Rasmus Wriedt Larsen
646ea55944
Python/JS: Update Python copy of crypto algorithm modeling
...
Now to be shared accross both languages, with sync-identical-files
2021-02-27 11:38:45 +01:00
CodeQL CI
b7c0d18c4a
Merge pull request #5278 from erik-krogh/formData
...
Approved by asgerf
2021-02-26 08:13:41 -08:00
CodeQL CI
0e70b58a41
Merge pull request #5205 from erik-krogh/ts42
...
Approved by asgerf
2021-02-26 05:06:40 -08:00
Tom Hvitved
ac67c67ad7
Merge pull request #4998 from hvitved/csharp/shared-base-pre-ssa
...
C#: Use shared SSA implementation for `{Pre,Base}Ssa`
2021-02-26 11:29:07 +01:00
Erik Krogh Kristensen
c59e6fef80
add model for form-data
2021-02-26 10:54:46 +01:00
Erik Krogh Kristensen
00cfc77fc0
Revert "fix file lookup for exclude patterns"
...
This reverts commit 74630b0fd8 .
2021-02-26 10:28:20 +01:00
Erik Krogh Kristensen
4ec3289ecc
update relation name in .stats file
2021-02-26 10:26:08 +01:00
Erik Krogh Kristensen
bd19d5a93c
remove is_abstract_signature.ql
2021-02-26 10:24:40 +01:00
Erik Krogh Kristensen
1cac692b1d
Update javascript/ql/src/semmle/javascript/TypeScript.qll
...
Co-authored-by: Asger F <asgerf@github.com >
2021-02-26 10:23:01 +01:00
Tamás Vajk
ce69e3ae66
Merge pull request #5263 from tamasvajk/feature/fix-file-move
...
C#: Fix potentially concurrent file moves
2021-02-26 08:27:42 +01:00
Tamás Vajk
8241a9c2f1
Merge pull request #5264 from tamasvajk/feature/more-known-enums
...
C#: Add more well-known enum underlying types
2021-02-26 08:20:14 +01:00
yoff
e3b3825ab0
Merge pull request #5151 from RasmusWL/django-get-redirect-url
...
Python: Model get_redirect_url in django
2021-02-25 23:07:33 +01:00
Geoffrey White
0c4a5f5e2a
Merge pull request #5266 from geoffw0/isis
...
JS: Fix 'is, is' and 'is is'.
2021-02-25 18:55:41 +00:00
CodeQL CI
1bd12e6fdf
Merge pull request #5199 from asgerf/js/vue-router
...
Approved by erik-krogh
2021-02-25 07:32:57 -08:00
Tamás Vajk
505d04b13e
Merge pull request #5102 from luchua-bc/java/main-method-in-servlet
...
Java: CWE-489 Query to detect main() method in servlets
2021-02-25 16:05:06 +01:00
Geoffrey White
0e071b7b79
JS: Fix 'is, is' and 'is is'.
2021-02-25 14:16:25 +00:00
Tamas Vajk
3e651f14fd
C#: Add more well-known enum underlying types
2021-02-25 14:57:23 +01:00
Rasmus Wriedt Larsen
81b29316e1
Merge pull request #4737 from yoff/python-dataflow-add-cast-nodes
...
Python: Force read- and store steps to add nodes.
2021-02-25 14:28:54 +01:00
Tamás Vajk
9ae22cbebd
Merge pull request #5189 from tamasvajk/feature/refactor-3
...
C#: Split 'Context' class between CIL and source extraction
2021-02-25 14:28:25 +01:00
Bas van Schaik
5ecd2317b0
Merge pull request #5212 from github/sj-patch-1
...
Include @xcorail (GHSL) in code reviews for `experimental` queries
2021-02-25 12:58:12 +00:00
Taus
d326d40d71
Merge pull request #5252 from RasmusWL/test-cleanup
...
Python: Minor cleanup of test setup
2021-02-25 13:33:10 +01:00
Taus
01d581ecf3
Merge pull request #5250 from tausbn/python-port-re-security-queries
...
Python: Port URL sanitisation queries to API graphs
2021-02-25 13:13:55 +01:00
Rasmus Lerchedahl Petersen
64c0eaf305
Python: Update test expectations
2021-02-25 11:49:57 +01:00
yoff
f15084254b
Add comment explaining tacky nature of code
2021-02-25 11:49:57 +01:00
Rasmus Lerchedahl Petersen
5b51a3461d
Python: Force read- and store steps to add nodes.
