Anders Schack-Mulligen
|
98f51d7f29
|
Dataflow: Sync.
|
2023-06-09 15:39:28 +02:00 |
|
Anders Schack-Mulligen
|
6020e4d0e3
|
C#/Go/Python/Ruby/Swift: Fix some more references.
|
2023-06-09 15:30:38 +02:00 |
|
Anders Schack-Mulligen
|
e6e4cef35e
|
Go: Adjust to FlowSummaryImpl changes.
|
2023-06-09 15:27:17 +02:00 |
|
Anders Schack-Mulligen
|
2cc5bde925
|
Dataflow: Sync.
|
2023-06-09 15:27:17 +02:00 |
|
Anders Schack-Mulligen
|
d230509905
|
Dataflow: Address review comments.
|
2023-06-09 08:37:36 +02:00 |
|
Anders Schack-Mulligen
|
4399138c82
|
Dataflow: Fix QL4QL alert.
|
2023-06-09 08:37:36 +02:00 |
|
Anders Schack-Mulligen
|
53f2b8aab0
|
Dataflow: Sync.
|
2023-06-09 08:37:36 +02:00 |
|
Anders Schack-Mulligen
|
fd832416d8
|
Dataflow: Add empty type strengthening predicate for languages without type pruning.
|
2023-06-09 08:37:35 +02:00 |
|
Anders Schack-Mulligen
|
e8cea79f1d
|
Dataflow: Sync.
|
2023-06-09 08:37:35 +02:00 |
|
Jami Cogswell
|
da58b2afc8
|
Shared: move shared file to 'shared' folder and add parameterized module for 'getInvalidModelKind'
|
2023-06-08 20:05:27 -04:00 |
|
github-actions[bot]
|
e4be303a23
|
Release preparation for version 2.13.4
|
2023-06-08 19:57:37 +00:00 |
|
Jami Cogswell
|
5a23421d9a
|
Shared: minor updates to comments
|
2023-06-05 13:46:56 -04:00 |
|
Jami Cogswell
|
6c46cd9c21
|
Java/C#/Go/Swift: move 'SharedModelValidation.qll' to internal folder
|
2023-06-05 13:11:08 -04:00 |
|
Jami Cogswell
|
9d5972acc2
|
Shared: update qldocs
|
2023-06-05 12:18:34 -04:00 |
|
Jami Cogswell
|
3f1dc8e5c7
|
Shared: add outdated Swift sink kinds
|
2023-06-05 12:18:34 -04:00 |
|
Jami Cogswell
|
62ac0dc471
|
Shared: add outdated sink kind msg to 'getInvalidModelKind' for all languages
|
2023-06-05 12:18:33 -04:00 |
|
Jami Cogswell
|
76f5dca861
|
Shared: move 'OutdatedSinkKind' to shared file and add outdated JS and C# sink kinds
|
2023-06-05 12:18:33 -04:00 |
|
Jami Cogswell
|
7b629f5d63
|
Shared: include 'qltest%' and 'test-%'
|
2023-06-05 12:18:33 -04:00 |
|
Jami Cogswell
|
76508d17c6
|
Go/Swift: validate source/sink kinds
|
2023-06-05 12:18:33 -04:00 |
|
Jami Cogswell
|
615f2a573b
|
Java/C#/Go/Swift: remove commented-out code
|
2023-06-05 12:18:33 -04:00 |
|
Jami Cogswell
|
7317c29eea
|
Shared: update kind information
|
2023-06-05 12:18:33 -04:00 |
|
Jami Cogswell
|
79f61cc645
|
Java/C#/Go/Swift: use 'SharedModelValidation' file
|
2023-06-05 12:18:33 -04:00 |
|
Jami Cogswell
|
ddb5d92ef8
|
Shared: add source, summary, and neutral shared valid kinds
|
2023-06-05 12:18:33 -04:00 |
|
Jami Cogswell
|
869f820fcf
|
Shared: add 'SharedModelValidation' file as experiment
|
2023-06-05 12:18:33 -04:00 |
|
Michael Nebel
|
06b02eb3ce
|
Sync files.
|
2023-06-01 09:30:31 +02:00 |
|
Arthur Baars
|
c211b704f3
|
Merge pull request #13272 from github/post-release-prep/codeql-cli-2.13.3
Post-release preparation for codeql-cli-2.13.3
|
2023-05-31 15:33:12 +02:00 |
|
Michael Nebel
|
915042a881
|
Minor cleanup and sync files.
