Henry Mercer
2c9e3b5ea2
Remove NoSQL sinks since September 2018
2022-02-04 09:23:56 +00:00
Esben Sparre Andreasen
b2c900f75e
Remove additional Xss sinks
2022-02-04 09:23:56 +00:00
Esben Sparre Andreasen
475a2b5354
Remove additional SQL sinks
2022-02-04 09:23:55 +00:00
Esben Sparre Andreasen
63a648dc41
Remove additional path-injection sinks
2022-02-04 09:23:55 +00:00
Esben Sparre Andreasen
999de74f49
Add benjamin-button.md
2022-02-04 09:23:55 +00:00
Esben Sparre Andreasen
2f6a3ac5b1
Remove 2020 sinks from SqlInjection.ql
2022-02-04 09:23:51 +00:00
Esben Sparre Andreasen
c9609085b1
Remove 2020 sinks from TaintedPath.ql
2022-02-04 09:22:48 +00:00
Max Schaefer
7e3df53c56
Revert "JS: Recognize DomSanitizer from @angular/core"
...
This reverts commit ff1d0cc4c7
2022-02-04 09:22:48 +00:00
Henry Mercer
68a1c06750
Remove NoSQL sinks since September 2018
2022-02-04 09:22:48 +00:00
Esben Sparre Andreasen
55b877ec07
Remove additional Xss sinks
2022-02-04 09:22:48 +00:00
Esben Sparre Andreasen
5dad9c0ccd
Remove additional SQL sinks
2022-02-04 09:22:47 +00:00
Esben Sparre Andreasen
db00d0f369
Remove additional path-injection sinks
2022-02-04 09:22:47 +00:00
Esben Sparre Andreasen
a31e51a564
Add benjamin-button.md
2022-02-04 09:22:47 +00:00
Esben Sparre Andreasen
04b93e6762
Remove pseudo-properties
2022-02-04 09:22:47 +00:00
Esben Sparre Andreasen
21677eced0
Remove 2020 sinks from SqlInjection.ql
2022-02-04 09:22:47 +00:00
Esben Sparre Andreasen
714978494f
Remove 2020 sinks from Xss.ql
2022-02-04 09:22:46 +00:00
Esben Sparre Andreasen
24017151c7
Remove 2020 sinks from TaintedPath.ql
2022-02-04 09:22:46 +00:00
Ian Wright
dca03d7b5d
reinstate the AST node limit to minimize change to feature values
2022-02-03 09:45:35 +00:00
Ian Wright
d5ab119039
actually count the number of chars
2022-02-03 09:41:51 +00:00
Ian Wright
83ecc065ab
restrict size of strings
2022-01-31 12:28:46 +00:00
Ian Wright
aceeb7324c
restrict AST nodes according to string length
2022-01-28 15:06:10 +00:00
Tom Hvitved
864b61a804
Merge pull request #7766 from hvitved/csharp/extractor/type-param-constraints
...
C#: Make `TypeParameterConstraints` a `CachedEntity`
2022-01-28 12:39:31 +01:00
Tom Hvitved
28702dff82
Merge pull request #7779 from hvitved/csharp/initial-downgrade-scheme
...
C#: Add initial downgrade DB scheme for use in tests
2022-01-28 12:38:07 +01:00
Nick Rolfe
588e60e230
Merge pull request #7775 from github/nickrolfe/graph_test_ordering
...
Ruby/C#: more stable graph test ordering
2022-01-28 11:16:02 +00:00
Erik Krogh Kristensen
7aa59ca233
Merge pull request #7633 from erik-krogh/CWE-300
...
JS: add js/http-dependency query
2022-01-28 12:10:14 +01:00
Taus
47a57e0c0a
Merge pull request #7635 from github/python/support-match
...
Python/support match
2022-01-28 11:55:46 +01:00
yoff
74d57bbb1a
Update python/ql/lib/semmle/python/dataflow/new/internal/DataFlowPrivate.qll
...
Co-authored-by: Taus <tausbn@github.com >
2022-01-28 11:38:29 +01:00
Erik Krogh Kristensen
b5198bdaca
apply suggestions from doc review
...
