23518 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
Erik Krogh Kristensen	2a4570eaaa	add model for the dayjs library	2021-06-21 23:28:45 +02:00
Mathias Vorreiter Pedersen	05389bb9d4	Merge pull request #6099 from geoffw0/weak-crypto3 ... Further improvements to cpp/weak-cryptographic-algorithm	2021-06-21 15:46:50 +02:00
CodeQL CI	565af1a879	Merge pull request #6071 from RasmusWL/fix-input-cwe ... Approved by calumgrant, tausbn	2021-06-21 06:23:18 -07:00
Geoffrey White	05ed4ed739	Update cpp/change-notes/2021-06-21-weak-cryptographic-algorithm.md ... Co-authored-by: Mathias Vorreiter Pedersen <mathiasvp@github.com>	2021-06-21 14:22:56 +01:00
yoff	baf8d0a990	Merge pull request #6045 from RasmusWL/twisted ... Python: Model twisted	2021-06-21 14:52:57 +02:00
Anders Schack-Mulligen	14b485efa4	Merge pull request #6119 from smowton/smowton/fix/jaxrs-tests-field-flow ... Increase field flow branch limit in Jax-RS tests	2021-06-21 14:43:59 +02:00
Chris Smowton	e2aaae8181	Increase test fieldFlowBranchLimit to 1000 ... Might as well head off future failures in this test Co-authored-by: Anders Schack-Mulligen <aschackmull@users.noreply.github.com>	2021-06-21 12:51:37 +01:00
Chris Smowton	c5eef7be8c	Increase field flow branch limit in Jax-RS tests ... This fixes apparently-missing results by allowing the dataflow library to persist even when there are many Map implementations possibly available.	2021-06-21 12:46:13 +01:00
Geoffrey White	6f808c9e4c	C++: Update change note.	2021-06-21 12:32:48 +01:00
Geoffrey White	79198974dc	Merge branch 'main' into weak-crypto3	2021-06-21 11:55:29 +01:00
Anders Schack-Mulligen	9110dfaeb3	Merge pull request #6095 from hvitved/dataflow/local-cc-join ... Data flow: Fix `getLocalCallContext` join-order	2021-06-21 12:53:38 +02:00
Geoffrey White	90e2a2d222	C++: Change note.	2021-06-21 11:30:12 +01:00
Rasmus Wriedt Larsen	d6ec4d30fc	Python: Twisted refactor of getRequestParamIndex	2021-06-21 10:54:28 +02:00
Rasmus Wriedt Larsen	8208aebd7e	Python: Apply suggestions from code review ... Co-authored-by: yoff <lerchedahl@gmail.com>	2021-06-21 10:43:25 +02:00
Shati Patel	bbb5a39c02	Merge pull request #6072 from shati-patel/shati-patel/vs-code-setting ... [Already shipped] Docs: Update setting in CodeQL for VS Code	2021-06-21 08:34:14 +01:00
yo-h	26a04d6659	Merge pull request #6108 from tamasvajk/fix/coverage-commenter ... Fix diff in the framework coverage PR comment	2021-06-18 14:02:15 -04:00
Tamas Vajk	b3f44f457a	Fix diff in the framework coverage PR comment	2021-06-18 16:33:50 +02:00
CodeQL CI	081fd28090	Merge pull request #6102 from RasmusWL/js-qhelp-fixup ... Approved by erik-krogh	2021-06-18 04:52:48 -07:00
Chris Smowton	6302187a5d	Merge pull request #5957 from haby0/java/BeanShellInjection ... Java: BeanShell Injection	2021-06-18 12:38:51 +01:00
Jonas Jensen	f829fff2ad	Merge pull request #6100 from github/AlonaHlobina-patch-2 ... Update C/C++ Clang and GCC versions.rst	2021-06-18 13:10:29 +02:00
Rasmus Wriedt Larsen	968a0921d4	JS: Fix secure example inclusion in InsecureDownload.qhelp	2021-06-18 12:12:06 +02:00
