Tom Hvitved
|
f100c8a9c0
|
C++: Make Windows autobuilder tests pass again
|
2021-03-25 17:43:48 +01:00 |
|
Tom Hvitved
|
ed78acb1d4
|
C#: Update more nuget packages
|
2021-03-25 17:32:12 +01:00 |
|
Anders Schack-Mulligen
|
28fb0edfbe
|
Merge pull request #4920 from luchua-bc/java/hash-without-salt
Java: Query to detect hash without salt
|
2021-03-25 16:13:26 +01:00 |
|
Jonas Jensen
|
bc9682c22d
|
Merge pull request #5528 from MathiasVP/fix-join-order-in-avrule-79
C++: Fix join order in AV rule 79
|
2021-03-25 15:45:41 +01:00 |
|
Rasmus Wriedt Larsen
|
ed2cb739c5
|
Merge pull request #5486 from yoff/python-document-api-import-node
Python, doc: Note ephemeral nature of import nodes
|
2021-03-25 15:45:10 +01:00 |
|
Anders Schack-Mulligen
|
344c2d3c3d
|
Update java/ql/src/experimental/Security/CWE/CWE-759/HashWithoutSalt.ql
|
2021-03-25 15:42:57 +01:00 |
|
Tom Hvitved
|
90868a4788
|
Merge pull request #5524 from hvitved/csharp/cleanup
C#: Remove legacy queries and `@precision` tags from metric queries
|
2021-03-25 15:36:12 +01:00 |
|
Tom Hvitved
|
33c990f6b0
|
Merge pull request #5440 from hvitved/csharp/cil/ssa
C#: Add CIL SSA library
|
2021-03-25 15:22:40 +01:00 |
|
yo-h
|
0fe4baec34
|
Merge pull request #5525 from aschackmull/java/cleanup
Java: Delete filter queries, code duplication library, and precision tag from metric queries.
|
2021-03-25 10:09:41 -04:00 |
|
Anders Schack-Mulligen
|
75afa011ff
|
Java: Add metadata to several more experimental queries.
|
2021-03-25 13:09:26 +01:00 |
|
CodeQL CI
|
e90035a5a5
|
Merge pull request #5439 from erik-krogh/topPack
Approved by esbena
|
2021-03-25 11:49:03 +00:00 |
|
Mathias Vorreiter Pedersen
|
24360d3a4c
|
C++: Fix join order in AV rule 79 by joining with GVN after the recursive call.
|
2021-03-25 12:00:49 +01:00 |
|
Erik Krogh Kristensen
|
77ba7b473d
|
Merge branch 'main' into topPack
|
2021-03-25 11:52:58 +01:00 |
|
CodeQL CI
|
0511e72520
|
Merge pull request #5458 from erik-krogh/shellTrue
Approved by asgerf
|
2021-03-25 10:49:24 +00:00 |
|
yoff
|
32b264bdee
|
Apply suggestions from code review
Co-authored-by: mc <42146119+mchammer01@users.noreply.github.com>
|
2021-03-25 10:48:59 +01:00 |
|
Anders Schack-Mulligen
|
d53c334488
|
Merge branch 'java/fix-experimental-query-metadata' into java/cleanup
|
2021-03-25 10:36:36 +01:00 |
|
Anders Schack-Mulligen
|
28ff3f412d
|
Java: Add severity and precision metadata to experimental queries.
|
2021-03-25 10:29:47 +01:00 |
|
CodeQL CI
|
9d52db3ca7
|
Merge pull request #5507 from erik-krogh/joins
Approved by asgerf
|
2021-03-25 09:18:26 +00:00 |
|
Anders Schack-Mulligen
|
5b905cfe18
|
Java: Add change note for code duplication library removal.
|
2021-03-25 10:12:58 +01:00 |
|
Anders Schack-Mulligen
|
1564aee57a
|
Java: Add change note for filter query removal.
|
2021-03-25 10:11:30 +01:00 |
|
Anders Schack-Mulligen
|
c82b5eb040
|
Java: Remove code duplication library.
|
2021-03-25 10:06:10 +01:00 |
|
Erik Krogh Kristensen
|
3b6b40489f
|
Merge branch 'main' into topPack
|
2021-03-25 09:58:15 +01:00 |
|
Anders Schack-Mulligen
|
4b7440d4d5
|
Java: Remove precision tag from metric queries.
|
2021-03-25 09:52:05 +01:00 |
|
Tom Hvitved
|
419fbe77ab
|
C#: Remove @precision tags from metric queries
|
2021-03-25 09:50:24 +01:00 |
|
Tom Hvitved
|
b83da2255c
|
C#: Add change note
|
2021-03-25 09:50:24 +01:00 |
|
Tom Hvitved
|
b94c189946
|
C#: Remove VulnerablePackage.ql query
|
2021-03-25 09:50:24 +01:00 |
|
Tom Hvitved
|
7e33b571c9
|
C#: Add change note
|
2021-03-25 09:50:24 +01:00 |
|
Tom Hvitved
|
eeb8c74666
|
C#: Remove filter and external queries
These are legacy queries that are no longer used.
