Commit Graph

29908 Commits

Author SHA1 Message Date
Max Schaefer
db175f5584 JavaScript: Sort change notes alphabetically. 2018-11-19 09:00:38 +00:00
semmle-qlci
9e4aeb36a6 Merge pull request #436 from asger-semmle/url-concat
Approved by xiemaisi
2018-11-19 08:57:24 +00:00
semmle-qlci
328c86c552 Merge pull request #479 from asger-semmle/typescript-extractor-perf1
Approved by xiemaisi
2018-11-19 08:53:41 +00:00
semmle-qlci
128118cfa7 Merge pull request #481 from asger-semmle/typescript-jsx
Approved by xiemaisi
2018-11-19 08:53:15 +00:00
yh-semmle
47b9218b05 Merge pull request #480 from aschackmull/java/path-problem-conversion
Java: Convert security queries to path-problem.
2018-11-18 20:55:52 -05:00
Felicity Chapman
d4bcc1e9d4 Add note to further file 2018-11-17 13:03:48 +00:00
Felicity Chapman
5c924307ca Remove incorrect comment from query 2018-11-17 13:03:46 +00:00
Felicity Chapman
9ce1a2a040 Add JSF note to qhelp for sub-set of JSF queries 2018-11-17 13:03:45 +00:00
Geoffrey White
a51b9847b2 CPP: Modify similar query as well. 2018-11-16 22:49:35 +00:00
Geoffrey White
9f688eb7e2 CPP: Exclude variables that have non-function accesses. 2018-11-16 22:48:30 +00:00
Geoffrey White
2d07410f97 CPP: Exclude variables that are part of an interface. 2018-11-16 22:46:11 +00:00
Geoffrey White
b70c572e34 CPP: Add a test for LimitedScopeFunction. 2018-11-16 22:44:41 +00:00
Geoffrey White
1cba1d0b1a CPP: Modify similar query as well. 2018-11-16 22:38:20 +00:00
Geoffrey White
e253ab54d7 CPP: Exclude variables that are part of an interface. 2018-11-16 22:38:16 +00:00
Geoffrey White
0e5d23e78b CPP: Add a test of LimitedScopeFile. 2018-11-16 22:37:30 +00:00
calum
1aa5e24108 C#: Remove duplicate results from cs/use-of-vulnerable-package 2018-11-16 16:50:35 +00:00
Asger F
84c1ba0b31 TS: fix the fix 2018-11-16 14:39:43 +00:00
Asger F
a35061ee79 TS: dont create JSON nodes in convertJsxSelfClosingElement 2018-11-16 12:58:14 +00:00
Asger F
d839fcdafc TS: refactor to fix AutoBuildTest 2018-11-16 12:52:26 +00:00
Anders Schack-Mulligen
918fc90515 Java: Add change note. 2018-11-16 13:48:50 +01:00
Anders Schack-Mulligen
deb61d6f29 Java: Update test output. 2018-11-16 13:48:50 +01:00
Anders Schack-Mulligen
5e03b6f681 Java: Convert security queries to path-problems. 2018-11-16 13:48:50 +01:00
Anders Schack-Mulligen
437b2c1503 Java: Cosmetic changes and missing overrides. 2018-11-16 13:48:50 +01:00
calum
cf4b04a3ee C#: Address review comments - adding .getNode() where appropriate. 2018-11-16 11:52:20 +00:00
Asger F
c06c9a02f7 JS: fix copy pasta and test output 2018-11-16 10:47:02 +00:00
Asger F
dd5f485fff JS: use original sanitizer for SSRF query 2018-11-16 10:46:14 +00:00
Asger F
0153a4794e JS: add change note 2018-11-16 10:44:52 +00:00
Asger F
6ec13feab4 JS: recognize sanitizing slashes in URL redirection queries 2018-11-16 10:43:25 +00:00
Asger F
b5d3dd5e22 TS: do more work in parallel 2018-11-16 10:39:27 +00:00
calum
e908b090fd C#: Always use PathNode in a path-problem query. 2018-11-16 10:32:24 +00:00
calum
eddc52852d C#: Convert security queries to path-problem and update qltest expected output. 2018-11-16 10:31:20 +00:00
semmle-qlci
0647743333 Merge pull request #467 from xiemaisi/js/amd-imports
Approved by asger-semmle
2018-11-16 09:31:50 +00:00
Tom Hvitved
57bbe0291b Merge pull request #393 from calumgrant/cs/extractor/dynamic-type-name
C#: Minor extractor fixes
2018-11-16 09:09:46 +01:00
calum
9eed758642 C#: Update change notes. 2018-11-15 18:28:17 +00:00
calum
090e896ff5 C#: Change Property TagStackBehaviour to push a tag, to give the expression body a tag stack. 2018-11-15 18:28:17 +00:00
calum
bb49fe170b C# extractor: Handle the type name of dynamic. 2018-11-15 18:27:53 +00:00
semmle-qlci
536f3f36b8 Merge pull request #428 from hvitved/csharp/more-guards
Approved by calumgrant
2018-11-15 15:07:56 +00:00
Asger F
737ec70ca2 Merge pull request #460 from xiemaisi/js/in-dist-trap-cache
JavaScript: Teach `AutoBuild` to use in-dist externs trap cache.
2018-11-15 13:08:44 +00:00
Geoffrey White
0d7c5eaa6e Merge pull request #441 from felicity-semmle/cpp/SD-2777-cwe-qhelp
C++: Bring qhelp inline with current guidelines, part 1 (SD-2777)
2018-11-15 11:38:23 +00:00
Tom Hvitved
5f118d423f Merge pull request #477 from calumgrant/cs/indent-change-notes
C#: Fix indentation in change notes.
2018-11-15 11:56:01 +01:00
calum
03b8ed6597 C#: Fix indentation in change notes. 2018-11-15 10:49:16 +00:00
Tom Hvitved
185700a236 Merge pull request #437 from calumgrant/cs/in-parameters
C#: Correctly handle `in` arguments
2018-11-15 11:47:43 +01:00
Asger F
fb1908465c Merge pull request #469 from xiemaisi/js/bye-bye-rhino
JavaScript: Remove dependency on esregex, doctrine and Rhino.
2018-11-15 09:52:58 +00:00
Felicity Chapman
1776ebd991 Fix typo in code tag 2018-11-15 08:14:08 +00:00
Felicity Chapman
fbf5a052ed Remove stray </p> tag 2018-11-15 07:09:11 +00:00
Felicity Chapman
6312f31f59 Remove the duplicate overview tag 2018-11-14 22:08:59 +00:00
Geoffrey White
d1adc0e3ec CPP: Fix for explicitly cast expressions. 2018-11-14 19:43:24 +00:00
Geoffrey White
3028e85457 CPP: Add a test of AV Rule 164. 2018-11-14 19:40:29 +00:00
Geoffrey White
3f428a8876 CPP: Fix for explicitly cast expressions. 2018-11-14 19:11:56 +00:00
Geoffrey White
5cddabb1fd CPP: Add a test of AV Rule 165. 2018-11-14 19:05:35 +00:00