1012 Commits

Author	SHA1	Message	Date
Alex Ford	eb34bbbfd2	Ruby: renames for rb/ldap-injection	2023-09-03 17:20:04 +01:00
Alex Ford	d46eceb5f4	Ruby: configsig rb/kernel-open	2023-09-03 17:20:04 +01:00
Alex Ford	a8ad0d8ff5	Ruby: renames for rb/insecure-download	2023-09-03 17:20:04 +01:00
Alex Ford	c973fc1274	Ruby: configsig rb/http-to-file-access	2023-09-03 17:20:04 +01:00
Alex Ford	2536f1a0cd	Ruby: configsig rb/user-controlled-bypass	2023-09-03 17:20:04 +01:00
Alex Ford	377570f361	Ruby: configsig rb/command-line-injection	2023-09-03 17:20:04 +01:00
Alex Ford	b1a49ddb0d	Ruby: configsig rb/code-injection	2023-09-03 17:20:04 +01:00
Alex Ford	6fa267a820	Ruby: configsig rb/clear-text-storage-sensitive-data	2023-09-03 17:20:04 +01:00
Alex Ford	2a2f21d3a9	Ruby: configsig rb/clear-text-logging-sensitive-data	2023-09-03 17:20:04 +01:00
Alex Ford	ce35d6921f	Ruby: configsig rb/hardcoded-data-interpreted-as-code	2023-08-31 16:20:18 +01:00
Brandon Stewart	56f0387613	Merge branch 'main' into add-cwe-208	2023-08-29 13:09:59 -04:00
Dave Bartolomeo	3343b78015	Merge pull request #14074 from github/post-release-prep/codeql-cli-2.14.3 ... Post-release preparation for codeql-cli-2.14.3	2023-08-28 13:34:10 -04:00
github-actions[bot]	3eba77421a	Post-release preparation for codeql-cli-2.14.3	2023-08-28 15:53:49 +00:00
Alex Ford	9957e2683b	Merge pull request #13313 from maikypedia/maikypedia/ldap-improper-auth ... Ruby: Add Improper LDAP Authentication query (CWE-287)	2023-08-25 20:52:34 +01:00
Maiky	17565cde75	Add JWT Security Queries	2023-08-25 21:28:53 +02:00
Maiky	ffd618d6cc	Revert "Add "" and nil as sources" ... This reverts commit 664c1eba72.	2023-08-25 15:23:55 +02:00
Maiky	664c1eba72	Add "" and nil as sources	2023-08-22 18:10:33 +02:00
github-actions[bot]	098dfb4242	Release preparation for version 2.14.3	2023-08-18 14:48:15 +00:00
Maiky	5f502ec6bb	rename change-note	2023-08-16 15:32:53 +02:00
Brandon Stewart	01577dac32	format document	2023-08-10 13:59:47 +00:00
Brandon Stewart	b899b648e5	Update ruby/ql/src/experimental/cwe-208/UnsafeHmacComparison.ql ... Co-authored-by: Alex Ford <alexrford@users.noreply.github.com>	2023-08-10 09:21:16 -04:00
Brandon Stewart	7882cf0bf0	Update ruby/ql/src/experimental/cwe-208/UnsafeHmacComparison.ql ... Co-authored-by: Alex Ford <alexrford@users.noreply.github.com>	2023-08-10 09:21:02 -04:00
Brandon Stewart	74567041a7	remove pathgraph	2023-08-09 19:51:07 +00:00
Brandon Stewart	cca4c35cf8	add pathgraph	2023-08-09 19:23:21 +00:00
Brandon Stewart	7f07422a5d	Merge branch 'main' into add-cwe-208	2023-08-09 14:52:51 -04:00
Brandon Stewart	07d5beca34	run format document	2023-08-09 18:51:55 +00:00
github-actions[bot]	432c21d4fb	Post-release preparation for codeql-cli-2.14.2	2023-08-09 18:45:18 +00:00
Brandon Stewart	26401fec70	address PR comments	2023-08-09 18:44:42 +00:00
Brandon Stewart	93dd9d0aa4	Update ruby/ql/src/experimental/cwe-208/UnsafeHmacComparison.ql ... Co-authored-by: Alex Ford <alexrford@users.noreply.github.com>	2023-08-08 12:54:54 -04:00
github-actions[bot]	79c90fa36a	Release preparation for version 2.14.2	2023-08-07 18:08:52 +00:00
Maiky	c54561e775	Merge branch 'main' into maikypedia/ldap-improper-auth	2023-08-03 16:49:30 +02:00
Tom Hvitved	525ed65b0b	Rename getNode to getAstNode	2023-08-03 10:56:50 +02:00
Alex Ford	f437a6f729	Merge branch 'main' into maikypedia/ldap-injection	2023-07-31 16:00:41 +01:00
Alex Ford	2240e4bffb	Ruby: fix changenote date format	2023-07-31 14:56:53 +01:00
Brandon Stewart	f241498cab	correct additional pascalcase issue	2023-07-26 17:55:56 +00:00
Brandon Stewart	1a83554b0c	correct typo	2023-07-26 17:54:42 +00:00
Brandon Stewart	346a2f269e	Update UnsafeHmacComparison.ql	2023-07-26 13:48:42 -04:00
Brandon Stewart	42adbe0cd4	address linter	2023-07-26 17:43:34 +00:00
Brandon Stewart	adddc58b61	address linter	2023-07-26 17:38:06 +00:00
Brandon Stewart	494e7d9a3f	add unsafe HMAC comparison query and qlhelp file	2023-07-26 17:28:22 +00:00
github-actions[bot]	f91b7a9342	Post-release preparation for codeql-cli-2.14.1	2023-07-21 16:16:25 +00:00
github-actions[bot]	c936a920b0	Release preparation for version 2.14.1	2023-07-20 16:32:27 +00:00
Alex Ford	d89c10dd85	Merge pull request #13130 from maikypedia/maikypedia/xpath-injection ... Ruby : XPath Injection Query (CWE-643)	2023-07-14 14:10:09 +01:00
Alex Ford	dbb55ff2b4	Ruby: fix xpathinjection deprecation warnings	2023-07-14 12:45:27 +01:00
Alex Ford	a524735236	Merge branch 'main' into maikypedia/ldap-injection	2023-07-14 12:05:17 +01:00
Erik Krogh Kristensen	4f1c12e9dc	apply suggestion from review ... Co-authored-by: Max Schaefer <54907921+max-schaefer@users.noreply.github.com>	2023-07-13 14:49:25 +02:00
erik-krogh	1fe66232c6	suggestions based on review: add a popular library example for HTML-sanitization, and use the old text about ../ replacements	2023-07-13 14:28:11 +02:00
Asger F	8d2dba18c0	Ruby: change note	2023-07-13 11:53:16 +02:00
Maiky	119a32fe0e	fix naming error	2023-07-12 23:54:58 +02:00
Maiky	c255f8717d	Change hasFlowPath to flowPath ... Co-authored-by: Alex Ford <alexrford@users.noreply.github.com>	2023-07-11 19:20:54 +02:00