Commit Graph

1667 Commits

Author SHA1 Message Date
semmle-qlci
89f2dbf8db Merge pull request #195 from esben-semmle/js/reflected-xss-through-filenames
Approved by asger-semmle
2018-09-19 12:42:22 +01:00
Jonas Jensen
86fe0ce42e Merge pull request #107 from rdmarsh2/rdmarsh/cpp/HashCons
C++: HashCons library
2018-09-18 11:45:26 +02:00
Esben Sparre Andreasen
bb48421d77 JS: address doc review comments 2018-09-17 11:08:35 +02:00
Esben Sparre Andreasen
5781b518bc JS: change notes for js/stored-xss 2018-09-14 15:30:44 +02:00
Asger F
a3562aa4a7 Merge pull request #193 from esben-semmle/js/reduce-precision-of-remote-property-injection
JS: lower @precision of js/remote-property-injection
2018-09-14 11:14:13 +01:00
semmle-qlci
abbadf24f0 Merge pull request #192 from esben-semmle/js/additional-array-taint-steps
Approved by asger-semmle
2018-09-14 10:02:36 +01:00
Esben Sparre Andreasen
81aeda69e1 JS: lower @precision of js/remote-property-injection 2018-09-14 07:37:47 +02:00
semmle-qlci
961ecfb43f Merge pull request #187 from esben-semmle/js/additional-whitelisting-form-unbound-event-handlers
Approved by asger-semmle
2018-09-14 06:35:39 +01:00
Esben Sparre Andreasen
cb2bd9e0ae JS: change notes for additional array taint steps 2018-09-13 21:36:53 +02:00
Robert Marsh
1a14b13703 C++: migrate change note 2018-09-13 09:53:41 -07:00
semmle-qlci
3d022298dc Merge pull request #186 from Semmle/rc/1.18
Approved by esben-semmle
2018-09-13 12:34:54 +01:00
Esben Sparre Andreasen
52013f3071 JS: change notes for improved js/unbound-event-handler-receiver 2018-09-13 08:43:01 +02:00
Felicity Chapman
4d512a5b01 Remove non-LGTM query (see following PR) 2018-09-11 22:54:37 +01:00
Felicity Chapman
7dd891d908 Further updates and addition of query @ids 2018-09-11 22:51:14 +01:00
Felicity Chapman
223bf6cf56 Updates for consistency 2018-09-11 22:31:32 +01:00
semmle-qlci
b17aeb689c Merge pull request #118 from esben-semmle/js/request-forgery
Approved by asger-semmle
2018-09-11 16:28:59 +01:00
Felicity Chapman
f48317f381 Minor updates to prepare for publication 2018-09-11 08:27:20 +01:00
Felicity Chapman
620f99c5a3 Remove template text 2018-09-11 08:14:17 +01:00
Tom Hvitved
70e713122f Merge branch 'rc/1.18' into merge-rc 2018-09-11 09:11:03 +02:00
Robert Marsh
990bfb4663 C++: change note for HashCons library 2018-09-10 12:22:45 -07:00
Esben Sparre Andreasen
aaf1ac770d JS: reduce declared precision of js/request-forgery 2018-09-09 21:30:43 +02:00
Jonas Jensen
4051e348eb Merge pull request #169 from felicity-semmle/1.18/cpp-finalize-change-notes
LGTM 1.18: finalize change notes for C/C++
2018-09-09 15:39:40 +02:00
Felicity Chapman
a08177f16b Address initial feebback 2018-09-09 11:52:35 +01:00
Tom Hvitved
f3eed4aec7 Merge pull request #163 from calumgrant/cs/extractor-fixes
C#: Add tests for extractor fixes, and improve CFG for ConstCases
2018-09-07 17:37:40 +02:00
Felicity Chapman
3eab1de2f5 Remove non-LGTM queries from notes (will move to 'studio-cpp.md') 2018-09-07 13:56:55 +01:00
