8217 Commits

Author	SHA1	Message	Date
Erik Krogh Kristensen	06afe9c0f4	Merge pull request #9816 from erik-krogh/msgConsis ... Make alert messages consistent across languages	2022-08-25 15:20:01 +02:00
github-actions[bot]	0f63bc077f	Release preparation for version 2.10.4	2022-08-25 12:52:26 +00:00
yoff	9aa8b46cbf	Python: remove redundant code	2022-08-25 12:48:08 +00:00
yoff	6b4716485b	Python: rename file	2022-08-25 12:23:09 +00:00
yoff	54dde41329	Python: remove example code	2022-08-25 12:19:12 +00:00
Erik Krogh Kristensen	ba1ad00d2a	Merge pull request #10062 from erik-krogh/redosPrefix ... JS: use the shared regular expression libraries in `js/case-sensitive-middleware-path`	2022-08-25 12:57:16 +02:00
yoff	800165d63c	python: udate deprecated call	2022-08-25 09:49:46 +00:00
yoff	d9444d8b08	Python: update synced file FlowSummaryImpl.qll	2022-08-25 09:31:45 +00:00
yoff	0b5d4c59dd	Merge branch 'main' of https://github.com/github/codeql into python-dataflow/flow-summaries-from-scratch ... synced files have changed	2022-08-25 09:24:05 +00:00
yoff	4a5fa5993d	Apply suggestions from code review ... Co-authored-by: Rasmus Wriedt Larsen <rasmuswriedtlarsen@gmail.com>	2022-08-25 10:47:16 +02:00
Ian Lynagh	3fcfd32eb1	Make *.ql non-executable	2022-08-24 16:55:11 +01:00
Ian Lynagh	4cd618f81c	Make *.expected non-executable	2022-08-24 16:51:50 +01:00
Ian Lynagh	501a9b3c6b	Make *.qll non-executable	2022-08-24 16:36:15 +01:00
erik-krogh	014dcd1454	fixup a Python query, it didn't select something with a location	2022-08-24 16:23:20 +02:00
erik-krogh	1c0f2251e2	Merge branch 'main' into msgConsis	2022-08-24 14:38:57 +02:00
Ahmed Farid	93257be913	Add Werkzeug source	2022-08-23 12:51:48 +01:00
Ahmed Farid	ee05e2ca76	add x-gitlab-token to sensitive headers	2022-08-23 12:27:20 +01:00
erik-krogh	5e3cb08ed2	rename stateInPumpableRegexp to stateInRelevantRegexp	2022-08-23 12:40:45 +02:00
erik-krogh	1a7d3ee831	update expected output after changing queries	2022-08-23 12:35:32 +02:00
erik-krogh	d96d6721ba	change the alert message of unused-local-variable	2022-08-23 11:15:11 +02:00
erik-krogh	82d9180892	only have one deprecated alias for XmlDtd	2022-08-23 10:38:23 +02:00
Erik Krogh Kristensen	7704a9eeac	apply suggestions from Python review ... Co-authored-by: Rasmus Wriedt Larsen <rasmuswriedtlarsen@gmail.com>	2022-08-23 10:38:10 +02:00
erik-krogh	f7846a598e	add change-notes	2022-08-23 07:54:01 +02:00
erik-krogh	78ba7650b3	change the change-notes	2022-08-23 07:28:46 +02:00
erik-krogh	7e0bd5bde4	update expected output of tests	2022-08-22 21:41:47 +02:00
erik-krogh	ca299b9dc1	update py/unreachable-statement to match javascript/go	2022-08-22 21:41:47 +02:00
erik-krogh	31e15e27fc	update py/unsafe-deserialization to match ruby/javascript/java	2022-08-22 21:41:47 +02:00
erik-krogh	20625ae60d	update {js/go/py}/xpath-injection to match csharp/java	2022-08-22 21:41:46 +02:00
erik-krogh	9395f156de	update {js/py}/command-line-injection to match csharp/java	2022-08-22 21:41:46 +02:00
erik-krogh	2d0a4c3d83	update {go/py}/stack-trace-exposure to match javascript	2022-08-22 21:41:46 +02:00
erik-krogh	3553f3d9b8	update {rb/py/js/go}/path-injection to match java/csharp	2022-08-22 21:41:45 +02:00
erik-krogh	cc41a83a8d	update {py/cpp}/commented-out-code to match csharp/java/javascript	2022-08-22 21:41:45 +02:00
erik-krogh	28083ebe09	run the implicit-this patch	2022-08-22 21:23:31 +02:00
erik-krogh	a593a52b5e	add missing qldoc (that was already missing?)	2022-08-22 21:22:39 +02:00
erik-krogh	e89e0eb7fb	make some acronyms camelCase	2022-08-22 21:22:35 +02:00
erik-krogh	9c95dcc126	add change-note	2022-08-22 14:09:19 +02:00
erik-krogh	2ac5441aec	rename the XMLDTD class to XmlDTD	2022-08-22 14:09:19 +02:00
erik-krogh	1a89ddae5d	update some comments from XML to Xml	2022-08-22 14:09:19 +02:00
erik-krogh	ce9f69a639	rename all occurrences of XML to Xml	2022-08-22 14:08:31 +02:00
Rasmus Wriedt Larsen	61bf2154cd	Merge branch 'main' into shared-http-client-request	2022-08-22 12:05:37 +02:00
Taus	c904ba1d16	Merge pull request #9852 from tausbn/python-add-str-class ... Python: Add `Str` class	2022-08-22 10:55:01 +02:00
Chris Smowton	f3ef8510d3	Merge pull request #10093 from smowton/smowton/feature/java-singular-locations ... Java: pick an arbitrary representative location when an entity has many candidate locations.	2022-08-22 09:32:43 +01:00
erik-krogh	049af68bc2	restrict suffix-construction to relevant regexps	2022-08-21 20:35:39 +02:00
Chris Smowton	8d20b9cf52	Use hasLocationInfo to match several Location fields at once	2022-08-19 19:03:17 +01:00
erik-krogh	bcf4c57060	Merge branch 'main' into redosPrefix	2022-08-19 19:22:49 +02:00
erik-krogh	d052b1e3c9	also support regular expressions without repetitions	2022-08-19 19:21:44 +02:00
Chris Smowton	1ea7caf559	Fix join ordering in inline-expectations test	2022-08-19 18:17:22 +01:00
Taus	bd45ea94d0	Python: Fix TimingAttackAgainstHash.ql select	2022-08-19 12:31:12 +00:00
Tom Hvitved	1b29bddb73	Python: Revert change to AnyNode	2022-08-19 14:08:21 +02:00
Tom Hvitved	663096fe3a	Remove redundant overrides	2022-08-19 13:57:41 +02:00