283 Commits

Author	SHA1	Message	Date
Anders Schack-Mulligen	52ad816074	Merge pull request #904 from rneatherway/zipslip-fix ... Java: Add a flow step for `Path::toFile` in ZipSlip	2019-02-11 13:08:38 +01:00
Robin Neatherway	409733838b	Java: Add a flow step for Path::toFile in ZipSlip	2019-02-11 10:33:44 +00:00
Mark Shannon	ee143ee041	Python: Add change note for unified parser.	2019-02-08 16:44:01 +00:00
calum	b473d2f7a8	C#: Update change notes. Decrease the priority of this query because the volatile keyword is no longer needed on modern .Net runtimes.	2019-02-08 14:59:45 +00:00
calum	15a2f9dc13	C#: Add change note.	2019-02-08 14:38:51 +00:00
Taus	90eccbdf76	Merge pull request #836 from markshannon/python-mutating-descriptor ... Python: Fix up mutating-descriptor query	2019-02-08 15:10:30 +01:00
Max Schaefer	6ce77ea1ef	JavaScript: Add change note.	2019-02-08 09:57:07 +00:00
semmle-qlci	0558b58193	Merge pull request #907 from asger-semmle/reapply-closure-modules ... Approved by xiemaisi	2019-02-08 09:23:47 +00:00
calum	65b3771f85	C#: Add changenote.	2019-02-07 12:10:18 +00:00
Asger F	e4b230ba60	Revert "Merge pull request #897 from Semmle/revert-817-closure-modules" ... This reverts commit 95185345fd, reversing changes made to b8be66ec48.	2019-02-07 11:58:38 +00:00
Jonas Jensen	47ad280e34	Merge pull request #842 from geoffw0/gets ... CPP: Clean up PotentialBufferOverflow.ql, PotentiallyDangerousFunction.ql	2019-02-07 09:27:00 +01:00
Max Schaefer	812cba0fe3	Merge pull request #828 from esben-semmle/js/vue-support-1 ... JS: basic Vue support	2019-02-07 08:00:17 +00:00
Asger F	e46e2b2515	Revert "JS: Add support for Closure modules"	2019-02-06 17:30:45 +00:00
semmle-qlci	b13c11017c	Merge pull request #885 from asger-semmle/async-waterfall ... Approved by xiemaisi	2019-02-06 16:30:17 +00:00
Esben Sparre Andreasen	235625d03a	Merge branch 'master' into js/vue-support-1	2019-02-06 16:57:16 +01:00
semmle-qlci	09825f28ed	Merge pull request #817 from asger-semmle/closure-modules ... Approved by esben-semmle, xiemaisi	2019-02-06 15:51:53 +00:00
semmle-qlci	a2691b32b5	Merge pull request #851 from xiemaisi/js/post-message-star ... Approved by esben-semmle	2019-02-06 09:57:04 +00:00
Esben Sparre Andreasen	fb19032038	JS: change notes for Vue support	2019-02-06 09:38:00 +01:00
Esben Sparre Andreasen	a78dd422b6	JS: add query js/vue/arrow-method-on-vue-instance	2019-02-06 09:38:00 +01:00
Geoffrey White	2a708d3243	CPP: Change note.	2019-02-05 17:58:30 +00:00
Asger F	ddd72190cb	JS: change note	2019-02-05 16:59:29 +00:00
Tom Hvitved	37c55750f7	Merge pull request #873 from calumgrant/cs/format-getresource-strings ... C#: Fix FP in cs/format-argument-unused	2019-02-05 17:12:04 +01:00
Taus Brock-Nannestad	b550da2b45	Improve change note.	2019-02-05 16:01:45 +01:00
yh-semmle	3e8f7a740c	Merge pull request #838 from aschackmull/java/taint-collections ... Java: Add additional taint steps through collections.	2019-02-05 09:59:24 -05:00
Taus Brock-Nannestad	895b237e3c	Python: Make "Modification of parameter with default" flow-sensitive.	2019-02-04 19:05:04 +01:00
