Ed Minnix
|
b4130e650d
|
Refactor RegexFlowConfigs.qll
|
2023-03-29 22:33:08 -04:00 |
|
Ed Minnix
|
6681c1a3a8
|
Refactor SnakeYaml.qll
|
2023-03-29 22:33:08 -04:00 |
|
Ed Minnix
|
e5f11d00a7
|
Refactor CWE-502/UnsafeDeserialization
|
2023-03-29 22:33:08 -04:00 |
|
Edward Minnix III
|
434b1b35d8
|
Merge pull request #12698 from egregius313/egregius313/java/refactor-commandline-query-and-request-forgery
Java: Refactor CommandLineQuery.qll and RequestForgeryConfig.qll
|
2023-03-29 17:49:51 -04:00 |
|
Tom Hvitved
|
6af973a8a6
|
Merge pull request #12704 from github/hvitved-patch-1
|
2023-03-29 21:18:23 +02:00 |
|
Ed Minnix
|
744f2653f0
|
Add QLdoc for RemoteUserInputToArgumentToExecFlow
|
2023-03-29 11:45:09 -04:00 |
|
Ed Minnix
|
a3c1d08a59
|
Fix ExecUnescaped
|
2023-03-29 11:45:09 -04:00 |
|
Ed Minnix
|
25359d2218
|
Deprecate execTainted
|
2023-03-29 11:45:09 -04:00 |
|
Ed Minnix
|
dcd703f1a9
|
Update to the TaintTracking::Global api
|
2023-03-29 11:45:09 -04:00 |
|
Ed Minnix
|
bbf7c67f9b
|
Remove unnecessary private markers (CommandLine and Request forgery)
|
2023-03-29 11:45:09 -04:00 |
|
Ed Minnix
|
0249890747
|
Refactor CommandLineQuery.qll
|
2023-03-29 11:45:09 -04:00 |
|
Edward Minnix III
|
117a983423
|
Merge pull request #12639 from egregius313/egregius313/java/refactor-injection-queries
Java: Refactor injection queries to new dataflow API
|
2023-03-29 11:02:18 -04:00 |
|
Jeroen Ketema
|
edfd8715c8
|
Merge pull request #12695 from jketema/swift-configsig
Swift: Refactor a number of queries to use `DataFlow::ConfigSig`
|
2023-03-29 16:07:47 +02:00 |
|
Mathias Vorreiter Pedersen
|
e3e68b7753
|
Merge pull request #12642 from geoffw0/modernstring
Swift: Modernize the swift/string-length-conflation query
|
2023-03-29 14:55:40 +01:00 |
|
Mathias Vorreiter Pedersen
|
6dd45b31e1
|
Merge pull request #12696 from MathiasVP/range-analysis-of-mul-expr
C++: IR-based range analysis of multiplication
|
2023-03-29 14:05:55 +01:00 |
|
Mathias Vorreiter Pedersen
|
9d5c785d89
|
C++: Even more fix'ing QLDoc.
|
2023-03-29 12:45:27 +01:00 |
|
Mathias Vorreiter Pedersen
|
09d0385f0f
|
C++: Fix QLDoc.
|
2023-03-29 12:42:32 +01:00 |
|
Mathias Vorreiter Pedersen
|
c14bccf7eb
|
C++: Fix QLDoc.
|
2023-03-29 12:41:04 +01:00 |
|
Anders Schack-Mulligen
|
d0fa7c7ff8
|
Merge pull request #12683 from aschackmull/java/rangeanalysis-add
Java: Support double-recursive range analysis bounds for addition.
|
2023-03-29 13:39:59 +02:00 |
|
Mathias Vorreiter Pedersen
|
fe487a1ae8
|
C++: Respond to PR reviews.
|
2023-03-29 12:30:24 +01:00 |
|
Tom Hvitved
|
e91b5de875
|
Run Ruby QL tests on changes to shared
|
2023-03-29 13:27:06 +02:00 |
|
Ed Minnix
|
c8579d8c26
|
RegexInjection docs
|
2023-03-29 07:24:32 -04:00 |
|
Ed Minnix
|
17cdd16c19
|
Fix miscopied isBarrier in JndiInjectionQuery
|
2023-03-29 07:23:13 -04:00 |
|
Jeroen Ketema
|
0acca2ba76
|
Merge pull request #12687 from jketema/unit-2
Make imports of `codeql.util.Unit` private
|
2023-03-29 13:07:12 +02:00 |
|
Mathias Vorreiter Pedersen
|
1dd3e385ab
|
Merge pull request #12133 from d10c/swift/case-let-dataflow
Swift: `case let` dataflow
|
2023-03-29 11:31:48 +01:00 |
|
Nora Dimitrijević
|
d0de4a5d93
|
Merge branch 'main' into swift/case-let-dataflow
|
2023-03-29 11:55:34 +02:00 |
|
Nora Dimitrijević
|
70ed8c6e8f
|
Swift: add QLdoc to Pattern
|
2023-03-29 11:52:50 +02:00 |
|
Nora Dimitrijević
|
3fbf90cbd7
|
Swift: add ConstructorDecl.isFailable/0
|
2023-03-29 11:52:50 +02:00 |
|
Tamás Vajk
|
08d2d3b96b
|
Merge pull request #12699 from tamasvajk/fix/ruby-makefile
Ruby: Adjust Makefile after shared library refactoring
|
2023-03-29 11:48:24 +02:00 |
|
Anders Schack-Mulligen
|
7844384768
|
Java: Add change note.
