35237 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
Erik Krogh Kristensen	1062aae21c	add test that the foo.bar package syntax works	2022-05-04 10:58:59 +02:00
Erik Krogh Kristensen	ead978187d	adjust the source-type for remote-flow from MaD	2022-05-03 22:53:41 +02:00
Erik Krogh Kristensen	8ffc05c84b	count both named and positional arguments in the WithArity filter	2022-05-03 21:21:57 +02:00
Erik Krogh Kristensen	c0eca0d09a	deprecate SqlConstruction	2022-05-02 12:58:21 +02:00
Erik Krogh Kristensen	6c67e51ec3	add test for the .Call token	2022-05-02 12:58:21 +02:00
Erik Krogh Kristensen	9c3d45a16a	last test of taint steps	2022-05-02 12:58:21 +02:00
Erik Krogh Kristensen	894252dfa7	third test of taint steps	2022-05-02 12:58:21 +02:00
Erik Krogh Kristensen	0f1e070d82	second test of taint steps	2022-05-02 12:58:21 +02:00
Erik Krogh Kristensen	649df1dd31	simple taint-flow test	2022-05-02 12:58:21 +02:00
Erik Krogh Kristensen	a8790412dd	add support for the Argument[any] and Argument[any-named] tokens	2022-05-02 12:58:21 +02:00
Erik Krogh Kristensen	b1fa7f86a8	add support for the any argument tokens	2022-05-02 12:58:15 +02:00
Erik Krogh Kristensen	413d182bcf	add support for named parameters	2022-05-02 12:56:44 +02:00
Erik Krogh Kristensen	c1d3738fb8	fix API-graphs such that the first parameter is the first non-self parameter	2022-05-02 12:52:02 +02:00
Erik Krogh Kristensen	547047ef19	add self parameters to API-graphs, and add support for self parameters in MaD	2022-05-02 12:50:31 +02:00
Erik Krogh Kristensen	dc38aa8a96	add support for the Method[name] token	2022-05-02 12:50:29 +02:00
Erik Krogh Kristensen	ea01bcf5ec	have the Instance token be an alias for Subclass.ReturnValue	2022-05-02 12:45:21 +02:00
Erik Krogh Kristensen	46acce0ad4	add support for the Subclass token	2022-05-02 12:45:21 +02:00
Erik Krogh Kristensen	a02e812de8	add test for the Instance token	2022-05-02 12:45:21 +02:00
Erik Krogh Kristensen	682cab3737	add test for awaited	2022-05-02 12:45:21 +02:00
Erik Krogh Kristensen	48408ca45d	Add TODO list	2022-05-02 12:45:21 +02:00
Erik Krogh Kristensen	8d60336396	add tests for callsite filters	2022-05-02 12:45:21 +02:00
Erik Krogh Kristensen	20992af037	add test for parameter syntax	2022-05-02 12:45:21 +02:00
Erik Krogh Kristensen	35b143a1a5	add tests for argument syntax	2022-05-02 12:45:21 +02:00
Erik Krogh Kristensen	86a9bc6aca	add test for keyword arguments	2022-05-02 12:45:21 +02:00
Erik Krogh Kristensen	d4b882519a	convert most of the asyncpg model to MaD	2022-05-02 12:45:21 +02:00
Erik Krogh Kristensen	1c2c9159a9	initial MaD implementation for Python	2022-05-02 12:45:19 +02:00
yoff	1d44694280	Merge pull request #8732 from RasmusWL/dataflow-imports ... Python: Don't re-export `python` under `DataFlow::`	2022-05-02 12:08:28 +02:00
Taus	231def026f	Merge pull request #8890 from tausbn/python-add-global-attribute-writes ... Python: Add support for global attribute writes	2022-05-02 12:03:41 +02:00
