Mathias Vorreiter Pedersen
|
472363b86e
|
Merge branch 'main' into mathiasvp/read-step-without-memory-operands
|
2020-09-01 11:08:52 +02:00 |
|
Anders Schack-Mulligen
|
1dae99e4a5
|
Merge pull request #3543 from porcupineyhairs/WebsocketReadAsSource
Java: add websocket reads as remote flow source.
|
2020-09-01 10:58:02 +02:00 |
|
Mathias Vorreiter Pedersen
|
91a23096bb
|
C#: Sync identical files
|
2020-09-01 10:54:54 +02:00 |
|
Mathias Vorreiter Pedersen
|
3cca74e654
|
C++: Accept test changes
|
2020-09-01 10:54:46 +02:00 |
|
Mathias Vorreiter Pedersen
|
9de570b300
|
C++: Use the newly added predicates in field flow. This commit also adds a Class column to the FieldContent branch so FieldContent has a pretty toString implementation again.
|
2020-09-01 10:54:09 +02:00 |
|
Mathias Vorreiter Pedersen
|
1e13a39932
|
C++: Add getUpdatedInterval predicate to ChiInstructions, and getUsedInterval predicate to NonPhiMemoryOperands.
|
2020-09-01 10:53:48 +02:00 |
|
Anders Schack-Mulligen
|
beca44ec2f
|
Merge pull request #4172 from rvermeulen/java/xss-sink-extensible
Java: Customizable XSS analysis
|
2020-09-01 09:27:50 +02:00 |
|
Remco Vermeulen
|
2bdd3d7712
|
Apply qldoc suggestions
Co-authored-by: Anders Schack-Mulligen <aschackmull@users.noreply.github.com>
|
2020-08-31 17:28:51 +02:00 |
|
CodeQL CI
|
35494ab97c
|
Merge pull request #4171 from max-schaefer/js/promise-flow-public
Approved by erik-krogh
|
2020-08-31 15:15:27 +01:00 |
|
CodeQL CI
|
79e87a6c3d
|
Merge pull request #4088 from aschackmull/java/string-formatted
Approved by aibaars
|
2020-08-31 15:02:49 +01:00 |
|
Tom Hvitved
|
4e963a8a8e
|
Merge pull request #4165 from hvitved/csharp/foreach-guard
C#: Fix bug in guards logic for `foreach` loops
|
2020-08-31 14:32:09 +02:00 |
|
CodeQL CI
|
dc9cc20fdd
|
Merge pull request #4161 from yoff/SharedDataflow_PostUpdateNodes
Approved by RasmusWL, aschackmull, hvitved, jbj
|
2020-08-31 11:57:44 +01:00 |
|
Max Schaefer
|
22ccae6006
|
JavaScript: Make PromiseFlow module public.
|
2020-08-31 11:55:10 +01:00 |
|
CodeQL CI
|
9d6b2e7684
|
Merge pull request #4042 from aschackmull/java/xsssink-extensible
Approved by aibaars
|
2020-08-31 11:54:25 +01:00 |
|
Anders Schack-Mulligen
|
b89a22b583
|
Merge pull request #4170 from aibaars/drop-inefficient-toarray
Java: remove InefficientToArray.ql
|
2020-08-31 12:45:06 +02:00 |
|
Arthur Baars
|
66d39bb5f6
|
Java: remove InefficientToArray.ql
This query was deprecated 4 years ago.
Fixes: #4167
|
2020-08-31 10:39:03 +02:00 |
|
Porcupiney Hairs
|
4f07733b06
|
remove U+200B
|
2020-08-30 04:54:02 +05:30 |
|
Tom Hvitved
|
b205702853
|
C#: Fix bug in guards logic for foreach loops
|
2020-08-28 15:19:11 +02:00 |
|
Tom Hvitved
|
ddb33c914b
|
C#: Add test that demonstrates issue with guards logic for foreach statements
|
2020-08-28 15:13:18 +02:00 |
|
Asger F
|
813d14791d
|
Merge pull request #4043 from erik-krogh/ts4
JS: Add support for TypeScript 4
|
2020-08-28 14:02:08 +01:00 |
|
Rasmus Lerchedahl Petersen
|
750735c70c
|
Dataflow: Update test expectations
|
2020-08-28 15:00:01 +02:00 |
|
Rasmus Lerchedahl Petersen
|
6b8d9f2a77
|
Merge branch 'main' of github.com:github/codeql into SharedDataflow_PostUpdateNodes
|
2020-08-28 13:01:14 +02:00 |
|
Rasmus Lerchedahl Petersen
|
9503c5d8bb
|
Python: Add post-update nodes
|
2020-08-28 12:59:11 +02:00 |
|
Erik Krogh Kristensen
|
f4060723bb
|
add stats for new properties
|
2020-08-28 12:43:26 +02:00 |
|
Calum Grant
|
93e0bd9d85
|
Merge pull request #4126 from tamasvajk/feature/array-index
