98 Commits

Author	SHA1	Message	Date
Felicity Chapman	4d512a5b01	Remove non-LGTM query (see following PR)	2018-09-11 22:54:37 +01:00
Felicity Chapman	7dd891d908	Further updates and addition of query @ids	2018-09-11 22:51:14 +01:00
Felicity Chapman	223bf6cf56	Updates for consistency	2018-09-11 22:31:32 +01:00
semmle-qlci	b17aeb689c	Merge pull request #118 from esben-semmle/js/request-forgery ... Approved by asger-semmle	2018-09-11 16:28:59 +01:00
Felicity Chapman	f48317f381	Minor updates to prepare for publication	2018-09-11 08:27:20 +01:00
Felicity Chapman	620f99c5a3	Remove template text	2018-09-11 08:14:17 +01:00
Esben Sparre Andreasen	aaf1ac770d	JS: reduce declared precision of js/request-forgery	2018-09-09 21:30:43 +02:00
Jonas Jensen	4051e348eb	Merge pull request #169 from felicity-semmle/1.18/cpp-finalize-change-notes ... LGTM 1.18: finalize change notes for C/C++	2018-09-09 15:39:40 +02:00
Felicity Chapman	a08177f16b	Address initial feebback	2018-09-09 11:52:35 +01:00
Tom Hvitved	f3eed4aec7	Merge pull request #163 from calumgrant/cs/extractor-fixes ... C#: Add tests for extractor fixes, and improve CFG for ConstCases	2018-09-07 17:37:40 +02:00
Felicity Chapman	3eab1de2f5	Remove non-LGTM queries from notes (will move to 'studio-cpp.md')	2018-09-07 13:56:55 +01:00
Felicity Chapman	2e0818d8e6	Text changes for consistency and clarity	2018-09-07 13:55:24 +01:00
Felicity Chapman	e7116f57a0	Add query identifiers	2018-09-07 13:24:41 +01:00
Felicity Chapman	6aa6b64b81	Remove placeholders and sort table	2018-09-07 12:05:40 +01:00
semmle-qlci	62e9946fe2	Merge pull request #150 from asger-semmle/ts-asi-bug ... Approved by xiemaisi	2018-09-05 21:22:29 +01:00
calum	c2f3cb6a2a	C#: Update analysis change notes.	2018-09-05 17:48:45 +01:00
Tom Hvitved	061b3d40ea	C#: Fix typos in change note	2018-09-05 14:20:27 +02:00
Tom Hvitved	82b2c00c19	C#: Add change note	2018-09-05 14:20:27 +02:00
semmle-qlci	50b5a3bd71	Merge pull request #151 from asger-semmle/ts-ambient-toplevel ... Approved by xiemaisi	2018-09-05 10:52:08 +01:00
Jonas Jensen	1bcae97447	Merge pull request #114 from geoffw0/samate-realloc ... CPP: Handle 'realloc' better in MemoryMayNotBeFreed.ql	2018-09-05 08:35:13 +02:00
Asger F	4e9c52a3c3	TypeScript: add change note	2018-09-04 15:20:16 +01:00
Asger F	6ceb10371a	TypeScript: rephrase change note	2018-09-04 15:06:04 +01:00
Asger F	f7827b72ab	TypeScript: update change note to mention TypeScript 3.0 support	2018-09-04 14:30:16 +01:00
Asger F	2b8bc63b01	TypeScript: add change note	2018-09-04 14:23:37 +01:00
Esben Sparre Andreasen	68b7a8b57e	JS: change notes for UrlRequest libraries and js/request-forgery	2018-09-04 09:26:45 +02:00
semmle-qlci	4dec7c5036	Merge pull request #127 from xiemaisi/js/incomplete-sanitisation-doc-improvement ... Approved by esben-semmle	2018-09-03 16:25:44 +01:00
Jonas Jensen	2fd73f2171	C++: getEnclosingElement-without-macros changenote	2018-09-03 11:29:03 +02:00
Jonas Jensen	b34dbfa68b	C++: Correct change note formatting ... In Markdown, nested bullet lists are formatted with indented asterisks rather than double asterisks.	2018-09-03 11:29:02 +02:00
