Chris Smowton
0537579b28
Merge pull request #12131 from owen-mc/go/named-type-location
...
Add `hasLocationInfo` for `Type`s
2023-02-13 11:33:50 +00:00
Erik Krogh Kristensen
2f404df17c
Merge pull request #10782 from erik-krogh/rbPoly
...
Ruby: add library input as a source for `rb/polynomial-redos`
2023-02-13 12:26:07 +01:00
erik-krogh
b85bfc8ba6
add HtmlSanitizer as a sanitizer for DOMBasedXss
2023-02-13 11:57:29 +01:00
erik-krogh
c258e44772
add failing test for spurious edge through sanitizer
2023-02-13 11:49:57 +01:00
Erik Krogh Kristensen
26d5fb2412
Merge pull request #11824 from erik-krogh/secondMissAnchor
...
RB: add query detecting validators that use badly anchored regular expressions on library/remote input
2023-02-13 11:26:05 +01:00
Kasper Svendsen
74472d786c
QLDocs: Document inline_late pragma
2023-02-13 10:51:48 +01:00
erik-krogh
634087b417
Merge branch 'main' into rbPoly
2023-02-13 10:46:00 +01:00
Michael Nebel
2ce6d5f920
Java: Update negative models test to not produce a negative summary for interface member.
2023-02-13 10:45:54 +01:00
Rasmus Wriedt Larsen
5235964b07
sync files
2023-02-13 10:44:12 +01:00
Rasmus Wriedt Larsen
b2e79e2948
Python/Ruby/JS Crypto: Add a few algorithms + block modes
...
I have tried to add a few links to support the claim that these
algorithms are strong/safe. It wasn't always super easy, so in some
cases I have ended up just linking to the documentation of the
`cryptography` Python package.
Co-authored-by: REDMOND\brodes <brodes@microsoft.com >
2023-02-13 10:40:47 +01:00
Paolo Tranquilli
f07c598a22
Merge pull request #12164 from github/redsun82/swift-codegen-outside-bazel
...
Swift: make `codegen` run also outside `bazel`
2023-02-13 10:32:20 +01:00
Michael Nebel
80628596dd
Java: Exclude interface members from model generation.
2023-02-13 10:21:32 +01:00
Geoffrey White
124e4ddd4f
Merge pull request #12150 from geoffw0/cfg2
...
Swift: control flow for #available
2023-02-13 09:17:06 +00:00
Tom Hvitved
0b8173e2e7
Ruby: Add another data flow test
2023-02-13 09:50:50 +01:00
Paolo Tranquilli
55aacd6fe9
Merge pull request #12137 from github/redsun82/swift-doc-for-schema-doc
...
Swift: add documentation for generated documentation
2023-02-13 09:43:34 +01:00
Paolo Tranquilli
483a87abe9
Swift: make codegen run also outside bazel
2023-02-13 09:39:31 +01:00
Tony Torralba
4fad01a739
Further refactoring
...
Avoid having two taint tracking configurations in the same file
2023-02-13 09:18:05 +01:00
Tony Torralba
f3e0b6e62c
PathGraph shouldn't be imported in a QLL library
2023-02-13 09:18:05 +01:00
Tony Torralba
422eb0d1bb
Add change note
2023-02-13 09:18:05 +01:00
Tony Torralba
5555b5cd19
Add local version of the XXE query
2023-02-13 09:18:05 +01:00
Paolo Tranquilli
542c9218de
Merge branch 'main' into redsun82/swift-doc-for-schema-doc
2023-02-13 09:07:02 +01:00
Tom Hvitved
f7a5a33474
Address review comment
2023-02-13 09:01:15 +01:00
erik-krogh
91393a7bc8
add change-note
2023-02-12 23:28:01 +01:00
erik-krogh
6474cfd4c8
add support for express-ws
2023-02-12 23:25:27 +01:00
Jami Cogswell
ad8849c6b8
Java: fix typo
2023-02-12 16:33:26 -05:00
Jami Cogswell
676e4e8461
Java: add change note
2023-02-12 16:32:31 -05:00
Sim4n6
d7af80136e
Fail tests when missing annotation on sink orfail
2023-02-12 21:27:20 +01:00
Sim4n6
518684b736
Put back the annotation result=BAD
2023-02-12 21:26:12 +01:00
Sim4n6
80d4fb5e33
Organisation TarSlip/UnsafeUnpack into two folders
2023-02-12 10:51:53 +01:00
Jami Cogswell
ce1c814daa
Java: update path-injection query to use new 'read-file' sink kind
2023-02-11 17:10:58 -05:00
Jami Cogswell
c87c3e30c7
Java: update getInvalidModelKind with 'read-file' kind
2023-02-11 17:07:25 -05:00
Owen Mansel-Chan
685b8b4abd
Tests are no longer fooled by type aliases
2023-02-10 22:09:21 +00:00
Owen Mansel-Chan
7042f67375
Refactor code to be simpler
2023-02-10 22:09:20 +00:00
Owen Mansel-Chan
778826b528
Accept test changes
...
Note that
go/ql/test/library-tests/semmle/go/Types/QualifiedNames.expected and
go/ql/test/library-tests/semmle/go/Types/Types.expected gain two lines.
In both cases this is because GenericArray and GenericSignature are
each instantiated twice, so they appear with two different locations.
2023-02-10 22:09:20 +00:00
Owen Mansel-Chan
202c0be303
Add hasLocationInfo for Types
...
It returns a dummy location except for named types with a type
declaration in the source.
2023-02-10 22:09:20 +00:00
Sim4n6
eed19a3e15
Fix autoformatting issues
2023-02-10 21:58:29 +01:00
Geoffrey White
ad85b37585
Swift: Tidy up indenting.
2023-02-10 18:06:56 +00:00
Geoffrey White
d0efbbf5b8
Swift: More path injection models.
2023-02-10 18:02:50 +00:00
Geoffrey White
82f09b8511
Swift: More path injection test cases.
2023-02-10 17:55:06 +00:00
Arthur Baars
679f02c274
Address comments
2023-02-10 18:08:30 +01:00
Geoffrey White
8624098318
Swift: sync identical files.
2023-02-10 15:24:57 +00:00
Nora
d55e9d5dac
Merge pull request #12000 from github/nora/update-query-history-actions
...
Rename Query History Actions
2023-02-10 16:18:36 +01:00
Geoffrey White
eda331ebc2
Swift: Clean up.
2023-02-10 15:11:31 +00:00
Geoffrey White
11f022c69f
Swift: Add some more qldoc.
2023-02-10 15:02:05 +00:00
Geoffrey White
15b8aa1979
Swift: Effect on other tests :)
2023-02-10 14:16:48 +00:00
Geoffrey White
6cb9198ee2
Swift: Control flow through #available.
2023-02-10 13:32:33 +00:00
Paolo Tranquilli
9d433eb420
Merge branch 'main' into redsun82/swift-doc-for-schema-doc
2023-02-10 14:27:56 +01:00
Michael Nebel
db41463d72
C#: Test of relaxed shift operator requirements.
2023-02-10 10:33:20 +01:00
Geoffrey White
38f4f65fc0
Swift: Add CFG test cases for #available.
2023-02-10 09:29:08 +00:00
Michael Nebel
1bd223b8c8
Merge pull request #12103 from michaelnebel/csharp/scopedmodfier
...
C# 11: Scoped parameters and local variables.
2023-02-10 10:04:09 +01:00
