Sim4n6
|
019b85beb6
|
Add Unicode Bypass Validation query, test and help file
|
2023-05-02 15:36:39 +01:00 |
|
github-actions[bot]
|
075d063370
|
Release preparation for version 2.13.0
|
2023-04-14 13:31:30 +00:00 |
|
Alex Ford
|
8c46bfd051
|
Merge pull request #12816 from github/rc/3.9
Merge `rc/3.9` into `main`
|
2023-04-13 12:35:41 +01:00 |
|
github-actions[bot]
|
0a3218676c
|
Release preparation for version 2.12.6
|
2023-03-30 19:25:06 +00:00 |
|
Alex Ford
|
62fcea030a
|
Merge pull request #12718 from github/post-release-prep/codeql-cli-2.12.5
Post-release preparation for codeql-cli-2.12.5
|
2023-03-30 15:50:56 +01:00 |
|
Alex Ford
|
181e5d588d
|
Merge remote-tracking branch 'origin/rc/3.9' into main
|
2023-03-27 12:16:03 +01:00 |
|
Alex Ford
|
6f08447427
|
Ruby: add a change note for rb/sensitive-get-query flow path removal
|
2023-03-27 09:45:23 +01:00 |
|
Asger F
|
6d665da4dc
|
Merge pull request #12570 from github/post-release-prep/codeql-cli-2.12.5
Post-release preparation for codeql-cli-2.12.5
|
2023-03-21 13:06:25 +01:00 |
|
Alex Ford
|
60f313863a
|
Merge branch 'main' into maikypedia/ruby-ssti
|
2023-03-17 11:31:49 +00:00 |
|
Maiky
|
37e42bb05b
|
Missing markdown extension
|
2023-03-16 20:45:35 +01:00 |
|
Maiky
|
a229f7a832
|
Solve merge conflict and add a change note
|
2023-03-16 16:15:02 +01:00 |
|
github-actions[bot]
|
fe4d27e8cc
|
Release preparation for version 2.12.5
|
2023-03-16 12:58:50 +00:00 |
|
Asger F
|
6e744093e2
|
Merge pull request #12398 from github/post-release-prep/codeql-cli-2.12.4
Post-release preparation for codeql-cli-2.12.4
|
2023-03-09 15:38:21 +01:00 |
|
github-actions[bot]
|
462da63970
|
Release preparation for version 2.12.4
|
2023-03-03 14:11:51 +00:00 |
|
Grzegorz Niedziela
|
4ab6a7bdfd
|
Merge branch 'github:main' into main
|
2023-02-23 10:50:15 +00:00 |
|
Grzegorz Niedziela
|
815b5a0312
|
add changelog file
|
2023-02-17 12:50:10 +00:00 |
|
github-actions[bot]
|
b0315119c6
|
Release preparation for version 2.12.3
|
2023-02-16 11:49:06 +00:00 |
|
Erik Krogh Kristensen
|
2f404df17c
|
Merge pull request #10782 from erik-krogh/rbPoly
Ruby: add library input as a source for `rb/polynomial-redos`
|
2023-02-13 12:26:07 +01:00 |
|
Erik Krogh Kristensen
|
26d5fb2412
|
Merge pull request #11824 from erik-krogh/secondMissAnchor
RB: add query detecting validators that use badly anchored regular expressions on library/remote input
|
2023-02-13 11:26:05 +01:00 |
|
erik-krogh
|
634087b417
|
Merge branch 'main' into rbPoly
|
2023-02-13 10:46:00 +01:00 |
|
Erik Krogh Kristensen
|
3ebac65167
|
apply change-note suggestions from doc review
Co-authored-by: Sam Browning <106113886+sabrowning1@users.noreply.github.com>
|
2023-02-08 14:55:54 +01:00 |
|
github-actions[bot]
|
a4fa984792
|
Release preparation for version 2.12.2
|
2023-02-02 14:34:55 +00:00 |
|
erik-krogh
|
31743afa87
|
add change-note
|
2023-01-30 16:34:23 +01:00 |
|
erik-krogh
|
a017b7500b
|
Merge branch 'main' into rbPoly
|
2023-01-24 20:51:36 +01:00 |
|
erik-krogh
|
7c6ee5f293
|
