85654 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
Ahmed Farid	dc89773fe8	Update TimingAttack.qll	2022-07-26 15:30:31 +01:00
Ahmed Farid	c98af44df8	Update Concepts.qll	2022-07-26 15:15:06 +01:00
Ahmed Farid	e6dd21a57d	Update Frameworks.qll	2022-07-26 15:14:02 +01:00
Ahmed Farid	656e8cf44e	Delete CryptographicOperation.qll	2022-07-26 15:13:32 +01:00
Paolo Tranquilli	42f462504e	Merge branch 'main' into redsun82/swift-file-label-caching	2022-07-26 15:20:27 +02:00
Tony Torralba	edc8f6f0f2	Merge pull request #9894 from atorralba/atorralba/scanner_models ... Java: Add CSV models for java.util.Scanner	2022-07-26 12:00:08 +02:00
Tony Torralba	33f5620782	Add more models	2022-07-26 11:06:11 +02:00
Tony Torralba	c56e0f7c0d	Add change note	2022-07-26 10:50:34 +02:00
Tony Torralba	95db81658b	Add CSV models for java.util.Scanner	2022-07-26 10:42:24 +02:00
Andrew Eisenberg	43ae5d4285	Merge pull request #9838 from github/aeisenberg/python-local-ref-def ... Move python contextual queries to lib folders	2022-07-25 09:00:32 -07:00
Chris Smowton	3f6925e7be	Merge pull request #9875 from smowton/smowton/fix/charat-naming ... Kotlin: Special-case String.charAt naming	2022-07-25 16:10:13 +01:00
Chris Smowton	715b0b3fb8	Accept test changes	2022-07-25 15:17:14 +01:00
Chris Smowton	3af2e71932	Merge pull request #9874 from smowton/smowton/fix/kotlin-for-loop-iterators ... Kotlin: fix for-loop iterators over primitive or wildcard types	2022-07-25 15:02:49 +01:00
Jeroen Ketema	8cd0a9d245	Merge pull request #9735 from jketema/inline-yolo ... C++: Remove `pragma[noinline]` from `ResolveGlobalVariable.ql`	2022-07-25 11:25:26 +02:00
Nick Rolfe	a61ec78f03	Merge pull request #9883 from github/nickrolfe/trap-buffering ... Ruby/QL: speed up trap writing by putting BufWriter in front of GzEncoder	2022-07-25 08:48:54 +01:00
Paolo Tranquilli	fe73601a4e	Merge pull request #9805 from github/redsun82/swift-type-repr-collapse ... Swift: collapse `TypeRepr` hierarchy	2022-07-25 09:31:41 +02:00
Harry Maclean	681e58c8e0	Merge pull request #9850 from hmac/hmac/arel ... Ruby: Model Arel.sql	2022-07-25 12:09:18 +12:00
Harry Maclean	cb3ebeedf9	Merge pull request #9696 from thiggy1342/experimental-strong-params ... RB: Experimental strong params query	2022-07-25 12:08:55 +12:00
Harry Maclean	db41ce5f76	Merge pull request #9605 from thiggy1342/experimental-manually-check-request-verb ... RB: Experimental query to manually check request verb	2022-07-25 12:08:11 +12:00
thiggy1342	6cfde70898	Merge branch 'main' into experimental-strong-params	2022-07-22 20:41:33 -04:00
thiggy1342	b4d762fb21	Merge branch 'main' into experimental-manually-check-request-verb	2022-07-22 20:41:23 -04:00
luchua-bc	962069ccff	Add path check in a security context (redirect)	2022-07-22 23:10:52 +00:00
thiggy1342	0c0ba925a7	this one should have no tag	2022-07-22 18:44:03 +00:00
thiggy1342	f39ca1aad2	correct cwe tagged	2022-07-22 18:36:25 +00:00
Robert Marsh	0a35f97074	Merge pull request #9872 from jketema/return-join ... C++: Fix join-order problem in `cpp/return-stack-allocated-memory`	2022-07-22 14:32:10 -04:00
