Nora Dimitrijević
|
4482e831d7
|
Java/CommandLineQuery
85a4dd0325/java/ql/src/Security/CWE/CWE-078/ExecTainted.ql
857b51be58/java/ql/src/Security/CWE/CWE-078/ExecUnescaped.ql
b6e56f26c7/java/ql/src/experimental/Security/CWE/CWE-078/ExecTainted.ql
|
2025-10-28 09:39:39 +01:00 |
|
Nora Dimitrijević
|
b023880a0a
|
Java/BrokenCryptoAlgorithmQuery
java/ql/src/Security/CWE/CWE-327/BrokenCryptoAlgorithm.ql
|
2025-10-28 09:39:37 +01:00 |
|
Nora Dimitrijević
|
1129230e10
|
Java/ArithmeticUncontrolledQuery
java/ql/src/Security/CWE/CWE-190/ArithmeticUncontrolled.ql
|
2025-10-28 09:39:34 +01:00 |
|
Nora Dimitrijević
|
a228936c63
|
Java/ArithmeticTainted
java/ql/src/Security/CWE/CWE-190/ArithmeticTainted.ql
|
2025-10-28 09:39:31 +01:00 |
|
Nora Dimitrijević
|
913550f408
|
Java/ArbitraryApkInstallationQuery
java/ql/src/Security/CWE/CWE-094/ArbitraryApkInstallation.ql
|
2025-10-28 09:39:29 +01:00 |
|
Nora Dimitrijević
|
59a8e9b78c
|
Go/InsufficientKeySize
|
2025-10-28 09:39:27 +01:00 |
|
Nora Dimitrijević
|
7722f31cb8
|
Go/DivideByZero
|
2025-10-28 09:39:24 +01:00 |
|
Nora Dimitrijević
|
ba22f0d7d2
|
C#/DontInstallRootCert
|
2025-10-28 09:39:21 +01:00 |
|
Nora Dimitrijević
|
ad31f1ab6d
|
C++/WordexpTainted
Same file usees source and sink as endpoints
|
2025-10-28 09:39:19 +01:00 |
|
Nora Dimitrijević
|
5a1a887fd2
|
Actions/ReusableWorkflowsSummaries
|
2025-10-28 09:39:16 +01:00 |
|
Nora Dimitrijević
|
1243c6362d
|
Actions/ReusableWorkflowsSources
|
2025-10-28 09:39:14 +01:00 |
|
Nora Dimitrijević
|
a972ef7e31
|
Actions/ReusableWorkflowsSinks
Same file uses source as endpoint
|
2025-10-28 09:39:11 +01:00 |
|
Nora Dimitrijević
|
9c24ce0650
|
Actions/CompositeActionsSummaries
Same file uses source as endpoint
|
2025-10-28 09:39:09 +01:00 |
|
Nora Dimitrijević
|
78f2cee51c
|
Actions/CompositeActionsSources
Same file uses source as endpoint
|
2025-10-28 09:39:06 +01:00 |
|
Nora Dimitrijević
|
d36b721513
|
Actions/CompositeActionsSinks
Same file uses source as endpoint
|
2025-10-28 09:38:55 +01:00 |
|
Nora Dimitrijević
|
bb10307303
|
Actions/SecretExfiltrationQuery
actions/ql/src/experimental/Security/CWE-200/SecretExfiltration.ql uses source as endpoint
|
2025-10-28 09:38:38 +01:00 |
|
Nora Dimitrijević
|
890ca8e7d1
|
Actions/RequestForgeryQuery
actions/ql/src/experimental/Security/CWE-918/RequestForgery.ql uses source as endpoint
|
2025-10-28 09:38:21 +01:00 |
|
Nora Dimitrijević
|
3fa8259042
|
Actions/OutputClobberingQuery
actions/ql/src/experimental/Security/CWE-074/OutputClobberingHigh.ql uses source as endpoint
|
2025-10-28 09:38:01 +01:00 |
|
Asger F
|
8d49f26f3d
|
Merge pull request #20397 from asgerf/js/build-artifact-leak-fp
JS: Fix FP in js/build-artifact-leak when keys come from an array of constants
|
2025-10-28 06:40:13 +01:00 |
|
Geoffrey White
|
b76f27d10b
|
Rust: Remove redundant model.
|
2025-10-27 18:47:17 +00:00 |
|
Geoffrey White
|
03204b7881
|
Rust: Accept tests repaired.
|
2025-10-27 17:53:40 +00:00 |
|
Alexander Eyers-Taylor
|
227e1fcbde
|
Merge pull request #20598 from github/alexet/overlay-query-libraries
Java: Make some query libraries local.
|
2025-10-27 17:52:27 +00:00 |
|
Geoffrey White
|
0c92b33b8f
|
Revert "Rust: Generalize more models."