Felicity Chapman
2e0818d8e6 Text changes for consistency and clarity 2018-09-07 13:55:24 +01:00
Felicity Chapman
e7116f57a0 Add query identifiers 2018-09-07 13:24:41 +01:00
Felicity Chapman
6aa6b64b81 Remove placeholders and sort table 2018-09-07 12:05:40 +01:00
semmle-qlci
62e9946fe2 Merge pull request #150 from asger-semmle/ts-asi-bug
Approved by xiemaisi
2018-09-05 21:22:29 +01:00
calum
c2f3cb6a2a C#: Update analysis change notes. 2018-09-05 17:48:45 +01:00
Aditya Sharad
f27945216f Merge rc/1.18 into master. 2018-09-05 15:32:30 +01:00
Tom Hvitved
061b3d40ea C#: Fix typos in change note 2018-09-05 14:20:27 +02:00
Tom Hvitved
82b2c00c19 C#: Add change note 2018-09-05 14:20:27 +02:00
semmle-qlci
50b5a3bd71 Merge pull request #151 from asger-semmle/ts-ambient-toplevel
Approved by xiemaisi
2018-09-05 10:52:08 +01:00
Jonas Jensen
1bcae97447 Merge pull request #114 from geoffw0/samate-realloc
CPP: Handle 'realloc' better in MemoryMayNotBeFreed.ql
2018-09-05 08:35:13 +02:00
Esben Sparre Andreasen
b9d825b379 JS: better matching of String.prototype.search in js/regex-injection 2018-09-05 08:35:00 +02:00
Asger F
4e9c52a3c3 TypeScript: add change note 2018-09-04 15:20:16 +01:00
Asger F
6ceb10371a TypeScript: rephrase change note 2018-09-04 15:06:04 +01:00
Asger F
f7827b72ab TypeScript: update change note to mention TypeScript 3.0 support 2018-09-04 14:30:16 +01:00
Asger F
2b8bc63b01 TypeScript: add change note 2018-09-04 14:23:37 +01:00
Esben Sparre Andreasen
68b7a8b57e JS: change notes for UrlRequest libraries and js/request-forgery 2018-09-04 09:26:45 +02:00
semmle-qlci
4dec7c5036 Merge pull request #127 from xiemaisi/js/incomplete-sanitisation-doc-improvement
Approved by esben-semmle
2018-09-03 16:25:44 +01:00
Jonas Jensen
2fd73f2171 C++: getEnclosingElement-without-macros changenote 2018-09-03 11:29:03 +02:00
Jonas Jensen
b34dbfa68b C++: Correct change note formatting
In Markdown, nested bullet lists are formatted with indented asterisks
rather than double asterisks.
2018-09-03 11:29:02 +02:00
Jonas Jensen
18dc1d0af0 Merge pull request #129 from Semmle/changenote-desig-init
cherry-pick onto rc/1.18: C++: change note for designated intializer fixes
2018-09-03 11:28:20 +02:00
Max Schaefer
759d98661c Merge pull request #117 from esben-semmle/js/push-sort-taint-steps
JS: support `push` and `sort` taint steps for arrays
2018-09-03 09:20:35 +01:00
Geoffrey White
8e5c170af6 CPP: Change note. 2018-09-03 08:30:05 +01:00
Max Schaefer
58e384558c JavaScript: Improve query name and help for js/incomplete-sanitization.
The query applies more generally to all kinds of string escaping and encoding, not just sanitization.
2018-09-03 08:20:01 +01:00
Max Schaefer
20bff709b1 Merge pull request #136 from esben-semmle/js/composed-function-taint
JS: model composed functions (RC)
2018-09-03 08:18:20 +01:00
Max Schaefer
7e3adec789 Merge pull request #135 from esben-semmle/js/pick-get-taint-steps
JS: model property projection calls (RC)
2018-09-03 08:17:42 +01:00