3487 Commits

Author	SHA1	Message	Date
erik-krogh	17f7ba2a8f	rewrite the taint-step for join() to a flowsummary	2023-02-15 12:34:59 +01:00
erik-krogh	d2bd70dc33	Merge branch 'main' into more-shell-taint	2023-02-15 11:35:58 +01:00
Alvaro Muñoz	4644a88b89	address code review comments	2023-02-14 14:27:17 +01:00
Tom Hvitved	2113c3c3d9	Ruby: Remove NumberUtils.qll	2023-02-13 15:59:50 +01:00
Anders Schack-Mulligen	e877b161d8	Merge pull request #12124 from hvitved/dataflow/stage1-dispatch ... Data flow: Call context virtual dispatch pruning in stage 1	2023-02-13 13:13:43 +01:00
Arthur Baars	457a2bb2a2	Merge pull request #12093 from aibaars/oneline-match ... Ruby: add support for one-line pattern matches	2023-02-13 12:38:28 +01:00
Erik Krogh Kristensen	2f404df17c	Merge pull request #10782 from erik-krogh/rbPoly ... Ruby: add library input as a source for `rb/polynomial-redos`	2023-02-13 12:26:07 +01:00
Erik Krogh Kristensen	26d5fb2412	Merge pull request #11824 from erik-krogh/secondMissAnchor ... RB: add query detecting validators that use badly anchored regular expressions on library/remote input	2023-02-13 11:26:05 +01:00
erik-krogh	634087b417	Merge branch 'main' into rbPoly	2023-02-13 10:46:00 +01:00
Rasmus Wriedt Larsen	5235964b07	sync files	2023-02-13 10:44:12 +01:00
Tom Hvitved	f7a5a33474	Address review comment	2023-02-13 09:01:15 +01:00
Arthur Baars	679f02c274	Address comments	2023-02-10 18:08:30 +01:00
Arthur Baars	07947e6528	Address comments	2023-02-09 12:02:14 +01:00
Arthur Baars	78ad9d67b4	Address comments	2023-02-08 13:40:46 +01:00
Tom Hvitved	8e8897b08b	Data flow: Sync files	2023-02-07 15:15:04 +01:00
Tom Hvitved	10534b62c9	Data flow: Call context virtual dispatch pruning in stage 1	2023-02-07 15:14:27 +01:00
Tom Hvitved	984729f9b0	Merge pull request #12117 from hvitved/ruby/delay-location-to-string ... Ruby: Avoid computing `Location::toString` in full	2023-02-07 12:42:03 +01:00
Alvaro Muñoz	642a138eaa	Update Twirp.qll	2023-02-07 10:44:48 +01:00
Tom Hvitved	c0e3186607	Ruby: Avoid computing Location::toString in full	2023-02-07 10:06:47 +01:00
Mathias Vorreiter Pedersen	00fe448e3a	Merge pull request #12072 from aschackmull/dataflow/stage3-perf ... Dataflow: Fix join in `fwdFlowRead` (take 2)	2023-02-06 10:43:11 +00:00
Arthur Baars	e382d6d000	Ruby: update stats	2023-02-06 10:28:19 +01:00
Arthur Baars	ec46f33a01	Ruby: add change note	2023-02-06 10:17:19 +01:00
Arthur Baars	4af0c4bb03	Ruby: desugar one-line pattern matches	2023-02-06 10:17:19 +01:00
Arthur Baars	edbba85b96	Ruby: add one-line pattern matches to AST	2023-02-06 10:17:18 +01:00
Arthur Baars	e390ca50b0	Ruby: upgrade/downgrade scripts	2023-02-06 10:17:18 +01:00
Arthur Baars	90c51ef404	Ruby: re-generate dbscheme and library	2023-02-06 10:17:18 +01:00
Alex Ford	7768026e70	Merge branch 'main' into js-use-shared-cryptography	2023-02-03 15:18:30 +00:00
Alex Ford	6c35feaa98	ConceptsShared: add a default implementation of BlockMode CryptographicOperation#getBlockMode() for compatibility with external code	2023-02-03 14:39:32 +00:00
Alex Ford	b968b59afc	CryptoAlgorithms: make CryptographicAlgorithm#matchesName hold only if that algorithm is the most specific match	2023-02-03 14:15:32 +00:00
Alvaro Muñoz	3a9d650cb9	add qldocs for member predicates	2023-02-03 10:09:16 +01:00
Alvaro Muñoz	dd31be43e0	Support for Twirp framework	2023-02-03 09:35:22 +01:00
github-actions[bot]	faf21f3edb	Post-release preparation for codeql-cli-2.12.2	2023-02-02 23:01:04 +00:00
Alex Ford	1435ef1862	CryptoAlgorithms: make CryptographicAlgorithm#matchesName split on underscores	2023-02-02 20:30:30 +00:00
Alex Ford	e5dfbe2c8d	ConceptsShared: Add BlockMode#matchesString(string) predicate	2023-02-02 20:27:52 +00:00
Alex Ford	61095b3c58	ConceptsShared: Add deprecated DataFlow::Node CryptographicOperation#getInput() predicate	2023-02-02 20:27:05 +00:00
Anders Schack-Mulligen	67d4ed53b9	Dataflow: Sync.	2023-02-02 16:33:00 +01:00
Jeroen Ketema	3cf5107b45	Apply suggestions from code review	2023-02-02 15:48:29 +01:00
github-actions[bot]	a4fa984792	Release preparation for version 2.12.2	2023-02-02 14:34:55 +00:00
Harry Maclean	da45d3aa7f	Ruby: Fix string comparison barrier guard ... `strNode` was not properly restricted for some cases.	2023-02-01 14:40:53 +13:00
Harry Maclean	0d68d88741	Merge pull request #11934 from hmac/actioncontroller-filters	2023-02-01 09:10:30 +13:00
Harry Maclean	69ed00cdf1	Ruby: QL4QL fix	2023-01-31 11:06:32 +13:00
erik-krogh	c2e8206090	add more array taint steps that taint the entire array	2023-01-30 21:14:27 +01:00
erik-krogh	962465f77a	add array-taint-steps to unsafe-shell-command-construction	2023-01-30 16:56:03 +01:00
erik-krogh	a4c42aa14b	more custom array steps from unsafe-code-construction to a utility predicate	2023-01-30 16:46:13 +01:00
erik-krogh	e01002368f	add query detecting validators that use badly anchored regular expressions on library/remote input	2023-01-30 16:34:20 +01:00
erik-krogh	f04a9cb523	Merge branch 'main' into rbRegConcept	2023-01-30 11:05:40 +01:00
Harry Maclean	f7cdd430a2	Ruby: Small fix	2023-01-30 21:55:19 +13:00
Harry Maclean	7778524e08	Ruby: Refactor	2023-01-30 21:52:59 +13:00
Harry Maclean	5e9210fcea	Ruby: use getAnAncestor	2023-01-30 21:21:38 +13:00
Harry Maclean	708e303c01	Ruby: Model except: with a const argument	2023-01-30 21:17:31 +13:00