Joe Farebrother
|
174ac3d6c3
|
Move to correct directory
|
2021-10-20 17:09:59 +01:00 |
|
Joe Farebrother
|
c3d1165c5f
|
Revert change to argument handling
|
2021-10-20 17:09:58 +01:00 |
|
Joe Farebrother
|
6a2346ec33
|
Clean up sink definition
|
2021-10-20 17:09:58 +01:00 |
|
Joe Farebrother
|
daf6ac2584
|
Update tests to InlineFlowTest
|
2021-10-20 17:09:58 +01:00 |
|
Joe Farebrother
|
52ca6b93e3
|
Make things private where possible
|
2021-10-20 17:09:58 +01:00 |
|
Joe Farebrother
|
351e67c639
|
Fix qhelp
|
2021-10-20 17:09:58 +01:00 |
|
Joe Farebrother
|
06a30bf822
|
Add change note
|
2021-10-20 17:09:58 +01:00 |
|
Joe Farebrother
|
b112189530
|
Update docs
|
2021-10-20 17:09:58 +01:00 |
|
Joe Farebrother
|
224d679722
|
Add Sticky broadcast sinks
|
2021-10-20 17:09:57 +01:00 |
|
Joe Farebrother
|
ef7125e21a
|
Simplify sink definitions using local flow
|
2021-10-20 17:09:57 +01:00 |
|
Joe Farebrother
|
d7c7776495
|
Add additional models; fix up tests
|
2021-10-20 17:09:57 +01:00 |
|
Joe Farebrother
|
ae461bcfe4
|
Switch to inline expectations tests
|
2021-10-20 17:09:57 +01:00 |
|
Joe Farebrother
|
4012866c6f
|
Allow arbitrary read steps at the sink
|
2021-10-20 17:09:57 +01:00 |
|
Joe Farebrother
|
bae0da8851
|
Remove existing get methods
|
2021-10-20 17:09:57 +01:00 |
|
Joe Farebrother
|
1e8dd7ae40
|
Use subclasses of context for sinks
|
2021-10-20 17:09:57 +01:00 |
|
Joe Farebrother
|
143920efca
|
Movee query logic to a qll file
|
2021-10-20 17:09:57 +01:00 |
|
Joe Farebrother
|
c68a7077d7
|
Move query and tests out of experimental
|
2021-10-20 17:09:56 +01:00 |
|
Rasmus Wriedt Larsen
|
8167e83ae5
|
Python: Fix tests
|
2021-10-20 17:58:03 +02:00 |
|
Jonathan Leitschuh
|
cce3aad62e
|
Remove non-ASCII characters from Handler.java
Signed-off-by: Jonathan Leitschuh <Jonathan.Leitschuh@gmail.com>
|
2021-10-20 11:34:59 -04:00 |
|
Geoffrey White
|
0e5cfd3469
|
C++: Rename the predicate and make it private.
|
2021-10-20 16:12:04 +01:00 |
|
Rasmus Wriedt Larsen
|
d0fd907582
|
Python: Add change-note
I reworded this slightly from what was done in C++, such that I can
completely stand behind what it says.
|
2021-10-20 17:03:55 +02:00 |
|
Rasmus Wriedt Larsen
|
8f28684d10
|
Python: Rename ExtractionErrors.ql -> ExtractionWarnings.ql
|
2021-10-20 17:01:33 +02:00 |
|
Rasmus Wriedt Larsen
|
605494c3d1
|
Python: Treat SyntaxErrors as warnings in diagnostics
Rename going to happen in second commit, so git doesn't get too confused
I don't actually recall where to lookup that warning is 1, and error is
2, but I took this from
https://github.com/github/codeql/pull/6830/files#diff-460fc20823ced3b074784db804f2d4d6cfcad4f23fe5d264dc7496c782629a2eR121-R123
|
2021-10-20 16:59:00 +02:00 |
|
Geoffrey White
|
5379b25146
|
C++: Add tests.
|
2021-10-20 15:44:56 +01:00 |
|
Geoffrey White
|
f17c06a37f
|
C++: Fix mistake in previous commit.
