Michael Nebel
|
a0ae8b3a97
|
Merge pull request #9361 from michaelnebel/java/capturemodels-metadata
Java: Update capture models meta data.
|
2022-05-30 13:22:09 +02:00 |
|
Asger F
|
5f42866de3
|
Merge pull request #9318 from asgerf/js/type-confusion-parmaeter-tampering-barrier
JS: Fix FP in js/type-confusion-through-parameter-tampering
|
2022-05-30 12:52:37 +02:00 |
|
Erik Krogh Kristensen
|
b700972e6f
|
fix bad join in XmlParers::getAResult
|
2022-05-30 12:37:51 +02:00 |
|
Max Schaefer
|
820dfac48c
|
Manually write out a transitive closure.
|
2022-05-30 12:37:50 +02:00 |
|
Max Schaefer
|
ea70aaff57
|
Improve detection of UMD modules.
We previously required the `define` to appear directly as an expression statement, but there are common patterns where this is not the case.
|
2022-05-30 12:37:50 +02:00 |
|
Max Schaefer
|
47e425a184
|
Improve inVoidContext to take conditional expressions into account.
|
2022-05-30 12:37:50 +02:00 |
|
Erik Krogh Kristensen
|
adb40f9360
|
Merge pull request #9289 from erik-krogh/es2022
JS: Support the remaining of the finished ES2022 proposals
|
2022-05-30 12:27:19 +02:00 |
|
Erik Krogh Kristensen
|
ab28b0a690
|
Merge pull request #9348 from erik-krogh/polyRegSyntax
JS: use syntactically correct JS in poly-redos example
|
2022-05-30 12:26:04 +02:00 |
|
Erik Krogh Kristensen
|
e557d8839b
|
have the Instance token just be an alias for ReturnValue
|
2022-05-30 12:21:42 +02:00 |
|
Erik Krogh Kristensen
|
c7a8008897
|
Merge pull request #9235 from kaeluka/extractor-update-typescript-4_7
JS: Update the extractor to use TypeScript 4.7
|
2022-05-30 12:02:06 +02:00 |
|
Erik Krogh Kristensen
|
63e637503d
|
rewrite js/sensitive-get-query to use routing trees
|
2022-05-30 11:55:09 +02:00 |
|
ihsinme
|
9499961a9c
|
Update BufferAccessWithIncorrectLengthValue.ql
|
2022-05-30 12:43:28 +03:00 |
|
ihsinme
|
d489c12014
|
Update BufferAccessWithIncorrectLengthValue.ql
|
2022-05-30 12:26:26 +03:00 |
|
Chris Smowton
|
49d9d8e7d6
|
Remove unused imports
|
2022-05-30 09:59:11 +01:00 |
|
Chris Smowton
|
2f436c800b
|
Merge pull request #9357 from smowton/smowton/fix/extension-properties-backing-fields
Kotlin: Disambiguate the names and trap labels of backing fields of extension properties
|
2022-05-30 09:55:02 +01:00 |
|
Asger F
|
cc42f2f824
|
Merge pull request #8606 from asgerf/js/api-graph-api
JS/Python/Ruby: Document how API graphs should be interpreted
|
2022-05-30 10:49:14 +02:00 |
|
Michael Nebel
|
815dff338d
|
Java: Update capture models meta data.
|
2022-05-30 09:44:39 +02:00 |
|
Michael Nebel
|
6a4a4cbbe4
|
Java: Re-generate commons-io models.
|
2022-05-30 08:16:58 +02:00 |
|
Michael Nebel
|
48da8dde6f
|
Java: Do not derive new write-file sinks.
|
2022-05-30 08:16:58 +02:00 |
|
Michael Nebel
|
ad4d8304ed
|
Java: Update hand written summary for writeLines as the generated one will be ignored.
|
2022-05-30 08:16:58 +02:00 |
|
Michael Nebel
|
7e5dd7a065
|
Java: Manually prefix kind column with generated.
|
2022-05-30 08:16:58 +02:00 |
|
Michael Nebel
|
0f33c3188c
|
Java: Re-arrange import pattern for generated models.
|
2022-05-30 08:16:58 +02:00 |
|
Michael Nebel
|
71bcae068e
|
Java: Avoid generating new regex-use sinks.
|
2022-05-30 08:16:58 +02:00 |
|
Michael Nebel
|
ff928bbb45
|
Java: Update commons-io SHA for model regeneration.