Asger F	9fd4e81f20	JS: add change note	2019-02-04 14:21:34 +00:00
Tom Hvitved	b4b6fdd12b	C#: Revert recent change to AccessorCall ... The recent change to `AccessorCall` on dd99525566 resulted in some bad join-orders, so I have (partly) reverted them. This means that the issues orignally addressed by that change are now reintroduced, and I plan to instead apply a fix to the CFG, which--unlike the original fix--should be able to handle multi-property-tuple assignments.	2019-02-04 15:14:18 +01:00
calum	d79201ec47	C#: Change notes.	2019-02-04 12:53:18 +00:00
semmle-qlci	222738072d	Merge pull request #840 from esben-semmle/js/propagate-sound-avalue ... Approved by xiemaisi	2019-02-01 09:23:43 +00:00
Robert Marsh	e1d289ffb4	Merge pull request #759 from calumgrant/cs/interface-tostring ... C#: Remove FPs from cs/call-to-object-tostring	2019-01-31 12:03:49 -08:00
Dave Bartolomeo	ab1f96fb2c	Merge pull request #770 from jbj/cfg-static-init-pr ... C++: Add addresses to `Expr.isConstant`	2019-01-31 10:24:48 -08:00
Max Schaefer	aeb8cc62b2	JavaScript: Reclassify PostMessageStar as CWE-201.	2019-01-31 08:08:52 +00:00
Geoffrey White	642faa6cf0	CPP: Change note.	2019-01-30 18:38:19 +00:00
semmle-qlci	fc5b9dd55e	Merge pull request #837 from asger-semmle/hardcoded-empty-string ... Approved by esben-semmle	2019-01-30 13:40:39 +00:00
Max Schaefer	769e407c24	JavaScript: Add new query PostMessageStar.	2019-01-30 10:26:43 +00:00
calum	26365c82f7	C#: Update change notes.	2019-01-29 18:04:52 +00:00
Taus	6f7c96db54	Merge branch 'master' into python-unsafe-use-of-mktemp	2019-01-29 16:12:53 +01:00
Taus Brock-Nannestad	de63f01f67	Update change note.	2019-01-29 16:10:46 +01:00
Mark Shannon	7fe3c3d516	Merge branch 'master' into python-mutating-descriptor	2019-01-29 14:46:33 +00:00
Taus	9adb19f3a9	Merge branch 'master' into python-incomplete-url-sanitize	2019-01-29 14:17:37 +01:00
Jonas Jensen	d776d9f903	Merge pull request #821 from geoffw0/query-tags-case ... CPP: Improve ArrayArgSizeMismatch.ql	2019-01-29 03:52:52 -08:00
Esben Sparre Andreasen	5d5900a534	JS: change notes for improved interprocedural type inference	2019-01-29 10:21:36 +01:00
semmle-qlci	a5aee9ed0f	Merge pull request #833 from esben-semmle/js/sharpen-cond ... Approved by xiemaisi	2019-01-29 08:03:06 +00:00
Taus	0f5b21e392	Merge pull request #807 from markshannon/python-insecure-file-permission ... Python: Weak file permissions query.	2019-01-28 23:21:10 +01:00
Anders Schack-Mulligen	a29f615da0	Java: Add additional taint steps through collections.	2019-01-28 14:34:09 +01:00
Asger F	5d4192ce0a	JS: change note	2019-01-28 13:04:28 +00:00
Mark Shannon	4e5d4e265c	Add change note.	2019-01-28 13:01:04 +00:00
Mark Shannon	3992346add	Python: Fix up mutating-descriptor query to only flag mutation when they occur during descriptor protocol.	2019-01-28 12:57:18 +00:00
Geoffrey White	bf7cdad736	CPP: Change note.	2019-01-28 09:31:06 +00:00
Esben Sparre Andreasen	239fe6e419	fixup! JS: sharpen the js/trivial-conditional whitelist	2019-01-28 10:18:03 +01:00