Ahmed Farid
|
275ed0d6e5
|
Update select statement
|
2022-08-31 12:37:36 +01:00 |
|
Ahmed Farid
|
740bf716cb
|
Update TimingAttack.qll
|
2022-08-31 12:22:01 +01:00 |
|
Ahmed Farid
|
ca28d79541
|
Prevent crosstalk between the configurations
|
2022-08-31 11:15:39 +01:00 |
|
Ahmed Farid
|
133a3c19f0
|
Add more source of crypto call
|
2022-08-31 11:09:24 +01:00 |
|
Asger F
|
5ad6c05a9c
|
Merge pull request #10205 from asgerf/mad-generics
Support type variables in MaD typings
|
2022-08-30 18:07:39 +02:00 |
|
Ahmed Farid
|
23f268f3b9
|
Import Django and Flask model
|
2022-08-30 16:39:40 +01:00 |
|
Ahmed Farid
|
de58d0f024
|
Update the subclasses of ClientSuppliedSecret class
|
2022-08-30 16:34:43 +01:00 |
|
Ahmed Farid
|
0177cd810e
|
Update suspicious()
|
2022-08-30 13:58:54 +01:00 |
|
Asger F
|
dd44187aed
|
Sync files again
|
2022-08-30 14:08:33 +02:00 |
|
Asger F
|
d5d1365104
|
Synchronize ApiGraphModels.qll
|
2022-08-30 14:07:37 +02:00 |
|
erik-krogh
|
7fd426e748
|
print a correct range for ranges that doesn't contain any alpha-numeric chars
|
2022-08-30 13:57:11 +02:00 |
|
Erik Krogh Kristensen
|
8f0b999c31
|
Merge pull request #10207 from erik-krogh/fixRank
fix performance issue in the ReDoS query
|
2022-08-30 10:17:11 +02:00 |
|
erik-krogh
|
e2caf3e8c0
|
put a limit on the length of the equivalent range
|
2022-08-30 09:29:22 +02:00 |
|
erik-krogh
|
f47b097d7c
|
put a limit on the length of the equivalent range
|
2022-08-29 21:03:52 +02:00 |
|
Ahmed Farid
|
9995e91bb7
|
Update the name of the class (and its subclasses)
|
2022-08-29 18:57:56 +01:00 |
|
Ahmed Farid
|
b2551a5581
|
Update the name of the class (and its subclasses)
|
2022-08-29 18:30:43 +01:00 |
|
Ahmed Farid
|
baa0fd4148
|
Convert %UserPass% word to lowercase
|
2022-08-29 18:25:26 +01:00 |
|
Ahmed Farid
|
141b65fea8
|
Fix typo
|
2022-08-29 18:18:19 +01:00 |
|
Ahmed Farid
|
199e3d9462
|
Rename the query ID
|
2022-08-29 18:13:45 +01:00 |
|
Ahmed Farid
|
66fb420d00
|
Update PossibleTimingAttackAgainstHash.ql
|
2022-08-29 18:08:09 +01:00 |
|
erik-krogh
|
77949cbeb3
|
add context to the rankState predicate in ExponentialBackTracking.qll
|
2022-08-29 13:42:05 +02:00 |
|
erik-krogh
|
f678c8a967
|
PY: add python change-note
|
2022-08-29 13:08:52 +02:00 |
|
erik-krogh
|
4353937bcf
|
PY: add missing security tags on Python queries
|
2022-08-29 13:08:47 +02:00 |
|
github-actions[bot]
|
3b4ad3c4f1
|
Post-release preparation for codeql-cli-2.10.4
|
2022-08-26 09:32:11 +00:00 |
|
erik-krogh
|
1d1aa7c8b4
|
update some expected output
|
2022-08-25 20:52:30 +02:00 |
|
erik-krogh
|
cc7a9ef97a
|
rename more acronyms
|
2022-08-25 20:52:27 +02:00 |
|
Rasmus Wriedt Larsen
|
0728ecebbb
|
Python: Highlight that import problem is not just a relative problem
