Erik Krogh Kristensen
|
c58f67b189
|
reintroduce performance improvement - but sound this time
|
2021-01-06 10:44:13 +01:00 |
|
Erik Krogh Kristensen
|
4392f0270c
|
autoformat
|
2021-01-06 10:37:36 +01:00 |
|
Erik Krogh Kristensen
|
3d98732136
|
support nested stars in js/ReDoS
|
2021-01-06 10:37:35 +01:00 |
|
Erik Krogh Kristensen
|
77967c3e63
|
undo unsound optimization in js/ReDoS
|
2021-01-06 10:36:21 +01:00 |
|
Erik Krogh Kristensen
|
b42aac17d5
|
add more tests for js/ReDoS
|
2021-01-06 10:34:06 +01:00 |
|
Shati Patel
|
5a9e098479
|
Merge pull request #4875 from madneal/htmlComment
Html comment
|
2021-01-05 16:15:57 +00:00 |
|
CodeQL CI
|
60bba5ea42
|
Merge pull request #4886 from madneal/test-custom-quries
Approved by shati-patel
|
2021-01-05 08:07:12 -08:00 |
|
Shati Patel
|
1c0e94984c
|
Update docs/codeql/codeql-cli/query-reference-files.rst
|
2021-01-05 15:50:54 +00:00 |
|
Shati Patel
|
edcd2dd294
|
Merge pull request #4878 from shati-patel/docs-pullquotes
Docs: Change remaining notes to "pull-quote" directives
|
2021-01-05 14:51:01 +00:00 |
|
Shati Patel
|
2702b65651
|
Merge pull request #4873 from shati-patel/docs-formatting
Docs: Fix CSS for "pull-quotes" and expandable sections
|
2021-01-05 14:50:45 +00:00 |
|
Taus
|
75cfec863f
|
Merge pull request #4828 from yoff/yoff-python-add-source-nodes
Python: add source nodes
|
2021-01-05 15:07:51 +01:00 |
|
Chris Smowton
|
e87fd86e63
|
Merge pull request #4814 from luchua-bc/java/password-in-configuration
Java: Password in Java EE configuration files
|
2021-01-05 11:42:27 +00:00 |
|
CodeQL CI
|
a5e28ac6d6
|
Merge pull request #4847 from erik-krogh/afterReDoS
Approved by esbena
|
2021-01-05 01:51:27 -08:00 |
|
Anders Schack-Mulligen
|
26a9ba4aa0
|
Merge pull request #4898 from JLLeitschuh/feat/JLL/system_get_property
Add MethodAccessSystemGetProperty predicate
|
2021-01-05 10:46:22 +01:00 |
|
Jonathan Leitschuh
|
ba4a562c9a
|
Update PrintAst.actual with new test output
|
2021-01-04 23:37:58 -05:00 |
|
Rasmus Lerchedahl Petersen
|
8ceb33d3f7
|
Python: Also restrict StepSumary::step
|
2021-01-04 16:42:11 +01:00 |
|
Jonathan Leitschuh
|
028e4756bb
|
Apply suggestions from code review
Co-authored-by: Anders Schack-Mulligen <aschackmull@users.noreply.github.com>
|
2021-01-04 10:13:52 -05:00 |
|
Erik Krogh Kristensen
|
368603eefa
|
add change note
|
2021-01-04 15:23:52 +01:00 |
|
Tom Hvitved
|
7f25efd43f
|
Merge pull request #4858 from hvitved/csharp/merge-format-queries
C#: Merge queries `FormatInvalid.ql`, `FormatMissingArgument.ql`, and `FormatUnusedArgument.ql`
|
2021-01-04 14:53:34 +01:00 |
|
Tom Hvitved
|
1237e566d0
|
C#: Fix typo
|
2021-01-04 12:59:45 +01:00 |
|
Erik Krogh Kristensen
|
ce8cc2368b
|
improve precision of intersect
|
2021-01-04 11:55:51 +01:00 |
|
Jonas Jensen
|
86194226e2
|
Merge pull request #4891 from MathiasVP/get-an-overload-perf-fix
C++: Fix join order in getAnOverload
|
2021-01-04 10:02:59 +01:00 |
|
Tom Hvitved
|
6d973d0103
|
Merge pull request #4857 from hvitved/csharp/expr-has-value
C#: Move `Expr::hasValue()` to `DotNet::Expr`
|
2021-01-04 10:02:45 +01:00 |
|
Mathias Vorreiter Pedersen
|
134982c5a9
|
C++: Respond to review comments.
