29153 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
Tom Hvitved	3ce41015bb	Ruby: Add CFG test for forward parameters	2021-11-15 16:25:06 +01:00
Tom Hvitved	4bbfa514c9	Merge pull request #6535 from hvitved/csharp/consistency-queries ... C#: Add consistency queries	2021-11-15 13:15:58 +01:00
CodeQL CI	c8b8a2874f	Merge pull request #7119 from github/max-schaefer/api-graphs-property-copies ... Approved by asgerf	2021-11-15 04:09:16 -08:00
Taus	c17560f948	Merge pull request #7096 from tausbn/python-fix-more-bad-joins ... Python: Fix a bunch of performance issues	2021-11-15 12:10:27 +01:00
Tom Hvitved	723ac818d9	Shared CFG: Update breakInvariant4 consistency test	2021-11-15 11:43:49 +01:00
Mathias Vorreiter Pedersen	c2e057def9	Merge pull request #7094 from geoffw0/non-https-url ... C++: New query 'Failure to use HTTPS URLs'	2021-11-15 10:00:19 +00:00
Tom Hvitved	d323b3b17d	Merge pull request #7123 from hvitved/ruby/definitions-perf ... Ruby: Fix performance problem in `Definitions.ql`	2021-11-15 10:58:03 +01:00
Tom Hvitved	b5d37ae0fe	C#: Update CFG consistency checks	2021-11-12 17:07:37 +01:00
Tom Hvitved	d1a09b62d3	Address review comments	2021-11-12 16:31:00 +01:00
Erik Krogh Kristensen	eef7709982	Merge pull request #7057 from erik-krogh/cwe598 ... JS: add js/sensitive-get-query query	2021-11-12 16:03:21 +01:00
yoff	5beb681580	Merge pull request #7087 from RasmusWL/path-injection-fp ... Python: Add interesting path-injection FP	2021-11-12 15:20:19 +01:00
Tom Hvitved	3471e757f2	Ruby: Fix performance problem in Definitions.ql	2021-11-12 14:35:16 +01:00
yoff	9f614b1d98	Merge pull request #7016 from RasmusWL/django-rest-framework ... Python: Model Django REST framework	2021-11-12 14:27:56 +01:00
Rasmus Wriedt Larsen	491f72bb2a	Python: Adjust generated code to be more familiar	2021-11-12 13:30:03 +01:00
Rasmus Wriedt Larsen	de69e4c645	Python: Expand on SubclassFinder implementation note	2021-11-12 13:29:03 +01:00
Rasmus Wriedt Larsen	f7b53321b9	Python: Remove copy-pasted comment	2021-11-12 13:19:20 +01:00
Tom Hvitved	67ebebbaeb	C#: Add consistency queries	2021-11-12 13:10:46 +01:00
Taus	55ea715ce9	Merge pull request #7033 from RasmusWL/flask-admin	2021-11-12 12:18:56 +01:00
Rasmus Wriedt Larsen	860b1a5cc3	Python: Other minor QLDoc adjustment	2021-11-12 11:46:45 +01:00
Rasmus Wriedt Larsen	99081ea7e0	Python: Minor adjustment in QLDoc	2021-11-12 11:42:36 +01:00
Rasmus Wriedt Larsen	5e4b866f2b	Python: Model rest_framework.exceptions.APIException	2021-11-12 11:37:54 +01:00
Rasmus Wriedt Larsen	62e58b534c	Python: SubclassFinder: reorder + comment	2021-11-12 11:11:13 +01:00
Rasmus Wriedt Larsen	f48ecb1dc8	Python: Apply suggestions from code review ... Co-authored-by: yoff <lerchedahl@gmail.com>	2021-11-12 10:57:56 +01:00
Tom Hvitved	b5cf4c2f82	Merge pull request #7111 from michaelnebel/csharp-move-printast ... Csharp move PrintAst query to test directory.	2021-11-12 09:19:13 +01:00
Rasmus Wriedt Larsen	06cae3dac2	Merge pull request #7104 from yoff/python/model-aiomysql ... Python: model aiomysql	2021-11-11 16:58:01 +01:00
