Esben Sparre Andreasen
6d6379fc09
JS: address review comments
2018-12-10 22:03:52 +01:00
Jonas Jensen
a4b3b1e8c8
Merge pull request #653 from geoffw0/ex-ch-notes
...
CPP: Additional change notes (for 1.20)
2018-12-10 16:59:12 +01:00
Geoffrey White
709fd6382a
CPP: Change note for #562 .
2018-12-10 13:51:15 +00:00
Geoffrey White
6b7337d766
CPP: Change note for #540 .
2018-12-10 13:42:17 +00:00
Jonas Jensen
1f7383498a
Merge pull request #644 from geoffw0/pointerscaling
...
CPP: Fix type confusion in IncorrectPointerscaling.ql
2018-12-10 14:22:10 +01:00
Anders Schack-Mulligen
bfc7fb7c8a
Java: Change alert location for ConstantLoopCondition.
2018-12-10 12:37:11 +00:00
Felicity Chapman
6ef16bb728
Merge pull request #649 from jf205/qhelp-guide
...
Query help style guide: editorial review
2018-12-10 10:59:48 +00:00
james
a0d5049132
update links to query pages
2018-12-10 09:33:58 +00:00
james
4bd922e442
address further comments
2018-12-10 09:18:05 +00:00
james
36fe86f730
address felicity's comments
2018-12-10 09:18:05 +00:00
james
59542fc367
mention of qldoc comment requirements
2018-12-10 09:18:05 +00:00
james
934fd9f3d6
address geoffrey's comments and reword tags
2018-12-10 09:18:05 +00:00
james
2ed648d798
metadat-style-guide: address anders' review
2018-12-10 09:18:05 +00:00
james
09d08a7547
metadata-style-guide: update title
2018-12-10 09:18:04 +00:00
james
9560165921
metadata-style-guide: add style guide
2018-12-10 09:18:04 +00:00
james
41f5d65e0c
remove hyphen from title and update some links
2018-12-10 09:13:33 +00:00
yh-semmle
ba4fa0a246
Merge pull request #643 from aschackmull/java/nullguard-isblank
...
Java: Add org.apache.commons.lang3.StringUtils.isBlank as a nullguard.
2018-12-07 15:31:58 -05:00
Geoffrey White
9857a85817
CPP: Fix similar queries.
2018-12-07 18:43:28 +00:00
Geoffrey White
d3c6d83786
CPP: Change note.
2018-12-07 18:43:27 +00:00
Geoffrey White
0f268cac40
CPP: Fix the issue.
2018-12-07 18:43:27 +00:00
Geoffrey White
02a060fbfa
CPP: Add a test.
2018-12-07 18:21:48 +00:00
calumgrant
67d4099e3f
Merge pull request #593 from hvitved/csharp/nullness
...
C#: Rewrite nullness queries
2018-12-07 15:57:27 +00:00
Geoffrey White
91578258f7
Merge pull request #595 from jf205/qhelp-guide
...
Query help style-guide
2018-12-07 15:38:58 +00:00
Anders Schack-Mulligen
f09eb67af0
Java: Add org.apache.commons.lang3.StringUtils.isBlank as a nullguard.
2018-12-07 16:18:32 +01:00
Geoffrey White
e7390f3ea5
CPP: Add simple tests of CommaExpr.
2018-12-07 14:29:09 +00:00
Tom Hvitved
2a30dee8df
Merge pull request #621 from calumgrant/cs/invalid-key
...
C#: Fix [INVALID_KEY] error
2018-12-07 11:24:45 +01:00
Tom Hvitved
c887dc89dc
C#: Fix a bug in ThrowingCallable
...
A method such as
```
void M()
{
throw new Exception();
}
```
was incorrectly not categorized as a `ThrowingCallable`, that is, a callable
that always throws an exception upon invocation.
2018-12-07 10:56:11 +01:00
Geoffrey White
b1e7649d02
CPP: Add functions containing errors to the sideEffects tests.
2018-12-07 09:54:36 +00:00
Tom Hvitved
243af36167
C#: Add more CFG tests with throwing methods
2018-12-07 10:43:45 +01:00
Tom Hvitved
fce805834e
C#: Address review comments
2018-12-07 09:40:49 +01:00
semmle-qlci
9e73ed71b9
Merge pull request #623 from esben-semmle/js/incomplete-url-sanitization
...
Approved by mc-semmle
2018-12-06 20:46:37 +00:00
yh-semmle
c2116f0d91
Merge pull request #560 from aschackmull/java/normalize-parentheses
...
Java: Normalize parentheses.
2018-12-06 12:38:26 -05:00
Esben Sparre Andreasen
4f53411397
JS: recognize HTTP URLs in js/incomplete-url-sanitization
2018-12-06 15:53:20 +01:00
Esben Sparre Andreasen
56fb63adbc
JS: change notes for js/incomplete-url-substring-sanitization
2018-12-06 15:53:20 +01:00
Esben Sparre Andreasen
229eea00dc
JS: add query js/incomplete-url-substring-sanitization
2018-12-06 15:53:20 +01:00
semmle-qlci
3397533045
Merge pull request #628 from xiemaisi/js/setUnsafeHTML
...
Approved by esben-semmle
2018-12-06 13:58:52 +00:00
Esben Sparre Andreasen
bf048e7e49
JS: change notes for persistent storage taint step and cookie models
2018-12-06 14:53:22 +01:00
Esben Sparre Andreasen
45b207c21b
JS: introduce models of three cookie libraries
2018-12-06 14:53:22 +01:00
Esben Sparre Andreasen
28b4a78430
JS: introduce DOM::PersistentWebStorage
2018-12-06 14:53:22 +01:00
Jonas Jensen
0a496c1d3d
Merge pull request #617 from geoffw0/unusedstatic
...
CPP: Fix false positives in UnusedStaticVariables.ql
2018-12-06 14:09:52 +01:00
Esben Sparre Andreasen
7fb752784a
JS: introduce persistent read/write pairs as a taint step
2018-12-06 10:36:10 +01:00
Max Schaefer
ef347b3870
JavaScript: Teach Xss query about WinJS HTML injection functions.
2018-12-06 09:13:21 +00:00
Max Schaefer
75842fec1c
Merge pull request #627 from samlanning/inconsistentStateExample
...
JS: Fix syntax error in js/react/inconsistent-state-update example
2018-12-06 08:03:32 +00:00
Sam Lanning
2ea148016c
JS: Fix syntax error in js/react/inconsistent-state-update example
2018-12-05 16:44:40 -08:00
calum
919d7cbf01
C#: Fix [INVALID_KEY] errors.
2018-12-05 13:55:55 +00:00
Geoffrey White
f6a87574f0
CPP: Add query ID to change note.
2018-12-05 13:55:46 +00:00
Geoffrey White
d0a0d2300e
CPP: Change note.
2018-12-05 10:03:21 +00:00
Geoffrey White
d85f4b540c
CPP: Fix false positive.
2018-12-05 10:01:54 +00:00
Geoffrey White
e7f19e97cb
CPP: Add a test of UnusedStaticVariable.ql.
2018-12-05 10:01:54 +00:00
Max Schaefer
3c00d4be6d
Merge pull request #607 from esben-semmle/js/more-react-methods
...
JS: model additional React component methods
2018-12-05 08:00:16 +00:00
