Rasmus Wriedt Larsen
|
1e31416049
|
Merge pull request #7031 from yoff/python/taint-through-with
Python: Taint through `async with`
|
2021-11-09 14:08:07 +01:00 |
|
Alex Ford
|
c708b6b76f
|
Merge pull request #7077 from github/ruby/downgrade-hardcoded-credentials
Ruby: Downgrade `rb/hardcoded-credentials` precision from high to medium
|
2021-11-09 12:08:10 +00:00 |
|
Rasmus Lerchedahl Petersen
|
ac5a46f24f
|
Python: split test as suggested in review
|
2021-11-09 13:04:52 +01:00 |
|
yoff
|
5f4aad40c1
|
Update python/ql/test/experimental/meta/InlineTaintTest.qll
Co-authored-by: Rasmus Wriedt Larsen <rasmuswriedtlarsen@gmail.com>
|
2021-11-09 13:00:35 +01:00 |
|
Rasmus Lerchedahl Petersen
|
aa1541a5c3
|
Python: add changenote
|
2021-11-09 12:57:36 +01:00 |
|
Rasmus Lerchedahl Petersen
|
a58c47b07b
|
Python: model aiopg.sa
|
2021-11-09 12:49:57 +01:00 |
|
Rasmus Lerchedahl Petersen
|
f53314019a
|
Python: test aiopg.sa
|
2021-11-09 12:42:03 +01:00 |
|
CodeQL CI
|
d9d304fc13
|
Merge pull request #7076 from asgerf/js/tainted-path-regexp-guard2
Approved by erik-krogh
|
2021-11-09 03:40:37 -08:00 |
|
Rasmus Lerchedahl Petersen
|
cd332a75fc
|
Python: model aiopg
|
2021-11-09 12:32:21 +01:00 |
|
Erik Krogh Kristensen
|
56a7c8b163
|
fix typo in change note
Co-authored-by: Asger F <asgerf@github.com>
|
2021-11-09 12:06:29 +01:00 |
|
Asger F
|
4b82840e9d
|
Revert "JS: Skip files with unsupported file encoding"
codeql-cli/v2.7.1
|
2021-11-09 10:57:01 +00:00 |
|
Rasmus Lerchedahl Petersen
|
cb8f1b4593
|
Python: Add tests for aiopg
|
2021-11-09 11:49:31 +01:00 |
|
Geoffrey White
|
d9e02e83fe
|
Merge pull request #6825 from MathiasVP/use-shared-ssa-in-ir-dataflow
C++: Redesign IR dataflow using the shared SSA library
|
2021-11-09 10:19:50 +00:00 |
|
James Fletcher
|
1bacce487e
|
Merge pull request #7056 from jf205/sarif-query-help
Add new option to database analyze tutorial
|
2021-11-09 10:19:29 +00:00 |
|
CodeQL CI
|
954fd8d6f7
|
Merge pull request #7081 from github/revert-6924-js/skip-files-with-unsupported-encoding
Approved by esbena
|
2021-11-09 02:18:16 -08:00 |
|
Erik Krogh Kristensen
|
8727060ca7
|
add comment about modes of operation
Co-authored-by: Rasmus Wriedt Larsen <rasmuswriedtlarsen@gmail.com>
|
2021-11-09 11:15:12 +01:00 |
|
Asger Feldthaus
|
87aa39cef2
|
JS: Limited tracking of object literals with methods
|
2021-11-09 11:06:41 +01:00 |
|
Asger F
|
0c6680b2c0
|
Revert "JS: Skip files with unsupported file encoding"
|
2021-11-09 09:07:54 +00:00 |
|
ihsinme
|
55fe01018f
|
Update InsecureTemporaryFile.ql
|
2021-11-09 09:33:33 +03:00 |
|
Asger Feldthaus
|
f14f9449ee
|
JS: Use getAMatchedString instead of getConstantString
|
2021-11-08 15:35:35 +01:00 |
|
Asger Feldthaus
|
b3e64f1669
|
JS: Add test
|
2021-11-08 15:32:43 +01:00 |
|
Erik Krogh Kristensen
|
330c2c42b5
|
Merge pull request #7075 from erik-krogh/cwe297
JS: add cwe-297 to `js/disabling-certificate-validation`
|
2021-11-08 14:35:58 +01:00 |
|
Erik Krogh Kristensen
|
5cafb86c88
|
Merge pull request #7074 from erik-krogh/cwe942
JS: add cwe-942 to `js/cors-misconfiguration-for-credentials`
|
2021-11-08 14:35:53 +01:00 |
|
Rasmus Lerchedahl Petersen
|
3f4c2ba24e
|
Python: Support debugging inline taint tests
The module `Conf` is created so that it can be imported
without importing the query predicates from the same file.
|
2021-11-08 14:08:11 +01:00 |
|
Anders Schack-Mulligen
|
1e0eb2f6e4
|
Merge pull request #7072 from aschackmull/java/nomagic-synchsetunsynchget
Java: Fix bad magic in SynchSetUnsynchGet.
