Asger Feldthaus
|
33ca55770c
|
Ruby: EntryPoint.getNode -> getANode
|
2022-03-16 11:02:26 +01:00 |
|
Asger Feldthaus
|
ecf7073bf1
|
Shared: codeql -> ql in code blocks
|
2022-03-16 11:00:24 +01:00 |
|
Asger Feldthaus
|
d628dc0b52
|
Ruby: sync ApiGraphModels.qll
|
2022-03-15 10:52:41 +01:00 |
|
Asger Feldthaus
|
82750638c6
|
JS: Verify models even if package is not used in database
|
2022-03-15 10:51:44 +01:00 |
|
Asger Feldthaus
|
a19f06ffc0
|
JS: Port checks to JS
|
2022-03-15 10:35:49 +01:00 |
|
Asger Feldthaus
|
7f8205684e
|
Ruby: verify tokens in identifying access path
|
2022-03-15 10:25:59 +01:00 |
|
Asger Feldthaus
|
97ca1155c3
|
JS: Sync ApiGraphModels.qll and test
|
2022-03-15 09:29:34 +01:00 |
|
Asger Feldthaus
|
65249dabd3
|
Ruby: add warning for wrong number of columns in CSV row
|
2022-03-15 09:28:21 +01:00 |
|
Asger Feldthaus
|
f28acbf3dc
|
Ruby: autoformat
|
2022-03-15 08:15:18 +01:00 |
|
Asger Feldthaus
|
fee32d3480
|
Elaborate on qldoc for API::EntryPoint
|
2022-03-14 17:52:07 +01:00 |
|
Asger Feldthaus
|
be65b9bebc
|
Ruby: remove spurious Instance token from getExtraSuccessorFromInvoke
|
2022-03-14 17:39:43 +01:00 |
|
Asger Feldthaus
|
072ad8f4a7
|
Ruby: add (from model) to remote flow description
|
2022-03-14 17:39:17 +01:00 |
|
Asger Feldthaus
|
37bbd46e43
|
Ruby: fix broken comment
|
2022-03-14 17:33:57 +01:00 |
|
Asger Feldthaus
|
c9d7651c59
|
Be explicit about re-exporting
|
2022-03-14 17:26:30 +01:00 |
|
Asger Feldthaus
|
df379809df
|
Ruby: support CSV rows of form ;any;Method[foo]
|
2022-03-01 14:08:21 +01:00 |
|
Asger Feldthaus
|
05ea33033b
|
Ruby: add test for API::EntryPoint
|
2022-03-01 14:08:21 +01:00 |
|
Asger Feldthaus
|
bf83400bd2
|
Ruby: port API::EntryPoint from JS
|
2022-03-01 14:08:21 +01:00 |
|
Asger Feldthaus
|
e10e3b9466
|
Ruby: convert ActiveStorage::Filename model to MaD
|
2022-03-01 14:08:21 +01:00 |
|
Asger Feldthaus
|
e6a3747656
|
Ruby: add test for ActiveStorage.Filename.new
|
2022-03-01 14:08:21 +01:00 |
|
Asger Feldthaus
|
70c083fa64
|
Ruby: convert Regexp.escape model to MaD
|
2022-03-01 14:08:21 +01:00 |
|
Asger Feldthaus
|
cbd044a768
|
Ruby: add a code injection test for flwo through Regexp.escape
|
2022-03-01 14:08:21 +01:00 |
|
Asger Feldthaus
|
63e7c16d6b
|
Ruby: add test with sinks and type-defs
|
2022-03-01 14:08:20 +01:00 |
|
Asger Feldthaus
|
388949f12e
|
Ruby: support WithBlock and WithoutBlock
|
2022-03-01 14:08:20 +01:00 |
|
Asger Feldthaus
|
d6bc9c259e
|
Ruby: add simple test case
|
2022-03-01 14:08:20 +01:00 |
|
Asger Feldthaus
|
d808bdc028
|
JS: Sync ApiGraphModels.qll
|
2022-03-01 14:08:20 +01:00 |
|
Asger Feldthaus
|
a33e89279d
|
Ruby: instantiate ApiGraphModels library in Ruby
|
2022-03-01 14:08:20 +01:00 |
|
Asger F
|
a8bfebaeb6
|
Merge pull request #8149 from asgerf/shared/use-shared-access-path-syntax
Shared: use shared access path syntax to parse arguments in CSV rows
|
2022-02-25 14:04:18 +01:00 |
|
CodeQL CI
|
0f125d1e8a
|
Merge pull request #8234 from asgerf/ruby/meta-queries
