Michael Nebel
|
bcdbfefb2b
|
Merge pull request #8329 from michaelnebel/csharp/model-generator
C#: Capture Summary models.
|
2022-03-14 16:10:05 +01:00 |
|
Joe Farebrother
|
d4b5eed3e4
|
Merge pull request #8410 from joefarebrother/sensitive-logging
Java: Promote Sensitive Logging query
|
2022-03-14 14:50:26 +00:00 |
|
Michael Nebel
|
21bcaf6a0e
|
C#/Java: After remaining code after rebase.
|
2022-03-14 14:08:49 +01:00 |
|
Michael Nebel
|
74352925e4
|
C#/Java: Remove inline from returnNodeEnclosingCallable.
|
2022-03-14 13:50:55 +01:00 |
|
Michael Nebel
|
48dc9d7057
|
C#/Java: Move containerContent to DataFlowPrivate.
|
2022-03-14 13:50:55 +01:00 |
|
Michael Nebel
|
b7803ef0b1
|
C#: Introduce SyntheticFieldContent in RelevantContent.
|
2022-03-14 13:50:55 +01:00 |
|
Michael Nebel
|
12ff2c6cd5
|
C#/Java: Improve comments in CaptureSummaryModels.
|
2022-03-14 13:50:55 +01:00 |
|
Michael Nebel
|
3ad9731e91
|
C#/Java: Add some more QL docs.
|
2022-03-14 13:50:50 +01:00 |
|
Michael Nebel
|
2476e716a2
|
C#: Move the isRelevantTaintStep and isRelevantContent into the shared utils.
|
2022-03-14 13:49:52 +01:00 |
|
Michael Nebel
|
665e3c9326
|
C#: Re-factor containerContent into standalone predicate in DataFlow library.
|
2022-03-14 13:49:51 +01:00 |
|
Michael Nebel
|
5d03e510d2
|
C#/Java: Include synthetic fields in isRelevantContent.
|
2022-03-14 13:49:51 +01:00 |
|
Michael Nebel
|
cd03af3be4
|
C#: Get rid of the isOwnInstanceAccess based on ReturnStmt.
|
2022-03-14 13:49:46 +01:00 |
|
Michael Nebel
|
34a91f1aac
|
C#: Rename CaptureSummaryModelsQuery to CaptureSummaryModels.
|
2022-03-14 13:48:56 +01:00 |
|
Michael Nebel
|
36e0c683bd
|
C#: Add QL Doc to the primary predicate used for capturing flow.
|
2022-03-14 13:48:56 +01:00 |
|
Michael Nebel
|
e8aacb710e
|
C#: Add file level QL Doc to Capture Summary models specific implementations.
|
2022-03-14 13:48:56 +01:00 |
|
Michael Nebel
|
d114582b56
|
C#: Add QLDoc to the shared Capture summary models library.
|
2022-03-14 13:48:51 +01:00 |
|
Michael Nebel
|
82d93d0f9e
|
Java: Refactor CaptureSummaryModels code to enable re-use in C#.
|
2022-03-14 13:47:20 +01:00 |
|
Michael Nebel
|
ba233ed7a1
|
Java: Rearrange and refactor language specific content into standalone predicates.
|
2022-03-14 13:46:24 +01:00 |
|
Michael Nebel
|
9ca199c9ae
|
Java: Move generic code out of language specific file for model generation.
|
2022-03-14 13:43:45 +01:00 |
|
Michael Nebel
|
a2d9f4f6f4
|
Java: Introduce language specific file for model generator code.
|
2022-03-14 13:40:40 +01:00 |
|
Michael Nebel
|
a1c642685a
|
Java: Re-arrange code in ModelGeneratorUtils.