|
2022-05-30 08:16:58 +02:00 |
|
Michael Nebel
|
7d171f86ea
|
Merge pull request #9335 from github/workflow/coverage/update
Update CSV framework coverage reports
|
2022-05-29 13:33:10 +02:00 |
|
ihsinme
|
475e36e6fc
|
Update BufferAccessWithIncorrectLengthValue.ql
|
2022-05-29 09:58:16 +03:00 |
|
ihsinme
|
df1ea5b679
|
Update BufferAccessWithIncorrectLengthValue.qhelp
|
2022-05-29 09:56:29 +03:00 |
|
github-actions[bot]
|
31c91a6faa
|
Add changed framework coverage reports
|
2022-05-29 00:16:56 +00:00 |
|
thiggy1342
|
09f082081f
|
Simple tests passing
|
2022-05-28 23:29:58 +00:00 |
|
thiggy1342
|
39baadbdd2
|
test ql packs must be in the security directory
|
2022-05-28 23:19:32 +00:00 |
|
Adam Thigpen
|
52ac93b82e
|
adding skeleton for experimental unit tests
|
2022-05-28 15:14:42 -04:00 |
|
Adam Thigpen
|
a37443106b
|
reduce false positives with some sanitizers
|
2022-05-28 15:14:42 -04:00 |
|
Adam Thigpen
|
2bf160c008
|
initial draft of decompression-api query
|
2022-05-28 15:14:32 -04:00 |
|
Chris Smowton
|
6ea87cd718
|
Accept test changes
|
2022-05-27 22:05:57 +01:00 |
|
Mathias Vorreiter Pedersen
|
7c25063f7f
|
Merge branch 'main' into swift-decls-in-cfg
|
2022-05-27 17:56:58 +01:00 |
|
Mathias Vorreiter Pedersen
|
c734646099
|
Swift: Accept test changes.
|
2022-05-27 17:42:51 +01:00 |
|
Mathias Vorreiter Pedersen
|
6d5504412a
|
Swift: Only create a 'ThrowCompletion' for functions that actually can throw.
|
2022-05-27 17:42:51 +01:00 |
|
Henry Mercer
|
013b4c8768
|
Swift: Update mention of manifest file in docs
|
2022-05-27 17:31:47 +01:00 |
|
Andrew Eisenberg
|
ce2bf8477c
|
Update codeql-workspace.yml
Co-authored-by: Henry Mercer <henrymercer@github.com>
|
2022-05-27 17:31:47 +01:00 |
|
Andrew Eisenberg
|
a82fea59e9
|
Add comment to codeql-workspace.yml
|
2022-05-27 17:31:47 +01:00 |
|
Andrew Eisenberg
|
7ab3a418be
|
Convert .codeqlmanifest.json to codeql-workspace.yml
The semantics are the same, except one is json, the other is
yaml.
|
2022-05-27 17:31:47 +01:00 |
|
Mathias Vorreiter Pedersen
|
b9809b4219
|
Swift: CFG for opening existentials.
|
2022-05-27 17:29:22 +01:00 |
|
Mathias Vorreiter Pedersen
|
02c73d3c1c
|
Swift: Fix implicit-this alert.
|
2022-05-27 17:25:56 +01:00 |
|
Chris Smowton
|
9ea139566d
|
Disambiguate the names and trap labels of backing fields of extension properties
|
2022-05-27 16:27:48 +01:00 |
|
Chris Smowton
|
6eb2935469
|
Merge pull request #9220 from smowton/smowton/fix/promoted-companion-object-fields
Associate certain companion object fields with the parent class
|
2022-05-27 16:19:10 +01:00 |
|
Erik Krogh Kristensen
|
62fd3fd90f
|
add test that we detect the used type variable in an infer type
|
2022-05-27 14:15:27 +00:00 |
|
Asger F
|
7e76e9a23b
|
Merge branch 'main' into js/type-confusion-parmaeter-tampering-barrier
|
2022-05-27 15:55:42 +02:00 |
|
Asger F
|
468a4df215
|
Update javascript/ql/lib/semmle/javascript/security/dataflow/TypeConfusionThroughParameterTamperingQuery.qll
Co-authored-by: Erik Krogh Kristensen <erik-krogh@github.com>
|
2022-05-27 15:55:25 +02:00 |
|
Chris Smowton
|
9c62b349ec
|
Autoformat
|
2022-05-27 13:36:55 +01:00 |
|
Erik Krogh Kristensen
|
8c12a7289f
|
collapse a few small stages
|
2022-05-27 13:19:06 +02:00 |
|