|
2021-10-20 15:40:14 +01:00 |
|
Arthur Baars
|
62d25b6e12
|
Merge pull request #373 from github/aibaars/warn-ruby-beta
Ruby: warn that Ruby is still in Beta
codeql-cli/v2.7.0
|
2021-10-20 16:14:29 +02:00 |
|
Arthur Baars
|
74ba532a8b
|
Ruby: warn that Ruby is still in Beta
|
2021-10-20 15:59:26 +02:00 |
|
Mathias Vorreiter Pedersen
|
7feab27bf4
|
Merge pull request #6926 from geoffw0/setliterals2
C++: Use set literals (more).
|
2021-10-20 14:58:06 +01:00 |
|
Arthur Baars
|
630ee17613
|
Ruby: sync-files and add allowParameterReturnInSelf()
|
2021-10-20 15:39:46 +02:00 |
|
Arthur Baars
|
0bec8987b6
|
Merge remote-tracking branch 'codeql/main' into 'main'
|
2021-10-20 15:38:59 +02:00 |
|
Geoffrey White
|
da412178ce
|
C++: Use set literals (more).
|
2021-10-20 14:18:27 +01:00 |
|
Harry Maclean
|
356828cd51
|
Update stored XSS fixture
The change to `self` modelling finds more true positives in this query.
|
2021-10-20 13:30:51 +01:00 |
|
Nick Rolfe
|
16c62d22de
|
Add change-note for rb/path-injection
|
2021-10-20 13:19:49 +01:00 |
|
Nick Rolfe
|
e367832637
|
Import Frameworks.qll in Summaries module
|
2021-10-20 13:11:50 +01:00 |
|
hubwriter
|
8f15dc4bd0
|
Add 'requires glibc 2.17' in supported languages table
|
2021-10-20 12:48:20 +01:00 |
|
Nick Rolfe
|
86da3c2db3
|
Add rb/path-injection query
|
2021-10-20 12:31:16 +01:00 |
|
Tom Hvitved
|
19589bef27
|
Merge pull request #6777 from hvitved/dataflow/summary-clear-modelling
Data flow: Rework `SummarizedCallable::clearsContent/2`
|
2021-10-20 13:23:56 +02:00 |
|
Ian Lynagh
|
25b5601da9
|
Java: Add a changenote to RefType -> ClassOrInterface
|
2021-10-20 12:21:08 +01:00 |
|
Ian Lynagh
|
25fcae1c51
|
Java: Make some types more specific
Where we used to use RefType, we now use ClassOrInterface.
|
2021-10-20 12:18:20 +01:00 |
|
hubwriter
|
aaa5046533
|
Add beta note to page Calum added
|
2021-10-20 11:17:38 +01:00 |
|
Asger Feldthaus
|
fa0ce5380b
|
JS: Skip files with unsupported file encoding
|
2021-10-20 12:16:50 +02:00 |
|
Tom Hvitved
|
f9fb046e9f
|
C#: Update expected test output after rebase
|
2021-10-20 12:15:27 +02:00 |
|
Tom Hvitved
|
29cdc8a49a
|
Java: Update expected test output after rebase
|
2021-10-20 12:11:59 +02:00 |
|
hubwriter
|
dd31d5ffb3
|
Merge branch 'main' into hubwriter/codeql-ruby-support
|
2021-10-20 11:08:59 +01:00 |
|
Tom Hvitved
|
0bf5238f39
|
Update QL doc for allowParameterReturnInSelf
|
2021-10-20 12:08:58 +02:00 |
|
Tom Hvitved
|
53d4d72fe5
|
C#: Simplify SummarizedCallableDefaultClearsContent
|
2021-10-20 12:08:58 +02:00 |
|
Tom Hvitved
|
dd138b0429
|
Address review comments
|
2021-10-20 12:08:58 +02:00 |
|
Tom Hvitved
|
ec5d8ab2db
|
Java: Restrict use-use flow
|
2021-10-20 12:08:57 +02:00 |
|
Tom Hvitved
|
a1511e13d8
|
Data flow: Sync files
|
2021-10-20 12:08:57 +02:00 |
|
Tom Hvitved
|
1196d0c624
|
C#: Rework SummarizedCallable::clearsContent/2
|
2021-10-20 12:08:57 +02:00 |
|