|
2022-03-14 13:35:56 +01:00 |
|
Jeroen Ketema
|
4c2081b7fc
|
Merge pull request #8401 from jketema/taint-flow
Extend taint tracking interface with flow states
|
2022-03-14 12:06:10 +01:00 |
|
Joe Farebrother
|
b924de631f
|
Add change note, minor docs improvement
|
2022-03-11 17:58:52 +00:00 |
|
Joe Farebrother
|
06f2c03828
|
Add tests
|
2022-03-11 17:44:52 +00:00 |
|
Jeroen Ketema
|
93a0da75b6
|
Fix taint tracking configurations that broke due to interface change
|
2022-03-11 12:18:04 +01:00 |
|
Erik Krogh Kristensen
|
cc43a94385
|
Java: remove duplicated class
|
2022-03-11 11:10:38 +01:00 |
|
Erik Krogh Kristensen
|
69353bb014
|
patch upper-case acronyms to be PascalCase
|
2022-03-11 11:10:33 +01:00 |
|
Joe Farebrother
|
4bf6c10896
|
Split configs into Query.qll library
|
2022-03-10 13:23:40 +00:00 |
|
Joe Farebrother
|
6c05f7a81a
|
remove url from sensitive info regex
|
2022-03-04 10:37:05 +00:00 |
|
Joe Farebrother
|
4ad402f33f
|
Move from experimental to main
|
2022-03-03 12:13:14 +00:00 |
|
Tamás Vajk
|
94cb5c2be4
|
Merge pull request #8296 from github/post-release-prep/codeql-cli-2.8.2
Post-release preparation for codeql-cli-2.8.2
|
2022-03-01 11:57:36 +01:00 |
|
github-actions[bot]
|
980f822983
|
Post-release preparation for codeql-cli-2.8.2
|
2022-03-01 09:24:30 +00:00 |
|
Michael Nebel
|
7bde1cbfb3
|
Java: Add case for Synthetic Fields in isRelevantTaintStep.
|
2022-03-01 09:15:01 +01:00 |
|
Michael Nebel
|
66fe0e74b5
|
Java: Don't require that the source is directly within the TargetApi itself (in that case wrappers get excluded).
|
2022-02-28 16:48:23 +01:00 |
|
Michael Nebel
|
4a0b2b64b3
|
Java: Explicitly tie ReturnNode to TargetApi before calling returnNodeAsOutput.
|
2022-02-28 16:48:23 +01:00 |
|
Tom Hvitved
|
44949b6353
|
Java: Add bindingset to returnNodeAsOutput
|
2022-02-28 16:48:23 +01:00 |
|
Anders Schack-Mulligen
|
908cc40c9f
|
Java: Fix bug in model flow sanitizer.
|
2022-02-28 16:48:23 +01:00 |
|
Anders Schack-Mulligen
|
16a5ccddea
|
Java: Simplify model generator query using flow state.
|
2022-02-28 16:48:23 +01:00 |
|
Ian Lynagh
|
1e62b485a5
|
Merge pull request #8241 from igfoo/igfoo/stats4
Java: Update stats and make some performance tweaks
|
2022-02-28 12:58:06 +00:00 |
|
Chris Smowton
|
ff5d680837
|
Add missing substitution description
|
2022-02-25 19:12:25 +00:00 |
|
Ian Lynagh
|
0bf1370cd5
|
Java: Autoformat QL
|
2022-02-25 19:08:08 +00:00 |
|
Chris Smowton
|
ff303db034
|
Autoformat and fix qhelp
|
2022-02-25 17:33:08 +00:00 |
|
Chris Smowton
|
303927c9c9
|
Fix qhelp
|
2022-02-25 17:33:08 +00:00 |
|
Ahmed Farid
|
35abc3f9a3
|
Update and rename ComparingValueOfSensetiveHeader.java to Test.java
|
2022-02-25 17:33:08 +00:00 |
|
Ahmed Farid
|
899b8d03b2
|
Update TimingAttackAgainstHeader.ql
|
2022-02-25 17:33:07 +00:00 |
|
Ahmed Farid
|
308f86f66f
|
Update TimingAttackAgainstHeader.ql
|
2022-02-25 17:33:07 +00:00 |
|
Ahmed Farid
|
2eee6b4f69
|
Update TimingAttackAgainstHeader.ql
|
2022-02-25 17:33:07 +00:00 |
|
Ahmed Farid
|
7859288040
|
Update TimingAttackAgainstHeader.ql
|
2022-02-25 17:33:07 +00:00 |
|
Ahmed Farid
|
d83444cb18
|
Update TimingAttackAgainstHeader.ql
|
2022-02-25 17:33:07 +00:00 |
|
Ahmed Farid
|
e79c0eaa71
|
Update TimingAttackAgainstHeader.ql
|
2022-02-25 17:33:07 +00:00 |
|