Tony Torralba
160d89fb4e
Add qhelp examples
2023-01-09 18:01:07 +01:00
Tony Torralba
33029b0ed8
Fix sanitizer QLDoc
2023-01-09 18:01:07 +01:00
Tony Torralba
7e0869965c
Uncomment tests
2023-01-09 18:01:07 +01:00
Tony Torralba
c1f19dd145
Add stub so that tests work on Linux
2023-01-09 18:01:07 +01:00
Tony Torralba
b203a9eb6e
Add a sanitizer for OSLogPrivacy options
...
Add test cases to verify how the sanitizer behaves depending on the argument type and the privacy option being used.
2023-01-09 18:01:07 +01:00
Tony Torralba
aad56097ac
Add Cleartext Loggin query for Swift.
...
With some caveats: see TODO comments and failing tests.
2023-01-09 18:01:07 +01:00
Rasmus Lerchedahl Petersen
c142495a8b
python: simplify code
2023-01-09 17:51:45 +01:00
Rasmus Lerchedahl Petersen
5fe62e293a
python: fix bug, add clarifying comment
2023-01-09 17:45:50 +01:00
erik-krogh
9f100ef2c6
add local flow when recognizing Object.assign calls for library-inputs
2023-01-09 17:44:11 +01:00
Tony Torralba
eb78661c1f
Add missing SQL injection tests for the GRDB SQL class
2023-01-09 17:36:54 +01:00
erik-krogh
90f9e3f825
recognize an infinite repetition of a char-class like regex as a char-class like regex
2023-01-09 17:25:08 +01:00
Sarita Iyer
be06469a19
Merge pull request #11835 from github/saritai/pr/qlx
...
Docs: CodeQL pack compatibility
2023-01-09 10:15:08 -05:00
Ed Minnix
909b1d70d9
Rename files to say "Allow" instead of "Permit"
2023-01-09 10:11:03 -05:00
Ed Minnix
c723df3ca7
Fix alert message in expected file
2023-01-09 10:08:19 -05:00
erik-krogh
785c21f462
fix bad join-order in js/missing-this-qualifier
2023-01-09 16:06:26 +01:00
Ed Minnix
f626d4794a
Change wording from "permit" to "allow" in id and name
2023-01-09 10:03:12 -05:00
Ed Minnix
972b4629c8
Fix typo in change note
2023-01-09 10:01:38 -05:00
Ed Minnix
64668883a4
Add good example to documentation
2023-01-09 09:59:38 -05:00
Ed Minnix
2ec73c50f9
Mention WebView in alert message
2023-01-09 09:55:09 -05:00
Arthur Baars
664fdc3b2a
Merge pull request #11815 from aibaars/too-many-fields
...
Ruby: use record_parse_error_for_node to report extractor error
2023-01-09 15:40:19 +01:00
Mathias Vorreiter Pedersen
0f93e5c907
Merge pull request #11781 from MathiasVP/as-expr-for-arrays
...
C++: Map more expressions to `OperandNode`s
2023-01-09 14:38:22 +00:00
Erik Krogh Kristensen
5157d4df7b
Merge pull request #11581 from erik-krogh/stdin
...
Rb: add stdin as source for unsafe-deserialization
2023-01-09 13:57:47 +01:00
Chris Smowton
e9bbb5d7fa
Merge pull request #11730 from smowton/smowton/admin/improve-sql-unescaped-docs
...
Java: improve naming and description of SqlUnescaped.ql
2023-01-09 12:50:27 +00:00
yoff
c01ce955ba
Merge pull request #11778 from yoff/shared/inline-tests
...
Shared: Inline test expectations
2023-01-09 13:21:18 +01:00
Chris Smowton
2e26fb1171
Merge pull request #11819 from smowton/smowton/admin/port-java-autobuilder-tests
...
Add Java autobuilder integration tests
2023-01-09 12:17:39 +00:00
Chris Smowton
efe23c1da7
Note that alerts should not be re-raised
2023-01-09 10:56:13 +00:00
Chris Smowton
994a46289f
Add change note
2023-01-09 10:56:13 +00:00
Chris Smowton
ef27f9fe96
Replace one more mention of escaping
2023-01-09 10:56:13 +00:00
Chris Smowton
45c732a6f9
Java: improve naming and description of SqlUnescaped.ql
...
Since the main thing it's objecting to is concatenation not lack of escaping (in particular it doesn't look for escaping sanitizers), rename and re-describe it accordingly.
2023-01-09 10:56:13 +00:00
Mathias Vorreiter Pedersen
381301e552
Update swift/ql/lib/swift.qll
...
Co-authored-by: Geoffrey White <40627776+geoffw0@users.noreply.github.com >
2023-01-09 10:32:52 +00:00
Geoffrey White
9333e80def
Swift: Add getVaList stub to the test.
2023-01-09 10:29:37 +00:00
Taus
06ea249997
Merge pull request #11820 from yoff/python/fix-downgrades
...
Python: fix downgrade script
2023-01-09 11:24:41 +01:00
Mathias Vorreiter Pedersen
6bb09ef289
Swift: Add integral type classes.
2023-01-09 09:43:09 +00:00
Mathias Vorreiter Pedersen
9be9636816
Merge pull request #11670 from atorralba/atorralba/swift/predicate-injection
...
Swift: Add predicate injection query
2023-01-09 08:54:13 +00:00
erik-krogh
d67e756f42
make the import of Gem private
2023-01-09 09:13:01 +01:00
Harry Maclean
5b117084db
Merge pull request #11534 from hmac/array-inclusion-barrier-guard-constant
...
Ruby: Make array inclusion barrier more sensitive
2023-01-09 20:57:09 +13:00
Paolo Tranquilli
82d9edfabf
Merge branch 'main' into redsun82/swift-open-redirection
2023-01-09 08:44:02 +01:00
Sarita Iyer
f15291a9de
Change the order of sections
2023-01-06 15:00:43 -05:00
Sarita Iyer
d079c7a5ef
Apply suggestions from code review
...
Co-authored-by: Felicity Chapman <felicitymay@github.com >
2023-01-06 14:57:24 -05:00
Jami Cogswell
a3c7b2c3a2
Java: move java.lang.Math.min to the correct file
2023-01-06 14:35:09 -05:00
Geoffrey White
bb50a99b36
Swift: Additional test cases.
2023-01-06 18:48:46 +00:00
Geoffrey White
b5dd815249
Swift: Flow through optional binding.
2023-01-06 18:34:22 +00:00
Geoffrey White
c598d9b882
Swift: Generalize an SSA case for variables declared in Patterns.
2023-01-06 18:34:22 +00:00
Geoffrey White
8a9a69fa00
Swift: Add more dataflow tests for of optionals, patterns, enums.
2023-01-06 18:34:22 +00:00
Jeroen Ketema
a743fbcc95
Merge pull request #11799 from jketema/case-uncomment
...
C++: Uncomment cases in dbscheme
2023-01-06 19:26:53 +01:00
Sarita Iyer
d7bf2d9375
docs for codeql pack compatibility
2023-01-06 12:07:24 -05:00
Geoffrey White
04f87a26a9
Swift: Test layout change.
2023-01-06 16:52:54 +00:00
Sarita Iyer
a9867a266e
fixed link
2023-01-06 11:50:07 -05:00
Sarita Iyer
d68cfc7d4f
codeql pack compatibility docs
2023-01-06 11:17:02 -05:00
erik-krogh
538adb47a3
update expected output for DuplicateCharacterInSet
2023-01-06 15:41:57 +01:00