|
2021-11-08 13:48:22 +01:00 |
|
Alex Ford
|
2581efc18a
|
ruby: downgrade rb/hardcoded-credentials precision from high to medium
|
2021-11-08 12:32:38 +00:00 |
|
Erik Krogh Kristensen
|
a2175a3207
|
add cwe-297 to js/disabling-certificate-validation
|
2021-11-08 13:26:53 +01:00 |
|
Erik Krogh Kristensen
|
507c8addb2
|
add cwe-942 to js/cors-misconfiguration-for-credentials
|
2021-11-08 13:12:19 +01:00 |
|
Cornelius Riemenschneider
|
76d2665132
|
Merge pull request #7071 from github/criemen/simplify-csharp-tracing-config
C#: Remove macos compatibility stanzas from tracing config.
|
2021-11-08 13:11:44 +01:00 |
|
james
|
96ff2f5125
|
use correct type of link
|
2021-11-08 12:06:20 +00:00 |
|
james
|
dfe77f844f
|
fix errors in debugging-data-flow-queries-using-partial-flow.rst
|
2021-11-08 11:59:53 +00:00 |
|
Erik Krogh Kristensen
|
0ab510f543
|
add test that requires flowToExpr
|
2021-11-08 12:25:45 +01:00 |
|
james
|
c94bfc306a
|
improve links
|
2021-11-08 11:18:41 +00:00 |
|
Erik Krogh Kristensen
|
3d6a5263e0
|
improve qhelp
Co-authored-by: Esben Sparre Andreasen <esbena@github.com>
|
2021-11-08 12:02:39 +01:00 |
|
Mathias Vorreiter Pedersen
|
8e496f7121
|
C++: Pull in the latest changes to 'SsaImplCommon'.
|
2021-11-08 10:46:54 +00:00 |
|
Mathias Vorreiter Pedersen
|
fff5d293ff
|
Merge branch 'main' into use-shared-ssa-in-ir-dataflow
|
2021-11-08 10:44:36 +00:00 |
|
Anders Schack-Mulligen
|
92fb7f555c
|
Java: Fix bad magic in SynchSetUnsynchGet.
|
2021-11-08 11:42:20 +01:00 |
|
Cornelius Riemenschneider
|
03ff2c622a
|
Remove macos compatibility stanzas from tracing config.
|
2021-11-08 11:30:31 +01:00 |
|
Anders Schack-Mulligen
|
613e971987
|
Merge pull request #7039 from github/turbo-js-java-lib-modeling-ghes-3-3-p-1
Add updated framework support for JS/Java
|
2021-11-08 11:08:34 +01:00 |
|
CodeQL CI
|
6f80387ac1
|
Merge pull request #6993 from asgerf/js/tainted-path-regexp-contains-check
Approved by erik-krogh
|
2021-11-08 01:52:28 -08:00 |
|
CodeQL CI
|
618d135b0a
|
Merge pull request #7060 from RasmusWL/hashlib-new-type-tracker
Approved by yoff
|
2021-11-08 01:31:40 -08:00 |
|
Tom Hvitved
|
77aca0a365
|
Merge pull request #7041 from hvitved/csharp/consistent-ids
C#: Use `cs/` prefix in all query IDs
|
2021-11-08 09:55:11 +01:00 |
|
Anders Schack-Mulligen
|
85fdbda16f
|
Merge pull request #7002 from aschackmull/java/field-node
Java: Add FieldValueNode to break up cartesian step relation.
|
2021-11-08 09:31:42 +01:00 |
|
Mathias Vorreiter Pedersen
|
021d9415b8
|
Merge branch 'main' into use-range-analysis-in-buffer-write
|
2021-11-08 08:22:49 +00:00 |
|
Anders Schack-Mulligen
|
e0b121cd90
|
Merge pull request #7047 from hvitved/csharp/ssa/dominance-frontier
Shared SSA: Improved dominance frontier calculation
|
2021-11-08 08:50:46 +01:00 |
|
Pierre
|
4af3775b72
|
Add requirements for Apple Silicon
|
2021-11-08 01:37:31 +01:00 |
|
Chris Smowton
|
b639e82d79
|
Merge pull request #7064 from github/workflow/coverage/update
Update CSV framework coverage reports
|
2021-11-05 09:27:25 +00:00 |
|
ihsinme
|
cedc5fd743
|
Update InsecureTemporaryFile.ql
|
2021-11-05 09:42:06 +03:00 |
|
github-actions[bot]
|
d7bfaec0f5
|
Add changed framework coverage reports
|
2021-11-05 00:09:28 +00:00 |
|
Mathias Vorreiter Pedersen
|
34aa4981be
|
Merge pull request #7018 from geoffw0/nullterm3
C++: Further performance improvement for the null termination queries
|
2021-11-04 21:37:58 +00:00 |
|