|
2023-05-26 12:25:00 +02:00 |
|
Michael Nebel
|
b794627335
|
Go: Re-factor getComponent.
|
2023-05-26 12:24:59 +02:00 |
|
github-actions[bot]
|
d2e192020b
|
Post-release preparation for codeql-cli-2.13.3
|
2023-05-24 11:26:12 +00:00 |
|
github-actions[bot]
|
7aa23cf11d
|
Release preparation for version 2.13.3
|
2023-05-22 20:47:00 +00:00 |
|
Porcupiney Hairs
|
d536157c1a
|
Go : Add query to detect potential timing attacks
|
2023-05-11 09:57:50 +05:30 |
|
Owen Mansel-Chan
|
270ba09ffb
|
Merge pull request #11732 from owen-mc/go/fix/model-data-flow-through-varargs
Go: Allow data flow through varargs parameters
|
2023-05-11 05:26:40 +01:00 |
|
Owen Mansel-Chan
|
1c66564ccc
|
address review comments
|
2023-05-10 14:05:09 +01:00 |
|
Owen Mansel-Chan
|
8f41ff36fb
|
Add change note
|
2023-05-10 13:50:04 +01:00 |
|
Michael Nebel
|
4ac0396b67
|
Go/Python/Ruby/Swift: Sync files and make dummy implementation.
|
2023-05-08 16:18:59 +02:00 |
|
Kasper Svendsen
|
46727af948
|
Go: Enable warnings for implicit this receivers
|
2023-05-03 15:41:55 +02:00 |
|
Owen Mansel-Chan
|
3f645e9401
|
Merge pull request #13006 from kaspersv/kaspersv/go-explicit-this-receivers
Go: Make implicit this receivers explicit
|
2023-05-03 13:47:10 +01:00 |
|
Ian Lynagh
|
b56b843d13
|
Merge pull request #12987 from github/post-release-prep/codeql-cli-2.13.1
Post-release preparation for codeql-cli-2.13.1
|
2023-05-03 13:12:10 +01:00 |
|
Kasper Svendsen
|
e969018f99
|
Go: Make implicit this receivers explicit
|
2023-05-03 12:45:42 +02:00 |
|
github-actions[bot]
|
18d4af994d
|
Post-release preparation for codeql-cli-2.13.1
|
2023-05-02 10:50:20 +00:00 |
|
Anders Schack-Mulligen
|
ca09649679
|
Dataflow: Forward hasLocationInfo.
|
2023-05-02 10:48:32 +02:00 |
|
Anders Schack-Mulligen
|
5927bb2030
|
Dataflow: Replace "extends Node" with "instanceof Node".
|
2023-05-02 09:48:34 +02:00 |
|
Anders Schack-Mulligen
|
6c8cb0dc5e
|
Merge pull request #12930 from aschackmull/dataflow/split-typedcontent
Dataflow: Refactor access paths to split TypedContent into an explicit pair
|
2023-05-01 14:58:15 +02:00 |
|
github-actions[bot]
|
3bd29171fb
|
Release preparation for version 2.13.1
|
2023-04-28 12:14:35 +00:00 |
|
Michael B. Gale
|
edfe2d7ab7
|
Merge pull request #12944 from github/mbg/go/html-template-sanitizers
Go: Add `html/template` functions as sanitisers for XSS queries
|
2023-04-28 12:15:57 +01:00 |
|
Owen Mansel-Chan
|
8415c4a4eb
|
Remove ArgumentNode assumption
|
2023-04-28 09:23:38 +01:00 |
|
Owen Mansel-Chan
|
c7c0a73b90
|
Accept review suggestions
|
2023-04-28 09:23:37 +01:00 |
|
Owen Mansel-Chan
|
52cc61198d
|
Use CallExpr.hasImplicitArgs()
|
2023-04-28 09:23:37 +01:00 |
|
Owen Mansel-Chan
|
b928f13d94
|
Add CallExpr.hasImplicitArgs()
|
2023-04-28 09:23:36 +01:00 |
|
Owen Mansel-Chan
|
f3c1c53b54
|
Add CallExpr.getCalleeType()
This avoids using `getTarget()`, so it works even when that doesn't
exist (for example when calling a variable with function type).
|
2023-04-28 09:23:36 +01:00 |
|