Tom Hvitved
|
9263977329
|
Ruby: Adopt shared SSA data-flow integration
|
2024-07-12 14:23:24 +02:00 |
|
github-actions[bot]
|
ae3aba061b
|
Post-release preparation for codeql-cli-2.18.0
|
2024-07-08 13:30:13 +00:00 |
|
github-actions[bot]
|
b0d6778652
|
Release preparation for version 2.18.0
|
2024-07-08 09:10:51 +00:00 |
|
Tom Hvitved
|
4ae8720930
|
SSA: Add BasicBlock.{getNode/1,length/0} to the input signature
|
2024-07-03 11:32:35 +02:00 |
|
Tom Hvitved
|
8e8100fd34
|
Merge pull request #16887 from hvitved/ruby/local-flow-missing-steps
Ruby: Add missing local flow steps
|
2024-07-02 15:43:52 +02:00 |
|
Tom Hvitved
|
19e910e1b5
|
Merge pull request #16801 from hvitved/ruby/element-reference-block
Ruby: Handle element references with blocks
|
2024-07-02 13:08:31 +02:00 |
|
Tom Hvitved
|
7fdc09c17f
|
Ruby: Add missing local flow steps
|
2024-07-01 19:46:40 +02:00 |
|
Arthur Baars
|
b12b33c8f9
|
Merge remote-tracking branch 'upstream/main' into 'rc/3.14'
|
2024-06-28 19:50:35 +02:00 |
|
Tom Hvitved
|
25daaf9d47
|
Ruby: Add change note
|
2024-06-25 10:00:01 +02:00 |
|
github-actions[bot]
|
fd385736e6
|
Post-release preparation for codeql-cli-2.17.6
|
2024-06-25 06:39:45 +00:00 |
|
github-actions[bot]
|
e32a587078
|
Release preparation for version 2.17.6
|
2024-06-24 14:33:10 +00:00 |
|
Anders Schack-Mulligen
|
8c23e21073
|
Dataflow: Cache compatibleTypes.
|
2024-06-24 13:35:48 +02:00 |
|
Tom Hvitved
|
a8758c0160
|
Ruby: Handle element references with blocks
|
2024-06-21 12:04:55 +02:00 |
|
Tom Hvitved
|
d7ce2be040
|
Ruby: Up/downgrade scripts
|
2024-06-21 12:04:53 +02:00 |
|
Tom Hvitved
|
21c9f33419
|
Ruby: Bump tree-sitter-ruby
|
2024-06-21 10:17:59 +02:00 |
|
Tom Hvitved
|
8ea4f85de3
|
Ruby: Rework Sinatra.FilterJumpStep
|
2024-06-21 08:57:59 +02:00 |
|
Alex Ford
|
d79a253c20
|
Ruby: remove unused import
|
2024-06-18 17:49:14 +01:00 |
|
Alex Ford
|
81ec6861f9
|
Ruby: fix some SensitiveDataSource definitions
|
2024-06-18 17:46:52 +01:00 |
|
Alex Ford
|
f217de9623
|
Ruby: Move SensitiveDataSource logic into a private module
|
2024-06-18 16:58:30 +01:00 |
|
Alex Ford
|
6a46fb54c5
|
Ruby: Add SensitiveDataSource abstract class
|
2024-06-18 12:11:28 +01:00 |
|
Alex Ford
|
6c3d90e8a0
|
Merge pull request #16650 from alexrford/rb/routing-improvements
Ruby: ActionDispatch - support `path => target` route format
|
2024-06-18 11:17:05 +01:00 |
|
Joe Farebrother
|
eee7f5a896
|
Use a combined regex for performance
|
2024-06-17 22:21:33 +01:00 |
|
Alex Ford
|
d4203d9286
|
Ruby: minimal port of py/weak-sensitive-data-hashing
|
2024-06-17 15:27:00 +01:00 |
|
Joe Farebrother
|
90d6f2ece3
|
Factor out nameIndicatesRelevantSensitiveData
|
2024-06-12 15:11:47 +01:00 |
|
Tom Hvitved
|
605fe54a06
|
Ruby: Remove two Cartesian products
|
2024-06-12 15:11:43 +01:00 |
|
Joe Farebrother
|
5f08371f19
|
Add change note
|
2024-06-12 15:11:39 +01:00 |
|
Joe Farebrother
|
b0c03f6d68
|
Allow implicit read steps on sinks
|
2024-06-12 15:11:32 +01:00 |
|
Joe Farebrother
|
8b51ee8fe8
|
Use additional sensitive data heuristics in CleartextSources
|
2024-06-12 15:11:27 +01:00 |
|
Arthur Baars
|
4ee80653e2
|
Merge pull request #16471 from Sim4n6/ruby-UBV
Ruby: Add some method calls as a Source
|
2024-06-12 12:42:08 +02:00 |
|
github-actions[bot]
|
8a25081a0e
|
Post-release preparation for codeql-cli-2.17.5
|
2024-06-10 15:33:08 +00:00 |
|
github-actions[bot]
|
877bfa2468
|
Release preparation for version 2.17.5
|
2024-06-10 13:40:39 +00:00 |
|
Anders Schack-Mulligen
|
5d51b5b97b
|
Ruby: Add support for pretty-printed provenace in tests. Convert one test.