|
2023-03-29 11:39:07 +02:00 |
|
Asger F
|
2ef1743bf4
|
Merge pull request #11615 from asgerf/js/extension-docs
JS: docs for customizing library models with data extensions
|
2023-03-29 10:20:53 +02:00 |
|
Tamas Vajk
|
85d824b96b
|
Ruby: Adjust Makefile after shared library refactoring
|
2023-03-29 10:12:10 +02:00 |
|
Edward Minnix III
|
e39318853f
|
Merge pull request #12693 from atorralba/atorralba/java/insecure-ldap-auth-tag
Java: Fix InsecureLdapAuth tags
|
2023-03-28 14:56:56 -04:00 |
|
Nora Dimitrijević
|
55ce9760e1
|
Merge branch 'main' into swift/case-let-dataflow
|
2023-03-28 18:20:33 +02:00 |
|
Nora Dimitrijević
|
2a5f29cd0f
|
Swift: remove getIdentityPreservingEnclosingPattern
The Pattern public interface doesn't really need it.
|
2023-03-28 18:18:32 +02:00 |
|
Mathias Vorreiter Pedersen
|
8021958ac5
|
C++: Accept test changes.
|
2023-03-28 16:50:18 +01:00 |
|
Mathias Vorreiter Pedersen
|
6699a0cb1a
|
C++: Add range analysis for binary multiplication.
|
2023-03-28 16:50:18 +01:00 |
|
Jeroen Ketema
|
a381aa4d37
|
Swift: Use DataFlow::ConfigSig in InsufficientHashIterations.ql
|
2023-03-28 17:39:58 +02:00 |
|
Jeroen Ketema
|
60f033f10c
|
Swift: Use DataFlow::ConfigSig in ConstantSalt.ql
|
2023-03-28 17:39:18 +02:00 |
|
Jeroen Ketema
|
b97b3d9975
|
Swift: Use DtatFlow::ConfigSig in InsecureTLS.ql
|
2023-03-28 17:38:46 +02:00 |
|
Jeroen Ketema
|
42248220b4
|
Swift: Use DataFlow::ConfigSig in WeakSensitiveDataHashing.ql
|
2023-03-28 17:38:11 +02:00 |
|
Jeroen Ketema
|
a8599eb689
|
Swift: Use DataFlow::ConfigSig in ECBEncryption.ql
|
2023-03-28 17:37:37 +02:00 |
|
Jeroen Ketema
|
cc23ba3698
|
Swift: Use DataFlow::ConfigSig in HardcodedEncryptionKey.ql
|
2023-03-28 17:37:05 +02:00 |
|
Jeroen Ketema
|
1592b578d9
|
Swift: Use DataFlow::ConfigSig in ConstantPassword.ql
|
2023-03-28 17:36:37 +02:00 |
|
Jeroen Ketema
|
31512b8627
|
Swift: Use DataFlow::ConfigSig in StaticInitializationVector.ql
|
2023-03-28 17:36:00 +02:00 |
|
Asger F
|
080acdbfff
|
JS: remove links to docs file... again
|
2023-03-28 17:29:26 +02:00 |
|
Tony Torralba
|
ce191e1f9f
|
Fix InsecureLdapAuth tags
|
2023-03-28 17:10:33 +02:00 |
|
Edward Minnix III
|
b00104ebe3
|
Merge pull request #12458 from egregius313/egregius313/promote-insecure-ldap-authentication
Java: Promote LDAP Authentication Query
|
2023-03-28 10:39:17 -04:00 |
|
Edward Minnix III
|
97ec808a6f
|
Make configuration public
Co-authored-by: Tony Torralba <atorralba@users.noreply.github.com>
|
2023-03-28 10:28:15 -04:00 |
|
Erik Krogh Kristensen
|
451f6f01bb
|
Merge pull request #12633 from erik-krogh/more-global-flow
JS: better callgraph support for global variables
|
2023-03-28 15:19:50 +02:00 |
|