hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-07-07 12:35:33 +02:00
Code Issues Packages Projects Releases Wiki Activity
17,521 Commits 1,798 Branches 169 Tags
ffe10d1b7c68f9516bcf0a191716b63da7e019f8
Commit Graph

17521 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Rasmus Lerchedahl Petersen
ffe10d1b7c Python: test HttpResponse.write 2020-10-30 12:16:12 +01:00
Rasmus Lerchedahl Petersen
fa3a7e6686 Python: Known subclasses of HttpResponse 2020-10-30 11:53:24 +01:00
Rasmus Lerchedahl Petersen
c962377ef4 Python: test for subclasses 2020-10-30 10:37:40 +01:00
Rasmus Lerchedahl Petersen
08af839757 Python: django.http.response.HttpResponseRedirect 2020-10-30 01:29:49 +01:00
Rasmus Lerchedahl Petersen
52be896666 Python: django.http.response.JsonResponse 
It s possible this class is not relevant to XSS
 2020-10-30 01:05:36 +01:00
Rasmus Lerchedahl Petersen
0f9b8595d1 Python: rename functions by vulnerability 2020-10-30 00:51:09 +01:00
Rasmus Lerchedahl Petersen
97153b56ad Python: add false negatives to test 2020-10-30 00:48:19 +01:00
Rasmus Lerchedahl Petersen
262b249e10 Merge branch 'main' of github.com:github/codeql into RasmusWL-python-port-reflected-xss 2020-10-30 00:40:39 +01:00
Rasmus Lerchedahl Petersen
2ca86f5ea7 Python: django.http.response.HttpResponse 2020-10-30 00:22:53 +01:00
Dave Bartolomeo
71531af343 Merge pull request #4577 from dbartol/extension-fix/work 
Fix path transformer handling of extensionless files
 2020-10-29 18:10:30 -04:00
yo-h
5ac8475523 Merge pull request #4578 from aschackmull/java/changenotes 
Java: Add missing change notes for 1.26
 2020-10-29 13:32:28 -04:00
Anders Schack-Mulligen
5687b7c158 Java: Move existing change note to new format. 2020-10-29 16:35:27 +01:00
Anders Schack-Mulligen
a9e0f61860 Java: Add change note for https://github.com/github/codeql/pull/4287 2020-10-29 16:33:09 +01:00
Anders Schack-Mulligen
4cd77175ab Java: Add change note for https://github.com/github/codeql/pull/3542 2020-10-29 16:27:51 +01:00
Anders Schack-Mulligen
eddd1ef29c Java: Add change note for https://github.com/github/codeql/pull/4081 2020-10-29 16:25:11 +01:00
Anders Schack-Mulligen
e671b463dc Java: Add change note for https://github.com/github/codeql/pull/4123 2020-10-29 16:20:35 +01:00
Anders Schack-Mulligen
d6f595f6af Java: Add change note for https://github.com/github/codeql/pull/3543 2020-10-29 16:14:56 +01:00
Anders Schack-Mulligen
8b6c3ab9d2 Java: Add change note for https://github.com/github/codeql/pull/4088 2020-10-29 16:11:26 +01:00
Anders Schack-Mulligen
1efb377465 Java: Add change note for https://github.com/github/codeql/pull/3855 2020-10-29 16:09:01 +01:00
Anders Schack-Mulligen
d9cef5bd48 Java: Add change note for https://github.com/github/codeql/pull/4044 2020-10-29 16:05:43 +01:00
Anders Schack-Mulligen
4677eb649e Java: Add change note for https://github.com/github/codeql/pull/3938 2020-10-29 16:02:34 +01:00
Anders Schack-Mulligen
9dbfc835fe Java: Add change note for https://github.com/github/codeql/pull/3881 2020-10-29 15:54:25 +01:00
Anders Schack-Mulligen
b3fe333957 Merge pull request #4576 from aschackmull/java/adjust-beanvalidation-qhelp 
Java: Tweak qhelp to make it markdown-compatible.
 2020-10-29 15:43:40 +01:00
Anders Schack-Mulligen
1beb3bdccd Java: Add change note for extensible security queries. 
This covers #3928, #3968, and #4172, among others.
