Jami Cogswell
|
9d5972acc2
|
Shared: update qldocs
|
2023-06-05 12:18:34 -04:00 |
|
Jami Cogswell
|
3f1dc8e5c7
|
Shared: add outdated Swift sink kinds
|
2023-06-05 12:18:34 -04:00 |
|
Jami Cogswell
|
62ac0dc471
|
Shared: add outdated sink kind msg to 'getInvalidModelKind' for all languages
|
2023-06-05 12:18:33 -04:00 |
|
Jami Cogswell
|
76f5dca861
|
Shared: move 'OutdatedSinkKind' to shared file and add outdated JS and C# sink kinds
|
2023-06-05 12:18:33 -04:00 |
|
Jami Cogswell
|
7b629f5d63
|
Shared: include 'qltest%' and 'test-%'
|
2023-06-05 12:18:33 -04:00 |
|
Jami Cogswell
|
254e447923
|
JS/Python/Ruby: update getInvalidModelKind
|
2023-06-05 12:18:33 -04:00 |
|
Jami Cogswell
|
7317c29eea
|
Shared: update kind information
|
2023-06-05 12:18:33 -04:00 |
|
Jami Cogswell
|
0ab1848b70
|
JS/Python/Ruby: use 'SharedModelValidation' file
|
2023-06-05 12:18:33 -04:00 |
|
Jami Cogswell
|
ddb5d92ef8
|
Shared: add source, summary, and neutral shared valid kinds
|
2023-06-05 12:18:33 -04:00 |
|
Jami Cogswell
|
869f820fcf
|
Shared: add 'SharedModelValidation' file as experiment
|
2023-06-05 12:18:33 -04:00 |
|
Jami Cogswell
|
e24e3a6115
|
JS/Python/Ruby: add getInvalidModelKind as experiment
|
2023-06-05 12:18:33 -04:00 |
|
Erik Krogh Kristensen
|
219ec9d05d
|
Merge pull request #13127 from erik-krogh/polReDoS
ReDoS: revert new superlinear algorithm.
|
2023-06-02 16:10:24 +02:00 |
|
erik-krogh
|
1b44b59842
|
add stress test
|
2023-06-01 23:20:23 +02:00 |
|
erik-krogh
|
8eed1a95f6
|
stop recursive fromRhs related to getLaterBaseAccess
|
2023-06-01 23:16:52 +02:00 |
|
Jami
|
3886ebffa9
|
Merge branch 'main' into jcogs33/update-javascript-sink-kinds
|
2023-06-01 14:09:10 -04:00 |
|
Erik Krogh Kristensen
|
96a720cfa0
|
Merge pull request #13285 from erik-krogh/redoshelp
ReDoS: fix whitespace in the samples in ReDoS.qhelp
|
2023-06-01 15:53:58 +02:00 |
|
Arthur Baars
|
490d22d123
|
Merge remote-tracking branch 'upstream/main' into post-release-prep/codeql-cli-2.13.3
|
2023-05-30 21:31:28 +02:00 |
|
erik-krogh
|
9f5bf8fb22
|
also fix the first code-block
|
2023-05-25 13:56:29 +02:00 |
|
erik-krogh
|
765076bcba
|
fix whitespace in the samples in ReDoS.qhelp
|
2023-05-25 13:28:39 +02:00 |
|
github-actions[bot]
|
d2e192020b
|
Post-release preparation for codeql-cli-2.13.3
|
2023-05-24 11:26:12 +00:00 |
|
Erik Krogh Kristensen
|
796e71f8be
|
Merge pull request #13176 from MaxSchlueter/fixquery12
Fix "Introducing the JavaScript libraries" query12.qll and add test case
|
2023-05-24 10:56:53 +02:00 |
|
Arthur Baars
|
e33f3a6668
|
Merge pull request #13154 from aibaars/sync-dbscheme-py
JS/Ruby/QL/Python: sync dbscheme fragments
|
2023-05-23 19:14:29 +02:00 |
|
Max Schlueter
|
40aa9417d0
|
Fix query12 and add test case
|
2023-05-23 11:52:51 +02:00 |
|
erik-krogh
|
f7419c9250
|
add expected output
|
2023-05-23 09:56:06 +02:00 |
|
erik-krogh
|
f85b3e13c2
|
update expected output
|
2023-05-23 09:56:06 +02:00 |
|