Co-authored-by: mc <42146119+mchammer01@users.noreply.github.com >
2022-01-28 10:46:27 +01:00
Tony Torralba
f3e034b2be
Merge pull request #7764 from github/workflow/coverage/update
...
Update CSV framework coverage reports
2022-01-28 09:35:54 +01:00
Esben Sparre Andreasen
ee52774e90
Merge pull request #7760 from erik-krogh/CWE-184
...
JS: add CWE-184 to incomplete-scheme-check and bad-tag-filter
2022-01-28 09:18:41 +01:00
Tom Hvitved
ee5495ce65
C#: Add initial downgrade DB scheme for use in tests
2022-01-28 09:05:42 +01:00
github-actions[bot]
c6130ea2d4
Add changed framework coverage reports
2022-01-28 00:11:49 +00:00
Dave Bartolomeo
cca74e925f
Merge pull request #7724 from github/aeisenberg/examples-groups
...
Add new groups for examples packs
2022-01-27 12:11:26 -05:00
Rasmus Lerchedahl Petersen
c60df7d69c
Merge branch 'main' of github.com:github/codeql into python/support-match
2022-01-27 16:45:17 +01:00
yoff
4632c14280
Merge pull request #7654 from RasmusWL/remove-old-pointsto-queries
...
Python: Cleanup: Remove old points-to versions of queries
2022-01-27 16:39:01 +01:00
Nick Rolfe
cd5010fe11
C#: sync changes from Ruby to improve ordering of graph test output
2022-01-27 15:34:01 +00:00
Tom Hvitved
b7fb9e8b95
Merge pull request #7768 from hvitved/csharp/extractor-diagnostics-query
...
C#: Add internal extractor diagnostics query
2022-01-27 16:33:32 +01:00
Chris Smowton
17656fc12b
Merge pull request #7771 from Dig2/main
...
Fix typo in CodeQL-query-help-for-JavaScript
2022-01-27 15:03:35 +00:00
Mathias Vorreiter Pedersen
b3f4357dc8
Merge pull request #7742 from geoffw0/clrtxt6
...
C++: Upgrade cpp/cleartext-storage-buffer
2022-01-27 14:40:40 +00:00
Rasmus Lerchedahl Petersen
b93c04bb79
python: Add reverse flow in some patterns
...
Particularly in value and literal patterns.
This is getting a little bit into the guards aspect of matching.
We could similarly add reverse flow in terms of
sub-patterns storing to a sequence pattern,
a flow step from alternatives to an-or-pattern, etc..
It does not seem too likely that sources are embedded in patterns
to begin with, but for secrets perhaps?
It is illustrated by the literal test. The value test still fails.
I believe we miss flow in general from the static attribute.
2022-01-27 15:20:23 +01:00
Nick Rolfe
6f06263d49
Ruby: add more properties for ordering nodes in graph tests
2022-01-27 13:57:43 +00:00
Dig2
516bed391a
Fix CodeQL-query-help-for-JavaScript typo
2022-01-27 21:33:20 +08:00
Geoffrey White
2e1b09fd75
C++: Modernize flow sources.
2022-01-27 13:19:09 +00:00
Tom Hvitved
d9a1046e0e
Merge pull request #7683 from hvitved/ruby/qltest-4-threads
...
Ruby: Use multiple threads in QL test CI job
2022-01-27 13:11:39 +01:00
Geoffrey White
1bf9c19638
C++: Autoformat.
2022-01-27 11:26:18 +00:00
Geoffrey White
f090a3b440
C++: Add to and clarify some taint library QLDoc.
2022-01-27 11:26:00 +00:00
Tom Hvitved
1e39259e26
Merge pull request #7750 from hvitved/ruby/desugar-hash-literals
...
Ruby: Desugar hash literals
2022-01-27 12:01:06 +01:00
Geoffrey White
d9a2347178
C++: Switch back to IR taint.
2022-01-27 10:50:22 +00:00
Tom Hvitved
e2ae327a74
C#: Add internal extractor diagnostics query
2022-01-27 11:19:31 +01:00
Rasmus Lerchedahl Petersen
cb52ab669e
python: address review comments
...
The comment about `py_scopes` was simply removed
2022-01-27 11:17:00 +01:00
