Alex Ford
|
8db23dc775
|
Ruby: refine ActiveRecord update_all as an SQL sink
|
2023-10-30 09:47:16 +00:00 |
|
github-actions[bot]
|
3b3c036626
|
Release preparation for version 2.15.1
|
2023-10-16 17:49:39 +00:00 |
|
Harry Maclean
|
1297acf5b1
|
Merge pull request #14216 from hmac/hmac-graphql-enum
Ruby: Restrict GraphQL remote flow sources
|
2023-10-13 11:31:50 +01:00 |
|
Henry Mercer
|
1a370bfbbe
|
Merge pull request #14443 from github/post-release-prep/codeql-cli-2.15.0
Post-release preparation for codeql-cli-2.15.0
|
2023-10-11 17:39:04 +01:00 |
|
erik-krogh
|
a7ab9fd93b
|
add change-notes
|
2023-10-09 09:43:06 +02:00 |
|
github-actions[bot]
|
9fe993bec3
|
Release preparation for version 2.15.0
|
2023-10-04 14:15:27 +00:00 |
|
Henry Mercer
|
f3847b3f51
|
Merge branch 'main' into henrymercer/rc-3.11-mergeback
|
2023-10-03 16:30:23 +01:00 |
|
github-actions[bot]
|
0a3670727f
|
Release preparation for version 2.14.6
|
2023-09-19 11:40:30 +00:00 |
|
Harry Maclean
|
2053ee00ab
|
Ruby: Add change note
|
2023-09-18 16:02:09 +01:00 |
|
Tom Hvitved
|
6de315d086
|
Add change note
|
2023-09-06 11:01:54 +02:00 |
|
github-actions[bot]
|
abf2b12b1c
|
Release preparation for version 2.14.4
|
2023-09-05 16:56:14 +00:00 |
|
github-actions[bot]
|
098dfb4242
|
Release preparation for version 2.14.3
|
2023-08-18 14:48:15 +00:00 |
|
Harry Maclean
|
222aa41bbf
|
Merge pull request #13938 from hmac/splat-flow-2
Ruby: More precise flow into splat parameters
|
2023-08-18 12:07:58 +01:00 |
|
Harry Maclean
|
d45e9101ba
|
Ruby: Add change note
|
2023-08-14 11:20:58 +01:00 |
|
Henry Mercer
|
1213eba630
|
Merge branch 'main' into post-release-prep/codeql-cli-2.14.2
|
2023-08-11 13:54:55 +01:00 |
|
Harry Maclean
|
6f3e2cdde3
|
Ruby: Add change note
|
2023-08-09 15:01:40 +01:00 |
|
github-actions[bot]
|
79c90fa36a
|
Release preparation for version 2.14.2
|
2023-08-07 18:08:52 +00:00 |
|
github-actions[bot]
|
c936a920b0
|
Release preparation for version 2.14.1
|
2023-07-20 16:32:27 +00:00 |
|
Anders Schack-Mulligen
|
e72a0b2f8c
|
Dataflow: Add change notes.
|
2023-07-19 11:41:15 +02:00 |
|
Alex Ford
|
27ee72c265
|
Merge remote-tracking branch 'origin/main' into rb/rack-env-query-string
|
2023-07-17 14:11:25 +01:00 |
|
Alex Ford
|
ab1f341aa6
|
Merge pull request #13566 from alexrford/rb/rack-params
Ruby: add `Rack::Request` params and cookies as remote input sources
|
2023-07-17 14:07:20 +01:00 |
|
Ed Minnix
|
63299688d5
|
Add change notes for default implementations of isBarrier and isAdditionalFlowStep
|
2023-07-12 15:21:16 -04:00 |
|
Asger F
|
d88f557dbe
|
Merge pull request #13683 from asgerf/rb/api-graph-noobject
Ruby: exclude Object class from API graph
|
2023-07-10 12:51:15 +02:00 |
|
github-actions[bot]
|
6484ee106e
|
Release preparation for version 2.14.0
|
2023-07-07 08:22:14 +00:00 |
|
Asger F
|
86b5f0adc7
|
Revert "Merge pull request #13620 from github/revert-13496-rb/tracking-on-demand"
This reverts commit 133de56ac2, reversing
changes made to 28a8e48351.
