12803 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
Esben Sparre Andreasen	c400b45cd6	JS: make the Fastify model support isUserControlledObject	2020-05-21 13:42:28 +02:00
Esben Sparre Andreasen	894033df8a	JS: de-boilerplate the fastify model: address expr/dataflow comments	2020-05-21 13:42:28 +02:00
Esben Sparre Andreasen	74fc33e2a8	JS: make the qldoc check happy	2020-05-21 13:42:27 +02:00
Esben Sparre Andreasen	a76c70d2d7	JS: model fastify	2020-05-21 13:42:27 +02:00
semmle-qlci	8df7b7c42a	Merge pull request #3525 from erik-krogh/ZipTaint ... Approved by asgerf	2020-05-20 16:45:02 +01:00
semmle-qlci	079021a3e9	Merge pull request #3453 from RasmusWL/python-flask-routed-params ... Approved by tausbn	2020-05-20 14:47:53 +01:00
Erik Krogh Kristensen	a23cde1354	autoformat	2020-05-20 15:36:46 +02:00
Erik Krogh Kristensen	5a3eec87c0	rename isTaintedPathStep to isPosixPathStep	2020-05-20 13:44:14 +02:00
Erik Krogh Kristensen	97c199e10d	update docstring ... Co-authored-by: Asger F <asgerf@github.com>	2020-05-20 13:40:12 +02:00
Rasmus Wriedt Larsen	712d4bd150	Python: Fix typo in docs ... Co-authored-by: Taus <tausbn@gmail.com>	2020-05-20 13:06:24 +02:00
semmle-qlci	c15d22d9f8	Merge pull request #3516 from asger-semmle/js/typescript-3.9.2 ... Approved by erik-krogh	2020-05-20 11:31:57 +01:00
semmle-qlci	2bbc1c2af0	Merge pull request #3478 from erik-krogh/PromiseAll ... Approved by asgerf, esbena	2020-05-20 11:03:05 +01:00
semmle-qlci	29b8a0db92	Merge pull request #3508 from asger-semmle/js/shared-data-flow-node ... Approved by esbena	2020-05-20 10:58:09 +01:00
Erik Krogh Kristensen	33e0f25f3c	use NodeJSLib::Path instead of DataFlow::moduleMember	2020-05-20 10:30:23 +02:00
Erik Krogh Kristensen	7c51dff0f7	share implementation between TaintedPath and ZipSlip	2020-05-20 10:10:04 +02:00
Tom Hvitved	e9839198f4	Merge pull request #3484 from calumgrant/cs/index-initializers ... C#: Extract indexed initializers correctly	2020-05-20 09:22:47 +02:00
Tom Hvitved	97080731ad	Merge pull request #3486 from h3ku/master ... CSHARP: Add experimental query for tainted WebClient	2020-05-20 08:17:05 +02:00
Robert Marsh	28c2acabe5	Merge pull request #3505 from dbartol/github/codeql-c-analysis-team/69 ... C++/C#: Remove `UnmodeledDefinition` instruction	2020-05-19 17:17:53 -07:00
semmle-qlci	0a8b3adc25	Merge pull request #3518 from felicitymay/merge-124-master ... Approved by shati-patel	2020-05-19 19:30:47 +01:00
Felicity Chapman	99d7a21425	Merge branch 'rc/1.24' into merge-124-master	2020-05-19 19:04:44 +01:00
Felicity Chapman	cca3922d00	Merge pull request #3517 from felicitymay/1.24/SD-54-update-contact ... CodeQL 1.24: Update information on support	2020-05-19 18:57:34 +01:00
Tom Hvitved	f0f833b58f	Merge pull request #3512 from jbj/mergeback-2020-05-19 ... Mergeback rc/1.24 -> master	2020-05-19 19:51:36 +02:00
Felicity Chapman	70d642a956	Update information on support	2020-05-19 18:17:17 +01:00
Jonas Jensen	d38700a87c	Merge remote-tracking branch 'upstream/master' into mergeback-2020-05-19 ... Conflicts: cpp/ql/test/library-tests/dataflow/DefaultTaintTracking/tainted.expected cpp/ql/test/library-tests/dataflow/DefaultTaintTracking/test_diff.expected	2020-05-19 17:44:15 +02:00
Asger Feldthaus	9d006327df	JS: Update qldoc for ValueNode	2020-05-19 15:57:07 +01:00
