78658 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
Ed Minnix	f8cfa39492	Change note	2024-12-13 12:42:02 -05:00
Ed Minnix	3f9af5bfe4	Tests	2024-12-13 12:42:01 -05:00
Ed Minnix	63a3054aeb	os.Args variable read	2024-12-13 12:41:59 -05:00
Dave Bartolomeo	34844539d7	Fix pack names	2024-12-13 12:33:22 -05:00
Dave Bartolomeo	f99f5e8309	Merge remote-tracking branch 'origin/master' into dbartol/move-to-codeql	2024-12-13 11:49:32 -05:00
Paolo Tranquilli	a8238b1896	Swift: fix pack	2024-12-13 17:39:16 +01:00
Paolo Tranquilli	a75f5fac15	Swift: remove linux from standard pack ... This still defines a pack with linux included for development. `//swift:install` will still also include linux.	2024-12-13 17:01:22 +01:00
Alvaro Muñoz	455afc2bb2	Expect external workflows and actions in .github/workflow/external and .github/actions/external	2024-12-13 16:50:21 +01:00
Owen Mansel-Chan	e9dcd69cc0	Add readStep back to local taint flow	2024-12-13 13:30:18 +00:00
Owen Mansel-Chan	3a3e053f12	Only add taint steps for implicit varargs slice post-update nodes	2024-12-13 13:17:44 +00:00
Paolo Tranquilli	2cbb072668	Merge pull request #17699 from github/redsun82/swift-6 ... Swift: make extractor compilable with Swift 6	2024-12-13 12:27:35 +01:00
Asger F	820f81fc10	JS: Migrate UnsafeDynamicMethodAccess	2024-12-13 11:32:25 +01:00
Asger F	a9e89ed8e3	JS: Migrate PrototypePollutingAssignment	2024-12-13 11:23:31 +01:00
Asger F	bcc1669f4c	JS: Migrate InsecureDownload	2024-12-13 11:10:14 +01:00
Asger F	4e25036cdc	JS: Follow naming convention in InsecureModuleFlow module	2024-12-13 11:09:59 +01:00
Asger F	d381ab1260	JS: Migrate IncompleteHtmlAttributeSanitization	2024-12-13 10:55:00 +01:00
Jeroen Ketema	d6964ff755	C++: Add word missing from change note	2024-12-13 10:48:46 +01:00
Asger F	2112ecc44d	JS: Migrate HardcodedDataInterpretedAsCode	2024-12-13 10:48:43 +01:00
Asger F	dc3d7a0159	Update ExceptionXssCustomizations.qll	2024-12-13 10:47:04 +01:00
Asger F	42a7208704	JS: Migrate ExceptionXss	2024-12-13 10:29:32 +01:00
Asger F	d9a43dbd85	JS: Migrate UnsafeHtmlConstruction	2024-12-13 10:08:17 +01:00
Asger F	8907252814	JS: Migrate TemplateObjectInjection	2024-12-13 10:08:16 +01:00
Asger F	3573f0b065	JS: Migrate SecondOrderCommandInjection	2024-12-13 10:08:15 +01:00
Asger F	355f7cdd54	JS: Migrate PrototypePollutingMergeCall	2024-12-13 10:08:13 +01:00
Asger F	c38e3a23eb	JS: Migrate NoSqlInjection	2024-12-13 10:08:12 +01:00
Asger F	8e8de5cf23	JS: Migrate LoopBoundInjection	2024-12-13 10:08:11 +01:00
Asger F	daddff0dc6	JS: Avoid deprecation warning in XssThroughDom	2024-12-13 10:08:10 +01:00
Asger F	15d999a9dc	JS: Migrate DeepObjectResourceExhaustion	2024-12-13 10:08:09 +01:00
Asger F	5f42a715f6	JS: Migrate TaintedObject to a CommonFlowState	2024-12-13 10:08:08 +01:00
Asger F	14ca1c134b	JS: Update TaintedUrlSuffix test	2024-12-13 10:08:07 +01:00
Asger F	12289d4c39	JS: Migrate DomBasedXssQuery to FlowState	2024-12-13 10:08:06 +01:00
Asger F	114d4a141a	JS: Move FlowState definition into CommonFlowState ... Needed for migrating the XSS query	2024-12-13 10:08:05 +01:00
Asger F	3cf14d8506	JS: Migrate ClientSideUrlRedirect to flow state	2024-12-13 10:08:03 +01:00
Asger F	cca980298f	JS: Use flow state in barrier and step relations	2024-12-13 10:08:02 +01:00
Asger F	a8fdd759f9	JS: Add FlowState class to TaintedUrlSuffix	2024-12-13 10:08:01 +01:00
Paolo Tranquilli	92ec7e89ab	Merge branch 'main' into redsun82/swift-6	2024-12-13 09:38:15 +01:00
Ed Minnix	68e2f27180	Add summary Microsoft.AspNetCore.Components.CompilerServices.RuntimeHelpers::TypeCheck<T>	2024-12-12 22:10:15 -05:00
Ed Minnix	8e37a5cd55	Fix test case	2024-12-12 22:05:26 -05:00
Owen Mansel-Chan	b58e6ebade	Address review comments for localTaintStep	2024-12-12 22:07:15 +00:00
Ed Minnix	0a967325e7	Change note	2024-12-12 16:22:09 -05:00
Ed Minnix	40ea5f582c	MarkupString models	2024-12-12 16:18:29 -05:00
Jeroen Ketema	792504434a	Merge pull request #18277 from jketema/printast ... C++: Fix small PrintAST and PrintIR issue	2024-12-12 19:17:43 +01:00
Jeroen Ketema	8e458f4651	C++: Simplify local variable names	2024-12-12 17:13:02 +01:00
Joe Farebrother	dcbcf7e2bd	Add additional tests demonstrating false negative flow	2024-12-12 15:55:36 +00:00
Jeroen Ketema	f9bfd969a9	C++: Address review comments	2024-12-12 16:49:24 +01:00
Simon Friis Vindum	1d8e7fd9ea	Rust: Accept differences	2024-12-12 16:47:51 +01:00
Simon Friis Vindum	0fa40fcdcc	Rust: Fix captured variable data flow inconsistency	2024-12-12 16:28:19 +01:00
Asger F	a53d294d91	Merge pull request #18203 from asgerf/jss/document-url ... JS: Use TaintedUrlSuffix in ClientSideUrlRedirect	2024-12-12 15:47:51 +01:00
Tom Hvitved	20db548fef	Merge pull request #18263 from hvitved/dataflow/remove-column ... Data flow: Remove unused column from `flowThroughOutOfCall`	2024-12-12 15:41:20 +01:00
Geoffrey White	03f962ed86	Merge pull request #18226 from geoffw0/badcrypto ... Rust: Weak encryption algorithm query.	2024-12-12 14:21:16 +00:00