Erik Krogh Kristensen
|
1f9749fbfe
|
revert mailto: change in TargetBlank.ql
|
2020-09-03 09:39:01 +02:00 |
|
Erik Krogh Kristensen
|
d7a96d685a
|
simplify implementation of getDelimiterMatchingRegexp
|
2020-09-03 09:37:43 +02:00 |
|
Erik Krogh Kristensen
|
f0a0f41c3c
|
allow urls that are prefixed with # or ? in js/unsafe-external-link
|
2020-09-02 10:19:42 +02:00 |
|
Erik Krogh Kristensen
|
f7edf28d0d
|
allow mailto links in js/unsafe-external-link
|
2020-08-31 16:01:28 +02:00 |
|
Tom Hvitved
|
4e963a8a8e
|
Merge pull request #4165 from hvitved/csharp/foreach-guard
C#: Fix bug in guards logic for `foreach` loops
|
2020-08-31 14:32:09 +02:00 |
|
CodeQL CI
|
dc9cc20fdd
|
Merge pull request #4161 from yoff/SharedDataflow_PostUpdateNodes
Approved by RasmusWL, aschackmull, hvitved, jbj
|
2020-08-31 11:57:44 +01:00 |
|
CodeQL CI
|
9d6b2e7684
|
Merge pull request #4042 from aschackmull/java/xsssink-extensible
Approved by aibaars
|
2020-08-31 11:54:25 +01:00 |
|
Anders Schack-Mulligen
|
b89a22b583
|
Merge pull request #4170 from aibaars/drop-inefficient-toarray
Java: remove InefficientToArray.ql
|
2020-08-31 12:45:06 +02:00 |
|
Arthur Baars
|
66d39bb5f6
|
Java: remove InefficientToArray.ql
This query was deprecated 4 years ago.
Fixes: #4167
|
2020-08-31 10:39:03 +02:00 |
|
Tom Hvitved
|
b205702853
|
C#: Fix bug in guards logic for foreach loops
|
2020-08-28 15:19:11 +02:00 |
|
Tom Hvitved
|
ddb33c914b
|
C#: Add test that demonstrates issue with guards logic for foreach statements
|
2020-08-28 15:13:18 +02:00 |
|
Asger F
|
813d14791d
|
Merge pull request #4043 from erik-krogh/ts4
JS: Add support for TypeScript 4
|
2020-08-28 14:02:08 +01:00 |
|
Rasmus Lerchedahl Petersen
|
750735c70c
|
Dataflow: Update test expectations
|
2020-08-28 15:00:01 +02:00 |
|
Rasmus Lerchedahl Petersen
|
6b8d9f2a77
|
Merge branch 'main' of github.com:github/codeql into SharedDataflow_PostUpdateNodes
|
2020-08-28 13:01:14 +02:00 |
|
Rasmus Lerchedahl Petersen
|
9503c5d8bb
|
Python: Add post-update nodes
|
2020-08-28 12:59:11 +02:00 |
|
Erik Krogh Kristensen
|
f4060723bb
|
add stats for new properties
|
2020-08-28 12:43:26 +02:00 |
|
Calum Grant
|
93e0bd9d85
|
Merge pull request #4126 from tamasvajk/feature/array-index
C#: Fix computed sizes for implicitly sized array creation
|
2020-08-28 11:21:39 +01:00 |
|
Tom Hvitved
|
6eca97bc32
|
Merge pull request #4113 from tamasvajk/feature/nullability-extraction-cil
Enable nullability checks on Semmle.Extraction.CIL
|
2020-08-28 12:06:54 +02:00 |
|
Tom Hvitved
|
647ed03a2b
|
Merge pull request #4136 from tamasvajk/feature/qldocs
C#: Add missing QlDocs
|
2020-08-28 12:03:03 +02:00 |
|
Taus
|
8caaf8f17c
|
Merge pull request #4158 from RasmusWL/python-reformualte-js-team-comment
Python: Reformualte explanation of experience from JS
|
2020-08-28 11:33:00 +02:00 |
|
Rasmus Wriedt Larsen
|
496d856c48
|
Python: Reformualte explanation of experience from JS
|
2020-08-28 10:49:33 +02:00 |
|
Erik Krogh Kristensen
|
038cca814a
|
Merge branch 'main' into ts4
|
2020-08-28 10:27:49 +02:00 |
|
Taus
|
afe234dade
|
Merge pull request #4156 from RasmusWL/python-fix-changenote-fstring-taint
Python: fstring taint change note should be for 1.26
|
2020-08-28 10:23:06 +02:00 |
|
Jonas Jensen
|
55d7ac88f9
|
Merge pull request #4148 from geoffw0/vecextra
C++: Improvements to string and vector models.
