Michael Nebel
|
afec9b05e9
|
Merge pull request #13147 from michaelnebel/csharp/entityframeworkrefactor
C#: Use synthetic global in the EntityFramework code instead of jump steps.
|
2023-06-14 13:47:56 +02:00 |
|
Anders Schack-Mulligen
|
1a4fca334f
|
Merge pull request #13273 from aschackmull/dataflow/summarynode-refactor
Dataflow: Refactor FlowSummaryImpl to synthesize nodes independently from DataFlow::Node.
|
2023-06-14 09:38:36 +02:00 |
|
Anders Schack-Mulligen
|
2d616d494e
|
C#/Ruby: Add fields as per review comments.
|
2023-06-13 11:26:30 +02:00 |
|
Jeroen Ketema
|
c3ba206b6a
|
Merge pull request #13346 from jketema/inline-2
Update inline expectation tests to use parameterized module
|
2023-06-13 10:10:55 +02:00 |
|
Asger F
|
0d45074caa
|
Merge pull request #13422 from asgerf/rb/map_filter
Ruby: fix bug in filter_map summary
|
2023-06-13 09:43:47 +02:00 |
|
Arthur Baars
|
fad73d71e5
|
Merge pull request #13307 from hmac/amammad-ruby-YAMLunsafeLoad
Ruby: Add YAML unsafe deserialization sinks
|
2023-06-12 10:43:37 +02:00 |
|
Asger F
|
452af312ff
|
Ruby: change note
|
2023-06-12 10:07:26 +02:00 |
|
Anders Schack-Mulligen
|
5062442982
|
Go/Python/Ruby/Swift: Add stub.
|
2023-06-09 15:39:28 +02:00 |
|
Anders Schack-Mulligen
|
98f51d7f29
|
Dataflow: Sync.
|
2023-06-09 15:39:28 +02:00 |
|
Anders Schack-Mulligen
|
0c62901a67
|
Ruby: Fix tests.
|
2023-06-09 15:39:18 +02:00 |
|
Anders Schack-Mulligen
|
6020e4d0e3
|
C#/Go/Python/Ruby/Swift: Fix some more references.
|
2023-06-09 15:30:38 +02:00 |
|
Anders Schack-Mulligen
|
4e531af71b
|
Ruby: Adjust to FlowSummaryImpl changes.
|
2023-06-09 15:30:35 +02:00 |
|
Anders Schack-Mulligen
|
2cc5bde925
|
Dataflow: Sync.
|
2023-06-09 15:27:17 +02:00 |
|
Asger F
|
d47477bd3b
|
Ruby: update line numbers in expectation file
|
2023-06-09 14:52:21 +02:00 |
|
Asger F
|
a50d91ea48
|
Ruby: fix bug in filter_map summary
|
2023-06-09 14:31:10 +02:00 |
|
Anders Schack-Mulligen
|
1b7bbf6320
|
Merge pull request #13083 from aschackmull/dataflow/typestrengthen
Dataflow: Strengthen tracked types.
|
2023-06-09 13:23:30 +02:00 |
|
Jeroen Ketema
|
4485560f43
|
Ruby: Rewrite inline expectation tests to use parameterized module
|
2023-06-09 10:43:05 +02:00 |
|
Asger F
|
bdbbde347e
|
Merge pull request #13407 from asgerf/rb/restrict-orm-tracking
Ruby: restrict ORM tracking to calls
|
2023-06-09 09:13:01 +02:00 |
|
Anders Schack-Mulligen
|
d230509905
|
Dataflow: Address review comments.
|
2023-06-09 08:37:36 +02:00 |
|
Anders Schack-Mulligen
|
4399138c82
|
Dataflow: Fix QL4QL alert.
|
2023-06-09 08:37:36 +02:00 |
|
Anders Schack-Mulligen
|
53f2b8aab0
|
Dataflow: Sync.
|
2023-06-09 08:37:36 +02:00 |
|
Anders Schack-Mulligen
|
fd832416d8
|
Dataflow: Add empty type strengthening predicate for languages without type pruning.
|
2023-06-09 08:37:35 +02:00 |
|
Anders Schack-Mulligen
|
e8cea79f1d
|
Dataflow: Sync.