...
This gives muche nicer path explanations on some snapshots.
It is achieved by making stepped-to nodes `CastNode`s.
This seems somewhat reasonable as types then to change, when we move
between content and container.
We could probably refine it, though.
2021-02-25 11:49:57 +01:00
Asger Feldthaus
55a1ab5714
JS: Autoformat
2021-02-25 10:20:13 +00:00
Tamas Vajk
a5543c689e
C#: Fix potentially concurrent file moves
2021-02-25 10:35:49 +01:00
Jonas Jensen
2b54c33904
Merge pull request #5257 from MathiasVP/doh-its-2021-mathias
...
C++: Turns out we're in 2021 and not 2020.
2021-02-25 09:30:08 +01:00
Anders Schack-Mulligen
f0d3841369
Merge pull request #5105 from JLLeitschuh/feat/JLL/depricated_bintray_usage
...
CWE-1104: Maven POM dependence upon Bintray/JCenter
2021-02-25 09:08:31 +01:00
Bas van Schaik
4ede277c7c
Update CODEOWNERS
2021-02-24 18:30:22 +00:00
luchua-bc
e34a203731
Refactor the check of a main method in a test program to improve maintainability
2021-02-24 17:15:08 +00:00
Jonathan Leitschuh
237fefbcf1
Add release notes
2021-02-24 11:19:20 -05:00
Mathias Vorreiter Pedersen
fc4162ba1a
C++: Turns out we're in 2021 and not 2020.
2021-02-24 17:15:51 +01:00
Cornelius Riemenschneider
cea1049745
Merge pull request #5249 from geoffw0/cleanupstr
...
C++: QLDoc Pure.qll
2021-02-24 16:42:41 +01:00
Tamas Vajk
4711856c2b
Remove commented code
2021-02-24 16:21:19 +01:00
Tamas Vajk
841ef9a4ae
Make derived 'Context' classes internal and adjust visibility of members in base 'Context'
2021-02-24 16:21:19 +01:00
Tamas Vajk
539fdf952a
Extend base context in CIL project
2021-02-24 16:21:19 +01:00
Tamas Vajk
5fca946678
C#: Split 'Context' class between CIL and source extraction
2021-02-24 16:21:19 +01:00
Bas van Schaik
4b884bd5d2
Merge branch 'main' into sj-patch-1
2021-02-24 15:10:26 +00:00
CodeQL CI
bf66bdbb95
Merge pull request #5253 from RasmusWL/no-getAnArg
...
Approved by tausbn
2021-02-24 06:34:31 -08:00
Rasmus Wriedt Larsen
d05a8b8c46
Python: Remove getAnArg in DataFlow::CallCfgNode
...
Until we've had further discussion on what is the right approach to
naming (internal discussion in https://github.com/github/codeql-python-team/issues/95 )
2021-02-24 14:58:48 +01:00
Felicity Chapman
a05904f812
Merge pull request #5216 from github/felicitymay-update-process
...
Remove personal assignment to writers
2021-02-24 12:59:08 +00:00
Tamás Vajk
fd4eca6039
Merge pull request #5254 from tamasvajk/feature/fix-merge
...
C#: Fix merge conflict (with + refactoring)
2021-02-24 12:07:34 +01:00
CodeQL CI
d2816b33e2
Merge pull request #5240 from erik-krogh/vsPerf
...
Approved by asgerf
2021-02-24 02:26:16 -08:00
Taus Brock-Nannestad
404649d5f1
Python: Get rid of superfluous options file
2021-02-24 11:24:43 +01:00
Rasmus Wriedt Larsen
5c6989cf02
Revert "Python: Accept RequestWithoutValidation expected output change"
...
Apparently CI is able to produce the ../ path, I have absolutely no clue what is
goign on...
2021-02-24 11:14:18 +01:00
Erik Krogh Kristensen
055275b971
change stats file
2021-02-24 11:12:31 +01:00
Anders Schack-Mulligen
add960bc4d
Merge pull request #4880 from luchua-bc/java/sensitive-query-with-get
...
Java: Sensitive GET Query
2021-02-24 11:08:47 +01:00
Asger Feldthaus
bb858d38c4
JS: Tweak ExprNode
2021-02-24 10:03:45 +00:00
Tamas Vajk
380058a4bd
C#: Fix merge conflict (with + refactoring)
2021-02-24 10:50:51 +01:00