494 Commits

Author	SHA1	Message	Date
Nick Rolfe	ae9b492b33	Merge pull request #277 from jbj/missing-return-high ... C++: Make cpp/missing-return visible on LGTM again	2018-10-04 09:45:34 +01:00
semmle-qlci	bea86e52fb	Merge pull request #275 from xiemaisi/js/workaround-for-nested-imports ... Approved by asger-semmle	2018-10-04 08:25:52 +01:00
Max Schaefer	335adee69c	JavaScript: Add change note.	2018-10-03 16:03:12 +01:00
Jonas Jensen	9c0ba51873	C++: Make cpp/missing-return visible on LGTM again	2018-10-03 15:02:15 +02:00
Max Schaefer	220fcb59bd	JavaScript: Add change note.	2018-10-03 13:08:31 +01:00
semmle-qlci	e9adc63d91	Merge pull request #260 from xiemaisi/js/confusing-precedence ... Approved by esben-semmle, mc-semmle	2018-10-03 09:07:18 +01:00
Jonas Jensen	4ad4b19911	Merge pull request #189 from geoffw0/wrongtypedef ... CPP: Permit more typedefs in WrongTypeFormatArguments.ql	2018-10-03 09:40:06 +02:00
Robert Marsh	7c2bcf6fa6	C++/Doc: change note for PR #269	2018-10-02 14:25:08 -07:00
Max Schaefer	425d2bfba7	Merge pull request #266 from esben-semmle/js/improve-dead-store-of-local ... JS: support noop parentheses in js/useless-assignment-to-local	2018-10-02 16:19:56 +01:00
Max Schaefer	768368498f	JavaScript: Introduce new query UnclearOperatorPrecedence.	2018-10-02 08:46:51 +01:00
Max Schaefer	a63b7fc215	JavaScript: Introduce new library predicate for computing whitespace around binary operators.	2018-10-02 08:46:11 +01:00
semmle-qlci	829a5cc451	Merge pull request #259 from asger-semmle/open-redirect-expr ... Approved by xiemaisi	2018-10-02 08:32:48 +01:00
Esben Sparre Andreasen	595fe217dd	JS: support noop parentheses in js/useless-assignment-to-local ... The syntatic recognizer `isNullOrUndef` did not handle expressions that were wrapped in parentheses. This eliminates some results here: https://lgtm.com/projects/g/vuejs/vue/alerts?mode=tree&ruleFocus=7900088	2018-10-02 09:31:32 +02:00
Jonas Jensen	54cd173da8	C++: Changelog entries for two new queries	2018-10-01 13:41:44 +02:00
Asger F	9f07b1011d	JS: bugfix in server-side redirect query	2018-10-01 12:34:13 +01:00
Asger F	8d3ac39b65	JS: change note	2018-09-27 10:21:57 +01:00
semmle-qlci	a93939b827	Merge pull request #230 from esben-semmle/js/ad-hoc-whitelisting ... Approved by xiemaisi	2018-09-26 14:14:25 +01:00
Esben Sparre Andreasen	7c006d4530	Merge pull request #222 from xiemaisi/js/identity-replacement ... JavaScript: Add new query flagging identity replacements.	2018-09-26 09:25:19 +02:00
Esben Sparre Andreasen	097a2811e1	JS: change notes for AdHocWhitelistCheckSanitizer	2018-09-26 09:20:40 +02:00
Max Schaefer	1ab11109f9	JavaScript: Add new query flagging identity replacements.	2018-09-25 11:27:11 +01:00
Geoffrey White	d975c09012	CPP: Change note.	2018-09-24 17:25:34 +01:00
semmle-qlci	7f56be6fe2	Merge pull request #216 from asger-semmle/lusca-csrf ... Approved by esben-semmle	2018-09-24 11:34:24 +01:00
Dave Bartolomeo	26abf5d4a2	Force LF for basically everything.	2018-09-23 16:24:31 -07:00
