Geoffrey White
ef37893d15
CPP: Improve the MemberFunctions test.
2019-08-08 15:02:56 +01:00
Geoffrey White
843b85c0e6
CPP: Test PureVirtualFunction.
2019-08-08 15:02:55 +01:00
Geoffrey White
44ea685bf3
CPP: Simplify the VirtualFunctions test.
2019-08-08 15:02:55 +01:00
Geoffrey White
be25338e44
CPP: QLDoc Function.qll.
2019-08-08 15:02:55 +01:00
yh-semmle
7e90728c67
Merge pull request #1679 from aschackmull/java/reader-taint
...
Java: Adjust taint steps for Reader::read.
2019-08-05 12:46:12 -04:00
semmle-qlci
f60af2cfba
Merge pull request #1683 from asger-semmle/type-tracking-non-exp
...
Approved by xiemaisi
2019-08-05 11:06:53 +01:00
semmle-qlci
77ae2bc8b7
Merge pull request #1684 from asger-semmle/protopollution-qhelp
...
Approved by xiemaisi
2019-08-05 11:06:34 +01:00
Calum Grant
3e143093f0
Merge pull request #1475 from hvitved/csharp/remove-file
...
C#: Remove unused `PasswordInConfigurationFile.config`
2019-08-05 10:29:50 +01:00
Jonas Jensen
73d8bf38a9
Merge pull request #1680 from aschackmull/cookbook/autoformat
...
Cookbook examples: Autoformat
2019-08-05 10:24:56 +02:00
Luke Cartey
54d01bdeff
Merge pull request #1648 from hvitved/csharp/unchecked-return-lambda
...
C#: Fix false positives in `cs/unchecked-return-value`
2019-08-02 21:48:38 -07:00
Tom Hvitved
b03cf6f34e
Merge pull request #1678 from calumgrant/cs/remove-analyzer-NRE
...
C#: Remove compilation warning
2019-08-02 10:38:27 -07:00
semmle-qlci
d4e39a250d
Merge pull request #1667 from xiemaisi/js/more-ranges
...
Approved by esben-semmle
2019-08-02 16:46:30 +01:00
Asger F
fcc51a8407
JS: Fix lodash version in proto pollution qhelp
2019-08-02 16:42:36 +01:00
yh-semmle
251d441f6a
Merge pull request #1682 from aschackmull/java/hardcoded-credentials-precision
...
Java: Improve the precision of java/hardcoded-credential-api-call.
2019-08-02 11:37:06 -04:00
Asger F
eb543c1ceb
JS: Remove experimental warning from type tracking
2019-08-02 16:30:44 +01:00
Anders Schack-Mulligen
b1b1ede6b0
Java: Improve the precision of java/hardcoded-credential-api-call.
2019-08-02 16:50:58 +02:00
Anders Schack-Mulligen
59fb59d109
JavaScript: Autoformat cookbook examples.
2019-08-02 15:33:40 +02:00
Anders Schack-Mulligen
40f2cec0de
C#: Autoformat cookbook examples.
2019-08-02 15:30:32 +02:00
Anders Schack-Mulligen
d6e1ba6bed
CPP: Autoformat cookbook examples.
2019-08-02 15:29:20 +02:00
Anders Schack-Mulligen
9b74e9c4a4
Java: Autoformat cookbook examples.
2019-08-02 15:27:28 +02:00
Max Schaefer
3daa974255
JavaScript: Rename a test.
...
The old test name would cause a compiler warning, which we don't want to include in the expected output.
2019-08-02 14:05:57 +01:00
semmle-qlci
34cdf7c96b
Merge pull request #1677 from xiemaisi/js/flow-summary-fixes
...
Approved by esben-semmle
2019-08-02 14:02:47 +01:00
semmle-qlci
635a8edacc
Merge pull request #1676 from xiemaisi/js/more-tests-classification
...
Approved by esben-semmle
2019-08-02 14:02:24 +01:00
Anders Schack-Mulligen
4ffc41277a
Java: Adjust taint steps for Reader::read.
2019-08-02 14:21:06 +02:00
Calum Grant
169dbf1be3
C#: Remove rule CA1022, which caused the analyzer to crash, generating a compilation warning (and possibly, instability).
2019-08-02 12:14:03 +01:00
Max Schaefer
e06ed503ec
JavaScript: Make flow summaries work for non-taint configurations.
...
