35608 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
Henry Mercer	6ecc542ca3	Merge pull request #9117 from github/henrymercer/java/tag-telemetry ... Java: Tag telemetry queries with `telemetry`	2022-05-11 15:13:35 +01:00
Henry Mercer	a626078423	Merge pull request #9118 from github/henrymercer/csharp/tag-telemetry ... C#: Tag telemetry queries with `telemetry`	2022-05-11 15:13:29 +01:00
Tom Hvitved	333780e635	Merge pull request #8898 from hvitved/dataflow/clear-expect-summary-components ... Data flow: Introduce 'with/without content' summary components	2022-05-11 15:16:42 +02:00
Rasmus Wriedt Larsen	46f309c373	Merge pull request #6360 from jorgectf/jorgectf/python/insecure-cookie ... Python: Add cookie security-related queries	2022-05-11 14:47:11 +02:00
Henry Mercer	b6f1ddcdab	Java: Tag telemetry queries with telemetry ... This will exclude the results of these queries from the summary tables produced by `codeql database analyze` in a future version of the CodeQL CLI.	2022-05-11 13:29:25 +01:00
Henry Mercer	cdd6e0e104	C#: Tag telemetry queries with telemetry ... This will exclude the results of these queries from the summary tables produced by `codeql database analyze` in a future version of the CodeQL CLI.	2022-05-11 13:27:49 +01:00
Rasmus Wriedt Larsen	cff950f5f7	Python: Fix select of py/insecure-cookie	2022-05-11 14:06:30 +02:00
Anders Schack-Mulligen	9a4d86e9b4	Merge pull request #8571 from Marcono1234/marcono1234/statement-expression ... Java: Add `ValueDiscardingExpr`	2022-05-11 13:37:24 +02:00
Rasmus Wriedt Larsen	fc8633cc01	Python: Fix select for py/cookie-injection	2022-05-11 13:18:14 +02:00
Arthur Baars	a47e429945	Merge pull request #8909 from aibaars/tree-sitter-update ... Tree sitter update	2022-05-11 12:02:14 +02:00
Rasmus Wriedt Larsen	add6579385	Merge pull request #9022 from RasmusWL/ruby-fix ... Ruby: Fix `isLocalSourceNode` implementation	2022-05-11 11:52:44 +02:00
Rasmus Wriedt Larsen	27b99c51e9	Python: Add placeholder precision for py/insecure-cookie	2022-05-11 11:36:06 +02:00
Rasmus Wriedt Larsen	a902d3d8f0	Python: Add security-severity for py/insecure-cookie ... Matching the Java query 7d4767a4f5/java/ql/src/Security/CWE/CWE-614/InsecureCookie.ql (L7)	2022-05-11 11:34:16 +02:00
Rasmus Wriedt Larsen	84ad45c665	Python: Fix Django import	2022-05-11 11:33:35 +02:00
Rasmus Wriedt Larsen	d127d2164a	Merge branch 'main' into jorgectf/python/insecure-cookie	2022-05-11 11:13:47 +02:00
Anders Schack-Mulligen	25336df302	Merge pull request #8873 from atorralba/atorralba/android-startactivity-flowstep ... Java: Add flow step from startActivity to getIntent	2022-05-11 11:08:08 +02:00
Anders Schack-Mulligen	c217a1e502	Update java/ql/lib/semmle/code/java/Expr.qll	2022-05-11 11:03:13 +02:00
Tony Torralba	43b425d0e4	Merge pull request #9002 from atorralba/atorralba/https-urls-improvs ... Java: Add OkHttp and Retrofit models	2022-05-11 10:48:08 +02:00
Arthur Baars	907c3db5ca	Address comments ... Co-authored-by: Nick Rolfe <nickrolfe@github.com>	2022-05-11 09:59:42 +02:00
Cornelius Riemenschneider	506e09ef32	Merge pull request #9105 from github/criemen/dotnet-lua-tracing-config ... C#: Lua tracing config: Use API function.	2022-05-11 09:28:09 +02:00
Erik Krogh Kristensen	872b275bd4	Merge pull request #9110 from erik-krogh/qlPackAll ... QL: add implicit -all to a query pack to match the CodeQL pack resolution	2022-05-10 23:41:26 +02:00
Erik Krogh Kristensen	a5acaeb59c	QL: add implicit -all to a query pack to match the CodeQL pack resolution	2022-05-10 23:25:32 +02:00
Mathias Vorreiter Pedersen	a7fe37a631	Merge pull request #9047 from geoffw0/xxe6 ... C++: Add support for SAX2XMLReader in the CWE-611 XXE query.	2022-05-10 19:07:35 +01:00
Cornelius Riemenschneider	7c10f3e76b	C#: Lua tracing config: Use API function.	2022-05-10 14:38:53 +00:00
Mathias Vorreiter Pedersen	1d10f14629	Merge pull request #9100 from redsun82/swift-tbd-rework ... Swift: changes required for TBD node rework	2022-05-10 13:31:43 +01:00