Tom Hvitved	004144bbef	Merge pull request #7028 from hvitved/ruby/api-graphs-prune ... Ruby: Prune nodes before computing `trackUseNode`	2021-11-11 15:57:21 +01:00
Michael Nebel	9ea320c53c	Update all PrintAst.qlref to point to new location of PrintAst.ql	2021-11-11 15:19:15 +01:00
Erik Krogh Kristensen	e09c12430d	Merge pull request #7105 from erik-krogh/flagJqueryUI ... JS: have the aliasPropertyPresenceStep step over extend calls	2021-11-11 14:05:11 +01:00
CodeQL CI	34cc61e51f	Merge pull request #7083 from asgerf/js/type-track-object-literals-with-methods ... Approved by erik-krogh	2021-11-11 04:35:55 -08:00
Michael Nebel	5a4557f588	Move PrintAst.ql and update import statement	2021-11-11 13:27:12 +01:00
Rasmus Lerchedahl Petersen	e2a2a42d59	Python: Fix api references	2021-11-11 13:20:57 +01:00
Geoffrey White	ea580cd9c0	C++: Add explanatory comments.	2021-11-11 11:49:51 +00:00
Erik Krogh Kristensen	b513033e0f	Merge pull request #7021 from erik-krogh/cwe326 ... JS: Add insufficient key size query	2021-11-11 12:17:04 +01:00
Erik Krogh Kristensen	891694b50a	Merge pull request #5908 from erik-krogh/protoLib ... JS: Add library input as source to js/prototype-polluting-assignment	2021-11-11 12:04:05 +01:00
Erik Krogh Kristensen	140a70f9df	Merge pull request #7029 from erik-krogh/cwe384 ... JS: add js/session-fixation query	2021-11-11 11:59:52 +01:00
Erik Krogh Kristensen	0bf055fbec	Merge pull request #7103 from erik-krogh/add-cwe532-to-cleartextlogging ... JS: add CWE-532 to the js/clear-text-logging query	2021-11-11 11:59:16 +01:00
Asger F	7d8284a41c	Apply suggestions from code review ... Co-authored-by: Erik Krogh Kristensen <erik-krogh@github.com>	2021-11-11 10:42:49 +01:00
Geoffrey White	901919f7ff	C++: Add tests expanding on the issue with (global) variables.	2021-11-11 09:40:03 +00:00
Geoffrey White	43ff3b1c80	C++: Address review comment.	2021-11-11 09:39:59 +00:00
Mathias Vorreiter Pedersen	bf9b8cfff0	Merge pull request #6947 from ihsinme/ihsinme-patch-077 ... CPP: Add query for CWE-377 Insecure Temporary File	2021-11-11 09:02:04 +00:00
Geoffrey White	9a1b98e1d9	C++: Fix qhelp example link.	2021-11-10 17:54:05 +00:00
Erik Krogh Kristensen	5d901ef728	move extend aliasing to getAnAliasedSourceNode	2021-11-10 18:08:50 +01:00
Geoffrey White	c29011a5cf	C++: Add more sinks.	2021-11-10 16:43:28 +00:00
Erik Krogh Kristensen	2d907f825e	have the aliasPropertyPresenceStep step over extend calls	2021-11-10 16:26:00 +01:00
Geoffrey White	ae622bd482	C++: Use hasGlobalOrStdName.	2021-11-10 14:57:07 +00:00
Mathias Vorreiter Pedersen	e0b876d2f6	Merge pull request #7102 from MathiasVP/fix-map-test ... C++: Fix a testcase	2021-11-10 13:51:10 +00:00
yoff	d23a920ed4	Merge branch 'main' into python/model-aiomysql	2021-11-10 14:32:36 +01:00
Rasmus Lerchedahl Petersen	57e7bfbdba	Python: model aiomysql	2021-11-10 14:29:39 +01:00
Rasmus Lerchedahl Petersen	047cff0749	Python: test aiomysql	2021-11-10 14:24:45 +01:00
Mathias Vorreiter Pedersen	ccdaf49464	C++: Fix the same bug in the test for ordered maps.	2021-11-10 13:24:27 +00:00