Max Schaefer
|
63fcc85372
|
Revert "JS: Recognize DomSanitizer from @angular/core"
This reverts commit ff1d0cc4c7.
|
2022-06-13 12:38:47 +00:00 |
|
Henry Mercer
|
2ea1813917
|
Remove NoSQL sinks since September 2018
|
2022-06-13 12:38:47 +00:00 |
|
Esben Sparre Andreasen
|
4db104a31a
|
Remove additional Xss sinks
|
2022-06-13 12:38:47 +00:00 |
|
Esben Sparre Andreasen
|
86aa4ff919
|
Remove additional SQL sinks
|
2022-06-13 12:38:47 +00:00 |
|
Esben Sparre Andreasen
|
b5fc43c0e5
|
Remove additional path-injection sinks
|
2022-06-13 12:38:47 +00:00 |
|
Esben Sparre Andreasen
|
dc8769e52d
|
Remove pseudo-properties
|
2022-06-13 12:38:47 +00:00 |
|
Esben Sparre Andreasen
|
b68e0c164d
|
Remove 2020 sinks from SqlInjection.ql
|
2022-06-13 12:38:47 +00:00 |
|
Esben Sparre Andreasen
|
65aa1e6f6b
|
Remove 2020 sinks from Xss.ql
|
2022-06-13 12:38:47 +00:00 |
|
Esben Sparre Andreasen
|
d7d4f88e7b
|
Remove 2020 sinks from TaintedPath.ql
|
2022-06-13 12:38:46 +00:00 |
|
Stephan Brandauer
|
9613f73116
|
enable new features for experimentation
|
2022-06-13 14:04:47 +02:00 |
|
Stephan Brandauer
|
fd4f509615
|
add stringConcatenatedWith feature to help the model learn that string concatenation leaves are usually not sinks
|
2022-06-13 14:04:47 +02:00 |
|
Stephan Brandauer
|
4ba7243b1f
|
add assignedToPropName feature to let the model improve number of false positives for XSS query
|
2022-06-13 14:04:46 +02:00 |
|
Stephan Brandauer
|
5346ade995
|
fix bug in InputArgumentIndex feature
|
2022-06-13 14:04:46 +02:00 |
|
Stephan Brandauer
|
ebedeaf543
|
performance fixes
|
2022-06-13 14:04:45 +02:00 |
|
Stephan Brandauer
|
ea1e44b035
|
use ? for unknown parameternames
|
2022-06-13 14:04:45 +02:00 |
|
Stephan Brandauer
|
250ed0831c
|
add documentations and rename a feature
|
2022-06-13 14:04:44 +02:00 |
|
Stephan Brandauer
|
314333f7ed
|
add functionInterfacesInFile and surroundingFunctionParameters features
|
2022-06-13 14:04:44 +02:00 |
|
Stephan Brandauer
|
3f6d663105
|
documentation for calleeImports ATM feature
|
2022-06-13 14:04:43 +02:00 |
|
Stephan Brandauer
|
962ed4a51b
|
documentation for new feature
|
2022-06-13 14:04:43 +02:00 |
|
Stephan Brandauer
|
2f1882bd3a
|
ATM: new feature to list all imports in an endpoint's file
|
2022-06-13 14:04:42 +02:00 |
|
Esben Sparre Andreasen
|
6505ad1724
|
use proper import instead of inlining
|
2022-06-13 14:00:37 +02:00 |
|
Esben Sparre Andreasen
|
e53ba21387
|
remove Input_ArgumentIndexAndAccessPathFromCallee
|
2022-06-13 14:00:36 +02:00 |
|
Esben Sparre Andreasen
|
ec1dc985ef
|
add docstring examples
|
2022-06-13 14:00:36 +02:00 |
|
Esben Sparre Andreasen
|
008024b3bb
|
address review comments
|
2022-06-13 14:00:35 +02:00 |
|
Esben Sparre Andreasen
|
5c4043dacb
|
Apply suggestions from code review
Co-authored-by: Henry Mercer <henrymercer@github.com>
|
2022-06-13 14:00:35 +02:00 |
|
Esben Sparre Andreasen
|
874da9d81c
|
fix semantic merge conflict
|
2022-06-13 14:00:34 +02:00 |