|
2022-08-25 15:54:21 +02:00 |
|
Rasmus Wriedt Larsen
|
1ca19533e0
|
Python: Add import problem test from the wild
|
2022-08-25 15:50:55 +02:00 |
|
Ian Lynagh
|
f20825ae55
|
Update python/ql/lib/CHANGELOG.md
Co-authored-by: Jeroen Ketema <93738568+jketema@users.noreply.github.com>
|
2022-08-25 14:25:10 +01:00 |
|
Ian Lynagh
|
b21883292d
|
Update python/ql/lib/change-notes/released/0.5.4.md
Co-authored-by: Jeroen Ketema <93738568+jketema@users.noreply.github.com>
|
2022-08-25 14:24:58 +01:00 |
|
Erik Krogh Kristensen
|
06afe9c0f4
|
Merge pull request #9816 from erik-krogh/msgConsis
Make alert messages consistent across languages
|
2022-08-25 15:20:01 +02:00 |
|
github-actions[bot]
|
0f63bc077f
|
Release preparation for version 2.10.4
|
2022-08-25 12:52:26 +00:00 |
|
yoff
|
9aa8b46cbf
|
Python: remove redundant code
|
2022-08-25 12:48:08 +00:00 |
|
yoff
|
6b4716485b
|
Python: rename file
|
2022-08-25 12:23:09 +00:00 |
|
yoff
|
54dde41329
|
Python: remove example code
|
2022-08-25 12:19:12 +00:00 |
|
Erik Krogh Kristensen
|
ba1ad00d2a
|
Merge pull request #10062 from erik-krogh/redosPrefix
JS: use the shared regular expression libraries in `js/case-sensitive-middleware-path`
|
2022-08-25 12:57:16 +02:00 |
|
yoff
|
800165d63c
|
python: udate deprecated call
|
2022-08-25 09:49:46 +00:00 |
|
yoff
|
d9444d8b08
|
Python: update synced file FlowSummaryImpl.qll
|
2022-08-25 09:31:45 +00:00 |
|
yoff
|
0b5d4c59dd
|
Merge branch 'main' of https://github.com/github/codeql into python-dataflow/flow-summaries-from-scratch
synced files have changed
|
2022-08-25 09:24:05 +00:00 |
|
yoff
|
4a5fa5993d
|
Apply suggestions from code review
Co-authored-by: Rasmus Wriedt Larsen <rasmuswriedtlarsen@gmail.com>
|
2022-08-25 10:47:16 +02:00 |
|
Ian Lynagh
|
3fcfd32eb1
|
Make *.ql non-executable
|
2022-08-24 16:55:11 +01:00 |
|
Ian Lynagh
|
4cd618f81c
|
Make *.expected non-executable
|
2022-08-24 16:51:50 +01:00 |
|
Ian Lynagh
|
501a9b3c6b
|
Make *.qll non-executable
|
2022-08-24 16:36:15 +01:00 |
|
erik-krogh
|
014dcd1454
|
fixup a Python query, it didn't select something with a location
|
2022-08-24 16:23:20 +02:00 |
|
erik-krogh
|
1c0f2251e2
|
Merge branch 'main' into msgConsis
|
2022-08-24 14:38:57 +02:00 |
|
Ahmed Farid
|
93257be913
|
Add Werkzeug source
|
2022-08-23 12:51:48 +01:00 |
|
Ahmed Farid
|
ee05e2ca76
|
add x-gitlab-token to sensitive headers
|
2022-08-23 12:27:20 +01:00 |
|
erik-krogh
|
5e3cb08ed2
|
rename stateInPumpableRegexp to stateInRelevantRegexp
|
2022-08-23 12:40:45 +02:00 |
|
erik-krogh
|
1a7d3ee831
|
update expected output after changing queries
|
2022-08-23 12:35:32 +02:00 |
|
erik-krogh
|
d96d6721ba
|
change the alert message of unused-local-variable
|
2022-08-23 11:15:11 +02:00 |
|