8859 Commits

Author	SHA1	Message	Date
aegilops	da9e1e61a4	Moved examples into separate files	2024-06-18 19:50:06 +01:00
aegilops	7ee5655f31	Merge branch 'aegilops/js/insecure-helmet-middleware' of https://github.com/aegilops/codeql into aegilops/js/insecure-helmet-middleware	2024-06-07 15:50:15 +01:00
aegilops	975811ae59	Change layout of qhelp example code	2024-06-07 15:50:06 +01:00
Paul Hodgkinson	43a140e62c	Merge branch 'main' into aegilops/js/insecure-helmet-middleware	2024-06-07 15:46:18 +01:00
aegilops	7136763c37	Formatting	2024-06-07 15:36:39 +01:00
aegilops	465d64a810	Removed br tags	2024-06-07 15:34:45 +01:00
aegilops	29322f5ff0	Merge branch 'aegilops/js/insecure-helmet-middleware' of https://github.com/aegilops/codeql into aegilops/js/insecure-helmet-middleware	2024-06-07 15:32:23 +01:00
aegilops	f5d465f08a	Added data extension to allow setting extra required Helmet features	2024-06-07 15:32:11 +01:00
Anders Schack-Mulligen	0c47203580	Javascript: Add support for pretty-printed provenace in tests.	2024-06-07 11:47:49 +02:00
Asger F	6e0f3df573	Merge pull request #14120 from asgerf/dynamic/typemodel-istypeused ... Dynamic: add TypeModel.isTypeUsed	2024-06-06 15:31:16 +02:00
Paolo Tranquilli	096a31dbef	Mark all integration tests as legacy ... This is in preparation for the new integration test framework. Tests marked thus will be run by the current framework and ignored by the new one.	2024-05-31 16:04:50 +02:00
github-actions[bot]	906b65d09c	Post-release preparation for codeql-cli-2.17.4	2024-05-28 18:02:25 +00:00
github-actions[bot]	33b4ae8bbb	Release preparation for version 2.17.4	2024-05-28 15:44:32 +00:00
Erik Krogh Kristensen	c743abad54	Merge pull request #14294 from am0o0/amammad-js-CodeInjection_execa ... JS: provide command execution sinks for execa package	2024-05-24 09:20:19 +02:00
Dave Bartolomeo	613ccaac1d	Add change note to all v1.0.0 packs	2024-05-23 13:01:22 -04:00
erik-krogh	c80f48b23a	Merge branch 'main' into amammad-js-CodeInjection_execa	2024-05-23 08:02:22 +02:00
Dave Bartolomeo	ffe4c8c87b	Update all pack versions to 1.0.0	2024-05-22 13:39:08 -04:00
erik-krogh	a30bac14e9	add change-note	2024-05-21 22:14:39 +02:00
Paul Hodgkinson	65dfd4c860	Merge branch 'main' into aegilops/js/insecure-helmet-middleware	2024-05-21 14:46:49 +01:00
aegilops	68e21a594a	Fixed query help formatting issues	2024-05-21 14:35:18 +01:00
aegilops	bda794fde7	Fixed wrong filenames in the InsecureHelmet tests	2024-05-21 14:34:58 +01:00
aegilops	83037b1195	Adjust structure to avoid warnings about message	2024-05-21 13:51:13 +01:00
Asger F	3b211089d6	JS: Remove redundant import	2024-05-21 14:40:17 +02:00
Asger F	6f19fc2fcd	JS: Add isTypeUsed to avoid overpruning	2024-05-21 14:38:52 +02:00
Asger F	632cce2c16	JS: Add failing test due to overpruning	2024-05-21 14:20:13 +02:00
Asger F	43abc72780	JS: Add TypeModel.isTypeUsed ... f	2024-05-21 14:19:56 +02:00
Joe Farebrother	01a6c5e82f	Merge pull request #16446 from joefarebrother/shared-sensitive-heuristics ... Ruby/Python/JS/Swift: Add category of Private information to shared sensitive data heuristics	2024-05-21 09:07:13 +01:00
erik-krogh	c166cb406a	Merge branch 'main' into amammad-js-CodeInjection_execa	2024-05-21 08:48:12 +02:00
aegilops	8300aeb0a0	Tests for InsecureHelmet	2024-05-20 12:05:42 +01:00
aegilops	3a885eaf9f	Insecure Helmet middle configuration - frameguard or CSP to 'false'	2024-05-20 11:58:55 +01:00
Erik Krogh Kristensen	03cf9b702c	Merge pull request #14291 from am0o0/amammad-js-CodeInjection_Shelljs ... JS: Shelljs improvement	2024-05-17 11:14:11 +02:00
am0o0	42a9962519	make shellJSMember predicate private, improve predicate document	2024-05-16 14:05:06 +02:00
Asger F	499c4df79b	Merge pull request #13554 from am0o0/amammad-js-bombs ... JS: Decompression Bombs	2024-05-16 13:25:41 +02:00
erik-krogh	56dff8540f	add an example of how to get a floating point value between 0 and 1	2024-05-16 11:15:07 +02:00
erik-krogh	066f3b61a2	RandomSource is deprecated, it's crypto now	2024-05-16 11:14:50 +02:00
github-actions[bot]	32e8b5c667	Post-release preparation for codeql-cli-2.17.3	2024-05-14 21:14:08 +00:00
github-actions[bot]	100166fa53	Release preparation for version 2.17.3	2024-05-14 19:23:18 +00:00
Chuan-kai Lin	1758a1e04b	Merge pull request #16422 from github/cklin/javascript-entities-reorder ... JS: Use entities in reorder directives	2024-05-13 10:26:41 -07:00
Joe Farebrother	da93a08639	Add change notes ... No change note is needed for Swift, as the new heuristics are unused and thus should not affect any queries.	2024-05-09 10:03:20 +01:00
Joe Farebrother	9aff22c664	Fix typos in sensitive data regex	2024-05-09 09:39:03 +01:00
Joe Farebrother	5f4bc4197b	Add private category to sensitive data heuristics	2024-05-08 10:02:00 +01:00
Chuan-kai Lin	9b51e0e0ee	JS: Use entities in reorder directives	2024-05-03 11:17:13 -07:00
erik-krogh	39a8b49222	add qhelp recommendation that you can use an obvious placeholder value	2024-05-03 19:37:31 +02:00
erik-krogh	b209fc67cb	test the change to hardcoded-credentials	2024-05-03 19:34:18 +02:00
erik-krogh	d9e8e0e00a	use some more standard values for credentials-kind for NodeJS client credentials	2024-05-03 13:58:37 +02:00
erik-krogh	ff85db36e2	exclude credentials as kind key from hardcoded-credentials when the key looks like a dummy password	2024-05-03 13:58:11 +02:00
Owen Mansel-Chan	83249cd9c2	Fix grammar in comment	2024-05-02 09:59:48 +01:00
Owen Mansel-Chan	16dcc0969b	Standardise comment explaining why extensible predicates must be defined	2024-05-01 22:00:01 +01:00
Owen Mansel-Chan	09e59ccf44	Name files with empty definitions of MaD extensible predicates to erowdmpty.model.yml	2024-05-01 21:39:38 +01:00
github-actions[bot]	99928b82ed	Post-release preparation for codeql-cli-2.17.2	2024-04-30 12:15:35 +00:00