1281 Commits

Author	SHA1	Message	Date
Tom Hvitved	dc27ee7b9f	C#: Add change note	2020-02-10 20:33:57 +01:00
Tom Hvitved	2b2bb5db80	Merge pull request #2803 from calumgrant/cs/stackalloc-expr ... C#: Handle implicitly-typed stackallocs	2020-02-10 20:28:16 +01:00
Calum Grant	a95ef31984	C#: Analysis change notes	2020-02-10 11:36:30 +00:00
Esben Sparre Andreasen	736ccb98c2	JS: model the send library for js/path-injection	2020-02-07 12:45:32 +01:00
Calum Grant	389e6266d9	Merge pull request #2773 from hvitved/csharp/useless-assignment-to-local-default ... C#: Remove false positives for `cs/useless-assignment-to-local`	2020-02-07 10:37:19 +00:00
Asger Feldthaus	91a5385e7f	JS: Add libraries to change note	2020-02-06 14:59:52 +00:00
Tom Hvitved	69d9d4122a	C#: Add change note	2020-02-05 20:12:41 +01:00
Felicity Chapman	d0e7bfce28	Merge pull request #2738 from aschackmull/java/ldapinjection-changenote ... Java: Add change note for LDAP injection query.	2020-02-05 11:29:29 +00:00
semmle-qlci	53763c789f	Merge pull request #2741 from esbena/js/split-and-slice-for-tainted-path ... Approved by erik-krogh	2020-02-05 10:53:39 +00:00
Anders Schack-Mulligen	cf815351a9	Java: Elaborate change note.	2020-02-04 16:18:35 +01:00
Tom Hvitved	00fdc70155	Merge pull request #2710 from calumgrant/cs/short-circuit-out ... C#: Remove false positive in cs/non-short-circuit	2020-02-04 12:09:17 +01:00
Esben Sparre Andreasen	bbd60f52ba	JS: add additional flow steps to js/path-injection	2020-02-03 16:36:25 +01:00
Asger Feldthaus	9abf5f06e6	TS: Resolve imports using TypeScript symbols	2020-02-03 09:32:56 +00:00
semmle-qlci	d995d5a4a0	Merge pull request #2716 from esbena/js/additional-koa-requests ... Approved by erik-krogh	2020-01-31 18:30:42 +00:00
Anders Schack-Mulligen	7647d94068	Java: Add change note for LDAP injection query.	2020-01-31 16:48:35 +01:00
yo-h	563be9f817	Merge pull request #2719 from aschackmull/java/deprecate-parexpr ... Java: Deprecate ParExpr	2020-01-30 18:23:13 -05:00
Anders Schack-Mulligen	843fd37c75	Java: Add change note.	2020-01-30 10:52:16 +01:00
Anders Schack-Mulligen	b7a8d0e903	Apply suggestions from code review ... Co-Authored-By: Jonas Jensen <jbj@github.com>	2020-01-30 10:41:13 +01:00
Anders Schack-Mulligen	2039ec37e5	Java/C++/C#: Add change note for taint-getters.	2020-01-29 16:26:23 +01:00
Tom Hvitved	474815bf57	Merge pull request #2660 from calumgrant/cs/release-notes ... C#: Add release notes and precisions to queries	2020-01-29 16:05:45 +01:00
Esben Sparre Andreasen	a6d3afd817	JS: support additional Koa request sources	2020-01-29 14:49:01 +01:00
Calum Grant	aff0a7534c	Update change-notes/1.24/analysis-csharp.md ... Fix indentation Co-Authored-By: James Fletcher <42464962+jf205@users.noreply.github.com>	2020-01-29 11:44:17 +00:00
semmle-qlci	fb90c2ba52	Merge pull request #2681 from asger-semmle/csrf-only-session-cookie-access ... Approved by erik-krogh, max-schaefer	2020-01-29 10:46:48 +00:00