|
2021-01-04 09:06:58 +01:00 |
|
Jonathan Leitschuh
|
54950c2f42
|
Add MethodAccessSystemGetProperty predicate
|
2021-01-01 20:07:45 -05:00 |
|
Mathias Vorreiter Pedersen
|
454605b7b1
|
C++: Fix join order in getAnOverload.
|
2020-12-30 10:34:26 +01:00 |
|
neal1991
|
380d15eabe
|
fix for the dead link, #4885
|
2020-12-28 10:28:50 +08:00 |
|
Shati Patel
|
8c7245113d
|
Change ordering of sidebar TOC to match index file
|
2020-12-23 17:16:56 +00:00 |
|
Shati Patel
|
050b15103e
|
Convert remaining notes to pull-quote directives
|
2020-12-23 17:13:24 +00:00 |
|
Shati Patel
|
dc528767f6
|
Don't turn arrow into ▶ emoji
|
2020-12-23 16:47:37 +00:00 |
|
madneal
|
583395d862
|
fix LineComment and BlockComment level
|
2020-12-23 19:49:30 +08:00 |
|
neal1991
|
623de3df41
|
the level of HTMLHtmlCommentStart and HtmlCommentEnd should be same
|
2020-12-23 19:18:13 +08:00 |
|
Shati Patel
|
c2fdb47abe
|
Docs: Fix CSS for "pull-quotes"
|
2020-12-23 07:30:11 +00:00 |
|
Erik Krogh Kristensen
|
44571ffeea
|
use the full ascii set instead of a few chosen chars
|
2020-12-22 16:00:23 +01:00 |
|
Erik Krogh Kristensen
|
303408b774
|
remove duplicate char
|
2020-12-22 15:48:24 +01:00 |
|
Erik Krogh Kristensen
|
354954c80c
|
changes based on review
|
2020-12-22 15:41:06 +01:00 |
|
CodeQL CI
|
2bb96369f1
|
Merge pull request #4868 from erik-krogh/boundShell
Approved by esbena
|
2020-12-22 03:35:42 -08:00 |
|
CodeQL CI
|
7c6b4d7324
|
Merge pull request #4865 from esbena/js/fix-execa-model
Approved by erik-krogh
|
2020-12-22 03:32:26 -08:00 |
|
Erik Krogh Kristensen
|
da9a4e5267
|
add test
|
2020-12-22 11:22:25 +01:00 |
|
Erik Krogh Kristensen
|
b8b5aef5f4
|
recognize Object.defineProperty(obj, prop, {get: func}) as a property-write
|
2020-12-22 11:21:41 +01:00 |
|
Erik Krogh Kristensen
|
6a9089b15e
|
recognize bound functions in js/shell-command-constructed-from-input
|
2020-12-22 11:20:34 +01:00 |
|
CodeQL CI
|
67d0f4d938
|
Merge pull request #4866 from esbena/js/add-tests-for-examples
Approved by erik-krogh
|
2020-12-22 02:04:47 -08:00 |
|
CodeQL CI
|
e2bba97794
|
Merge pull request #4860 from erik-krogh/functionExports
Approved by esbena
|
2020-12-22 01:05:37 -08:00 |
|
CodeQL CI
|
b35edc9de6
|
Merge pull request #4732 from github/esbena-patch-4
Approved by erik-krogh
|
2020-12-22 00:42:25 -08:00 |
|
Esben Sparre Andreasen
|
34a09ff522
|
JS: add js/conditional-bypass example as a test case
|
2020-12-22 09:34:25 +01:00 |
|
Esben Sparre Andreasen
|
009527c69c
|
JS: add change note
|
2020-12-22 09:26:35 +01:00 |
|
Esben Sparre Andreasen
|
ab4f3ea259
|
JS: fixup for execa.shell and execa.shellSync models
|
2020-12-22 09:06:18 +01:00 |
|
Esben Sparre Andreasen
|
ba714a1214
|
JS: add execa.shell tests
|
2020-12-22 09:01:43 +01:00 |
|
Jonas Jensen
|
430194bb66
|
Merge pull request #4863 from MathiasVP/is-source-on-default-taint-tracking
C++: Overridable isSource on DefaultTaintTracking
|
2020-12-22 08:32:07 +01:00 |
|
Mathias Vorreiter Pedersen
|
4f07474b62
|
C++: Also allow custom sources in taintedWithoutGlobals
|
2020-12-21 19:55:47 +01:00 |
|