Asger F
|
8bd6f6c450
|
Ruby: change note
|
2023-05-24 10:22:22 +02:00 |
|
erik-krogh
|
710b309142
|
apply suggestions from doc review
|
2023-05-21 22:18:48 +02:00 |
|
erik-krogh
|
480e71fd69
|
avoid contractions
|
2023-05-17 08:42:45 +02:00 |
|
erik-krogh
|
83ca1495e0
|
trim the whitespace in the poly-redos examples
|
2023-05-15 16:47:24 +02:00 |
|
erik-krogh
|
d989359656
|
add another example to the qhelp in poly-redos, showing how to just limit the length of the input
|
2023-05-15 16:47:02 +02:00 |
|
Kasper Svendsen
|
e6ca3fe272
|
Ruby: Enable implicit this warnings
|
2023-05-10 13:03:39 +02:00 |
|
Kasper Svendsen
|
6b8a7c2f6f
|
Ruby: Make implicit this receivers explicit
|
2023-05-10 13:03:39 +02:00 |
|
Ian Lynagh
|
b56b843d13
|
Merge pull request #12987 from github/post-release-prep/codeql-cli-2.13.1
Post-release preparation for codeql-cli-2.13.1
|
2023-05-03 13:12:10 +01:00 |
|
Alex Ford
|
82c025020d
|
Merge remote-tracking branch 'origin/main' into maikypedia/ruby-ssti
|
2023-05-02 16:18:41 +01:00 |
|
github-actions[bot]
|
18d4af994d
|
Post-release preparation for codeql-cli-2.13.1
|
2023-05-02 10:50:20 +00:00 |
|
Asger F
|
f59c149bae
|
Ruby: add SQL injection sinks to meta query
|
2023-05-02 10:46:55 +02:00 |
|
github-actions[bot]
|
3bd29171fb
|
Release preparation for version 2.13.1
|
2023-04-28 12:14:35 +00:00 |
|
Erik Krogh Kristensen
|
d7325ba4e1
|
Merge pull request #12856 from p-/p--non-constant-open-improvments
Ruby: Add additional sanitizers for Kernel.open or IO.read or similar sinks with a non-constant value
|
2023-04-19 13:39:16 +02:00 |
|
Peter Stöckli
|
672cb92fbd
|
Ruby: improve non-constant-kernel-open, recursive step for freeze
Co-authored-by: Erik Krogh Kristensen <erik-krogh@github.com>
|
2023-04-19 10:50:59 +02:00 |
|
Alex Ford
|
924ce250dd
|
Merge pull request #12847 from github/post-release-prep/codeql-cli-2.13.0
Post-release preparation for codeql-cli-2.13.0
|
2023-04-18 14:40:40 +01:00 |
|
Peter Stöckli
|
2f268b309b
|
Ruby: improve non-constant-kernel-open, freeze called on constant
|
2023-04-18 11:24:01 +02:00 |
|
Tom Hvitved
|
f6d000eb20
|
Merge pull request #12805 from hvitved/remove-queries-xml
Remove all `queries.xml` files
|
2023-04-18 10:52:14 +02:00 |
|
Peter Stöckli
|
0a6bb3f7ce
|
Ruby: improve non-constant-kernel-open, no FP's on open without arguments
|
2023-04-18 10:10:36 +02:00 |
|
github-actions[bot]
|
648f0e19ec
|
Post-release preparation for codeql-cli-2.13.0
|
2023-04-17 15:39:24 +00:00 |
|
github-actions[bot]
|
075d063370
|
Release preparation for version 2.13.0
|
2023-04-14 13:31:30 +00:00 |
|
Alex Eyers-Taylor
|
c6a482819a
|
Bump all qlpacks major versions
|
2023-04-13 19:15:27 +01:00 |
|
Maiky
|
64cf3adfd4
|
Update examples
|
2023-04-13 17:29:14 +02:00 |
|
Alex Ford
|
8c46bfd051
|
Merge pull request #12816 from github/rc/3.9
Merge `rc/3.9` into `main`
|
2023-04-13 12:35:41 +01:00 |
|
Tom Hvitved
|
3cc9dec9c8
|
Remove all queries.xml files
|
2023-04-13 11:18:58 +02:00 |
|
github-actions[bot]
|
ac426b1302
|
Post-release preparation for codeql-cli-2.12.6
|
2023-04-04 16:49:26 +00:00 |
|
github-actions[bot]
|
0a3218676c
|
Release preparation for version 2.12.6
|
2023-03-30 19:25:06 +00:00 |
|
Alex Ford
|
62fcea030a
|
Merge pull request #12718 from github/post-release-prep/codeql-cli-2.12.5
Post-release preparation for codeql-cli-2.12.5
|
2023-03-30 15:50:56 +01:00 |
|
github-actions[bot]
|
e87ce62f95
|
Post-release preparation for codeql-cli-2.12.5
|
2023-03-30 13:48:58 +00:00 |
|
Alex Ford
|
181e5d588d
|
Merge remote-tracking branch 'origin/rc/3.9' into main
|
2023-03-27 12:16:03 +01:00 |
|
Alex Ford
|
6f08447427
|
Ruby: add a change note for rb/sensitive-get-query flow path removal
|
2023-03-27 09:45:23 +01:00 |
|
Alex Ford
|
15c9e7666a
|
Ruby: convert rb/sensitive-get-query into a @kind problem
|
2023-03-27 09:42:10 +01:00 |
|
Anders Schack-Mulligen
|
d0b7ffda70
|
Python/Ruby/Swift: Rename references.