Jonas Jensen	27b5902258	Merge pull request #2707 from geoffw0/taint-format ... C++: Add TaintFunction model to FormattingFunction	2020-01-29 08:20:34 +01:00
Calum Grant	6b377d7ad4	C#: Analysis change notes	2020-01-28 14:59:25 +00:00
Geoffrey White	fc1816cbd7	C++: Update change note.	2020-01-28 14:53:18 +00:00
Anders Schack-Mulligen	4cb28d9b1d	Java: Add new query for large left shifts and bugfix ConstantExpAppearsNonConstant.	2020-01-28 10:13:34 +01:00
Geoffrey White	1ddabee1b8	C++: Change note.	2020-01-28 08:46:46 +00:00
yo-h	8c00671f24	Merge pull request #2698 from aschackmull/java/changenote-csrf-query ... Java: Add change note for java/spring-disabled-csrf-protection.	2020-01-27 21:09:15 -05:00
Chris Gavin	708890add3	Java: Add a change note for java/suspicious-date-format.	2020-01-27 11:57:56 +00:00
Anders Schack-Mulligen	efe8981129	Java: Add change note for java/spring-disabled-csrf-protection.	2020-01-27 11:33:31 +01:00
semmle-qlci	7d9956e3f3	Merge pull request #2675 from erik-krogh/WebSocket ... Approved by esbena	2020-01-27 08:40:37 +00:00
yo-h	50320c7828	Merge pull request #2628 from aschackmull/java/no-adhoc-testclass ... Java: Replace ad-hoc TestClass detection.	2020-01-23 14:09:11 -05:00
Asger Feldthaus	406c6eb981	JS: Sharpen missing CSRF middleware query	2020-01-23 14:22:49 +00:00
Anders Schack-Mulligen	0bbe571064	Update change-notes/1.24/analysis-java.md ... Co-Authored-By: Felicity Chapman <felicitymay@github.com>	2020-01-23 13:13:51 +01:00
Anders Schack-Mulligen	fd141917c7	Java: Add change note.	2020-01-23 11:08:35 +01:00
Jonas Jensen	ceeb9ab718	Merge pull request #2622 from MathiasVP/implicit-function-declaration ... C++: Add 'implicit function declaration' query	2020-01-23 09:23:44 +01:00
James Fletcher	f1749b3990	Merge pull request #2654 from calumgrant/cs/null-dereference ... C#: Improvements to cs/dereferenced-value-may-be-null	2020-01-22 20:15:20 +00:00
Erik Krogh Kristensen	6345e9bde1	add change note	2020-01-22 15:14:10 +01:00
semmle-qlci	007b0795ec	Merge pull request #2636 from erik-krogh/NewSocketIO ... Approved by esbena	2020-01-22 13:46:11 +00:00
Erik Krogh Kristensen	1228d506b4	update change notes to reflect that library models have improved	2020-01-22 12:52:45 +01:00
Erik Krogh Kristensen	750e9786f6	add change note for EventEmitter	2020-01-22 10:31:38 +01:00
Calum Grant	6692e61fa2	C#: Analysis change notes	2020-01-21 13:55:32 +00:00
Calum Grant	86fa7e5c38	C#: Analysis change notes	2020-01-20 14:37:28 +00:00
Geoffrey White	97c346285e	CPP: Change note.	2020-01-17 18:56:21 +00:00
Jonas Jensen	3632d51abc	Merge pull request #2635 from geoffw0/modelstrdup ... CPP: Model strdup	2020-01-17 19:26:26 +01:00
Geoffrey White	7dbda22a29	CPP: Update change note.	2020-01-17 16:19:39 +00:00
Mathias Vorreiter Pedersen	303c6aa5b7	C++: Added query to suites and change-notes	2020-01-17 14:51:40 +01:00
semmle-qlci	4efc418e2c	Merge pull request #2617 from asger-semmle/prototype-pollution-utility ... Approved by esbena, mchammer01	2020-01-16 13:02:07 +00:00
Geoffrey White	f4aba14d3a	CPP: Change note.	2020-01-16 11:08:19 +00:00