26108 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
Mathias Vorreiter Pedersen	35baff8bac	C#/C++: Sync identical files.	2021-09-22 13:32:29 +01:00
Mathias Vorreiter Pedersen	5969c227ab	C++: Fix QLDoc on 'getAllocationAddressOperand' and 'getAllocationAddress'.	2021-09-22 13:32:20 +01:00
Tom Hvitved	82d463e86e	Merge pull request #6718 from hvitved/csharp/xss-subpath ... C#: Add `subpaths` predicate to XSS queries	2021-09-20 12:47:27 +02:00
Tom Hvitved	64507ab316	Merge pull request #6712 from hvitved/csharp/subsumption-perf-take2 ... C#: Speedup type subsumption calculation	2021-09-20 11:59:24 +02:00
Tom Hvitved	b9c4abe7dc	C#: Fix qldoc typos	2021-09-20 10:42:01 +02:00
Tom Hvitved	6d315a5d16	C#: Add subpaths predicate to XSS queries	2021-09-20 10:40:54 +02:00
Anders Schack-Mulligen	187b7e117c	Merge pull request #6715 from github/workflow/coverage/update ... Update CSV framework coverage reports	2021-09-20 10:19:16 +02:00
github-actions[bot]	f0e7be7d56	Add changed framework coverage reports	2021-09-20 00:08:08 +00:00
Tom Hvitved	c6c1ad1b90	C#: Update toString for nested types	2021-09-18 19:51:37 +02:00
Tom Hvitved	07fe29cc67	C#: Speedup type subsumption calculation	2021-09-18 19:51:37 +02:00
Anders Schack-Mulligen	2cbad4aed6	Merge pull request #6600 from atorralba/atorralba/fix-conditionalbypass ... Java: Fix performance of the query User-controlled bypass of sensitive method	2021-09-17 16:07:39 +02:00
Tamás Vajk	3247794e2f	Merge pull request #6196 from tamasvajk/feature/sql-sinks ... C#: Migrate SQL sinks to CSV format	2021-09-17 14:36:57 +02:00
Tamas Vajk	8232698254	C#: Migrate SQL sinks to CSV format	2021-09-17 10:21:31 +02:00
Tamás Vajk	6a78aa7840	Merge pull request #6461 from tamasvajk/feature/service-stack ... C#: Add ServiceStack support	2021-09-17 10:16:20 +02:00
Ethan Palm	b73a2f7d56	Merge pull request #6667 from ethanpalm/indirect-build-tracing-docs ... Add indirect build tracing docs codeql-cli/v2.6.2	2021-09-16 12:36:56 -04:00
Ethan P	4d7aa5c945	Update example note	2021-09-16 09:29:35 -07:00
Anders Schack-Mulligen	a67db45454	Merge pull request #6612 from Marcono1234/marcono1234/literal-getLiteral-usage ... Java: Replace incorrect usage of `Literal.getLiteral()`	2021-09-16 17:00:32 +02:00
Marcono1234	020aa4d94c	Java: Address feedback and fix test failures	2021-09-16 14:10:48 +01:00
Marcono1234	58d2d5d14e	Java: Replace incorrect usage of Literal.getLiteral()	2021-09-16 14:10:48 +01:00
Tom Hvitved	1c1c46591e	Merge pull request #6708 from hvitved/python/files-folders-drop-columns ... Python: Drop redundant columns from `files` and `folders` relations	2021-09-16 14:42:15 +02:00
Tom Hvitved	9f10018d48	Address review comment	2021-09-16 13:11:03 +02:00
Taus	783233dfe4	Merge pull request #6696 from yoff/python/copy-multiples-performance-fix-from-ruby ... Python: Copy performance fix for `multiples` from ruby	2021-09-16 13:01:07 +02:00
Tony Torralba	f18c163408	Improve handling of the 'author' word as an exception	2021-09-16 11:57:28 +02:00