|
2023-03-23 13:06:19 +01:00 |
|
Asger F
|
6d665da4dc
|
Merge pull request #12570 from github/post-release-prep/codeql-cli-2.12.5
Post-release preparation for codeql-cli-2.12.5
|
2023-03-21 13:06:25 +01:00 |
|
github-actions[bot]
|
981e171525
|
Post-release preparation for codeql-cli-2.12.5
|
2023-03-17 13:27:00 +00:00 |
|
Alex Ford
|
76ed56d2b6
|
Ruby: typo
|
2023-03-17 11:40:59 +00:00 |
|
Alex Ford
|
ee6288173f
|
Ruby: remove extra opening p tag
|
2023-03-17 11:38:49 +00:00 |
|
Alex Ford
|
60f313863a
|
Merge branch 'main' into maikypedia/ruby-ssti
|
2023-03-17 11:31:49 +00:00 |
|
Maiky
|
37e42bb05b
|
Missing markdown extension
|
2023-03-16 20:45:35 +01:00 |
|
Maiky
|
a229f7a832
|
Solve merge conflict and add a change note
|
2023-03-16 16:15:02 +01:00 |
|
github-actions[bot]
|
fe4d27e8cc
|
Release preparation for version 2.12.5
|
2023-03-16 12:58:50 +00:00 |
|
Tom Hvitved
|
1d0b3d4112
|
Ruby: Ssa::WriteDefinition::getWriteAccess should return a CFG node
|
2023-03-16 11:28:24 +01:00 |
|
Anders Schack-Mulligen
|
a5d229903d
|
Ruby: Autoformat
|
2023-03-10 09:41:20 +01:00 |
|
Asger F
|
6e744093e2
|
Merge pull request #12398 from github/post-release-prep/codeql-cli-2.12.4
Post-release preparation for codeql-cli-2.12.4
|
2023-03-09 15:38:21 +01:00 |
|
Maiky
|
5a9a90d00b
|
Move query to experimental
|
2023-03-08 11:50:04 +01:00 |
|
Maiky
|
cd49175fae
|
Update ruby/ql/src/queries/security/cwe-094/TemplateInjection.qhelp
Co-authored-by: intrigus-lgtm <60750685+intrigus-lgtm@users.noreply.github.com>
|
2023-03-08 10:27:57 +01:00 |
|
Maiky
|
cbb031ee14
|
Update ruby/ql/src/queries/security/cwe-094/TemplateInjection.qhelp
Co-authored-by: intrigus-lgtm <60750685+intrigus-lgtm@users.noreply.github.com>
|
2023-03-08 10:27:39 +01:00 |
|
Tom Hvitved
|
b6a709df50
|
Ruby: Rewrite Stored XSS query to use new data flow interface
|
2023-03-07 07:23:27 +01:00 |
|
github-actions[bot]
|
af61b45785
|
Post-release preparation for codeql-cli-2.12.4
|
2023-03-04 14:16:55 +00:00 |
|
github-actions[bot]
|
462da63970
|
Release preparation for version 2.12.4
|
2023-03-03 14:11:51 +00:00 |
|
Maikypedia
|
44997d6b5f
|
Change query id
|
2023-02-25 15:51:04 +01:00 |
|