|
2023-06-09 08:37:35 +02:00 |
|
Asger F
|
74a9d9fa37
|
Revert "Ruby: update tree-sitter-ruby"
|
2023-06-08 15:29:36 +02:00 |
|
Asger F
|
d6741f655d
|
Ruby: restrict ORM tracking to calls
|
2023-06-08 14:01:51 +02:00 |
|
Alex Ford
|
22b9ab43c6
|
Merge pull request #13259 from alexrford/rb/actiondispatch-refactor
Ruby: Refactor and slightly expand `ActionDispatch` modelling
|
2023-06-08 11:08:36 +01:00 |
|
Tom Hvitved
|
cee70883f0
|
Merge pull request #12964 from hvitved/ruby/remove-synth-returns
Ruby: Remove canonical return nodes
|
2023-06-08 10:07:48 +02:00 |
|
Arthur Baars
|
dcd254adf8
|
Merge pull request #13399 from aibaars/update-ruby-grammar
Ruby: update tree-sitter-ruby
|
2023-06-07 19:53:33 +02:00 |
|
Arthur Baars
|
0efa212c40
|
Ruby: update tree-sitter-ruby
|
2023-06-07 19:27:46 +02:00 |
|
Erik Krogh Kristensen
|
6ba7f9a238
|
Merge pull request #13352 from erik-krogh/once-again-deps-not-py-cpp
delete old deprecations
|
2023-06-07 13:00:57 +02:00 |
|
Tom Hvitved
|
88c5700c24
|
Ruby: Use CallGraphConstruction in call graph construction
|
2023-06-07 09:02:03 +02:00 |
|
Tom Hvitved
|
4bf124bffe
|
Ruby/Python: Add CallGraphConstruction module for recursive type-tracking based call graph construction
|
2023-06-07 09:02:03 +02:00 |
|
Arthur Baars
|
7324d1705e
|
Merge branch 'main' into amammad-ruby-YAMLunsafeLoad
|
2023-06-06 12:09:06 +02:00 |
|
Alex Ford
|
c95cf5ad6f
|
Merge pull request #13062 from maikypedia/maikypedia/sqli-sink
Ruby: Add MySQL as SQL Injection Sink
|
2023-06-02 17:06:35 +01:00 |
|
Erik Krogh Kristensen
|
219ec9d05d
|
Merge pull request #13127 from erik-krogh/polReDoS
ReDoS: revert new superlinear algorithm.
|
2023-06-02 16:10:24 +02:00 |
|
Jeroen Ketema
|
5f64354a70
|
Merge pull request #13353 from jketema/expecation
Fix typo in spelling of expectation
|
2023-06-02 12:29:49 +02:00 |
|
erik-krogh
|
ac9ede4ec0
|
add change-notes
|
2023-06-02 11:58:11 +02:00 |
|
erik-krogh
|
c3e57382f7
|
Ruby: fix compilation
|
2023-06-02 11:58:08 +02:00 |
|
erik-krogh
|
44b6366586
|
delete old deprecations
|
2023-06-02 11:58:08 +02:00 |
|
Jeroen Ketema
|
7b17b92aca
|
Fix typo in spelling of expectation
|
2023-06-02 10:36:11 +02:00 |
|
Alex Ford
|
6fa9e13a2e
|
Ruby: update TaintStep output
|
2023-06-01 16:27:20 +01:00 |
|
Alex Ford
|
606d601923
|
qlformat
|
2023-06-01 16:26:05 +01:00 |
|
Alex Ford
|
d09f6d318c
|
Merge branch 'main' into maikypedia/sqli-sink
|
2023-06-01 15:02:44 +01:00 |
|
Alex Ford
|
40cf09996a
|
Merge pull request #13066 from maikypedia/maikypedia/sqli-sink-2
Ruby: Add Sequel as SQL Injection Sink
|
2023-06-01 15:01:38 +01:00 |
|
Erik Krogh Kristensen
|
96a720cfa0
|
Merge pull request #13285 from erik-krogh/redoshelp
ReDoS: fix whitespace in the samples in ReDoS.qhelp
|
2023-06-01 15:53:58 +02:00 |
|
Alex Ford
|
7d943c7621
|
Ruby: update test output
|
2023-06-01 13:50:32 +01:00 |
|
Alex Ford
|
4794066d3c
|
Merge branch 'main' into maikypedia/sqli-sink-2
|
2023-06-01 13:04:54 +01:00 |
|
Maiky
|
7579f182ad
|
Add requested changes
|
2023-06-01 11:00:35 +02:00 |
|
Michael Nebel
|
06b02eb3ce
|
Sync files.
|
2023-06-01 09:30:31 +02:00 |
|
Maiky
|
13ce6a6d8e
|
Update Frameworks.qll
|
2023-06-01 00:53:01 +02:00 |
|