Jonas Jensen	18dc1d0af0	Merge pull request #129 from Semmle/changenote-desig-init ... cherry-pick onto rc/1.18: C++: change note for designated intializer fixes	2018-09-03 11:28:20 +02:00
Max Schaefer	759d98661c	Merge pull request #117 from esben-semmle/js/push-sort-taint-steps ... JS: support `push` and `sort` taint steps for arrays	2018-09-03 09:20:35 +01:00
Geoffrey White	8e5c170af6	CPP: Change note.	2018-09-03 08:30:05 +01:00
Max Schaefer	58e384558c	JavaScript: Improve query name and help for js/incomplete-sanitization. ... The query applies more generally to all kinds of string escaping and encoding, not just sanitization.	2018-09-03 08:20:01 +01:00
Max Schaefer	20bff709b1	Merge pull request #136 from esben-semmle/js/composed-function-taint ... JS: model composed functions (RC)	2018-09-03 08:18:20 +01:00
Max Schaefer	7e3adec789	Merge pull request #135 from esben-semmle/js/pick-get-taint-steps ... JS: model property projection calls (RC)	2018-09-03 08:17:42 +01:00
Nick Rolfe	f6e5be0af8	cherry-pick 35d31aee onto 1.18 branch ... This changenote was committed after the `rc/1.18 branch` was taken.	2018-08-31 18:09:39 +01:00
Max Schaefer	fabd6c0864	Merge pull request #119 from esben-semmle/js/fix-change-note-libs ... JS: use https- and repo-links in change notes	2018-08-30 14:23:34 +01:00
Esben Sparre Andreasen	b7fd1e7a74	JS: use https- and repo-links in change notes	2018-08-30 14:54:15 +02:00
Esben Sparre Andreasen	6ee8f71d09	JS: add change notes for property projection libraries	2018-08-30 09:39:02 +02:00
Esben Sparre Andreasen	c1e6280a0e	JS: generalize change notes for improved array operation taint steps	2018-08-30 09:18:48 +02:00
Esben Sparre Andreasen	dc72788746	JS: add a model of some function composition libraries	2018-08-30 08:17:01 +02:00
shati-semmle	be254ef39a	Update analysis-csharp.md	2018-08-29 11:06:27 +01:00
Geoffrey White	c82ab3866f	CPP: Extend change note.	2018-08-28 16:39:10 +01:00
Geoffrey White	0bd8d9a113	CPP: Spell out increment / decrement in change note.	2018-08-28 16:39:10 +01:00
Geoffrey White	eaf4c6e319	CPP: Change notes.	2018-08-28 16:39:10 +01:00
Tom Hvitved	d4551e5897	Merge pull request #81 from lukecartey/csharp/zipslip-reformat ... C#: ZipSlip - Rearrange query, add help and update doc	2018-08-24 09:40:20 +02:00
Luke Cartey	86a7df0ef5	C#: ZipSlip - Address doc team comments.	2018-08-23 15:57:00 +01:00
Max Schaefer	2187b0c245	Merge pull request #89 from esben-semmle/js/sharpen-type-confusion ... JS: remove emptiness checks from the type confusion `x.length` sinks	2018-08-23 08:04:09 +01:00
calumgrant	7c521708ac	Merge pull request #76 from hvitved/csharp/cfg/generic-splitting ... C#: Generic control flow graph splitting	2018-08-22 18:18:33 +01:00
Esben Sparre Andreasen	fef257b1ec	JS: remove emptiness checks from the type confusion x.length sinks	2018-08-22 13:25:22 +02:00
semmle-qlci	7e7e30c01c	Merge pull request #73 from esben-semmle/js/cleartext-logging-query ... Approved by xiemaisi	2018-08-22 08:04:36 +01:00