Rasmus Wriedt Larsen	2b6e0cfb44	Merge pull request #8340 from yoff/python/simple-csrf ... python: minimal CSRF implementation	2022-05-10 13:36:38 +02:00
Rasmus Wriedt Larsen	cb17e2a649	Merge pull request #8595 from porcupineyhairs/pypam ... Python : Add query to detect PAM authorization bypass	2022-05-10 13:35:12 +02:00
Erik Krogh Kristensen	09360bce20	Merge pull request #9085 from erik-krogh/cash ... JS: add model for the cash library	2022-05-10 13:20:57 +02:00
Paolo Tranquilli	bf71e4c500	Swift: getPrimaryQlClass -> getAPrimaryQlClass	2022-05-10 12:42:18 +02:00
Paolo Tranquilli	0b9dc9703f	Swift: changes required for TBD node rework ... These changes are required to allow a new type-safe approach to TBD nodes, that will come in a separate commit. This introduces: * the possibility to add properties to the root `Element` * a functor taking tags to the corresponding binding trap entry * `hasProp()` methods for optional properties in QL * `getPrimaryQlClass()` method	2022-05-10 11:59:25 +02:00
Rasmus Lerchedahl Petersen	aa3d7babf4	python: fix bad merge ... caused by an optimistic attempt at solving a merge conflict in the online GUI.	2022-05-10 11:37:41 +02:00
Rasmus Wriedt Larsen	2421076d2f	Merge pull request #8696 from RasmusWL/new-nosql-examples ... Python: Improve experimental modeling for `pymongo`	2022-05-10 11:03:05 +02:00
yoff	6c3e2db7fd	Merge branch 'main' into python/simple-csrf	2022-05-10 10:55:28 +02:00
Cornelius Riemenschneider	7aa3d0fd26	Merge pull request #9091 from github/criemen/dotnet-lua-tracing-config ... C#: Port the existing compiler-tracing.spec files to Lua.	2022-05-10 10:54:20 +02:00
Cornelius Riemenschneider	40503aa368	Address review.	2022-05-10 08:06:25 +00:00
yoff	b6605bc330	Merge pull request #8634 from RasmusWL/promote-xxe ... Python: Promote XXE and XML-bomb queries	2022-05-09 21:54:55 +02:00
Rasmus Lerchedahl Petersen	1c7e533144	python: format	2022-05-09 21:22:27 +02:00
Erik Krogh Kristensen	e80ee46fe4	add model for the cash library	2022-05-09 21:01:07 +02:00
Mathias Vorreiter Pedersen	66ca01a717	Merge pull request #9094 from redsun82/swift-codegen-predicate-properties ... Swift codegen: add predicate properties	2022-05-09 17:17:10 +01:00
Paolo Tranquilli	c08e6fdc1e	Swift codegen: add predicate properties ... Properties marked with `predicate` in the schema are now accepted. * in the dbscheme, they will translate to a table with a single `id` column (and the table name will not be pluralized) * in C++ classes, they will translate to `bool` fields * in QL classes, they will translate to predicates Closes https://github.com/github/codeql-c-team/issues/1016	2022-05-09 17:50:49 +02:00
Paolo Tranquilli	effa9ee207	Merge pull request #9034 from redsun82/swift-cpp-gen ... Swift: add structured C++ generated classes	2022-05-09 17:49:23 +02:00
Geoffrey White	265500faa8	Merge pull request #8800 from geoffw0/unsafeput ... C++: Add a test for experimental query NoCheckBeforeUnsafePutUser.ql.	2022-05-09 16:20:19 +01:00
Rasmus Lerchedahl Petersen	2a5908ff49	python: require all settings be vulnerable ... at least all thos not in tests	2022-05-09 17:08:49 +02:00
Cornelius Riemenschneider	bf0e32ae82	C#: Port the existing compiler-tracing.spec files to Lua.	2022-05-09 14:45:34 +00:00
Rasmus Wriedt Larsen	4a6789182d	Python: Apply suggestions from code review ... Co-authored-by: yoff <lerchedahl@gmail.com>	2022-05-09 16:37:12 +02:00
Henry Mercer	3c4715928e	Merge pull request #9083 from github/henrymercer/fetch-codeql-with-gh-cli ... Actions: Fetch CodeQL CLI using `gh` rather than third-party Action	2022-05-09 14:40:29 +01:00
Anders Schack-Mulligen	f24364d951	Merge pull request #9045 from hvitved/dataflow/subpaths-perf-take2 ... Data flow: Speedup `subpaths` predicate (take 2)	2022-05-09 15:39:11 +02:00
Henry Mercer	71d1069a0a	Fix typo	2022-05-09 14:31:05 +01:00
Henry Mercer	198c96982c	Add a comment to explain the unusual Action path	2022-05-09 14:30:41 +01:00
CodeQL CI	e099b94cc4	Merge pull request #9081 from asgerf/js/global-step-refactor ... Approved by erik-krogh	2022-05-09 06:30:37 -07:00