Approved by nickrolfe
|
2022-02-25 12:46:15 +00:00 |
|
yoff
|
e1c2f46092
|
Merge pull request #8200 from RasmusWL/debug-partial-flow-snippet
Python: Add `debug partial flow` snippet
|
2022-02-25 12:41:12 +01:00 |
|
Pierre
|
f047707ef3
|
Merge pull request #8251 from github/turbo-java-17-python-310
Update supported Java and Python versions
|
2022-02-25 12:19:01 +01:00 |
|
Chris Smowton
|
011248e686
|
Merge pull request #7774 from smowton/smowton/admin/test-annotation-inheritence
Add test checking that inheritence is noticed even with annotations present
|
2022-02-25 11:15:21 +00:00 |
|
Pierre
|
9e27675554
|
Update supported Java and Python versions
|
2022-02-25 11:12:01 +01:00 |
|
Mathias Vorreiter Pedersen
|
dfd30e46b0
|
Merge pull request #8227 from geoffw0/319improve
C++: Promote cpp/non-https-url
|
2022-02-25 08:48:44 +00:00 |
|
Chris Smowton
|
b1c98ae3c2
|
Add further test directly examining signature of method with problematic parameter types
|
2022-02-24 17:39:11 +00:00 |
|
Chris Smowton
|
379f2438a6
|
Add test checking that inheritence is noticed even with annotations present
|
2022-02-24 17:39:11 +00:00 |
|
Geoffrey White
|
899ae90ba4
|
C++: Add GVN.
|
2022-02-24 17:22:37 +00:00 |
|
Mathias Vorreiter Pedersen
|
ab3cad749c
|
Merge pull request #8173 from MathiasVP/add-using-expired-stack-address-query
C++: Add another `CWE-825` query
|
2022-02-24 17:18:35 +00:00 |
|
Geoffrey White
|
0bb9a95563
|
C++: Extend tests.
|
2022-02-24 17:15:29 +00:00 |
|
Tom Bolton
|
8dfc0d25d1
|
Merge pull request #8232 from github/tombolton/use-updated-counting-query
Add new xss queries to result counting query
|
2022-02-24 16:38:53 +00:00 |
|
Erik Krogh Kristensen
|
844815a032
|
Merge pull request #8231 from erik-krogh/fix-ql-for-ql-in-ql-for-ql
QL: fix ql-for-ql errors inside ql-for-ql
|
2022-02-24 15:01:45 +01:00 |
|
Erik Krogh Kristensen
|
ea1503ce2c
|
fix ql-for-ql errors inside ql-for-ql
|
2022-02-24 14:41:27 +01:00 |
|
tombolton
|
d80ef6566d
|
add new xss queries to result counting query
|
2022-02-24 13:31:40 +00:00 |
|
Tamás Vajk
|
83aaeca751
|
Merge pull request #8228 from tamasvajk/fix/change-notes-0.0.9
Fix 0.0.9 change note to match concatenated change log
|
2022-02-24 14:04:31 +01:00 |
|
Chris Smowton
|
4973224de7
|
Merge pull request #8216 from github/smowton/fix/creating-codeql-databases-docs-typo
Fix typo
|
2022-02-24 12:24:32 +00:00 |
|
Tamas Vajk
|
a8c2d87897
|
Fix 0.0.9 change note to match concatenated change log
|
2022-02-24 12:51:10 +01:00 |
|
Mathias Vorreiter Pedersen
|
e4af34253a
|
C++: Actually fix incorrect annotation
|
2022-02-24 11:06:57 +00:00 |
|
Geoffrey White
|
e3493e32e0
|
C++: Change note.
|
2022-02-24 10:54:09 +00:00 |
|
Geoffrey White
|
fc8ebdaeb2
|
C++: Increase the query to precision high.
|
2022-02-24 10:54:09 +00:00 |
|
Geoffrey White
|
c16302be13
|
C++: Fix the FP.
|
2022-02-24 10:54:08 +00:00 |
|
Mathias Vorreiter Pedersen
|
ef5f16ddd3
|
Merge branch 'main' into add-using-expired-stack-address-query
|
2022-02-24 08:41:27 +00:00 |
|