Erik Krogh Kristensen
|
50cb5ea184
|
Merge pull request #13164 from erik-krogh/polyQhelp
ReDoS: add another example to the qhelp in poly-redos, showing how to just limit the length of the input
|
2023-05-23 09:25:15 +02:00 |
|
Erik Krogh Kristensen
|
e658177c31
|
Merge pull request #12975 from tyage/support-sub-modules
JS: Support sub modules
|
2023-05-23 09:24:43 +02:00 |
|
github-actions[bot]
|
7aa23cf11d
|
Release preparation for version 2.13.3
|
2023-05-22 20:47:00 +00:00 |
|
Erik Krogh Kristensen
|
653cd86c13
|
update qldoc
|
2023-05-22 20:48:21 +02:00 |
|
Arthur Baars
|
7978c65467
|
JS: add upgrade/downgrade scripts
|
2023-05-22 19:28:59 +02:00 |
|
Erik Krogh Kristensen
|
3647b9cfeb
|
Merge pull request #13196 from erik-krogh/indirectCommand
JS: require arguments to be shell interpreted to be flagged by indirect-command-injection
|
2023-05-22 11:53:57 +02:00 |
|
erik-krogh
|
710b309142
|
apply suggestions from doc review
|
2023-05-21 22:18:48 +02:00 |
|
erik-krogh
|
10bf17c33e
|
Merge branch 'main' into polyQhelp
|
2023-05-21 22:17:06 +02:00 |
|
Erik Krogh Kristensen
|
239234c5d2
|
fix bad change-note
Co-authored-by: Asger F <asgerf@github.com>
|
2023-05-17 14:47:32 +02:00 |
|
erik-krogh
|
5a82454710
|
add change-note
|
2023-05-17 12:02:21 +02:00 |
|
erik-krogh
|
cbd7601a41
|
implement isShellInterpreted on ExecActionsCall
|
2023-05-17 11:07:48 +02:00 |
|
erik-krogh
|
3293a55e8f
|
require arguments to be shell interpreted to be flagged by indirect-command-injection
|
2023-05-17 11:07:45 +02:00 |
|
Asger F
|
f94fdc6348
|
JS: Remove mention of TrackedNode in docs
|
2023-05-17 10:37:12 +02:00 |
|
erik-krogh
|
480e71fd69
|
avoid contractions
|
2023-05-17 08:42:45 +02:00 |
|
Jami Cogswell
|
003bb2f6f5
|
JS: add change note
|
2023-05-16 15:45:55 -04:00 |
|
Jami Cogswell
|
359f6ffd1e
|
JS: update 'credentials[%]' sink kind to 'credentials-%'
|
2023-05-16 15:45:55 -04:00 |
|
Jami Cogswell
|
7880e9e92c
|
JS: update 'command-line-injection' sink kind to 'command-injection'
|
2023-05-16 15:45:55 -04:00 |
|
Arthur Baars
|
2911a6cc30
|
JS: remove unused tables
|
2023-05-16 17:03:41 +02:00 |
|
Arthur Baars
|
fef0e1f1c8
|
JS: sync shared dbscheme fragments
|
2023-05-16 17:03:41 +02:00 |
|
erik-krogh
|
2ebce99eae
|
add another example of how to fix the prototype pollution issue
|
2023-05-15 17:24:02 +02:00 |
|
erik-krogh
|
7a338c408e
|
fix typo, the variable in the example is called items
|
2023-05-15 17:23:40 +02:00 |
|
erik-krogh
|
83ca1495e0
|
trim the whitespace in the poly-redos examples
|
2023-05-15 16:47:24 +02:00 |
|
erik-krogh
|
d989359656
|
add another example to the qhelp in poly-redos, showing how to just limit the length of the input
|
2023-05-15 16:47:02 +02:00 |
|
Asger F
|
20e8ee8423
|
Merge pull request #12748 from JarLob/yi
JS: Add more sources, more unit tests, fixes to the GitHub Actions injection query
|
2023-05-15 11:03:00 +02:00 |
|
tyage
|
93af0d0c2f
|
formatting
|
2023-05-13 17:37:31 +00:00 |
|