Michael Nebel
|
034db52c5c
|
Merge pull request #13986 from michaelnebel/csharp/refactordepencyfetching
C#: Re-factor dependency fetching into a separate project.
|
2023-08-21 09:24:58 +02:00 |
|
Michael Nebel
|
4fb73ea191
|
C#: Address review comments.
|
2023-08-21 08:53:17 +02:00 |
|
Michael Nebel
|
1de86b4313
|
C#: Address review comments.
|
2023-08-21 07:37:27 +02:00 |
|
Edward Minnix III
|
d109637e2d
|
Merge pull request #13413 from egregius313/egregius313/trust-boundary
Java: Trust Boundary Violation Query
|
2023-08-18 10:33:32 -04:00 |
|
Michael B. Gale
|
a1c9deea61
|
Merge pull request #13867 from github/mbg/go/1.21-support
Go: Basic Go 1.21 support
|
2023-08-18 14:37:11 +01:00 |
|
Jeroen Ketema
|
1643a83678
|
Merge pull request #13996 from jbj/accept-BadlyBoundedWrite
C++: Accept regression in test after evaluator fix
|
2023-08-18 14:28:46 +02:00 |
|
Jonas Jensen
|
a002f59f58
|
C++: Undo BadlyBoundedWrite change from #13929
This rolls back the query change, ensuring that there is no need for a
change note.
|
2023-08-18 13:48:58 +02:00 |
|
Jonas Jensen
|
478a105e21
|
C++: delete change note
Since the previous commit removed the best evidence we had for the
change described in this note, I'm removing the note for now.
|
2023-08-18 13:35:32 +02:00 |
|
Jonas Jensen
|
cd1f196848
|
C++: Accept regression in test after evaluator fix
|
2023-08-18 13:30:20 +02:00 |
|
Harry Maclean
|
222aa41bbf
|
Merge pull request #13938 from hmac/splat-flow-2
Ruby: More precise flow into splat parameters
|
2023-08-18 12:07:58 +01:00 |
|
Erik Krogh Kristensen
|
08ef31d452
|
Merge pull request #13916 from erik-krogh/limit-java-field-reg
Java: limit field flow when tracking regex strings
|
2023-08-18 12:14:31 +02:00 |
|
Michael Nebel
|
d968a91799
|
C#: Introduce convenience constructor for the DependencyManager.
|
2023-08-18 11:49:07 +02:00 |
|
Michael Nebel
|
c0d1179c8a
|
C#: Minimal update of relevant code to minimize project dependencies and hide some implementation details behind interfaces.
|
2023-08-18 11:42:12 +02:00 |
|
Michael Nebel
|
f47e59dff1
|
C#: Move dependency related files into a new project.
|
2023-08-18 11:42:12 +02:00 |
|
Michael Nebel
|
b48567f6a5
|
C#: Add shared dependency fetching project.
|
2023-08-18 11:42:12 +02:00 |
|
Michael Nebel
|
15dd130d31
|
C#: Remove unused parameter in DownloadMissingPackages.