semmle-qlci	26dfca80f6	Merge pull request #3510 from max-schaefer/cull-boring-queries ... Approved by asgerf, esbena	2020-05-19 15:41:53 +01:00
Asger Feldthaus	b39e0ec091	JS: Update output due to whitelisting change	2020-05-19 15:30:36 +01:00
Hector Cuesta	66d77a43bd	Fix typo in comment and TaintTrackingConfiguration name	2020-05-19 15:15:03 +01:00
Hector Cuesta	e18d8c5234	Remove duplicated CWE in security tag	2020-05-19 15:12:43 +01:00
Hector Cuesta	7d1ef92fbf	Remove unnecessary CWE reference.	2020-05-19 15:09:17 +01:00
Mathias Vorreiter Pedersen	f0f7e531d7	Merge pull request #3511 from jbj/simplify-field-conflation-test ... C++: Simplify field conflation test	2020-05-19 16:04:45 +02:00
yo-h	bfeaeccf60	Merge pull request #3507 from aschackmull/java/cleanup-deprecated-overrides ... Java: Clean up deprecated overrides.	2020-05-19 09:47:57 -04:00
Max Schaefer	a803120414	Lower precision for a number of queries. ... These queries are currently run by default, but don't have their results displayed. Looking through results on LGTM.com, they are either false positives (e.g., `BitwiseSignCheck` which flags many perfectly harmless operations and `CompareIdenticalValues` which mostly flags NaN checks) or harmless results that developers are unlikely to care about (e.g., `EmptyArrayInit` or `MisspelledIdentifier`). With this PR, the only queries that are still run but not displayed are security queries, where different considerations may apply.	2020-05-19 13:43:17 +01:00
Jonas Jensen	5318d42c4f	Merge remote-tracking branch 'upstream/rc/1.24' into mergeback-2020-05-19	2020-05-19 14:42:58 +02:00
Jonas Jensen	486f06ab18	C++: Simplify field conflation test ... It turned out the `memcpy` step was not even necessary.	2020-05-19 14:12:11 +02:00
Alexander Eyers-Taylor	57dbe5793f	Merge pull request #3501 from jbj/dispatch-global-union ... C++: Fix struct field conflation in IR data flow	2020-05-19 12:29:25 +01:00
Asger F	875c3706e3	Update javascript/ql/src/semmle/javascript/CFG.qll ... Co-authored-by: Esben Sparre Andreasen <esbena@github.com>	2020-05-19 12:08:51 +01:00
Asger Feldthaus	3f30564d93	JS: Autoformat	2020-05-19 12:05:32 +01:00
Asger Feldthaus	0db0ddf476	JS: Add a change note	2020-05-19 11:07:35 +01:00
Asger Feldthaus	525b9871e0	JS: Update benign test output changes	2020-05-19 11:07:08 +01:00
Asger Feldthaus	b5b93f33bc	JS: Bump to TypeScript 3.9.2	2020-05-19 11:07:08 +01:00
Anders Schack-Mulligen	6f03a0bc39	Merge pull request #3487 from luchua-bc/java-sensitive-jboss-logging ... Add JBoss logging	2020-05-19 11:04:18 +02:00
Anders Schack-Mulligen	c36e6213f1	Merge pull request #3288 from ggolawski/jndi-injection ... CodeQL query to detect JNDI injections	2020-05-19 11:03:29 +02:00
Asger Feldthaus	f49b36aec7	JS: Change note	2020-05-19 09:52:26 +01:00
Anders Schack-Mulligen	9d7329de30	Java: Clean up deprecated overrides.	2020-05-19 10:41:41 +02:00
Erik Krogh Kristensen	5a5192b890	add testing for complex path sanitizer in ZipSlip	2020-05-19 10:17:15 +02:00
semmle-qlci	0c081a8e87	Merge pull request #3497 from esbena/js/yield-and-local-objects ... Approved by asgerf, erik-krogh	2020-05-19 09:02:22 +01:00
semmle-qlci	0d762066f5	Merge pull request #3504 from erik-krogh/unique ... Approved by esbena	2020-05-19 08:35:08 +01:00
Dave Bartolomeo	d6ef94a4c7	C++: Remove dead comment	2020-05-18 23:05:19 -04:00
Dave Bartolomeo	3758f3c48d	C++: Fix syntax-zoo test output	2020-05-18 18:07:52 -04:00