|
2020-08-28 10:05:42 +02:00 |
|
CodeQL CI
|
80cb8be405
|
Merge pull request #4155 from asger-semmle/js/lower-duplicate-element-id-precision
Approved by esbena
|
2020-08-28 08:52:58 +01:00 |
|
CodeQL CI
|
ac94869978
|
Merge pull request #3978 from dellalibera/js/insecure-cookies
Approved by esbena
|
2020-08-28 08:31:38 +01:00 |
|
Rasmus Wriedt Larsen
|
deff36e9af
|
Python: fstring taint change note should be for 1.26
This fixes problem introduced in https://github.com/github/codeql/pull/4127
|
2020-08-28 09:00:07 +02:00 |
|
Tamas Vajk
|
29eaacdeaf
|
Fix typos and comment styling
|
2020-08-28 08:41:46 +02:00 |
|
Mathias Vorreiter Pedersen
|
ceddc2497a
|
Merge pull request #4151 from geoffw0/reftaint
C++: Taint tests for array and reference assignments.
|
2020-08-27 20:00:13 +02:00 |
|
Taus
|
1206ff5889
|
Merge pull request #4150 from RasmusWL/python-dataflow-private-import
Python: Make import of python private in shared dataflow
|
2020-08-27 18:05:55 +02:00 |
|
Geoffrey White
|
9b3da1f6c7
|
C++: Autoformat.
|
2020-08-27 16:55:45 +01:00 |
|
Geoffrey White
|
208cd4c888
|
C++: Fix assign in the test stl.h.
|
2020-08-27 16:52:22 +01:00 |
|
Asger Feldthaus
|
e7a0bc6be6
|
JS: Lower precision of ambiguous HTML ID attribute
|
2020-08-27 15:51:34 +01:00 |
|
Geoffrey White
|
927a4faa58
|
C++: Remove the non-reference case that we shouldn't need.
|
2020-08-27 15:42:40 +01:00 |
|
Geoffrey White
|
071b303ea0
|
C++: Make the other versions consistent with this.
|
2020-08-27 15:24:48 +01:00 |
|
Rasmus Wriedt Larsen
|
36ac111659
|
Merge pull request #4152 from tausbn/python-sync-inline-test-expectations-files
Python: Sync InlineExpectationsTest.qll between Python and C++
|
2020-08-27 16:23:08 +02:00 |
|
Geoffrey White
|
865d91de80
|
C++: Fix getAValueTypeParameterIndex().
|
2020-08-27 15:08:58 +01:00 |
|
Jonas Jensen
|
c507b337f2
|
Merge pull request #3921 from catenacyber/NullCheckParam
C++: Adds another redundant null check rule
|
2020-08-27 16:07:13 +02:00 |
|
Geoffrey White
|
816b8abd7c
|
C++: Add a test case using a const int *.
|
2020-08-27 15:05:23 +01:00 |
|
Tamas Vajk
|
7e2cf9a858
|
Adjust code review findings
|
2020-08-27 15:11:55 +02:00 |
|
Tamas Vajk
|
fcd426210f
|
C#: Add missing QlDoc for code duplication
|
2020-08-27 14:43:16 +02:00 |
|
Taus Brock-Nannestad
|
797e290a67
|
Python+CPP: Change values to value
|
2020-08-27 14:12:40 +02:00 |
|
Taus Brock-Nannestad
|
dccbcc15b3
|
Python: Sync InlineExpectationsTest.qll between Python and C++
Also changes `valuesasas` to `values` in the test example.
|
2020-08-27 13:37:26 +02:00 |
|
Rasmus Wriedt Larsen
|
9da6da6106
|
Python: Fix imports in shraed dataflow tests
|
2020-08-27 13:29:41 +02:00 |
|
Taus
|
e7322d114f
|
Merge pull request #4077 from yoff/MagicMethods
Python: Add support for magic methods
|
2020-08-27 13:20:56 +02:00 |
|
Taus
|
d3175a7899
|
Merge pull request #4110 from yoff/SharedDataflow_ParsimoniousFlowNodes
Python: Shared dataflow, parsimonious flow nodes
|
2020-08-27 13:19:23 +02:00 |
|
CodeQL CI
|
30ac2f9c84
|
Merge pull request #4143 from tausbn/python-add-inline-test-expectations-library
Approved by RasmusWL
|
2020-08-27 12:18:41 +01:00 |
|
Taus
|
a750252c07
|
Merge pull request #4147 from RasmusWL/python-remove-symlink
Python: Remove symlink from experimental test
|
2020-08-27 13:16:07 +02:00 |
|
Geoffrey White
|
a5a3078b58
|
C++: Add a test case using a typedef int.
|
2020-08-27 12:11:56 +01:00 |
|
Tom Hvitved
|
35e1c04b93
|
Merge pull request #4144 from hvitved/csharp/autobuilder/vsdevcmd
C#: Teach autobuilder about `VsDevCmd.bat`
|
2020-08-27 12:38:49 +02:00 |
|