Merge branch 'main' into unsafeHtmlConstruction
|
2023-01-23 15:01:01 +01:00 |
|
github-actions[bot]
|
005b3e4a47
|
Release preparation for version 2.12.1
|
2023-01-20 12:03:19 +00:00 |
|
erik-krogh
|
8251ad5e99
|
add unsafe-html-construction query
|
2023-01-17 15:35:17 +01:00 |
|
Erik Krogh Kristensen
|
59a8b21851
|
Merge pull request #10862 from erik-krogh/unsafeCodeConstruction
Rb: Add an `unsafe-code-construction` query
|
2023-01-16 13:22:58 +01:00 |
|
Erik Krogh Kristensen
|
5157d4df7b
|
Merge pull request #11581 from erik-krogh/stdin
Rb: add stdin as source for unsafe-deserialization
|
2023-01-09 13:57:47 +01:00 |
|
erik-krogh
|
0a1769657d
|
add change-note
|
2023-01-06 09:09:09 +01:00 |
|
Nick Rolfe
|
6e07076151
|
tweak wording in 2.12 release notes
|
2023-01-05 16:46:44 +00:00 |
|
github-actions[bot]
|
b6a8193785
|
Release preparation for version 2.12.0
|
2023-01-05 16:32:14 +00:00 |
|
Arthur Baars
|
a8be5d7274
|
AlertSuppression: add change notes
|
2022-12-19 17:02:52 +01:00 |
|
Henry Mercer
|
7167f078be
|
Merge branch 'main' into henrymercer/mergeback-3.8
|
2022-12-13 18:40:53 +00:00 |
|
erik-krogh
|
ccf520a5cd
|
Merge branch 'main' into unsafeCodeConstruction
|
2022-12-13 18:31:49 +01:00 |
|
github-actions[bot]
|
0b2fb4f70a
|
Release preparation for version 2.11.6
|
2022-12-10 15:49:35 +00:00 |
|
Peter Stöckli
|
0d8c82009c
|
Merge branch 'main' into p--ruby-kernel-open-addition
|
2022-12-09 07:54:56 +01:00 |
|
Chris Smowton
|
49bc524fd0
|
Merge remote-tracking branch 'origin/rc/3.8' into smowton/admin/merge-rc38-into-main
|
2022-12-08 11:12:30 +00:00 |
|
github-actions[bot]
|
31ab22e3a0
|
Release preparation for version 2.11.5
|
2022-12-01 20:05:14 +00:00 |
|
Peter Stöckli
|
6b1865d2ca
|
Merge branch 'main' into p--ruby-kernel-open-addition
|
2022-11-29 10:19:36 +01:00 |
|
Peter Stöckli
|
d8752a0b12
|
Add additional sinks to the rb/kernel-open query
|
2022-11-29 10:00:56 +01:00 |
|
Nick Rolfe
|
8a94cabdbf
|
Merge pull request #11250 from github/nickrolfe/stack-trace-exposure
Ruby: add stack-trace exposure query
|
2022-11-28 10:45:59 +00:00 |
|
erik-krogh
|
f75b853ae4
|
add change-note
|
2022-11-25 11:08:14 +01:00 |
|
erik-krogh
|
2ad28ab4db
|
add library inputs as a source to poly-redos
|
2022-11-22 13:05:34 +01:00 |
|
github-actions[bot]
|
e105c13e77
|
Release preparation for version 2.11.4
|
2022-11-17 16:40:45 +00:00 |
|
Nick Rolfe
|
c660ea100b
|
Ruby: add changenote for rb/stack-trace-exposure
|
2022-11-14 12:26:40 +00:00 |
|
Nick Rolfe
|
0337ccb93a
|
Ruby: add change notes for Arel.sql / SqlConstruction changes
|
2022-11-10 14:11:14 +00:00 |
|
Erik Krogh Kristensen
|
c82410fd16
|
Merge pull request #10680 from erik-krogh/unsafeRbCmd
RB: add an unsafe-shell-command-construction query
|
2022-11-08 09:22:33 +01:00 |
|
Erik Krogh Kristensen
|
3f871a08e2
|
apply suggestions from doc review
Co-authored-by: mc <42146119+mchammer01@users.noreply.github.com>
|
2022-11-07 16:29:10 +01:00 |
|
github-actions[bot]
|
508327235a
|
Release preparation for version 2.11.3
|
2022-11-04 20:16:23 +00:00 |
|