|
2023-08-18 11:42:11 +02:00 |
|
Michael B. Gale
|
9082fd218e
|
Add taint flow tests for clear
|
2023-08-17 18:39:32 +01:00 |
|
Edward Minnix III
|
8d88af1af0
|
Apply docs review suggestions
Co-authored-by: Sam Browning <106113886+sabrowning1@users.noreply.github.com>
|
2023-08-17 13:05:38 -04:00 |
|
Ed Minnix
|
4eb1035dfe
|
Documentation fixes
|
2023-08-17 13:05:38 -04:00 |
|
Ed Minnix
|
655a98452a
|
Remove escapeHTML models
|
2023-08-17 13:05:37 -04:00 |
|
Ed Minnix
|
f53496b2a7
|
Added documentation for trust-boundary-violation sink
|
2023-08-17 13:05:37 -04:00 |
|
Ed Minnix
|
d468ea9e90
|
Add default sanitizers
|
2023-08-17 13:05:37 -04:00 |
|
Ed Minnix
|
b305962c9a
|
Use more appropriate description
|
2023-08-17 13:05:37 -04:00 |
|
Ed Minnix
|
a36c12ff1f
|
Add trust-boundary-violation sink kind
|
2023-08-17 13:05:37 -04:00 |
|
Ed Minnix
|
60642c52aa
|
Use non-extending subtype
|
2023-08-17 13:05:37 -04:00 |
|
Ed Minnix
|
e22a67e7fe
|
Remove unnecessary methods
|
2023-08-17 13:05:37 -04:00 |
|
Ed Minnix
|
a3a4c31911
|
Replace servlet source node with RemoteFlowSource
|
2023-08-17 13:05:37 -04:00 |
|
Edward Minnix III
|
929090a847
|
Typos and style fixes
Co-authored-by: Tony Torralba <atorralba@users.noreply.github.com>
|
2023-08-17 13:05:37 -04:00 |
|
Ed Minnix
|
52ebf9fff6
|
Java: Add trust boundary change note
|
2023-08-17 13:05:37 -04:00 |
|
Ed Minnix
|
172b8a6967
|
Documentation fixes
|
2023-08-17 13:05:37 -04:00 |
|
Ed Minnix
|
b567ec875a
|
Documentation
|
2023-08-17 13:05:37 -04:00 |
|
Ed Minnix
|
55fae2daaa
|
Added ESAPI sanitizer
|
2023-08-17 13:05:37 -04:00 |
|
Ed Minnix
|
97d6e82869
|
Stubs for org.owasp.esapi
|
2023-08-17 13:05:37 -04:00 |
|
Ed Minnix
|
f58590c6a9
|
Trust Boundary Work
|
2023-08-17 13:05:37 -04:00 |
|
Ed Minnix
|
2aba425464
|
TrustBoundary test ql file
|
2023-08-17 13:05:36 -04:00 |
|
Ed Minnix
|
ab9f0240d3
|
Add taint steps for HTML encoding methods
|
2023-08-17 13:05:36 -04:00 |
|
Ed Minnix
|
b9f2da7875
|
Comments and import fixes
|
2023-08-17 13:05:36 -04:00 |
|
Ed Minnix
|
3e7444cd66
|
Style fixes
|
2023-08-17 13:05:36 -04:00 |
|
Ed Minnix
|
15370506b8
|
Add missing security severity
|
2023-08-17 13:05:36 -04:00 |
|
Ed Minnix
|
a8b7e70d01
|
Convert trust boundary models to MaD
|
2023-08-17 13:05:36 -04:00 |
|
Ed Minnix
|
76438f13b6
|
Trust Boundary Query
|
2023-08-17 13:05:36 -04:00 |
|
Edward Minnix III
|
41a527cf72
|
Merge pull request #13934 from egregius313/egregius313/add-dashes-to-sha-algorithms
Java: Add dashes to SHA algorithm names in `Encryption.qll`
|
2023-08-17 13:03:15 -04:00 |
|
Michael B. Gale
|
109b96f038
|
Add comment explaining TaintStep test
|
2023-08-17 17:50:41 +01:00 |
|
Michael B. Gale
|
e65269be69
|
Add DefaultTaintSanitizer for clear
|
2023-08-17 17:49:46 +01:00 |
|
Paolo Tranquilli
|
700f383bab
|
Merge pull request #13988 from github/redsun82/swift-version-macro
Swift: fix version check macro to be lexicographic
|
2023-08-17 15:34:04 +02:00 |
|
Anders Schack-Mulligen
|
e27aad9d6c
|
Merge pull request #13987 from aschackmull/java/rangeanalysis-joinorder-fix
Java: Join-order fix in RangeAnalysis.
|
2023-08-17 14:47:26 +02:00 |
|
Mathias Vorreiter Pedersen
|
af7fe89c5a
|
Merge pull request #13989 from MathiasVP/add-invalid-ptr-false-positive-3
C++: Add `cpp/invalid-pointer-deref` false positive
|
2023-08-17 12:50:55 +01:00 |
|
Mathias Vorreiter Pedersen
|
5f5a87e2c7
|
C++: Add false positive.
|
2023-08-17 12:13:16 +01:00 |
|
Paolo Tranquilli
|
75cc1d8f75
|
Swift: fix version check macro to be lexicographic
|
2023-08-17 12:19:28 +02:00 |
|
Anders Schack-Mulligen
|
f8a0b6cd22
|
Java: Add nomagic
|
2023-08-17 11:20:02 +02:00 |
|