Tony Torralba
87b2dcc892
Adjust test expectations
2024-03-14 10:25:04 +01:00
Tom Hvitved
e4a4c18166
Go: Implement new data flow interface
2024-03-13 14:41:57 +01:00
Owen Mansel-Chan
33c17313b4
Add test for not extracting values for intermediate string concatenations
2024-03-12 11:59:10 +00:00
Kevin Stubbings
30fe4168e3
Removed filepath.base sanitizer
2024-03-11 15:08:10 -07:00
Kevin Stubbings
c9b49d3760
resolve feedback
2024-03-11 14:54:28 -07:00
Kevin Stubbings
530c76ca8b
Add New Sanitizers and Modify Old Ones
2024-03-11 14:53:29 -07:00
Tony Torralba
04436208ab
Merge pull request #15843 from atorralba/atorralba/go/uncontrolled-allocation-size
...
Go: Promote `go/uncontrolled-allocation-size` from experimental
2024-03-11 16:12:27 +01:00
Owen Mansel-Chan
820c14577a
Merge pull request #13553 from am0o0/amammad-go-bombs
...
Go: Decompression Bombs
2024-03-10 13:48:04 +00:00
Tony Torralba
7d74125508
Go: Promote go/uncontrolled-allocation-size
2024-03-07 15:17:49 +01:00
Owen Mansel-Chan
f1115af146
Merge pull request #15130 from Malayke/main
...
Go: new query for detect DOS vulnerability
2024-03-06 11:32:57 +00:00
Tony Torralba
a264ea23c6
Go: Add SQLi sinks for Squirrel
2024-03-05 15:35:34 +01:00
Tony Torralba
a78e04eb34
Merge pull request #15795 from atorralba/atorralba/go/macaron-sources
...
Go: Add Macaron sources
2024-03-05 09:08:58 +01:00
Tony Torralba
7286f56718
Change tests to inline expectations
2024-03-04 17:29:12 +01:00
Owen Mansel-Chan
dcc2b2c50d
Merge pull request #15057 from aydinnyunus/main
...
Web Cache Deception Vulnerability on Go Frameworks
2024-03-04 14:36:39 +00:00
Owen Mansel-Chan
c0974934bc
Fix test expectations again
2024-03-04 14:05:04 +00:00
Owen Mansel-Chan
39a802fb98
Add new columns to test expectations
2024-03-04 13:45:54 +00:00
Owen Mansel-Chan
6a1bb9bfb0
Merge branch 'main' into main
2024-03-04 13:42:53 +00:00
Tony Torralba
fc12537699
Go: Add Macaron sources
2024-03-04 14:29:56 +01:00
Chris Smowton
9f84653283
Merge pull request #15613 from smowton/smowton/fix/golang-map-range-read-dataflow
...
Golang: fix flow from a map value via a range statement
2024-02-27 15:42:43 +00:00
Chris Smowton
a6480a4ca1
Autoformat again / tabify
2024-02-27 13:55:26 +00:00
Chris Smowton
74448c092a
Autoformat / uglify
2024-02-27 13:49:12 +00:00
Chris Smowton
e62a0805db
Add test for map literal
2024-02-27 13:44:52 +00:00
Chris Smowton
12213a0a08
Add test
2024-02-23 18:39:16 +00:00
amammad
1927530517
update tests after branch update
2024-02-21 22:15:23 +04:00
Am
376c6ea09a
Merge branch 'main' into amammad-go-bombs
2024-02-21 21:42:25 +03:30
amammad
4c769f2b09
update tests
2024-02-21 01:10:35 +04:00
amammad
13b0a9a842
New testcase 's2Reader.ReadByte()'
2024-02-21 01:05:57 +04:00
amammad
905420143b
call functions in the same order as the function declarations
2024-02-21 00:19:51 +04:00
Michael B. Gale
ea676469bb
Merge pull request #15202 from github/mbg/go/1.22
...
Go: Update workflows and expected test results for Go 1.22
2024-02-20 12:32:57 +00:00
Tony Torralba
1704bfe2bf
Merge pull request #15585 from atorralba/atorralba/go/promote-jwt-unsafe-verification
...
Go: Promote `go/missing-jwt-signature-check` from experimental
2024-02-19 15:35:44 +01:00
Michael B. Gale
25f0692e2c
Go: Update expected results for TypeParamType
2024-02-16 17:33:30 +00:00
Tony Torralba
2a30898af6
Go: Promote go/missing-jwt-signature-check from experimental
2024-02-14 17:25:03 +01:00
Tony Torralba
1202b5b429
Go: Use less confusing name for hardcoded credentials tests
...
We don't want name-based heuristics to pick these variable names, but also using something like 'safeName' may mislead readers into believing the test cases are intended to be GOOD cases (i.e. safe)
2024-02-14 17:06:05 +01:00
Tony Torralba
5ce35e47b9
Adjust a test case so that the key isn't considered dummy
...
(len < 4)
2024-02-14 13:06:31 +01:00
Tony Torralba
750c8085cb
Remove duplicated main from tests
2024-02-14 12:15:19 +01:00
Tony Torralba
ba1faea630
Go: Promote go/hardcoded-key from experimental
2024-02-14 12:15:14 +01:00
Anders Schack-Mulligen
3b8af1e52a
Go: Add empty provenance column to expected files.
2024-02-09 11:32:07 +01:00
Tony Torralba
3b7d6a4806
Go: Add AwsLambda to the global context
2024-01-24 11:33:26 +01:00
Tony Torralba
9a0fb39382
Model StartWithContext
...
Co-authored-by: Chris Smowton <smowton@github.com >
2024-01-19 09:25:35 +01:00
Tony Torralba
1d7dbec719
Go: Add flow sources for AWS Lambda function handlers
2024-01-18 15:17:21 +01:00
Michael B. Gale
08c4dc1ea5
Go: Exclude all FlowSummaryNodes from test results
2024-01-16 15:51:40 +00:00
amammad
a47c702171
change TN to GOOD instead of using hasValueFlow
2024-01-15 22:08:35 +04:00
amammad
65ac94320e
fix Typo in tests
2024-01-15 01:14:54 +04:00
amammad
3c79faf37a
minor change for resolving rebase conflicts
2024-01-15 01:06:36 +04:00
amammad
b2edf6cf3e
add Inline Expectations Test, update tests accordingly
2024-01-15 00:27:06 +04:00
Owen Mansel-Chan
057ee85cd0
Merge pull request #14123 from am0o0/amammad-go-fastHttp
...
Go: fasthttp
2024-01-14 20:12:31 +00:00
amammad
0efb00724d
Add hasFlowToComparison to all sinks as a sanitizer
2024-01-15 00:05:11 +04:00
Tony Torralba
05b487e3a6
Go: Recognize unsafe candidate selection in go/insecure-randomness
2024-01-11 11:58:12 +01:00
Tony Torralba
5e8c63c3aa
Use arg position instead of arg as class field to reduce number of instances
2024-01-10 14:12:29 +01:00
Tony Torralba
78c0cdfa2c
Apply suggestions from code review
...
co-authored-by: Owen Mansel-Chan <owen-mc@github.com >
2024-01-10 13:33:41 +01:00
