Rebecca Valentine
b33b222db8
Python: Modernizes query
2020-03-03 16:41:52 -08:00
Taus
85f5ad2231
Merge pull request #2904 from RasmusWL/python-http-clients
...
Python: Model outgoing HTTP client requests
2020-02-26 15:49:41 +01:00
Taus
dce121b565
Merge pull request #2916 from BekaValentine/python-objectapi-to-valueapi-callargsandothers
...
Python: ObjectAPI to ValueAPI: CallArgs and Others
2020-02-26 12:51:18 +01:00
semmle-qlci
326522c250
Merge pull request #2846 from erik-krogh/CVE481
...
Approved by asgerf, esbena
2020-02-26 11:16:41 +00:00
Rasmus Wriedt Larsen
4330d4e289
Python: Remove unused import in test
2020-02-26 10:26:30 +01:00
Rasmus Wriedt Larsen
5fae3a8d0a
Python: Explain complexity of HTTPConnection.request
2020-02-26 10:26:30 +01:00
Rasmus Wriedt Larsen
b213db03fd
Python: Consolidate stdlib http client tests
...
Move the stdlib tests from test/{2,3}/library-tests/ into /test/library-tests/,
and deal with version by using sys.version_info (results should be the same for
both versions).
six tests were moved from /library-tests/web/client/stdlib => /library-tests/web/client/six
2020-02-26 10:26:30 +01:00
Rasmus Wriedt Larsen
be187bcc0a
Python: Make Client::HttpRequest extend ControlFlowNode
...
Taus poitned out that the reuqest being send off, doesn't *need* to happen on a
CallNode. Someone *could* use a __setattr__ or property :\
2020-02-26 10:26:30 +01:00
Rasmus Wriedt Larsen
e25079acc2
Python: Remove unnecessary cast
2020-02-26 10:26:30 +01:00
Rasmus Wriedt Larsen
cd5399d43e
Python: Model outgoing http client requests
2020-02-26 10:26:30 +01:00
Rebecca Valentine
e07a003f75
Swaps overridden_call globally
2020-02-25 11:02:18 -08:00
Rebecca Valentine
50c91b99da
Swaps correct_args_if_called_as_method globally
2020-02-25 11:01:51 -08:00
Rebecca Valentine
fb0cae76cf
Swaps wrong_args globally
2020-02-25 11:00:39 -08:00
Rebecca Valentine
3a764ade8d
Swaps too_many_args globally
2020-02-25 10:59:55 -08:00
Rebecca Valentine
3b0be46377
Swaps too_few_args globally
2020-02-25 10:59:16 -08:00
Rebecca Valentine
2c32a859cc
Swaps illegally_named_parameter globally
2020-02-25 10:58:08 -08:00
Rebecca Valentine
4857a947ac
Swaps get_function_or_initializer globally
2020-02-25 10:51:40 -08:00
Rebecca Valentine
cf4b7e1270
Swaps arg_count globally
2020-02-25 10:50:30 -08:00
Rebecca Valentine
c2a3af7e67
Adds objectapi suffix to private predicates
2020-02-25 10:48:29 -08:00
Erik Krogh Kristensen
dc6bfad023
Merge remote-tracking branch 'upstream/master' into CVE481
2020-02-25 16:25:03 +01:00
Jonas Jensen
db33c360bc
Merge pull request #2910 from aschackmull/dataflow/cleanup
...
Java/C++: Minor dataflow cleanup.
2020-02-25 12:47:10 +01:00
semmle-qlci
03b882381a
Merge pull request #2723 from esbena/js/support-path-is-inside
...
Approved by asgerf
2020-02-25 11:21:24 +00:00
Taus
b453cf8f60
Merge pull request #2906 from RasmusWL/python-add-3-imports-tests
...
Python: Add Python 3 Imports tests from internal repo
2020-02-25 12:04:16 +01:00
Mathias Vorreiter Pedersen
b9bb2ec0ac
Merge pull request #2864 from jbj/DefaultTaintTracking-cached
...
