Commit Graph

29908 Commits

Author SHA1 Message Date
Geoffrey White
01de4160c6 Merge pull request #453 from felicity-semmle/cpp/SD-2777-cwe-qhelp-2
C++: Update to bring into line with current guidelines, part 2 (SD-2777)
2018-11-14 17:27:25 +00:00
Felicity Chapman
39ef869e21 Fix partial edit - thanks Tom 2018-11-14 16:49:30 +00:00
Asger F
df202eff76 Merge pull request #468 from xiemaisi/js/has{Path,Flow}+
JavaScript: Rename `hasPathFlow` to `hasFlowPath` for consistency with other languages.
2018-11-14 16:48:47 +00:00
Felicity Chapman
f9612a8f21 Minor updates for consistency 2018-11-14 16:25:28 +00:00
semmle-qlci
4a14bef507 Merge pull request #466 from xiemaisi/js/more-data-flow-predicates
Approved by asger-semmle
2018-11-14 16:07:59 +00:00
yh-semmle
50a905d54a Merge pull request #459 from aschackmull/java/inherit-fix
Java: Fix inheritance relation for co-/contra-variant subtypes.
2018-11-14 10:53:41 -05:00
Geoffrey White
77ca0cf9cb Merge pull request #438 from felicity-semmle/cpp/SD-2777-delete-poor-qhelp
C++: Delete qhelp files with little useful content (SD-2777)
2018-11-14 14:21:24 +00:00
Max Schaefer
406511fb5f JavaScript: Update .classpath. 2018-11-14 14:06:33 +00:00
Max Schaefer
585347fb5d JavaScript: Remove obsolete Rhino interface classes. 2018-11-14 14:06:33 +00:00
Max Schaefer
2cd5702aa6 JavaScript: Remove doctrine. 2018-11-14 14:06:33 +00:00
Max Schaefer
5506cec35e JavaScript: Remove esregex. 2018-11-14 14:06:33 +00:00
semmle-qlci
025054e44a Merge pull request #461 from xiemaisi/js/bye-bye-rhino
Approved by esben-semmle
2018-11-14 14:00:07 +00:00
semmle-qlci
77213aa0d8 Merge pull request #462 from xiemaisi/js/security-paths
Approved by esben-semmle
2018-11-14 13:01:34 +00:00
Max Schaefer
19b9b85c22 JavaScript: Add change note. 2018-11-14 12:03:04 +00:00
Aditya Sharad
a066749d90 Merge pull request #464 from esben-semmle/js/fixup-suite-master
JS: rename query file in suite
2018-11-14 12:02:05 +00:00
Aditya Sharad
696178e6cc Merge pull request #465 from esben-semmle/js/fixup-suite-master
JS: rename query file in suite
2018-11-14 12:01:37 +00:00
Max Schaefer
6f6b3b0d5e JavaScript: Add a convenience method to SourceNode and use it in a few places. 2018-11-14 11:58:45 +00:00
Esben Sparre Andreasen
7585e61af6 JS: rename query file in suite 2018-11-14 12:55:53 +01:00
Max Schaefer
a441bfb751 JavaScript: Add a convenience method to AMDModuleDefinition. 2018-11-14 11:36:40 +00:00
Max Schaefer
3fcd02ab0e JavaScript: Rename hasPathFlow to hasFlowPath for consistency with other languages. 2018-11-14 11:23:17 +00:00
Arthur Baars
8493adf676 Merge pull request #463 from adityasharad/merge/master-next-141118
Merge master into next.