|
Esben Sparre Andreasen
|
8e0781d78a
|
rename new features
|
2022-06-13 14:00:34 +02:00 |
|
Esben Sparre Andreasen
|
937d6b1f3e
|
add more features
|
2022-06-13 14:00:33 +02:00 |
|
Esben Sparre Andreasen
|
7d4125010c
|
improve feature documentation
|
2022-06-13 14:00:33 +02:00 |
|
Esben Sparre Andreasen
|
a8dd55fe0f
|
improve feature tests with more cases
|
2022-06-13 14:00:32 +02:00 |
|
Esben Sparre Andreasen
|
57c88d5fd6
|
improve access path strings
|
2022-06-13 14:00:32 +02:00 |
|
Esben Sparre Andreasen
|
026dfaec97
|
support import in getSimpleAccessPath
|
2022-06-13 14:00:31 +02:00 |
|
Esben Sparre Andreasen
|
c523c4f96e
|
support await in getSimpleAccessPath
|
2022-06-13 14:00:31 +02:00 |
|
Esben Sparre Andreasen
|
ef5148bb80
|
avoid using new feautes by default
|
2022-06-13 14:00:30 +02:00 |
|
Esben Sparre Andreasen
|
13264e1119
|
add CompareFeatures.ql
|
2022-06-13 14:00:30 +02:00 |
|
Esben Sparre Andreasen
|
1e299e9bb8
|
add generic tests for features
|
2022-06-13 14:00:29 +02:00 |
|
Esben Sparre Andreasen
|
f322aaf344
|
Document EndpointFeatures.qll
|
2022-06-13 14:00:29 +02:00 |
|
Esben Sparre Andreasen
|
3c9e70341b
|
add ParameterAccessPathSimpleFromArgumentTraversal
|
2022-06-13 14:00:28 +02:00 |
|
Esben Sparre Andreasen
|
cfe20810bf
|
improve getSimpleAccessPath
|
2022-06-13 14:00:28 +02:00 |
|
Esben Sparre Andreasen
|
065002ad18
|
refactor calleeAccessPath feature to class
|
2022-06-13 14:00:27 +02:00 |
|
Stephan Brandauer
|
7778aa59ea
|
refactor getACallBasedTokenFeature to class-use
|
2022-06-13 14:00:27 +02:00 |
|
Esben Sparre Andreasen
|
8ef6f59737
|
Add CalleeAccessPathSimpleFromArgumentTraversal
|
2022-06-13 14:00:26 +02:00 |
|
Esben Sparre Andreasen
|
b4339e8ac5
|
refactor EndpointFeatures.ql to use classes
|
2022-06-13 14:00:26 +02:00 |
|
Erik Krogh Kristensen
|
caf1d45bc6
|
Merge pull request #9407 from erik-krogh/rubyFixJoin
RB: fix bad CP in the charPred for CipherOperation
|
2022-06-13 13:17:50 +02:00 |
|
Ian Lynagh
|
7c5a4909c6
|
Merge pull request #9468 from igfoo/igfoo/overloads
Kotlin: Put overloads together
|
2022-06-13 10:44:55 +01:00 |
|
Ian Lynagh
|
bdae353d4d
|
Merge pull request #9475 from igfoo/igfoo/builddir
Kotlin: Do each build in its own directory
|
2022-06-13 10:44:36 +01:00 |
|
Ian Lynagh
|
ae472f32de
|
Merge pull request #9453 from igfoo/igfoo/sam
Kotlin: Simplify samMember computation
|
2022-06-13 10:44:18 +01:00 |
|
Ian Lynagh
|
d8edc83ea2
|
Merge pull request #9451 from igfoo/igfoo/useValueParameter
Kotlin: Remove some redundant code
|
2022-06-13 10:43:54 +01:00 |
|
Ian Lynagh
|
72ea5973af
|
Merge pull request #9454 from igfoo/igfoo/extractFunction_idOverride
Kotlin: Remove unused idOverride argument to extractFunction
|
2022-06-13 10:43:31 +01:00 |
|
Mathias Vorreiter Pedersen
|
ae288332cc
|
Merge pull request #9511 from MathiasVP/fix-completion-for-patterns
Swift: Fix completion for "naked" patterns
|
2022-06-13 10:56:07 +02:00 |
|