676 Commits

Author	SHA1	Message	Date
Geoffrey White	b4a840e3ef	C++: Make the checks happy.	2022-05-16 13:36:41 +01:00
Geoffrey White	9976825234	C++: Slightly more logical layout.	2022-05-16 12:51:04 +01:00
Geoffrey White	19d1578733	C++: Clean up.	2022-05-16 12:49:01 +01:00
Geoffrey White	b332659fcb	C++: Split the XXE query into library files.	2022-05-16 12:41:41 +01:00
Geoffrey White	0ffd0b23ca	C++: Create an XmlLibrary class to clean up the code in XXE.ql.	2022-05-16 12:17:20 +01:00
Geoffrey White	7a35a346dc	C++: Increase query precision to 'high'.	2022-05-12 17:46:16 +01:00
Geoffrey White	0ad6289618	C++: Fix typos.	2022-05-12 16:32:20 +01:00
Geoffrey White	94e190c63a	C++: getClassAndName.	2022-05-11 13:47:51 +01:00
Geoffrey White	f27c2f3031	C++: Fix more capitalization.	2022-05-11 11:27:57 +01:00
Geoffrey White	00f7453fcb	C++: Fix capitalization.	2022-05-11 11:08:03 +01:00
Geoffrey White	3dddc560a1	C++: Add LSParser specific transformer.	2022-05-11 11:02:01 +01:00
Geoffrey White	e3be7749ea	C++: Repair the LSParser sinks.	2022-05-11 11:02:01 +01:00
Geoffrey White	85cc9b8901	C++: Use getClassAndName.	2022-05-09 13:06:44 +01:00
Geoffrey White	9709c2fa94	C++: Use compliant PascalCase / make the checks happy.	2022-05-09 11:58:57 +01:00
Geoffrey White	453dadea1a	C++: Fix QLDoc.	2022-05-05 16:43:31 +01:00
Geoffrey White	6b5a1921dd	C++: Support the SAX2XMLReader interface.	2022-05-05 16:35:21 +01:00
Geoffrey White	d5be11bf14	C++: Address review comments.	2022-05-03 14:08:19 +01:00
Geoffrey White	9faa825304	C++: Add support for libxml2 in the query.	2022-05-03 11:19:13 +01:00
Geoffrey White	7fb1069d69	C++: Use GVN on the values passed into set* functions.	2022-04-29 10:09:52 +01:00
Geoffrey White	215453e4db	Update cpp/ql/src/Security/CWE/CWE-611/XXE.ql ... Co-authored-by: Jeroen Ketema <93738568+jketema@users.noreply.github.com>	2022-04-29 09:07:25 +01:00
Geoffrey White	33d499c12d	C++: Address review comments.	2022-04-29 09:02:11 +01:00
Geoffrey White	2ccd5a5531	C++: Add support for SAXParser in the query.	2022-04-28 16:13:21 +01:00
Mathias Vorreiter Pedersen	dc96d55943	Merge pull request #8888 from geoffw0/xxe2 ... C++: Add support for createLSParser to the CWE-611 XXE query.	2022-04-27 16:24:27 +01:00
Geoffrey White	d04078f989	C++: Fix.	2022-04-27 15:45:23 +01:00
Geoffrey White	4aa41dfa52	Update cpp/ql/src/Security/CWE/CWE-611/XXE.ql ... Co-authored-by: Mathias Vorreiter Pedersen <mathiasvp@github.com>	2022-04-27 13:06:02 +01:00
Geoffrey White	6ada1bd05b	C++: Match createLSParser more precisely.	2022-04-27 11:51:17 +01:00
Erik Krogh Kristensen	e1c7d369be	Merge pull request #8796 from erik-krogh/redundantImport ... Remove redundant imports	2022-04-27 12:39:51 +02:00
Geoffrey White	a21af8e262	C++: Address QLDoc alerts.	2022-04-27 11:05:11 +01:00
Geoffrey White	742949154b	C++: Apply code style suggestion.	2022-04-26 16:53:24 +01:00
Geoffrey White	d859a91a14	C++: Add support for createLSParser.	2022-04-22 12:24:01 +01:00
Erik Krogh Kristensen	ff73dbc35c	delete redundant imports	2022-04-22 12:55:28 +02:00
Geoffrey White	79aba67036	Merge branch 'main' into xxe	2022-04-22 11:50:41 +01:00
Geoffrey White	5698638d1f	Apply suggestions from code review (documentation) ... Co-authored-by: hubwriter <hubwriter@github.com>	2022-04-19 13:38:00 +01:00
Geoffrey White	6e184f2438	C++: Rename variables 'a' and 'b'.	2022-04-19 10:57:42 +01:00
Geoffrey White	da38c9041c	C++: Improvements from PR comments.	2022-04-19 10:25:00 +01:00
Geoffrey White	50c7e47dd9	C++: Improve QLDoc.	2022-04-19 10:15:12 +01:00
Geoffrey White	da454128ed	Update cpp/ql/src/Security/CWE/CWE-611/XXE.ql ... Co-authored-by: Mathias Vorreiter Pedersen <mathiasvp@github.com>	2022-04-19 10:08:07 +01:00
Geoffrey White	2ac21d6932	C++: Use isBarrier rather than isBarrierOut (which is going away).	2022-04-14 09:21:57 +01:00
Geoffrey White	27b6b99cd0	C++: Correct and improve some comments and naming.	2022-04-13 18:34:15 +01:00
Geoffrey White	dfd846bb7b	C++: Changes to the qhelp.	2022-04-13 15:53:13 +01:00
Geoffrey White	d83aea5ea3	C++: Copy the qhelp from Javascript.	2022-04-13 15:16:01 +01:00
Geoffrey White	b149666f45	C++: Query metadata (precision is provisional, might up it to 'high' later).	2022-04-13 15:15:28 +01:00
Geoffrey White	be0df1662c	C++: Rename the query file.	2022-04-13 13:20:02 +01:00
Geoffrey White	ffbe724040	C++: Remove unfinished parts for now.	2022-04-13 13:18:23 +01:00
Geoffrey White	8d1e8e9ecb	C++: Flow states and transformers.	2022-04-08 17:19:18 +01:00
Jeroen Ketema	83d35a9a96	C++: Use isSanitizerOut(DataFlow::Node node) in cpp/command-line-injection	2022-04-08 11:28:17 +02:00
Geoffrey White	3aaa058308	C++: Get the simplest part of the query working, disable the rest for now, fix metadata, formatting etc.	2022-04-07 19:01:30 +01:00
Robert Marsh	3a35a40062	WIP: start on CWE-611 tests	2022-04-06 12:55:56 +01:00
Robert Marsh	370dd057dc	C++: more WIP on Xerces XXE query	2022-04-06 12:55:54 +01:00
Robert Marsh	9b6c1bc691	WIP: Xerces XXE	2022-04-06 12:55:52 +01:00