This reverts commit 56811d02ac.
|
2025-10-27 17:47:00 +00:00 |
|
Geoffrey White
|
a468b1d647
|
Rust: Accept regressions spotted by CI.
|
2025-10-27 17:46:01 +00:00 |
|
Paolo Tranquilli
|
630ea7bd0a
|
Merge pull request #20641 from github/redsun82/fix-pytest-build-as-test-windows
Pytest: fix the `build-as-test` mode on Windows
|
2025-10-27 15:47:24 +01:00 |
|
Geoffrey White
|
56811d02ac
|
Rust: Generalize more models.
|
2025-10-27 14:11:09 +00:00 |
|
Idriss Riouak
|
11a7d53002
|
Merge pull request #20657 from github/idrissrio/java-maven-fix
Java: Add integration test to reproduce regression
|
2025-10-27 15:09:41 +01:00 |
|
yoff
|
406e48b3bb
|
java: fix aliasing FP
reorganise code, adding `LockField`
|
2025-10-27 14:30:25 +01:00 |
|
yoff
|
531b994819
|
java: add test for aliasing
found by triage
|
2025-10-27 14:27:32 +01:00 |
|
idrissrio
|
d473b36918
|
Java: Accept new test results after extractor changes
|
2025-10-27 14:26:48 +01:00 |
|
idrissrio
|
714b2ad565
|
Java: Add integration test for maven
|
2025-10-27 14:26:47 +01:00 |
|
Simon Friis Vindum
|
35b4a36f37
|
Merge pull request #20691 from paldepind/cpp/range-analysis-refactor
C++: A few small refactors to the simple range analysis library
|
2025-10-27 14:15:37 +01:00 |
|
Anders Schack-Mulligen
|
31428b2f66
|
Merge pull request #20700 from aschackmull/java/delete-old-ssa-consistency
Java: Remove old SSA consistency queries.
|
2025-10-27 14:12:09 +01:00 |
|
Paolo Tranquilli
|
105f810654
|
Merge pull request #20658 from github/redsun82/csharp-fix-xframe-options-in-location
Csharp: fix `cs/web/missing-x-frame-options` to also consider `location` elements
|
2025-10-27 13:49:09 +01:00 |
|
Geoffrey White
|
bd11873e0d
|
Rust: Generalize a model of futures_io...poll_read.
|
2025-10-27 12:22:13 +00:00 |
|
Chris Smowton
|
2e0e9e0834
|
Merge pull request #20550 from github/smowton/admin/document-rails-5-csrf
Ruby: Update CSRF protection notes in documentation
|
2025-10-27 12:19:16 +00:00 |
|
Anders Schack-Mulligen
|
96fc1e889a
|
Java: Accept .expected file.
|
2025-10-27 13:17:53 +01:00 |
|
Geoffrey White
|
c8b8046302
|
Rust: Generalize a model of alloc::boxed::Box.
|
2025-10-27 12:09:05 +00:00 |
|
Geoffrey White
|
d650ccb74b
|
Rust: Generalize some std::io::Read models.
|
2025-10-27 12:09:04 +00:00 |
|
Anders Schack-Mulligen
|
02a942554d
|
Java: Remove old SSA consistency queries.
|
2025-10-27 12:55:43 +01:00 |
|
Jeroen Ketema
|
47b26ddea4
|
Merge pull request #20446 from github/jketema/swift-6.2
Swift: Make extractor compile with Swift 6.2
|
2025-10-27 12:24:16 +01:00 |
|
Jeroen Ketema
|
be0d405f6d
|
Swift: Update artifacts
|
2025-10-27 11:28:53 +01:00 |
|
yoff
|
83508ba661
|
java: adjust qhelp and examples for SafePublication
|
2025-10-27 11:25:51 +01:00 |
|
Jeroen Ketema
|
aabc8bc38b
|
Swift: Fix typo in change note
|
2025-10-27 10:54:39 +01:00 |
|
Jeroen Ketema
|
2022dd833e
|
Swift: Address review comments
|
2025-10-27 10:48:02 +01:00 |
|
Paolo Tranquilli
|
3f98d32124
|
C#: Update change note for location handling in query
|
2025-10-27 09:51:10 +01:00 |
|
Nicolas Will
|
d4787520fd
|
Merge pull request #20690 from bdrodes/weak_symmetric_cipher_bug
Crypto: Fix bug in weak symmetric cipher query
|
2025-10-24 22:38:07 +02:00 |
|
Nicolas Will
|
e7bd435bee
|
Merge pull request #20696 from bdrodes/bad_mac_decrypt_then_mac
Crypto: Adding bad decrypt then mac order query.
|
2025-10-24 22:07:26 +02:00 |
|
REDMOND\brodes
|
65d0ca9e53
|
Crypto: Simplifying expression for ql-for-ql alert.
|
2025-10-24 14:08:25 -04:00 |
|
REDMOND\brodes
|
0394816756
|
Crypto: typo fix
|
2025-10-24 14:06:52 -04:00 |
|