C#: Fix computed sizes for implicitly sized array creation
|
2020-08-28 11:21:39 +01:00 |
|
Tom Hvitved
|
6eca97bc32
|
Merge pull request #4113 from tamasvajk/feature/nullability-extraction-cil
Enable nullability checks on Semmle.Extraction.CIL
|
2020-08-28 12:06:54 +02:00 |
|
Tom Hvitved
|
647ed03a2b
|
Merge pull request #4136 from tamasvajk/feature/qldocs
C#: Add missing QlDocs
|
2020-08-28 12:03:03 +02:00 |
|
Taus
|
8caaf8f17c
|
Merge pull request #4158 from RasmusWL/python-reformualte-js-team-comment
Python: Reformualte explanation of experience from JS
|
2020-08-28 11:33:00 +02:00 |
|
Rasmus Wriedt Larsen
|
496d856c48
|
Python: Reformualte explanation of experience from JS
|
2020-08-28 10:49:33 +02:00 |
|
Erik Krogh Kristensen
|
038cca814a
|
Merge branch 'main' into ts4
|
2020-08-28 10:27:49 +02:00 |
|
Taus
|
afe234dade
|
Merge pull request #4156 from RasmusWL/python-fix-changenote-fstring-taint
Python: fstring taint change note should be for 1.26
|
2020-08-28 10:23:06 +02:00 |
|
Jonas Jensen
|
55d7ac88f9
|
Merge pull request #4148 from geoffw0/vecextra
C++: Improvements to string and vector models.
|
2020-08-28 10:05:42 +02:00 |
|
CodeQL CI
|
80cb8be405
|
Merge pull request #4155 from asger-semmle/js/lower-duplicate-element-id-precision
Approved by esbena
|
2020-08-28 08:52:58 +01:00 |
|
CodeQL CI
|
ac94869978
|
Merge pull request #3978 from dellalibera/js/insecure-cookies
Approved by esbena
|
2020-08-28 08:31:38 +01:00 |
|
Rasmus Wriedt Larsen
|
deff36e9af
|
Python: fstring taint change note should be for 1.26
This fixes problem introduced in https://github.com/github/codeql/pull/4127
|
2020-08-28 09:00:07 +02:00 |
|
Tamas Vajk
|
29eaacdeaf
|
Fix typos and comment styling
|
2020-08-28 08:41:46 +02:00 |
|
Mathias Vorreiter Pedersen
|
ceddc2497a
|
Merge pull request #4151 from geoffw0/reftaint
C++: Taint tests for array and reference assignments.
|
2020-08-27 20:00:13 +02:00 |
|
Taus
|
1206ff5889
|
Merge pull request #4150 from RasmusWL/python-dataflow-private-import
Python: Make import of python private in shared dataflow
|
2020-08-27 18:05:55 +02:00 |
|
Geoffrey White
|
9b3da1f6c7
|
C++: Autoformat.
|
2020-08-27 16:55:45 +01:00 |
|
Geoffrey White
|
208cd4c888
|
C++: Fix assign in the test stl.h.
|
2020-08-27 16:52:22 +01:00 |
|
Asger Feldthaus
|
e7a0bc6be6
|
JS: Lower precision of ambiguous HTML ID attribute
|
2020-08-27 15:51:34 +01:00 |
|
Geoffrey White
|
927a4faa58
|
C++: Remove the non-reference case that we shouldn't need.
|
2020-08-27 15:42:40 +01:00 |
|
Geoffrey White
|
071b303ea0
|
C++: Make the other versions consistent with this.
|
2020-08-27 15:24:48 +01:00 |
|
Rasmus Wriedt Larsen
|
36ac111659
|
Merge pull request #4152 from tausbn/python-sync-inline-test-expectations-files
Python: Sync InlineExpectationsTest.qll between Python and C++
|
2020-08-27 16:23:08 +02:00 |
|
Geoffrey White
|
865d91de80
|
C++: Fix getAValueTypeParameterIndex().
|
2020-08-27 15:08:58 +01:00 |
|
Jonas Jensen
|
c507b337f2
|
Merge pull request #3921 from catenacyber/NullCheckParam
C++: Adds another redundant null check rule
|
2020-08-27 16:07:13 +02:00 |
|
Geoffrey White
|
816b8abd7c
|
C++: Add a test case using a const int *.
|
2020-08-27 15:05:23 +01:00 |
|
Tamas Vajk
|
7e2cf9a858
|
Adjust code review findings
|
2020-08-27 15:11:55 +02:00 |
|
Tamas Vajk
|
fcd426210f
|
C#: Add missing QlDoc for code duplication
|
2020-08-27 14:43:16 +02:00 |
|
Taus Brock-Nannestad
|
797e290a67
|
Python+CPP: Change values to value
|
2020-08-27 14:12:40 +02:00 |
|