C++: Cache DefaultTaintTracking
2020-02-25 10:15:43 +01:00
Anders Schack-Mulligen
fba8772411
Java/C++: Minor dataflow cleanup.
2020-02-25 09:40:25 +01:00
Asger F
160fc48803
Merge pull request #2896 from asger-semmle/typescript-3.8
...
TS: Support Typescript 3.8
2020-02-25 08:19:01 +00:00
Esben Sparre Andreasen
5baba62154
JS: model path-is-inside+is-path-inside for js/path-injection
2020-02-24 23:10:15 +01:00
Esben Sparre Andreasen
86b836cd29
JS: add tests for js/path-injection
2020-02-24 23:03:42 +01:00
semmle-qlci
aadb148c1c
Merge pull request #2855 from asger-semmle/js/returned-partial-call
...
Approved by esbena
2020-02-24 21:37:41 +00:00
Robert Marsh
ea4ca31fb3
Merge pull request #2907 from geoffw0/argvlocal
...
C++: Modify the argvlocal tests
2020-02-24 10:55:21 -08:00
Geoffrey White
4af0193c98
C++: Modify the argvlocal tests.
2020-02-24 16:51:47 +00:00
Geoffrey White
9f271949d5
C++: Adjust layout of the argvlocal test.
2020-02-24 15:52:31 +00:00
Anders Schack-Mulligen
67b32796dd
Merge pull request #853 from joshhale/tweak-cwe-078-example
...
doc: remove - from command arguments
2020-02-24 16:15:58 +01:00
Asger F
e665e3c187
Update change-notes/1.24/analysis-javascript.md
...
Co-Authored-By: Esben Sparre Andreasen <esbena@github.com >
2020-02-24 15:07:28 +00:00
Rasmus Wriedt Larsen
2b997ec94a
Python: Add Python 3 Imports tests from internal repo
2020-02-24 15:36:45 +01:00
Asger Feldthaus
6360073da4
JS: Rephrase change note
2020-02-24 14:35:17 +00:00
semmle-qlci
317356e591
Merge pull request #2898 from asger-semmle/js/prototype-pollution-isobject-sanitizers
...
Approved by erik-krogh
2020-02-24 13:35:32 +00:00
Jonas Jensen
2d9df70abc
Merge pull request #2887 from MathiasVP/fix-ir-gen-switch
...
C++: Fix IR generation for switch statements
2020-02-24 13:29:27 +01:00
Jonas Jensen
ae68878476
C++: Cache DefaultTaintTracking
...
This should speed up the overall suite, where `DefaultTaintTracking` is
used in several queries.
2020-02-24 13:03:34 +01:00
Asger Feldthaus
01309d7c2e
TS: Add test for named re-export and exportsAs
2020-02-24 11:40:28 +00:00
Asger Feldthaus
78954489fb
TS: Fix expected output
2020-02-24 11:40:28 +00:00
Asger Feldthaus
4e1bd9056c
TS: Fix javadoc
2020-02-24 11:40:28 +00:00
Asger Feldthaus
05d9e64dab
TS: Add change note
2020-02-24 11:40:27 +00:00
Asger Feldthaus
18974bad1c
TS: Add upgrade script and stats
2020-02-24 11:40:27 +00:00
Asger Feldthaus
47673c6e21
TS: Disable export analysis for type-only exports
2020-02-24 11:40:27 +00:00
Asger Feldthaus
16c909b433
TS: Add test case for import type * as ns
2020-02-24 11:40:27 +00:00
Asger Feldthaus
260b243c28
TS: Add test case to DeclBeforeUse
2020-02-24 11:40:27 +00:00
Asger Feldthaus
8d58aad0f2
TS: Support type-only import/export
2020-02-24 11:40:27 +00:00
Asger Feldthaus
0351f0b775
TS: Add test and documentation for private fields
2020-02-24 11:40:27 +00:00
Asger Feldthaus
8531c113a1
TS: Fix imports
2020-02-24 11:40:27 +00:00
