5890 Commits

Author	SHA1	Message	Date
Asger F	dd44187aed	Sync files again	2022-08-30 14:08:33 +02:00
Asger F	d5d1365104	Synchronize ApiGraphModels.qll	2022-08-30 14:07:37 +02:00
Erik Krogh Kristensen	8f0b999c31	Merge pull request #10207 from erik-krogh/fixRank ... fix performance issue in the ReDoS query	2022-08-30 10:17:11 +02:00
erik-krogh	f47b097d7c	put a limit on the length of the equivalent range	2022-08-29 21:03:52 +02:00
erik-krogh	77949cbeb3	add context to the rankState predicate in ExponentialBackTracking.qll	2022-08-29 13:42:05 +02:00
erik-krogh	1d1aa7c8b4	update some expected output	2022-08-25 20:52:30 +02:00
erik-krogh	cc7a9ef97a	rename more acronyms	2022-08-25 20:52:27 +02:00
Erik Krogh Kristensen	06afe9c0f4	Merge pull request #9816 from erik-krogh/msgConsis ... Make alert messages consistent across languages	2022-08-25 15:20:01 +02:00
Erik Krogh Kristensen	ba1ad00d2a	Merge pull request #10062 from erik-krogh/redosPrefix ... JS: use the shared regular expression libraries in `js/case-sensitive-middleware-path`	2022-08-25 12:57:16 +02:00
Ian Lynagh	3fcfd32eb1	Make *.ql non-executable	2022-08-24 16:55:11 +01:00
Ian Lynagh	4cd618f81c	Make *.expected non-executable	2022-08-24 16:51:50 +01:00
Ian Lynagh	501a9b3c6b	Make *.qll non-executable	2022-08-24 16:36:15 +01:00
erik-krogh	014dcd1454	fixup a Python query, it didn't select something with a location	2022-08-24 16:23:20 +02:00
erik-krogh	1c0f2251e2	Merge branch 'main' into msgConsis	2022-08-24 14:38:57 +02:00
erik-krogh	5e3cb08ed2	rename stateInPumpableRegexp to stateInRelevantRegexp	2022-08-23 12:40:45 +02:00
erik-krogh	1a7d3ee831	update expected output after changing queries	2022-08-23 12:35:32 +02:00
erik-krogh	d96d6721ba	change the alert message of unused-local-variable	2022-08-23 11:15:11 +02:00
erik-krogh	82d9180892	only have one deprecated alias for XmlDtd	2022-08-23 10:38:23 +02:00
Erik Krogh Kristensen	7704a9eeac	apply suggestions from Python review ... Co-authored-by: Rasmus Wriedt Larsen <rasmuswriedtlarsen@gmail.com>	2022-08-23 10:38:10 +02:00
erik-krogh	f7846a598e	add change-notes	2022-08-23 07:54:01 +02:00
erik-krogh	78ba7650b3	change the change-notes	2022-08-23 07:28:46 +02:00
erik-krogh	7e0bd5bde4	update expected output of tests	2022-08-22 21:41:47 +02:00
erik-krogh	ca299b9dc1	update py/unreachable-statement to match javascript/go	2022-08-22 21:41:47 +02:00
erik-krogh	31e15e27fc	update py/unsafe-deserialization to match ruby/javascript/java	2022-08-22 21:41:47 +02:00
erik-krogh	20625ae60d	update {js/go/py}/xpath-injection to match csharp/java	2022-08-22 21:41:46 +02:00
erik-krogh	9395f156de	update {js/py}/command-line-injection to match csharp/java	2022-08-22 21:41:46 +02:00
erik-krogh	2d0a4c3d83	update {go/py}/stack-trace-exposure to match javascript	2022-08-22 21:41:46 +02:00
erik-krogh	3553f3d9b8	update {rb/py/js/go}/path-injection to match java/csharp	2022-08-22 21:41:45 +02:00
erik-krogh	cc41a83a8d	update {py/cpp}/commented-out-code to match csharp/java/javascript	2022-08-22 21:41:45 +02:00
erik-krogh	28083ebe09	run the implicit-this patch	2022-08-22 21:23:31 +02:00
erik-krogh	a593a52b5e	add missing qldoc (that was already missing?)	2022-08-22 21:22:39 +02:00
erik-krogh	e89e0eb7fb	make some acronyms camelCase	2022-08-22 21:22:35 +02:00
erik-krogh	9c95dcc126	add change-note	2022-08-22 14:09:19 +02:00
erik-krogh	2ac5441aec	rename the XMLDTD class to XmlDTD	2022-08-22 14:09:19 +02:00
erik-krogh	1a89ddae5d	update some comments from XML to Xml	2022-08-22 14:09:19 +02:00
erik-krogh	ce9f69a639	rename all occurrences of XML to Xml	2022-08-22 14:08:31 +02:00
Taus	c904ba1d16	Merge pull request #9852 from tausbn/python-add-str-class ... Python: Add `Str` class	2022-08-22 10:55:01 +02:00
Chris Smowton	f3ef8510d3	Merge pull request #10093 from smowton/smowton/feature/java-singular-locations ... Java: pick an arbitrary representative location when an entity has many candidate locations.	2022-08-22 09:32:43 +01:00
erik-krogh	049af68bc2	restrict suffix-construction to relevant regexps	2022-08-21 20:35:39 +02:00
Chris Smowton	8d20b9cf52	Use hasLocationInfo to match several Location fields at once	2022-08-19 19:03:17 +01:00
erik-krogh	bcf4c57060	Merge branch 'main' into redosPrefix	2022-08-19 19:22:49 +02:00
erik-krogh	d052b1e3c9	also support regular expressions without repetitions	2022-08-19 19:21:44 +02:00
Chris Smowton	1ea7caf559	Fix join ordering in inline-expectations test	2022-08-19 18:17:22 +01:00
Tom Hvitved	1b29bddb73	Python: Revert change to AnyNode	2022-08-19 14:08:21 +02:00
Tom Hvitved	663096fe3a	Remove redundant overrides	2022-08-19 13:57:41 +02:00
Erik Krogh Kristensen	4f93f2b9ba	Merge pull request #10076 from erik-krogh/ql-for-ql-fixes ... various QL-for-QL fixes	2022-08-18 15:46:48 +02:00
erik-krogh	473bc92e2d	move the PrefixConstruction module out of the ReDoSPruning module	2022-08-18 10:07:48 +02:00
Erik Krogh Kristensen	e93ff8672c	Merge pull request #10075 from erik-krogh/depOld ... delete old deprecations	2022-08-17 21:21:57 +02:00
yoff	78756bdc6a	Merge pull request #9859 from tausbn/python-fix-another-bad-value-transfer-join	2022-08-17 20:47:00 +02:00
Taus	1c15fc5600	Python: Define Str as an alias of StrConst	2022-08-17 13:36:32 +00:00