Anders Schack-Mulligen
941177ee25
Merge pull request #3762 from hvitved/dataflow/clear-contents
...
Data flow: Model field clearing
2020-06-24 10:19:50 +02:00
Anders Schack-Mulligen
3b62bd254c
Merge pull request #3723 from JLLeitschuh/fix/JLL/gitignore_vs_code_generated_files
...
Add .gitignore for VS Code Generated maven project files
2020-06-24 09:35:01 +02:00
semmle-qlci
a723ac0d8e
Merge pull request #3767 from esbena/js/console-member-calls
...
Approved by erik-krogh
2020-06-24 08:03:49 +01:00
Geoffrey White
afcc6ac712
Merge pull request #3766 from rdmarsh2/rdmarsh/cpp/add-qldoc-3
...
C++: Add QLDocs for Initializer.qll-Macro.qll and model classes
2020-06-24 07:31:48 +01:00
Mathias Vorreiter Pedersen
30d9c6b9e4
Merge pull request #3776 from geoffw0/qldoc
...
C++: QLDoc ObjectiveC.qll, BufferWrite.qll, FileWrite.qll, OutputWrite.qll
2020-06-23 22:23:03 +02:00
Robert Marsh
b402352321
Merge pull request #3775 from hvitved/dataflow/tripleticks
...
Data flow: Enable syntax highlighting in QLDoc snippets
2020-06-23 09:53:10 -07:00
Robert Marsh
edaa43ab0b
C++: respond to PR comments on qldoc
2020-06-23 09:23:08 -07:00
Geoffrey White
fbaf398e7a
C++: QLDoc FileWrite and OutputWrite.
2020-06-23 16:57:22 +01:00
Geoffrey White
e01f050db8
C++: QLDoc BufferWrite.qll.
2020-06-23 16:29:00 +01:00
Geoffrey White
dea9a13e44
C++: QLDoc ObjectiveC.qll (deprecated).
2020-06-23 16:28:51 +01:00
Tom Hvitved
a3e7fd60f2
Data flow: Enable syntax highlighting in QLDoc snippets
2020-06-23 16:54:34 +02:00
Taus
a2677f8df0
Merge pull request #3758 from RasmusWL/python-methods-overrides-as-recommendation
...
Python: Changing signature in overriden method is not an error
2020-06-23 16:16:44 +02:00
semmle-qlci
0d61443915
Merge pull request #3753 from asger-semmle/js/xss-dom-exception-rephrasing
...
Approved by erik-krogh
2020-06-23 13:01:41 +01:00
Asger F
552b7ad3ca
Merge pull request #3765 from asger-semmle/js-team-sprint-merge2
...
JS: Merge js-team-sprint
2020-06-23 12:58:27 +01:00
semmle-qlci
a5a3573a3e
Merge pull request #3757 from asger-semmle/js/unused-npm-dependencies
...
Approved by erik-krogh
2020-06-23 12:56:45 +01:00
Tom Hvitved
ff751ac0f8
Data flow: Sync files
2020-06-23 10:55:12 +02:00
Tom Hvitved
98ed2a18ac
Data flow: Move field-clearing checks from flowCandFwf0 into flowCandFwd
2020-06-23 10:55:12 +02:00
Tom Hvitved
13b4dfa972
Data flow: Rename BigStepBarrierNode to FlowCheckNode
2020-06-23 10:55:12 +02:00
Tom Hvitved
3faca03de6
C#: Introduce ObjectInitializerNode
2020-06-23 10:55:12 +02:00
Tom Hvitved
83050d96f8
C++: Stub implementations for clearsContent()
2020-06-23 10:55:12 +02:00
Tom Hvitved
c01f570d9e
Java: Implement clearsContent()
2020-06-23 10:55:12 +02:00
Tom Hvitved
c057e82efa
Data flow: Sync files
2020-06-23 10:55:11 +02:00
Tom Hvitved
e578827626
Java: Add more field-flow tests
2020-06-23 10:55:11 +02:00
Tom Hvitved
a1d5591634
C#: Model field-clearing in data-flow
2020-06-23 10:55:11 +02:00
Tom Hvitved
b5bc15a097
C#: Add more field-flow tests
2020-06-23 10:55:11 +02:00
James Fletcher
843c5c6c1e
Merge pull request #3742 from jf205/sd-110
...