thiggy1342	c2710fb038	Update ruby/ql/src/change-notes/2022-07-21-check-http-verb.md ... Co-authored-by: Harry Maclean <hmac@github.com>	2022-07-22 13:52:00 -04:00
thiggy1342	2c095cf166	Update ruby/ql/src/change-notes/2022-07-21-weak-params.md ... Co-authored-by: Harry Maclean <hmac@github.com>	2022-07-22 13:51:38 -04:00
Jeroen Ketema	a9d95a9418	C++: Remove pragma[noinline] from ResolveGlobalVariable.ql	2022-07-22 17:59:27 +02:00
Jeroen Ketema	23c19311fb	Merge pull request #9700 from jketema/resolve-global-variable ... C++: Ensure only one `Variable` exists for every global variable	2022-07-22 17:57:21 +02:00
Nick Rolfe	4767d5a1ba	Ruby/QL: speed up trap writing by putting BufWriter in front of GzEncoder	2022-07-22 15:37:53 +01:00
Arthur Baars	43266b75a1	Merge pull request #9866 from aibaars/encoding ... Ruby: handle magic coding: comments	2022-07-22 14:33:46 +02:00
Taus	5f9a03f103	Merge pull request #9880 from github/nickrolfe/ql-ql-extractor-cleanup ... QL: sync Ruby extractor changes	2022-07-22 14:15:04 +02:00
Paolo Tranquilli	77401ded4e	Swift: reflow comment	2022-07-22 13:54:32 +02:00
Arthur Baars	d44bf326f0	Update ruby/extractor/src/main.rs ... Co-authored-by: Nick Rolfe <nickrolfe@github.com>	2022-07-22 13:36:22 +02:00
Paolo Tranquilli	7e67338fb5	Update swift/extractor/infra/SwiftDispatcher.h ... Co-authored-by: Jeroen Ketema <93738568+jketema@users.noreply.github.com>	2022-07-22 13:34:11 +02:00
Ahmed Farid	2f72cc5ca8	Update PossibleTimingAttackAgainstHash.ql	2022-07-22 03:28:32 +01:00
thiggy1342	871b6515d5	Merge branch 'main' into experimental-manually-check-request-verb	2022-07-21 18:47:07 -04:00
thiggy1342	1842bde879	add change note	2022-07-21 22:13:53 +00:00
thiggy1342	c1a6ca5f94	add change note	2022-07-21 22:11:14 +00:00
thiggy1342	486a394a7f	Update ruby/ql/src/experimental/weak-params/WeakParams.ql ... Co-authored-by: Harry Maclean <hmac@github.com>	2022-07-21 17:26:09 -04:00
thiggy1342	8fabc06d37	fix test assertion	2022-07-21 21:25:44 +00:00
thiggy1342	cc958dc171	Update ruby/ql/src/experimental/manually-check-http-verb/ManuallyCheckHttpVerb.ql ... Co-authored-by: Harry Maclean <hmac@github.com>	2022-07-21 17:19:33 -04:00
Arthur Baars	1399610bd4	Merge branch 'main' into encoding	2022-07-21 21:21:17 +02:00
Ahmed Farid	fd558604cc	Update TimingAttack.qll	2022-07-21 18:48:07 +01:00
Nick Rolfe	5f96c92fac	QL: sync Ruby extractor changes	2022-07-21 17:38:33 +01:00
Nick Rolfe	ed0325f162	Merge pull request #9878 from github/nickrolfe/extractor-cleanup ... Ruby: some extractor refactoring	2022-07-21 17:18:24 +01:00
Arthur Baars	7be106d7bb	Ruby: handle magic coding: comments	2022-07-21 16:33:18 +02:00
Arthur Baars	27be3dff54	Merge pull request #9868 from aibaars/update-tree-sitter-ruby-3 ... Ruby: update tree-sitter-ruby	2022-07-21 16:08:32 +02:00
Nick Rolfe	8dae85e1b1	Ruby: avoid repeated construction of table name strings	2022-07-21 12:21:06 +01:00
Nick Rolfe	0a8ecd3cf7	Ruby: compute path string only once	2022-07-21 10:44:30 +01:00