1121 Commits

Author	SHA1	Message	Date
amammad	d3099ff482	fix tests, move from SharedXss::Sink to Http::* classes	2023-12-06 15:52:50 +01:00
Anders Schack-Mulligen	67f0529cda	Dataflow: Sync.	2023-12-04 12:36:57 +01:00
amammad	ffe2e398c9	fix tests, add support for Response.BodyWriter() Thanks to @owen-mc	2023-11-25 15:36:37 +01:00
amammad	accc09fd8c	Lists of strings should be in alphabetical order. In a QLDoc, there should be a full stop at the end of each sentence. shorter model summary. change target from getACall() to getACall().getResult(.). better tests	2023-11-25 13:36:06 +01:00
Owen Mansel-Chan	dd8fb29a65	Improve QLDocs of CallNode and MethodCallNode ... When a function is assigned to a variable and called through that variable then we can't always tell it was a method.	2023-11-22 16:32:10 +00:00
Kevin Stubbings	d7e2fbc11d	Finish	2023-11-21 14:27:17 -08:00
Owen Mansel-Chan	b147bacd48	Merge branch 'main' into amammad-go-fastHttp	2023-11-21 21:36:11 +00:00
amammad	2ad59a5403	fix SSRF sinks	2023-11-21 18:46:35 +01:00
Kevin Stubbings	9958ad904c	thesame	2023-11-20 23:40:55 -08:00
Kevin Stubbings	28288e0d23	basic2	2023-11-20 23:40:55 -08:00
Owen Mansel-Chan	aaa8f9c41f	Add read and store steps for SliceElementNode	2023-11-15 14:58:23 +00:00
Owen Mansel-Chan	2b897a9825	Add synthetic SliceElementNode	2023-11-15 14:58:21 +00:00
Owen Mansel-Chan	45faed057c	Improve SliceExpr documentation	2023-11-14 11:25:16 +00:00
Owen Mansel-Chan	ed349f7d6b	Improve value flow through arrays	2023-11-13 23:26:16 +00:00
Owen Mansel-Chan	359dcf37e9	Merge pull request #14649 from Kwstubbs/go-cors ... Go: Add Cors Gin Support	2023-11-13 15:46:59 +00:00
amammad	c361caf0b0	fix tests for FileSystemAccess, add comments for adding some functions in future, remove old comments	2023-11-08 14:15:26 +01:00
Tom Hvitved	af7b295c59	Address review comments	2023-11-07 13:01:19 +01:00
Kevin Stubbings	57c645bd24	Added support for same struct and added new test	2023-11-05 22:34:35 -08:00
Kevin Stubbings	1f2e8d898d	Address Feedback	2023-11-05 14:28:34 -08:00
amammad	88e75a6ec8	add flow summary instead of additional flow steps	2023-11-05 17:49:32 +03:30
amammad	23f7f9a24a	fix some grammer mistakes, an unnecessary import, put blank like after go generate	2023-11-05 17:49:32 +03:30
amammad	e38cb0f36e	fix a issue in fasthttp library, add SSRF inline queires	2023-11-05 17:49:32 +03:30
amammad	3bc24c3534	add inline tests for open redirect,xss, fix some issues in fasthttp.qll	2023-11-05 17:49:32 +03:30
amammad	29219922ac	add inline tests for UntrustedFlowSource, and fix some not necessarily flow sources	2023-11-05 17:49:32 +03:30
amammad	defe964f3a	update tests	2023-11-05 17:49:32 +03:30
amammad	1ff1c5cfe0	fix two bugs, make package path more neat	2023-11-05 17:49:32 +03:30
amammad	2048d8945b	fix qldoc and tests	2023-11-05 17:49:32 +03:30
amammad	de391ffa4d	fix qlDOC one missed mistake	2023-11-05 17:49:32 +03:30
amammad	693539a604	fix qhelps	2023-11-05 17:49:32 +03:30
amammad	80e5fb81bc	fix library-tests	2023-11-05 17:49:32 +03:30
amammad	2ee2ac383d	fix some mistakes:(	2023-11-05 17:49:32 +03:30
amammad	377d1f55be	add proper test cases	2023-11-05 17:49:32 +03:30
amammad	3226184547	add tests	2023-11-05 17:49:32 +03:30
amammad	cddd27c5f8	V1	2023-11-05 17:49:32 +03:30
Kevin Stubbings	3697ef72c4	Small changes	2023-10-31 12:23:18 -07:00
Kevin Stubbings	5cab25662c	Address issues	2023-10-31 11:50:51 -07:00
Kevin Stubbings	020b4becfd	Finish up	2023-10-31 11:00:00 -07:00
Kevin Stubbings	e0782683eb	Added gin cors framework	2023-10-27 17:50:43 -07:00
Owen Mansel-Chan	c1ecd5a0da	Merge pull request #14608 from Kwstubbs/golang-cookie-reflectedxss-sanitizer ... Go: GoAdd Cookie Sanitizer to Reflected XSS	2023-10-27 21:47:39 +01:00
Kevin Stubbings	ce0104799a	Fix minor issues	2023-10-27 11:42:22 -07:00
Owen Mansel-Chan	d534c93ff1	Merge pull request #14606 from owen-mc/go/incorrect-integer-conversion-fixes ... Go: Two fixes to upper bound checks in "incorrect integer conversion" query	2023-10-27 14:50:11 +01:00
Owen Mansel-Chan	581305b234	Improve QLDoc for UpperBoundCheckGuard	2023-10-27 10:59:20 +01:00
Owen Mansel-Chan	8beacb8d4a	Change predicate name from getX to getOrder	2023-10-27 10:44:42 +01:00
Kevin Stubbings	52a0fdabcf	formatting	2023-10-27 00:03:30 -07:00
Owen Mansel-Chan	b451adabfc	Two small QLDoc improvements	2023-10-26 17:10:12 +01:00
Owen Mansel-Chan	896a3c65be	Avoid doing float arithmetic with large integers ... There is the possibility of overflow.	2023-10-26 17:09:53 +01:00
Owen Mansel-Chan	570ca3b6fe	Fix upper bound check to make test pass	2023-10-26 17:08:19 +01:00
Owen Mansel-Chan	0ed01453b9	Fix getMaxIntValue to accept bitSize 64	2023-10-26 12:27:43 +01:00
Kevin Stubbings	21e4a5b2d5	Add Cookie Sanitizer	2023-10-25 22:07:08 -07:00
Kevin Stubbings	dafcd5ec98	Added support for Gin CORS	2023-10-25 17:23:10 -07:00