Geoffrey White	492d79ea53	CPP: Change note.	2018-09-21 21:13:37 +01:00
Asger F	4797924bea	JS: review comments	2018-09-21 14:46:21 +01:00
Asger F	d2a04d32be	JS: add change note	2018-09-21 13:20:02 +01:00
Esben Sparre Andreasen	2cedc81774	JS: polish js/enabling-electron-renderer-node-integration meta info	2018-09-19 13:45:42 +02:00
semmle-qlci	89f2dbf8db	Merge pull request #195 from esben-semmle/js/reflected-xss-through-filenames ... Approved by asger-semmle	2018-09-19 12:42:22 +01:00
Jonas Jensen	86fe0ce42e	Merge pull request #107 from rdmarsh2/rdmarsh/cpp/HashCons ... C++: HashCons library	2018-09-18 11:45:26 +02:00
Esben Sparre Andreasen	bb48421d77	JS: address doc review comments	2018-09-17 11:08:35 +02:00
Esben Sparre Andreasen	5781b518bc	JS: change notes for js/stored-xss	2018-09-14 15:30:44 +02:00
Asger F	a3562aa4a7	Merge pull request #193 from esben-semmle/js/reduce-precision-of-remote-property-injection ... JS: lower @precision of js/remote-property-injection	2018-09-14 11:14:13 +01:00
semmle-qlci	abbadf24f0	Merge pull request #192 from esben-semmle/js/additional-array-taint-steps ... Approved by asger-semmle	2018-09-14 10:02:36 +01:00
Esben Sparre Andreasen	81aeda69e1	JS: lower @precision of js/remote-property-injection	2018-09-14 07:37:47 +02:00
semmle-qlci	961ecfb43f	Merge pull request #187 from esben-semmle/js/additional-whitelisting-form-unbound-event-handlers ... Approved by asger-semmle	2018-09-14 06:35:39 +01:00
Esben Sparre Andreasen	cb2bd9e0ae	JS: change notes for additional array taint steps	2018-09-13 21:36:53 +02:00
Robert Marsh	1a14b13703	C++: migrate change note	2018-09-13 09:53:41 -07:00
semmle-qlci	3d022298dc	Merge pull request #186 from Semmle/rc/1.18 ... Approved by esben-semmle	2018-09-13 12:34:54 +01:00
Esben Sparre Andreasen	52013f3071	JS: change notes for improved js/unbound-event-handler-receiver	2018-09-13 08:43:01 +02:00
Felicity Chapman	4d512a5b01	Remove non-LGTM query (see following PR)	2018-09-11 22:54:37 +01:00
Felicity Chapman	7dd891d908	Further updates and addition of query @ids	2018-09-11 22:51:14 +01:00
Felicity Chapman	223bf6cf56	Updates for consistency	2018-09-11 22:31:32 +01:00
semmle-qlci	b17aeb689c	Merge pull request #118 from esben-semmle/js/request-forgery ... Approved by asger-semmle	2018-09-11 16:28:59 +01:00
Felicity Chapman	f48317f381	Minor updates to prepare for publication	2018-09-11 08:27:20 +01:00
Felicity Chapman	620f99c5a3	Remove template text	2018-09-11 08:14:17 +01:00
Tom Hvitved	70e713122f	Merge branch 'rc/1.18' into merge-rc	2018-09-11 09:11:03 +02:00
Robert Marsh	990bfb4663	C++: change note for HashCons library	2018-09-10 12:22:45 -07:00
Esben Sparre Andreasen	aaf1ac770d	JS: reduce declared precision of js/request-forgery	2018-09-09 21:30:43 +02:00
Jonas Jensen	4051e348eb	Merge pull request #169 from felicity-semmle/1.18/cpp-finalize-change-notes ... LGTM 1.18: finalize change notes for C/C++	2018-09-09 15:39:40 +02:00
Felicity Chapman	a08177f16b	Address initial feebback	2018-09-09 11:52:35 +01:00