|
2024-06-07 11:47:48 +02:00 |
|
Asger F
|
6e0f3df573
|
Merge pull request #14120 from asgerf/dynamic/typemodel-istypeused
Dynamic: add TypeModel.isTypeUsed
|
2024-06-06 15:31:16 +02:00 |
|
Sim4n6
|
dabc33bf66
|
simplify UnicodeBypassValidationQuery code
|
2024-06-05 22:45:49 +01:00 |
|
Sim4n6
|
7dcbbbac91
|
Refactor UnicodeBypassValidationQuery to remove unnecessary code
|
2024-06-05 13:05:34 +01:00 |
|
Alex Ford
|
1100b75a3c
|
Ruby: handle routes with path/action pairs
|
2024-05-31 15:54:57 +01:00 |
|
Alex Ford
|
4644f08195
|
Ruby: Routing.qll - rename call as methodCall
|
2024-05-31 14:45:32 +01:00 |
|
Alex Ford
|
25f9449f53
|
Ruby: Routing.qll - rename method as httpMethod
|
2024-05-31 14:45:26 +01:00 |
|
Alex Ford
|
af9ed21c36
|
Ruby: Routing.qll - rename method as methodCall
|
2024-05-31 14:45:20 +01:00 |
|
github-actions[bot]
|
906b65d09c
|
Post-release preparation for codeql-cli-2.17.4
|
2024-05-28 18:02:25 +00:00 |
|
github-actions[bot]
|
33b4ae8bbb
|
Release preparation for version 2.17.4
|
2024-05-28 15:44:32 +00:00 |
|
Tom Hvitved
|
69fb2bb97c
|
Merge pull request #16597 from hvitved/tree-sitter/empty-location
Tree-sitter: Emit `empty_location` relation to avoid scan
|
2024-05-27 15:19:15 +02:00 |
|
Anders Schack-Mulligen
|
1432519cc2
|
Dataflow: Add totalorder predicates to all languages.
|
2024-05-27 11:01:52 +02:00 |
|
Anders Schack-Mulligen
|
bc8ca1af86
|
Dataflow: Introduce NodeRegions for use in isUnreachableInCall.
|
2024-05-27 11:01:51 +02:00 |
|
Tom Hvitved
|
686879a2a3
|
Ruby: Add up/downgrade scripts
|
2024-05-27 10:39:22 +02:00 |
|
Tom Hvitved
|
94d2e9591d
|
Tree-sitter: Emit empty_location relation to avoid scan
|
2024-05-27 10:39:21 +02:00 |
|
Dave Bartolomeo
|
613ccaac1d
|
Add change note to all v1.0.0 packs
|
2024-05-23 13:01:22 -04:00 |
|
Dave Bartolomeo
|
ffe4c8c87b
|
Update all pack versions to 1.0.0
|
2024-05-22 13:39:08 -04:00 |
|
Alex Ford
|
8119a27540
|
Merge pull request #16185 from alexrford/rb/conditions-arr0
Ruby: ActiveRecord - refine `conditions` argument as an SQLi sink
|
2024-05-22 12:19:10 +01:00 |
|
Chuan-kai Lin
|
8a22e2283c
|
Merge pull request #16424 from github/cklin/ruby-entities-reorder
Ruby: Use entities in reorder directives
|
2024-05-21 07:32:28 -07:00 |
|