CodeQL docs: Expand QLDoc style guide
2020-06-23 09:47:25 +01:00
Esben Sparre Andreasen
2d32ee7448
JS: support member calls of console
2020-06-23 10:46:01 +02:00
james
7e7d7e752e
docs: further improvements
2020-06-23 09:42:56 +01:00
Jonas Jensen
3747bd98f3
Merge pull request #3694 from geoffw0/models
...
C++: Extend the GetsFunction and SystemFunction models.
2020-06-23 10:15:32 +02:00
Shati Patel
95870977ca
Merge pull request #3763 from adityasharad/java/training-example-brace
...
Fix training example syntax
2020-06-23 08:34:09 +01:00
James Fletcher
c7cfd59651
Apply suggestions from code review
...
Co-authored-by: Shati Patel <42641846+shati-patel@users.noreply.github.com >
2020-06-23 08:31:48 +01:00
Mathias Vorreiter Pedersen
55ce5ce47a
Merge pull request #3754 from jbj/revert-flat-structs
...
C++: Revert #3419 to fix OpenJDK performance
2020-06-23 08:58:08 +02:00
Robert Marsh
c1eb712841
C++: QLDoc for data and taint models
2020-06-22 17:25:55 -07:00
Asger Feldthaus
b4f75ef414
Merge branch 'master' into js-team-sprint-merge2
2020-06-23 00:18:09 +01:00
Asger F
2edeb4aa8d
Merge pull request #3735 from esbena/js/insecure-http-options
...
JS: polish js/disabling-certificate-validation
2020-06-23 00:16:45 +01:00
Asger F
ca06f6dfb4
Merge branch 'js-team-sprint' into js/insecure-http-options
2020-06-23 00:16:02 +01:00
semmle-qlci
69b44def7b
Merge pull request #3759 from asger-semmle/js/sprint-suite
...
Approved by erik-krogh
2020-06-22 23:27:43 +01:00
Aditya Sharad
915148f82c
C++: Fix placeholder syntax in training example
2020-06-22 12:26:26 -07:00
Aditya Sharad
95f8ba433e
Java: Fix training example
2020-06-22 12:21:15 -07:00
Robert Marsh
231b85cb11
C++: File-level QLDoc for publicly imported models
2020-06-22 11:43:43 -07:00
james
3fa49a9771
address review comment about sentence style
2020-06-22 17:07:10 +01:00
James Fletcher
676d486635
Apply suggestions from code review
...
Co-authored-by: Jonas Jensen <jbj@github.com >
2020-06-22 17:03:31 +01:00
Asger Feldthaus
1efd71a681
JS: Sort security suite
2020-06-22 16:40:55 +01:00
Asger Feldthaus
8cc41a0c84
JS: Add new queries to security suite
2020-06-22 16:40:19 +01:00
Asger F
a067cd35aa
Merge pull request #3756 from esbena/js/delay-slow-query-merge
...
JS: delay merging two slow queries
2020-06-22 16:35:15 +01:00
Asger F
7d54b02fb9
Merge branch 'js-team-sprint' into js/delay-slow-query-merge
2020-06-22 16:34:49 +01:00
Asger F
4a459c8a7d
Merge pull request #3755 from esbena/js/polish-imcs
...
JS: polish js/incomplete-html-attribute-sanitization
2020-06-22 16:32:16 +01:00
Jonas Jensen
39137510ba
Merge pull request #3736 from rneatherway/exclude-cs-vulnerable-package
...
Exclude dependency-based query from C# Code Scanning
2020-06-22 17:27:23 +02:00
Geoffrey White
466f36c7e1
C++: Autoformat.
2020-06-22 16:04:32 +01:00
Rasmus Wriedt Larsen
d5895c16c8
Python: Changing signature in overriden method is not an error
...
Rather, fulfiling the Liskov substitution principle is an opinionated
recommendation. Looking at `py/inheritance/incorrect-overridden-signature` and
`py/mixed-tuple-returns`, it seems very appropriate that this should have
`@severity recommendation`, and `@sub-severity high`.
2020-06-22 16:58:52 +02:00