With flow labels it often makes more sense to use a `DataFlow::Configuration` rather than a `TaintTracking::Configuration`, so flow summaries should support both.
2019-08-02 11:45:41 +01:00
Max Schaefer
97c0c97b28
JavaScript: Classify __mocks__ and __tests_ as tests.
...
These are conventions used by jest: https://jestjs.io/docs/en/manual-mocks#mocking-user-modules .
2019-08-02 11:15:02 +01:00
semmle-qlci
07b97dcc07
Merge pull request #1672 from asger-semmle/flowlabel-issers
...
Approved by xiemaisi
2019-08-02 10:05:41 +01:00
semmle-qlci
bb4f00d770
Merge pull request #1015 from esben-semmle/js/cli-cli
...
Approved by xiemaisi
2019-08-02 09:57:19 +01:00
semmle-qlci
1b30a25977
Merge pull request #1668 from esben-semmle/js/ignore-mocked-callee-argument-count
...
Approved by xiemaisi
2019-08-02 09:56:52 +01:00
semmle-qlci
108e5bc431
Merge pull request #1675 from hvitved/csharp/xss-path-problem
...
Approved by lukecartey
2019-08-02 04:17:03 +01:00
Tom Hvitved
b7d6165d42
C#: Convert cs/web/xss to a path-problem
2019-08-01 15:58:57 -07:00
Rebecca Valentine
40d7f5a332
Merge pull request #1671 from markshannon/python-flask-escape
...
Python: Add missing function to flask test stub.
2019-08-01 11:47:09 -07:00
Asger F
e09c22e67d
JS: Add FlowLabel.isData() and .isTaint()
2019-08-01 15:22:51 +01:00
Mark Shannon
fab2cb5a32
Python: Add missing function to flask test stub.
2019-08-01 13:11:41 +01:00
Esben Sparre Andreasen
90862fea99
JS: whitelist trivial throwers in js/superfluous-trailing-arguments
2019-08-01 11:49:43 +02:00
semmle-qlci
691df0508e
Merge pull request #1652 from xiemaisi/js/deprecate-isBarrier/2
...
Approved by asger-semmle
2019-08-01 09:47:04 +01:00
Max Schaefer
4141a98616
JavaScript: Replace Custom* with *::Range.
...
The old names are kept as deprecated aliases.
2019-08-01 09:45:44 +01:00
Anders Schack-Mulligen
1a779179e7
Merge pull request #1666 from yh-semmle/java-xxe-qhelp
...
Java: update XXE qhelp with note on processing limits
2019-08-01 10:01:53 +02:00
zlaski-semmle
2bc66ae553
Merge pull request #1661 from dave-bartolomeo/dave/ExternDeclarations
...
C++: Stop generating `NoOp` instructions for declarations of externs
2019-07-31 19:09:06 -07:00
yh-semmle
dc45ba5627
Java: update XXE qhelp with note on processing limits
2019-07-31 15:45:28 -04:00
Felicity Chapman
d61b5569c5
Merge pull request #1665 from jf205/update-support
...
QL docs: update paths to change notes in support project
2019-07-31 16:53:54 +01:00
james
735a2cbe06
docs: exclude readme from build
2019-07-31 15:42:46 +01:00
james
21e5d8c6b8
docs: update paths to change notes
2019-07-31 15:38:30 +01:00
semmle-qlci
1d806971ed
Merge pull request #1634 from aibaars/cookbook
...
Approved by aschackmull, dave-bartolomeo, hvitved, markshannon, xiemaisi, yh-semmle
2019-07-31 14:31:28 +01:00
Felicity Chapman
7123067bd0
Merge pull request #1663 from jf205/vscode-readme
...
docs: update readme to mention vscode extension
2019-07-31 13:52:58 +01:00
james
862f716058
docs: update readme to mention vscode extension
2019-07-31 13:42:58 +01:00
semmle-qlci
4722ec585d
Merge pull request #1662 from jf205/add-gitignored
...
Approved by asger-semmle
2019-07-31 12:23:11 +01:00
Nick Rolfe
d83faaf714
Merge pull request #1659 from ian-semmle/getValueText
...
C++: Accept changes to getValueText
2019-07-31 10:59:00 +01:00
jf205
b64ecfb711
Merge pull request #1654 from felicity-semmle/ql-handbook/SD-3691-vale-corrections
...
Ql handbook: Corrections for issues found using Vale
2019-07-31 10:54:42 +01:00