 2020-10-29 15:37:35 +01:00
Anders Schack-Mulligen
e3ba05937f Java: Add change note for https://github.com/github/codeql/pull/3948 2020-10-29 15:30:09 +01:00
Anders Schack-Mulligen
7f9713956f Java: Add change note for https://github.com/github/codeql/pull/4312. 2020-10-29 15:24:28 +01:00
Dave Bartolomeo
4189567b8c Fix PR feedback 
Co-authored-by: Tom Hvitved <hvitved@github.com>
 2020-10-29 10:15:45 -04:00
Dave Bartolomeo
42e075dfb8 Fix path transformer handling of extensionless files 2020-10-29 10:02:55 -04:00
Rasmus Lerchedahl Petersen
96e79a2702 Python: restrict to python files 2020-10-29 15:00:47 +01:00
Anders Schack-Mulligen
0d926dcf70 Java: Tweak qhelp to make it markdown-compatible. 2020-10-29 14:39:01 +01:00
Jonas Jensen
fa344d216f Merge pull request #4493 from criemen/fix-4278-printast-conversions 
Fix C++ Print AST handling of Conversions
 2020-10-29 13:48:15 +01:00
Rasmus Lerchedahl Petersen
6658ee9dc8 Merge branch 'python-port-reflected-xss' of https://github.com/RasmusWL/codeql into RasmusWL-python-port-reflected-xss 2020-10-29 12:46:44 +01:00
CodeQL CI
7856e784e1 Merge pull request #4566 from asgerf/js/classnames 
Approved by erik-krogh
 2020-10-29 11:00:06 +00:00
Cornelius Riemenschneider
59dd892748 C++: Address review, fix bug related to Conversions. 2020-10-29 11:40:31 +01:00
Jonas Jensen
0af62b8431 Merge pull request #4515 from geoffw0/modelchanges1 
C++: Changes to models library.
 2020-10-29 11:21:56 +01:00
Tamás Vajk
64dcfbd7fc Merge pull request #4484 from tamasvajk/feature/custom-assert-methods 
C#: Add support for custom assert methods (DoesNotReturnIfAttribute)
 2020-10-29 09:10:09 +01:00
Asger Feldthaus
4343fbff0e Merge branch 'js/classnames' of github.com:asgerf/codeql into js/classnames 2020-10-28 17:00:14 +00:00
Asger Feldthaus
469767d279 JS: Fix test output 2020-10-28 17:00:05 +00:00
Geoffrey White
ae84d1383e Merge pull request #4565 from MathiasVP/instruction-tag-for-this-addr-and-load-fix 
C++: Fix spelling in getInstructionTagId
 2020-10-28 16:53:55 +00:00
Asger F
056ce38dad Update javascript/ql/src/semmle/javascript/frameworks/Classnames.qll 
Co-authored-by: Erik Krogh Kristensen <erik-krogh@github.com>
 2020-10-28 14:35:37 +00:00
Tamas Vajk
410af42d2b C#: Adjust PR feedback on assertion methods 2020-10-28 15:09:50 +01:00
Asger Feldthaus
081017ea8a JS: Autoformat 2020-10-28 13:58:02 +00:00
Asger Feldthaus
3c437d319a JS: Change note 2020-10-28 13:56:35 +00:00
Asger Feldthaus
3d86e855f3 JS: Add model of classnames and clsx 2020-10-28 13:56:35 +00:00
Tamás Vajk
59d9be48a7 Merge pull request #4438 from tamasvajk/feature/ast-fixes 
C#: Fixes for AST printing
 2020-10-28 14:52:24 +01:00
yoff
c8bb0509e5 Merge pull request #4563 from tausbn/python-remove-refersto-from-regex-libs 
Python: Remove `refersTo` from `regex.qll`
 2020-10-28 13:37:14 +01:00
Mathias Vorreiter Pedersen
614e2ba851 C++: Fix spelling 2020-10-28 13:05:37 +01:00
Mathias Vorreiter Pedersen
8c9f09195d Merge pull request #4561 from criemen/varargs-hierarchy 
C++: Make BuiltInVarArgs* classes subclasses of VarArgsExpr.
 2020-10-28 13:03:57 +01:00
Tom Hvitved
2fea6f05f1 Merge pull request #4489 from hvitved/csharp/cil-to-string 
C#: Simplify `toString()` for CIL entities
 2020-10-28 12:56:10 +01:00
CodeQL CI
8e57f57643 Merge pull request #4559 from erik-krogh/redis 
Approved by asgerf
 2020-10-28 11:47:12 +00:00