|
2023-07-07 09:42:34 +02:00 |
|
Dave Bartolomeo
|
2bb9adfbf1
|
Merge remote-tracking branch 'origin/main' into dbartol/mergeback-3.10
|
2023-07-06 10:00:46 -04:00 |
|
Alex Ford
|
ec2c9f20f6
|
Ruby: rack - env['QUERY_STRING'] changenote
|
2023-07-05 15:46:56 +01:00 |
|
Alex Ford
|
2b0b2855e1
|
Ruby: rack - Rack::Response changenote
|
2023-07-05 15:15:34 +01:00 |
|
github-actions[bot]
|
9d7987f822
|
Release preparation for version 2.13.5
|
2023-06-29 09:26:18 +00:00 |
|
Alex Ford
|
6008c7bee4
|
Ruby: rack - change note for response and app recognition improvements
|
2023-06-23 16:16:15 +01:00 |
|
Alex Ford
|
24e83165ee
|
Merge pull request #13289 from alexrford/rb/rack-redirect
Ruby: rack - model redirect responses
|
2023-06-22 13:45:02 +01:00 |
|
Henry Mercer
|
5afdaf8fe1
|
Merge pull request #13525 from github/rc/3.10
Merge `rc/3.10` back to `main`
|
2023-06-21 17:13:36 +01:00 |
|
Jeroen Ketema
|
d82c3ce11a
|
Ruby: Rewrite InlineFlowTest as a parameterized module
|
2023-06-15 10:52:23 +02:00 |
|
Arthur Baars
|
fad73d71e5
|
Merge pull request #13307 from hmac/amammad-ruby-YAMLunsafeLoad
Ruby: Add YAML unsafe deserialization sinks
|
2023-06-12 10:43:37 +02:00 |
|
github-actions[bot]
|
e4be303a23
|
Release preparation for version 2.13.4
|
2023-06-08 19:57:37 +00:00 |
|
Alex Ford
|
397a809426
|
Merge remote-tracking branch 'origin/main' into rb/rack-redirect
|
2023-06-08 12:07:57 +01:00 |
|
Alex Ford
|
c531b94594
|
Ruby: add a change note for rack redirect support
|
2023-06-08 11:59:10 +01:00 |
|
Erik Krogh Kristensen
|
6ba7f9a238
|
Merge pull request #13352 from erik-krogh/once-again-deps-not-py-cpp
delete old deprecations
|
2023-06-07 13:00:57 +02:00 |
|
Arthur Baars
|
7324d1705e
|
Merge branch 'main' into amammad-ruby-YAMLunsafeLoad
|
2023-06-06 12:09:06 +02:00 |
|
erik-krogh
|
ac9ede4ec0
|
add change-notes
|
2023-06-02 11:58:11 +02:00 |
|
Alex Ford
|
d09f6d318c
|
Merge branch 'main' into maikypedia/sqli-sink
|
2023-06-01 15:02:44 +01:00 |
|
Alex Ford
|
4794066d3c
|
Merge branch 'main' into maikypedia/sqli-sink-2
|
2023-06-01 13:04:54 +01:00 |
|
Arthur Baars
|
490d22d123
|
Merge remote-tracking branch 'upstream/main' into post-release-prep/codeql-cli-2.13.3
|
2023-05-30 21:31:28 +02:00 |
|
Harry Maclean
|
562065f29e
|
Ruby: Add change note
|
2023-05-27 01:20:09 +00:00 |
|
Maiky
|
27c1e47ece
|
Update ruby/ql/lib/change-notes/2023-05-06-pg.md
Co-authored-by: Jorge <46056498+jorgectf@users.noreply.github.com>
|
2023-05-24 01:44:51 +02:00 |
|
Maiky
|
ad5355a04a
|
Pg Library, change note and Frameworks.qll
|
2023-05-23 19:49:03 +02:00 |
|
github-actions[bot]
|
7aa23cf11d
|
Release preparation for version 2.13.3
|
2023-05-22 20:47:00 +00:00 |
|
Maiky
|
3960853af0
|
CWE-089 Add Sequel SQL Injection Sink
|
2023-05-07 23:56:56 +02:00 |
|
Maiky
|
6a3d995b35
|
Add Mysql2 as SQL Injection Sink
|
2023-05-06 12:25:25 +02:00 |
|
Alex Ford
|
e7213e92cf
|
Merge remote-tracking branch 'origin/main' into rb/sqlite3
|
2023-05-03 15:18:07 +01:00 |
|