Anders Schack-Mulligen	7eb6da3888	Merge pull request #5772 from smowton/smowton/feature/apache-tuple-flow ... Add models for Apache Commons Lang's tuple types	2021-06-18 11:25:07 +02:00
AlonaHlobina	bd820458f5	Update docs/codeql/support/reusables/versions-compilers.rst ... Co-authored-by: Jonas Jensen <jbj@github.com>	2021-06-18 12:24:34 +03:00
haby0	a73cb3f04a	Fix error	2021-06-18 17:22:26 +08:00
CodeQL CI	1ffd9c9ba7	Merge pull request #6086 from asgerf/js/knex ... Approved by esbena	2021-06-18 01:58:21 -07:00
Calum Grant	32f6a465b0	Merge pull request #6080 from github/calumgrant/security-severities ... Update security-severity scores	2021-06-18 09:40:40 +01:00
Tom Hvitved	eb86bceb4d	Address review comments	2021-06-18 10:18:47 +02:00
haby0	0d18e4ff9c	BeanShell Injection	2021-06-18 15:54:13 +08:00
AlonaHlobina	9feda2ddd6	Update C/C++ Clang and GCC versions.rst	2021-06-18 10:46:22 +03:00
Tamás Vajk	0545bcfbd2	Merge pull request #6028 from github/tamasvajk/feature/csv-coverage-report-comment ... Add CSV coverage PR commenter	2021-06-18 09:32:45 +02:00
Geoffrey White	b4cbe6dce8	C++: Increase query precision to high.	2021-06-17 14:33:17 +01:00
Geoffrey White	b5c71fd1d7	C++: Repair funcion call in a function call.	2021-06-17 14:33:16 +01:00
Geoffrey White	e5147c2a1f	C++: Exclude functions that don't involve buffers.	2021-06-17 14:33:16 +01:00
Chris Smowton	64001cc02c	Merge pull request #5587 from smowton/smowton/admin/promote-ssrf-query ... Promote SSRF query from experimental	2021-06-17 13:02:33 +01:00
Chris Smowton	d28c95d16c	Field foo of -> Field[foo] of	2021-06-17 12:49:25 +01:00
Chris Smowton	74b2a2c7a6	Improve style of interpretField	2021-06-17 12:45:44 +01:00
Geoffrey White	a481e5c292	C++: Exclude template code.	2021-06-17 12:36:14 +01:00
Geoffrey White	8efdf359dc	C++: Fix some incorrect uses of 'const' in the tests.	2021-06-17 12:36:13 +01:00
Geoffrey White	3641cdcc1f	C++: Add a test case involving an array.	2021-06-17 12:36:09 +01:00
Chris Smowton	5cf0243dd0	Add change note	2021-06-17 12:34:40 +01:00
Chris Smowton	2cc1f46871	Model constructors for (Imm|M)utable(Pair|Triple)	2021-06-17 12:34:40 +01:00
Chris Smowton	fbaa382158	Add tests for Pair.of and Triple.of	2021-06-17 12:34:40 +01:00
Chris Smowton	eebaab8fe9	Order left and right consistently	2021-06-17 12:34:40 +01:00
Chris Smowton	365aab9bd9	Improve matching of Field specifiers; add Field recognition in tests	2021-06-17 12:34:36 +01:00
Geoffrey White	23db21cd90	C++: Test spacing.	2021-06-17 12:33:31 +01:00
Chris Smowton	472a2a64dd	Add models for Apache Commons tuples	2021-06-17 12:25:21 +01:00
Chris Smowton	73fa680224	Add support for CSV-specified flow to or from fields.	2021-06-17 12:24:28 +01:00
Geoffrey White	d590952aaa	C++: Add a test case involving nested function calls.	2021-06-17 12:23:18 +01:00
Geoffrey White	7632c9edb5	C++: Add test cases involving strings and comparisons.	2021-06-17 12:23:17 +01:00
Geoffrey White	2e236dd2a9	C++: Add a test case involving a harmless assert.	2021-06-17 12:23:17 +01:00