: Add change notes.
|
2023-07-19 11:41:15 +02:00 |
|
Anders Schack-Mulligen
|
ae24d68b5d
|
C/C++/C#/Java/Python/Ruby/Swift: Adjust expected output.
|
2023-07-19 11:41:15 +02:00 |
|
Anders Schack-Mulligen
|
95d17045c9
|
Dataflow: Sync.
|
2023-07-19 11:41:15 +02:00 |
|
Alex Ford
|
27ee72c265
|
Merge remote-tracking branch 'origin/main' into rb/rack-env-query-string
|
2023-07-17 14:11:25 +01:00 |
|
Alex Ford
|
06aefe01b8
|
Update ruby/ql/lib/codeql/ruby/frameworks/rack/internal/App.qll
Co-authored-by: Asger F <asgerf@github.com>
|
2023-07-17 14:08:44 +01:00 |
|
Alex Ford
|
ab1f341aa6
|
Merge pull request #13566 from alexrford/rb/rack-params
Ruby: add `Rack::Request` params and cookies as remote input sources
|
2023-07-17 14:07:20 +01:00 |
|
Maiky
|
3f36d3244b
|
Fix singleton set literal
|
2023-07-15 00:18:21 +02:00 |
|
Alex Ford
|
bdf1aa0807
|
Merge pull request #13746 from asgerf/rb/fix-rack-todo
Ruby: Use API graphs asCallable() instead of Proc.new workaround
|
2023-07-14 16:29:00 +01:00 |
|
Alex Ford
|
d89c10dd85
|
Merge pull request #13130 from maikypedia/maikypedia/xpath-injection
Ruby : XPath Injection Query (CWE-643)
|
2023-07-14 14:10:09 +01:00 |
|
Asger F
|
2962727f0f
|
Ruby: Use API graphs asCallable() instead of Proc.new workaround
|
2023-07-14 13:50:07 +02:00 |
|
Alex Ford
|
dbb55ff2b4
|
Ruby: fix xpathinjection deprecation warnings
|
2023-07-14 12:45:27 +01:00 |
|
Alex Ford
|
a524735236
|
Merge branch 'main' into maikypedia/ldap-injection
|
2023-07-14 12:05:17 +01:00 |
|
Alex Ford
|
c0009379d1
|
qlformat
|
2023-07-14 12:04:03 +01:00 |
|
Asger F
|
31bed36231
|
Merge pull request #13612 from asgerf/rb/api-graph-explicit-proc-lambda
Ruby: Improve support for explicit proc-creation
|
2023-07-14 13:02:44 +02:00 |
|
Anders Schack-Mulligen
|
80a799df01
|
Merge pull request #13735 from aschackmull/dataflow/forcehighprecision-fix
Dataflow: Fix forceHighPrecision for length-2 prefixes.
|
2023-07-14 11:42:35 +02:00 |
|
Asger F
|
f1c82b650f
|
Ruby: Implement Fuzzy for Ruby
|
2023-07-13 15:42:34 +02:00 |
|
Asger F
|
919cb07c1e
|
Sync ApiGraphModels.qll
|
2023-07-13 15:42:33 +02:00 |
|
Erik Krogh Kristensen
|
4f1c12e9dc
|
apply suggestion from review
Co-authored-by: Max Schaefer <54907921+max-schaefer@users.noreply.github.com>
|
2023-07-13 14:49:25 +02:00 |
|
erik-krogh
|
1fe66232c6
|
suggestions based on review: add a popular library example for HTML-sanitization, and use the old text about ../ replacements
|
2023-07-13 14:28:11 +02:00 |
|
Asger F
|
18762db0fb
|
Ruby: factor out isProcCreationCall
|
2023-07-13 11:53:16 +02:00 |
|
Asger F
|
8d2dba18c0
|
Ruby: change note
|
2023-07-13 11:53:16 +02:00 |
|
Asger F
|
f232669ea5
|
Ruby: support Proc.new alongside 'proc' and 'lambda'
|
2023-07-13 11:53:16 +02:00 |
|
Asger F
|
194fe85442
|
Ruby: Use asCallable() to generate epsilon edges
|
2023-07-13 11:53:16 +02:00 |
|
Asger F
|
452fbe7e8f
|
Ruby: add test showing lack of lambda handling
|
2023-07-13 11:53:16 +02:00 |
|
Anders Schack-Mulligen
|
91de43f918
|
C#/Java/Ruby: Remove superfluous module members.
|
2023-07-13 11:38:35 +02:00 |
|
Anders Schack-Mulligen
|
837df2ad37
|
Dataflow: Sync.
|
2023-07-13 10:55:39 +02:00 |
|
Maiky
|
119a32fe0e
|
fix naming error
|
2023-07-12 23:54:58 +02:00 |
|
Maiky
|
db0f38fe06
|
Update XpathInjectionQuery.qll
|
2023-07-12 23:46:47 +02:00 |
|
Ed Minnix
|
63299688d5
|
Add change notes for default implementations of isBarrier and isAdditionalFlowStep
|
2023-07-12 15:21:16 -04:00 |
|
Ed Minnix
|
94638c9997
|
Ruby: Add default implementation of StateConfigSig::isAdditionalFlowStep/4
|
2023-07-12 15:06:25 -04:00 |
|
Ed Minnix
|
8a7081753d
|
Ruby: Add default implementation of StateConfigSig::isBarrier/2
|
2023-07-12 15:06:25 -04:00 |
|
Maiky
|
1559b7da3c
|
Update Frameworks.qll
|
2023-07-12 17:45:45 +02:00 |
|
Maiky
|
c255f8717d
|
Change hasFlowPath to flowPath
Co-authored-by: Alex Ford <alexrford@users.noreply.github.com>
|
2023-07-11 19:20:54 +02:00 |
|
Maiky
|
c4f72dd2f2
|
Change make to global
Co-authored-by: Alex Ford <alexrford@users.noreply.github.com>
|
2023-07-11 19:20:34 +02:00 |
|
Mathias Vorreiter Pedersen
|
a4c0063ab1
|
Merge pull request #13679 from MathiasVP/speedup-big-step
DataFlow: Speed up the big step relation
|
2023-07-11 09:44:17 +01:00 |
|
Asger F
|
d88f557dbe
|
Merge pull request #13683 from asgerf/rb/api-graph-noobject
Ruby: exclude Object class from API graph
|
2023-07-10 12:51:15 +02:00 |
|
Mathias Vorreiter Pedersen
|
44f23bfa59
|
Merge pull request #13690 from github/post-release-prep/codeql-cli-2.14.0
Post-release preparation for codeql-cli-2.14.0
|
2023-07-07 23:39:38 +01:00 |
|
github-actions[bot]
|
13cf054a9d
|
Post-release preparation for codeql-cli-2.14.0
|
2023-07-07 14:55:41 +00:00 |
|
Asger F
|
b14cac6b28
|
Merge pull request #12689 from asgerf/rb/perf-diagnostics
Ruby: performance diagnostics query
|
2023-07-07 14:25:56 +02:00 |
|