40697 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
thank_you	4e98348411	Remove comment	2021-04-06 13:57:03 -04:00
thank_you	dc274ecf36	Improve sentence structure and grammar	2021-04-06 13:51:59 -04:00
thank_you	520e65e3c3	Remove unnecessary example code	2021-04-06 13:46:51 -04:00
thank_you	ac31260fed	Made grammar changes	2021-04-06 13:42:57 -04:00
yo-h	cc63563a88	Merge remote-tracking branch 'upstream-public/main' into yo-h/java16	2021-04-06 13:16:02 -04:00
Taus Brock-Nannestad	8e11abca40	Revert "Merge pull request #5552 from RasmusWL/revert-import-change" ... This reverts commit 49d1937dc4, reversing changes made to d4877a9038.	2021-04-06 17:39:41 +02:00
Tamas Vajk	ffcb345916	C#: Add Dapper support to SQL injection queries	2021-04-06 17:06:20 +02:00
Shati Patel	9a41c80626	Merge pull request #5574 from github/smowton/admin/update-supported-go-version ... Update supported Go version to 1.16	2021-04-06 14:54:36 +01:00
jorgectf	bfd4280d35	Fix imports and begin refactor	2021-04-06 15:51:37 +02:00
jorgectf	2f874c5c0b	Precision warn and Remove CWE (broken) reference	2021-04-06 15:47:42 +02:00
jorgectf	809bf2377e	Move to experimental folder	2021-04-06 15:47:41 +02:00
jorgectf	8715d29a44	Upload LDAP Improper authentication query, qhelp and tests	2021-04-06 15:47:41 +02:00
Arthur Baars	50b8b6b257	Also resolve constants with respect to the ancestors ... of the enclosing module.	2021-04-06 15:47:13 +02:00
jorgectf	1bcb9cd7c0	Simplify query	2021-04-06 15:42:56 +02:00
Shati Patel	695b02a94c	Docs: Mention telemetry in "customizing settings"	2021-04-06 14:30:17 +01:00
Erik Krogh Kristensen	2c1cc9ead6	use local variable instead of module.exports in example ... Co-authored-by: Esben Sparre Andreasen <esbena@github.com>	2021-04-06 15:17:31 +02:00
Tom Hvitved	f45916efda	Merge pull request #5605 from hvitved/csharp/exclude-dependency-queries ... C#: Remove mentions of `exclude-dependency-queries.yml`	2021-04-06 14:58:49 +02:00
Mathias Vorreiter Pedersen	8382e85901	C++: Add flow into the source of read step and out of the target of a store step for smart pointers in AST dataflow.	2021-04-06 14:05:55 +02:00
Mathias Vorreiter Pedersen	f07d844362	C++: Add a test containing missing read/store dataflow steps for smart pointers.	2021-04-06 13:59:27 +02:00
Tamas Vajk	98001c494f	C#: Add Dapper stub and new SqlInjection test cases	2021-04-06 13:30:31 +02:00
Erik Krogh Kristensen	41b89669a9	add joined paths as a sink to js/shell-command-constructed-from-input	2021-04-06 12:14:00 +02:00
Rasmus Wriedt Larsen	bc49bc7095	Python: Add variable with underscore to __all__ tests	2021-04-06 11:54:25 +02:00
Tom Hvitved	e0e58b24ea	C#: Remove mentions of exclude-dependency-queries.yml	2021-04-06 11:50:36 +02:00
Rasmus Wriedt Larsen	224d3790b5	Python: Highlight all_indirect.py is not super important ... At least not in my mind	2021-04-06 11:50:04 +02:00
Rasmus Wriedt Larsen	b11703cc74	Python: all_dybamic2 => all_indirect	2021-04-06 11:49:55 +02:00
Mathias Vorreiter Pedersen	5eb1f8abbd	C++: Add change-note.	2021-04-06 11:47:57 +02:00
Rasmus Wriedt Larsen	0ebb24ebeb	Merge pull request #5398 from yoff/python-api-enhancements ... Python: Add small api enhancements determined useful during documentation work	2021-04-06 11:44:51 +02:00
Tom Hvitved	667b26b5d9	Merge pull request #5540 from hvitved/csharp/ssa-impl-tweaks ... C#: Performance tweaks in `SsaImplCommon.qll`	2021-04-06 11:43:08 +02:00
Mathias Vorreiter Pedersen	a5f4d43d61	C++: Fix false positive by adding another allow-list pattern in AssignWhereCompareMeant.	2021-04-06 11:01:38 +02:00
Mathias Vorreiter Pedersen	7045597139	C++: Add testcase with false positive from #5318.	2021-04-06 10:58:15 +02:00
Erik Krogh Kristensen	c194598d37	recognize headers/url from the HTTP request to a server WebSocket.	2021-04-06 10:11:27 +02:00
Tom Hvitved	e852540254	C#: Remove unique wrappers from DataFlow::Node::get(EnclosingCallable|ControlFlowNode)	2021-04-06 09:56:09 +02:00
Rasmus Lerchedahl Petersen	c777f1d8d7	Merge branch 'main' of github.com:github/codeql into python-api-enhancements	2021-04-06 09:31:26 +02:00
Mathias Vorreiter Pedersen	32a8b9a857	C++: Move copy constructor to its own line and accept test changes.	2021-04-06 08:56:14 +02:00
yoff	a23d8deb10	Merge pull request #5483 from RasmusWL/minor-fixup-django ... Python: Better text for getSourceType in Django	2021-04-06 08:30:58 +02:00
thank_you	6ade120983	Add check for mongoengine raw queries ... After initial research on our end, we believe that the only vulnerability within the objects() method is passing a query into the __raw__ keyword argument. More info can be found below: http://docs.mongoengine.org/guide/querying.html?highlight=inc__#raw-queries	2021-04-05 20:44:16 -04:00
thank_you	759fa2cd01	Update query to search for more pymongo sink methods	2021-04-05 20:42:18 -04:00
thank_you	3f0c758622	Add required __raw__ keyword ... This __raw__ keyword is required for the actual mongoengine vulnerability. More info can be found below: http://docs.mongoengine.org/guide/querying.html?highlight=inc__#raw-queries	2021-04-05 19:07:13 -04:00
intrigus	885044e331	[Java] Add tests for jwt signature check query.	2021-04-06 01:01:57 +02:00
intrigus	b7e49c78fe	[Java] Add stubs for jwtk-jjwt-0.11.2	2021-04-06 01:01:23 +02:00
intrigus	d1462eda1c	[Java] Add "missing jwt signature check" query.	2021-04-06 00:59:31 +02:00
Your Name	80216f6974	Rename classes	2021-04-05 14:41:08 -04:00
Your Name	be9a3a95b1	Add relevant PyMongo sink methods	2021-04-05 14:23:56 -04:00
Your Name	9072d19cda	Update qhelp file	2021-04-05 13:56:43 -04:00
jorgectf	d22da880e7	Fix verifiesSignature()	2021-04-04 20:31:07 +02:00
jorgectf	198f8dcc1f	Improve predicates	2021-04-03 23:01:50 +02:00
jorgectf	7ed7809a60	Use LocalSourceNode and flowsTo() for better performance	2021-04-02 21:17:18 +02:00
Sauyon Lee	29bf388b83	Merge pull request #519 from sauyon/fix-consistency ... Extract files for error locations	2021-04-02 01:37:11 -07:00
jorgectf	513055cae5	Change old comments	2021-04-01 18:45:39 +02:00
jorgectf	ee70eb709c	Remove old comment	2021-04-01 18:34:54 +02:00