yoff	c67b06b1fd	Update python/ql/test/experimental/dataflow/typetracking/attribute_tests.py ... Co-authored-by: Taus <tausbn@github.com>	2022-05-02 11:36:58 +02:00
Tom Hvitved	29f30a19e7	Merge pull request #8955 from hvitved/csharp/useless-cast-fp ... C#: Add FP test for `cs/useless-cast-to-self`	2022-05-02 10:32:28 +02:00
Anders Schack-Mulligen	b2e9555075	Merge pull request #8345 from jorgectf/mybatis-new-sinks ... Java: Add `MyBatis`' `Providers` sinks	2022-05-02 09:44:28 +02:00
Henry Mercer	811a2c0053	Merge pull request #8957 from github/henrymercer/upgrade-codeql-action ... Use codeql-action/upload-sarif@main in CSV coverage metrics workflow	2022-04-29 17:06:21 +01:00
Geoffrey White	614a7650a6	Merge pull request #8775 from porcupineyhairs/cpam ... CPP: PAM Authorization Bypass	2022-04-29 14:55:33 +01:00
Jorge	37b051a851	Apply suggestions from code review ... Co-authored-by: Anders Schack-Mulligen <aschackmull@users.noreply.github.com>	2022-04-29 14:44:17 +02:00
AlexDenisov	5c6e5173ad	Merge pull request #8959 from AlexDenisov/alexdenisov/pip-install-from-bazel ... Swift: teach bazel to install python dependencies	2022-04-29 14:31:37 +02:00
Paolo Tranquilli	8fc78fae74	Merge pull request #8960 from redsun82/swift-cc-wrappers ... Swift: cc wrapper rules	2022-04-29 14:30:54 +02:00
Paolo Tranquilli	2fe38c2bbb	Swift: cc wrapper rules	2022-04-29 14:18:36 +02:00
Alex Denisov	7332460268	Swift: teach bazel to install python dependencies	2022-04-29 14:05:36 +02:00
yoff	7efb4ab4e4	Merge pull request #8581 from tausbn/python-fix-bad-join-in-import_star_read ... Python: Fix bad join in `import_star_read`	2022-04-29 13:14:14 +02:00
Henry Mercer	d1cc835cad	Merge pull request #8949 from github/henrymercer/fix-typo ... JS: Nit: Fix typo in QLDoc	2022-04-29 12:04:09 +01:00
Henry Mercer	08b6b1d209	Use codeql-action/upload-sarif@main in CSV coverage metrics workflow	2022-04-29 11:26:32 +01:00
Tom Hvitved	a0e003e33c	C#: Add FP test for cs/useless-cast-to-self	2022-04-29 11:59:51 +02:00
Henry Mercer	d3e92f72c4	JS: Nit: Fix typo in QLDoc	2022-04-29 10:54:07 +01:00
Erik Krogh Kristensen	080271f14f	Merge pull request #8221 from erik-krogh/libProto ... JS: recognize more module exports from the factory pattern	2022-04-29 11:23:53 +02:00
Stephan Brandauer	fa377ac763	Merge pull request #8946 from kaeluka/deepFillIn-FN ... JS: fix a FN for prototype polluting function query	2022-04-29 10:14:41 +01:00
Erik Krogh Kristensen	b74d1fdb1a	Merge pull request #8783 from erik-krogh/jsAbstractBi ... JS: don't initialize sanitizer-guards in the standard library	2022-04-29 11:12:16 +02:00
Tony Torralba	9eb6022bbe	Merge pull request #8954 from github/workflow/coverage/update ... Update CSV framework coverage reports	2022-04-29 10:06:57 +02:00
github-actions[bot]	1032dcd7e6	Add changed framework coverage reports	2022-04-29 00:15:05 +00:00
jorgectf	548721a8cf	Fix MyBatisInjectionSink	2022-04-28 23:36:51 +02:00
Jorge	193ea1a86e	Merge branch 'main' into mybatis-new-sinks	2022-04-28 22:26:38 +02:00