Tony Torralba	8022530f34	Merge pull request #5983 from atorralba/atorralba/promote-insecure-basic-auth ... Java: Promote Insecure Basic Authentication query from experimental	2021-09-16 11:45:30 +02:00
Tom Hvitved	37ec83a68b	Python: Upgrade script	2021-09-16 10:51:27 +02:00
Tom Hvitved	94b5c4eada	Python: Drop redundant columns from files and folders relations	2021-09-16 10:51:27 +02:00
Benjamin Muskalla	d3caa80274	Merge pull request #6706 from github/workflow/coverage/update ... Update CSV framework coverage reports	2021-09-16 09:58:19 +02:00
Tamas Vajk	f015cea590	Merge branch 'main' into feature/service-stack	2021-09-16 09:42:42 +02:00
Tamas Vajk	05dd3fa0e7	Adjust review findings	2021-09-16 09:42:38 +02:00
Erik Krogh Kristensen	0198cf6318	Merge pull request #6704 from erik-krogh/fix-upgrade ... JS: fix dbsheme upgrade from TypeScript 4.4 PR	2021-09-16 08:34:58 +02:00
Anders Schack-Mulligen	236ffc8972	Merge pull request #6700 from aschackmull/dataflow/subpaths-joinorder ... Dataflow: Fix bad joinorder in subpaths	2021-09-16 08:22:59 +02:00
github-actions[bot]	563878d28d	Add changed framework coverage reports	2021-09-16 00:08:03 +00:00
Erik Krogh Kristensen	5c73fed83a	fix dbsheme upgrade from TypeScript 4.4 PR	2021-09-15 22:38:27 +02:00
Ethan P	080867a390	Add reviewer feedback	2021-09-15 11:19:41 -07:00
Nick Rolfe	f76ce8b33b	Merge pull request #6686 from hvitved/cpp/files-folders-drop-columns ... C++: Drop redundant columns from `files` and `folders` relations	2021-09-15 18:33:20 +01:00
Mathias Vorreiter Pedersen	33ef634ea8	Merge pull request #6679 from andersfugmann/relax_memberMayBeVarSize ... Improve precision on OverflowStatic query.	2021-09-15 17:24:10 +01:00
Tony Torralba	21079a1315	Fix conditionControlsMethod predicate ... Exceptions for throw and return statements were missing the appropriate condition	2021-09-15 17:51:51 +02:00
Tony Torralba	d3cf697b07	QLDoc	2021-09-15 17:32:36 +02:00
Tony Torralba	5ed9949498	Adapt InsecureBasicAuth to the previous commit	2021-09-15 17:20:28 +02:00
Tony Torralba	2e08c5dd2b	Refactored HttpsUrls.ql	2021-09-15 17:20:28 +02:00
Tony Torralba	c3c73377b8	Fix scope issues in the Java example	2021-09-15 17:20:28 +02:00
Tony Torralba	023264660b	Suggestions from code review	2021-09-15 17:20:28 +02:00
mc	0e7cbbfeb8	Update InsecureBasicAuth.qhelp	2021-09-15 17:20:28 +02:00
mc	e58b90ef1c	Added full stops	2021-09-15 17:20:28 +02:00
Tony Torralba	e159351179	Update java/change-notes/2021-06-01-insecure-basic-auth-query.md ... Co-authored-by: Anders Schack-Mulligen <aschackmull@users.noreply.github.com>	2021-09-15 17:20:27 +02:00
Tony Torralba	30178d4f23	Decouple InsecureBasicAuth.qll to reuse the taint tracking configuration	2021-09-15 17:20:27 +02:00
Tony Torralba	90df3fa94c	Remove CWE reference from qlhelp since it's obtained from metadata	2021-09-15 17:20:27 +02:00
Tony Torralba	49c6a56f97	Add change note	2021-09-15 17:20:27 +02:00
Tony Torralba	148443fae1	Use InlineExpectationsTest	2021-09-15 17:20:27 +02:00
Tony Torralba	2cada386b4	Refactored into InsecureBasicAuth.qll	2021-09-15 17:20:27 +02:00