|
2021-03-25 09:50:01 +01:00 |
|
Anders Schack-Mulligen
|
70824b3f0b
|
Java: Delete filter queries.
|
2021-03-25 09:47:31 +01:00 |
|
Esben Sparre Andreasen
|
801eb538db
|
Merge pull request #5514 from github/aibaars/fix-javascript-metadata
Javascript: remove bad QLDoc tag
|
2021-03-25 08:56:08 +01:00 |
|
yo-h
|
72ae902e0d
|
Merge pull request #5371 from aschackmull/java/framework-coverage
Java: Add query for CSV framework coverage.
|
2021-03-24 17:36:13 -04:00 |
|
Erik Krogh Kristensen
|
c146b27c1a
|
Merge branch 'main' into shellTrue
|
2021-03-24 20:09:23 +01:00 |
|
CodeQL CI
|
8ff9c98d26
|
Merge pull request #5449 from erik-krogh/asExec
Approved by esbena
|
2021-03-24 19:04:30 +00:00 |
|
Aditya Sharad
|
32dc894d54
|
Merge pull request #5516 from github/adityasharad/actions/remove-docs-review-workflow
Actions: Remove docs-review workflow
|
2021-03-24 11:48:03 -07:00 |
|
Aditya Sharad
|
a0465d20cb
|
Actions: Remove docs-review workflow
Being replaced by internal automation that polls the repo for open labelled PRs, since this workflow currently cannot tag the docs team in a comment.
|
2021-03-24 11:26:00 -07:00 |
|
Arthur Baars
|
b25dc03dac
|
Javascript: remove bad QLDoc tag
|
2021-03-24 16:47:27 +01:00 |
|
Anders Schack-Mulligen
|
d3485cac34
|
Merge pull request #5512 from aschackmull/java/csv-argument-ranges
Java: Support argument and parameter ranges in CSV models.
|
2021-03-24 15:03:22 +01:00 |
|
yoff
|
8d15680af4
|
Merge pull request #5506 from tausbn/python-allow-absolute-imports-from-source-directory
Python: Allow absolute imports in directories with scripts
|
2021-03-24 14:42:14 +01:00 |
|
Anders Schack-Mulligen
|
4955f95f64
|
Apply suggestions from code review
Clarify documentation.
Co-authored-by: Chris Smowton <smowton@github.com>
|
2021-03-24 14:32:18 +01:00 |
|
Anders Schack-Mulligen
|
63831cc62b
|
Merge pull request #5099 from porcupineyhairs/javaLogInjection
Java : Add Log Injection Vulnerability
|
2021-03-24 14:30:34 +01:00 |
|
yoff
|
b023d73016
|
Merge pull request #5504 from RasmusWL/type-tracking-first-predicate-private
Python: Ensure first type-tracking predicate is private
|
2021-03-24 14:23:27 +01:00 |
|
Rasmus Wriedt Larsen
|
1473778bb8
|
Merge pull request #5493 from yoff/python-add-experimental-structure
Python: Add stub structure to `experimental` for external contributions
|
2021-03-24 14:11:13 +01:00 |
|
Taus Brock-Nannestad
|
47686a6e4c
|
Python: Disregard all files matching .py%
|
2021-03-24 14:03:00 +01:00 |
|
Taus Brock-Nannestad
|
8d30ee5c3c
|
Python: Include unmarked Python file in snapshot
Sadly, it seems we're not interpreting this as Python code, even if we
explicitly ask to have it included.
|
2021-03-24 14:01:13 +01:00 |
|
Anders Schack-Mulligen
|
a1ccbcdaf1
|
Merge pull request #5260 from artem-smotrakov/spring-http-invoker
Java: Query for detecting unsafe deserialization with Spring exporters
|
2021-03-24 13:57:17 +01:00 |
|
Rasmus Wriedt Larsen
|
59200386a7
|
Python: Fix mistake in refactor
|
2021-03-24 13:51:29 +01:00 |
|
CodeQL CI
|
e3ab94fc6b
|
Merge pull request #5498 from asgerf/js/flow-through-accessors
Approved by erik-krogh, max-schaefer
|
2021-03-24 12:46:05 +00:00 |
|
Anders Schack-Mulligen
|
41168e2b36
|
Java: Support argument and parameter ranges.
|
2021-03-24 13:32:30 +01:00 |
|
Anders Schack-Mulligen
|
234f62fd05
|
Java: Merge packages that likely belong to the same framework.
|
2021-03-24 13:17:04 +01:00 |
|
Taus Brock-Nannestad
|
6d86239929
|
Python: Test all cases
Note that the test in `no_py_extension` isn't complete, since we're
not extracting the `main` file there.
|
2021-03-24 13:15:59 +01:00 |
|