2018-11-14 11:36:01 +01:00
Aditya Sharad
f0715b09e1 Merge master into next. 2018-11-14 10:06:27 +00:00
Max Schaefer
4112af5b3f JavaScript: Add change note. 2018-11-14 09:35:17 +00:00
Max Schaefer
d6198fcc2a JavaScript: Introduce two more short-circuiting conjuncts. 2018-11-14 09:33:09 +00:00
Max Schaefer
9221b62ded JavaScript: Update expectd test output for security path queries to include nodes and edges query predicates. 2018-11-14 09:32:31 +00:00
Max Schaefer
d57b5d9628 JavaScript: Remove ReflectdXssPath.ql, which is now spurious. 2018-11-14 09:16:40 +00:00
Max Schaefer
52ae757279 JavaScript: Select Nodes (instead of PathNodes) everywhere. 2018-11-14 09:16:40 +00:00
Max Schaefer
e365b722ee JavaScript: Select source and sink in all path queries. 2018-11-14 09:16:40 +00:00
Max Schaefer
d5af008e31 JavaScript: Adjust ConditionalBypass query. 2018-11-14 09:16:40 +00:00
Max Schaefer
11d6259dbf JavaScript: Move from Node to PathNode. 2018-11-14 09:16:40 +00:00
Max Schaefer
8d87f556e1 JavaScript: Add import DataFlow::PathGraph. 2018-11-14 09:16:40 +00:00
Max Schaefer
4860364d91 JavaScript: Add explicit nodes query predicate in PathGraph.
This is needed to correctly handle the case where `edges` is empty.
2018-11-14 09:16:40 +00:00
Max Schaefer
60a1357092 JavaScript: Make all taint-based security queries have @kind path-problem. 2018-11-14 09:16:40 +00:00
Max Schaefer
65bcf0f526 JavaScript: Refactor security queries for uniformity. 2018-11-14 09:16:40 +00:00
Max Schaefer
9b4ae9e4d3 JavaScript: Refactor HostHeaderPoisoningInEmailGeneration query. 2018-11-14 09:16:40 +00:00
Max Schaefer
c51cd50133 JavaScript: Remove a few unnecessary imports. 2018-11-14 09:16:40 +00:00
semmle-qlci
d83381918d Merge pull request #458 from xiemaisi/js/more-externs
Approved by asger-semmle
2018-11-14 08:31:15 +00:00
Arthur Baars
969c2796a0 Merge pull request #457 from adityasharad/merge/1.18-master-131118
Merge rc/1.18 into master.
2018-11-13 22:25:03 +01:00
yh-semmle
758e74a8f9 Merge pull request #455 from felicity-semmle/java/SD-2779-qhelp-updates
Java: Update qhelp for queries with CWE tags (SD-2779)
2018-11-13 14:49:32 -05:00
Max Schaefer
a499009f59 Merge pull request #395 from esben-semmle/js/useless-defensive-code
JS: add query: js/useless-defensive-code
2018-11-13 16:55:59 +00:00
Max Schaefer
4fdfbb77cc Merge pull request #444 from esben-semmle/js/browser-based-client-requests
JS: add models of $.ajax, $.getJSON and XMLHttpRequst
2018-11-13 16:53:52 +00:00
Felicity Chapman
c6af79979c Update for feedback 2018-11-13 16:50:00 +00:00
Felicity Chapman
fe15159756 Update for feedback 2018-11-13 16:34:06 +00:00
Anders Schack-Mulligen
fe8dfeec0d Java: Add some this-qualifiers. 2018-11-13 14:58:25 +01:00
Anders Schack-Mulligen
411891c303 Java: Don't inherit methods from co-/contra-variant supertypes. 2018-11-13 14:56:22 +01:00
Max Schaefer
96989a1fd6 Merge pull request #427 from adityasharad/eclipse/remove-plugin-metadata
Eclipse plugins: Remove plugin metadata.
2018-11-13 13:12:49 +00:00
calum
9f04ace4ae C#: Update change notes. 2018-11-13 10:59:41 +00:00
calum
a5d50fc1db C#: Handle in arguments, and add AssignableAccess::isInArgument() predicate. 2018-11-13 10:58:43 +00:00
Aditya Sharad
bc06831d01 Merge rc/1.18 into master. 2018-11-13 10:55:08 +00:00
Esben Sparre Andreasen
daed0653cb JS: support property tracking of custom abstract values 2018-11-13 11:42:09 +01:00