Commit Graph

13799 Commits

Author SHA1 Message Date
luchua-bc
a83f9ced96 Change the query to only catch the common exception rethrown case 2020-11-09 12:07:43 +00:00
luchua-bc
3f0cdb6a1a Update qldoc and comments 2020-11-03 19:40:28 +00:00
luchua-bc
fa54c23a83 Handle the edge case that an exception is rethrown in a catch clause 2020-11-03 16:31:12 +00:00
luchua-bc
6a8ce37428 Add query for initCause and addSuppressed 2020-11-02 11:59:14 +00:00
luchua-bc
78d7fe2fbb Detect rethrowing unprocessed exceptions in catch clause 2020-11-01 02:13:50 +00:00
luchua-bc
756db4c03a Simplify the query and add more test cases 2020-10-31 01:33:24 +00:00
luchua-bc
67af9b0f3e Add comments and update JavaDocs of GenericServlet using the source JAR 2020-10-30 17:05:53 +00:00
luchua-bc
93d1393ded Add error-page check 2020-10-30 16:45:56 +00:00
luchua-bc
a61f814b4b Change to ServletResponse type and fix formatting error 2020-07-02 12:49:25 +00:00
luchua-bc
1d0232b464 Add more servlet methods and fix formatting errors 2020-07-02 03:07:19 +00:00
luchua-bc
d978f28822 Simplify the query for subtype check 2020-06-30 11:15:18 +00:00
luchua-bc
382e5a5a7a Revert "Add remote source of Android intent extra"
This reverts commit 65e76ab18f.
2020-06-30 00:55:05 +00:00
luchua-bc
3e8e9f9969 Revert "Add method access qualifier as source"
This reverts commit 87668bf075.
2020-06-30 00:54:27 +00:00
luchua-bc
065b90ab6b Revert "text changes"
This reverts commit 0f8dd7c328.
2020-06-30 00:53:03 +00:00
luchua-bc
ede9cec4a9 Uncaught Servlet Exception 2020-06-29 20:07:53 +00:00
luchua-bc
0f8dd7c328 text changes 2020-06-27 22:56:00 +00:00
Bt2018
87668bf075 Add method access qualifier as source 2020-06-27 18:00:52 -04:00
luchua-bc
65e76ab18f Add remote source of Android intent extra 2020-06-25 20:20:18 +00:00
Jonas Jensen
d4c5887122 Merge pull request #3807 from geoffw0/qldoc3
C++: Even more QLDoc
2020-06-25 19:29:35 +02:00
semmle-qlci
056e1a8c4b Merge pull request #3599 from asger-semmle/js/nameditem
Approved by esbena
2020-06-25 17:34:14 +01:00
Calum Grant
b759856ccb Merge pull request #3792 from calumgrant/cs/qldoc-coverage1
C#: Improve qldoc coverage
2020-06-25 16:34:52 +01:00
Calum Grant
c4d43bafa4 Merge pull request #3797 from hvitved/csharp/dataflow/more-collection-tests
C#: More data-flow collection tests
2020-06-25 15:38:04 +01:00
semmle-qlci
cf0cd00458 Merge pull request #3627 from asger-semmle/js/unneeded-defensive-return
Approved by erik-krogh
2020-06-25 15:28:57 +01:00
semmle-qlci
c39dce4d66 Merge pull request #3781 from asger-semmle/js/deprecate-type-member-lookup
Approved by erik-krogh
2020-06-25 14:56:17 +01:00
Geoffrey White
7aa44fd357 C++: QLDoc Parameter.qll, Specifier.qll, commons/File.qll. 2020-06-25 14:42:44 +01:00
Geoffrey White
a722bd4bd0 C++: QLDoc UserType.qll. 2020-06-25 14:39:11 +01:00
Geoffrey White
c8fc8af340 C++: QLDoc Struct.qll, TypedefType.qll, Union.qll, Variable.qll. 2020-06-25 14:39:10 +01:00
Geoffrey White
908c3b4005 C++: QLDoc SecurityOptions.qll. 2020-06-25 14:39:10 +01:00
Jonas Jensen
3ce4cff183 Merge pull request #3802 from geoffw0/modeling
C++: 'modelling' -> 'modeling'.
2020-06-25 14:07:57 +02:00
Jonas Jensen
f2ef088d4f Merge pull request #3783 from geoffw0/qldoc2
C++: More QLDoc
2020-06-25 14:06:00 +02:00
Geoffrey White
099e5891ae C++: 'modelling' -> 'modeling'. 2020-06-25 11:50:43 +01:00
Geoffrey White
b515c09946 C++: Autoformat. 2020-06-25 11:46:51 +01:00
Geoffrey White
6201796122 C++: modelling -> modeling
Co-authored-by: Jonas Jensen <jbj@github.com>
2020-06-25 11:42:57 +01:00
Asger Feldthaus
f9b796231b JS: Add regression tests 2020-06-25 11:10:27 +01:00
semmle-qlci
b24fba8df0 Merge pull request #3734 from dellalibera/loginjection
Approved by esbena
2020-06-25 11:06:25 +01:00
Asger Feldthaus
a109c1fc96 JS: Change note 2020-06-25 11:04:08 +01:00
Asger Feldthaus
ea3560fe07 JS: Ignore document.all checks explicitly 2020-06-25 11:03:06 +01:00
Asger Feldthaus
b867512db4 JS: Update test 2020-06-25 11:01:10 +01:00
Calum Grant
4642bb2767 Merge pull request #3774 from hvitved/csharp/tripleticks
C#: Enable syntax highlighting in QLDoc snippets
2020-06-25 10:31:50 +01:00
Rasmus Wriedt Larsen
b36c23ef63 Merge pull request #3500 from yoff/UnmatchableDollar
Python: Regexp: Handle repetions {n} (with no ,)
2020-06-25 11:26:52 +02:00
Rasmus Wriedt Larsen
0b36cd44b8 Merge pull request #3522 from porcupineyhairs/pythonXpath
Python : Add Xpath injection query
2020-06-25 11:21:45 +02:00
Calum Grant
6e3609696a C#: Address review comments. 2020-06-25 09:59:59 +01:00
Tom Hvitved
3f91aa3b55 C#: More data-flow collection tests 2020-06-25 09:48:52 +02:00
Dave Bartolomeo
06a5242d76 Merge pull request #3793 from rdmarsh2/rdmarsh/cpp/ir-range-analysis-experimental
C++: move IR range analysis to experimental
2020-06-24 20:51:07 -04:00
Robert Marsh
3e6a19843d Merge pull request #3727 from jbj/tainted-format-string-high
C++: Raise cpp/tainted-format-string* precisions to high
2020-06-24 15:06:13 -07:00
Calum Grant
d32199cccc C#: QLdoc for CIL instructions. 2020-06-24 22:01:33 +01:00
Calum Grant
262a20cea0 C#: Add qldocs for Concurrency.qll, Documentation.qll, cil.qll and dotnet.qll. 2020-06-24 22:01:33 +01:00
Asger F
090a685d86 Merge pull request #3751 from toufik-airane/master
[javascript] CWE-347: JWT Missing Secret Or Public Key Verification
2020-06-24 21:09:41 +01:00
Robert Marsh
fb6e578618 C++: move IR range analysis to experimental 2020-06-24 12:50:14 -07:00
ubuntu
d9a0dc0982 Remove check for console().getAMethodCall 2020-06-24 19:31:23 +02:00