Erik Krogh Kristensen
|
c1c66a0200
|
refactor CountAlertAndEndpoints to not refer to deprecated files
|
2022-04-20 18:10:56 +02:00 |
|
Erik Krogh Kristensen
|
c5f7df17ee
|
add .actual files to .gitignore for ATM tests
|
2022-04-20 18:10:56 +02:00 |
|
Erik Krogh Kristensen
|
1c5d59f885
|
fix an instance of ql/acronyms-should-be-pascal-case
|
2022-04-20 18:10:53 +02:00 |
|
Erik Krogh Kristensen
|
ea6b68fc59
|
add missing qldoc
|
2022-04-20 18:10:53 +02:00 |
|
Erik Krogh Kristensen
|
12e60c7a06
|
move TypeTestGuard to the Query.qll file
|
2022-04-20 18:10:53 +02:00 |
|
Erik Krogh Kristensen
|
b1bad271d5
|
only activate the PrefixString label in Query.qll files
|
2022-04-20 18:10:53 +02:00 |
|
Erik Krogh Kristensen
|
8a5b1668f9
|
move initialization of sanitizer-guards to Query.qll files
|
2022-04-20 18:10:53 +02:00 |
|
Erik Krogh Kristensen
|
73dbe44824
|
remove dead import
|
2022-04-20 18:10:53 +02:00 |
|
Erik Krogh Kristensen
|
8d3bd9d7cd
|
move the ExceptionXss sources into the Customizations file
|
2022-04-20 18:10:53 +02:00 |
|
Erik Krogh Kristensen
|
25708c5091
|
move the XssThroughDom sources into the Customizations file
|
2022-04-20 18:10:53 +02:00 |
|
Erik Krogh Kristensen
|
ad14bbae90
|
create a customizations file for StoredXss
|
2022-04-20 18:10:53 +02:00 |
|
Erik Krogh Kristensen
|
162a4992a5
|
move the ReflectedXss sources/sinks into the Customizations file
|
2022-04-20 18:10:53 +02:00 |
|
Erik Krogh Kristensen
|
173e1d0262
|
move the DomBasedXss sources/sinks into the Customizations file
|
2022-04-20 18:10:53 +02:00 |
|
Erik Krogh Kristensen
|
9631b68de9
|
move LocalUrlSanitizingGuard out of the customizations file
|
2022-04-20 18:10:52 +02:00 |
|
Arthur Baars
|
040dd09c5a
|
Merge pull request #8718 from github/sj/codeowners-pms
Update CODEOWNERS for documentation and license changes
|
2022-04-20 18:08:43 +02:00 |
|
Arthur Baars
|
98df392b4f
|
Merge pull request #8719 from github/sj/update-readme-license-explanation
Update README to clarify license explanation
|
2022-04-20 18:07:00 +02:00 |
|
AlexDenisov
|
a187939424
|
Merge pull request #8784 from AlexDenisov/alexdenisov/swift-package-test-sdk
Swift: package test SDK
|
2022-04-20 16:07:40 +02:00 |
|
Bas van Schaik
|
732a2c32a8
|
Update README.md
|
2022-04-20 15:03:49 +01:00 |
|
${sleep,7}
|
b5734ed6a2
|
Merge branch 'main' into jty/python/emailInjection
|
2022-04-20 09:50:08 -04:00 |
|
Anders Schack-Mulligen
|
677c436e99
|
Merge pull request #8703 from aschackmull/dataflow/revert-state-in-out-barriers
Dataflow: Revert support for flow-state based in-/out-barriers
|
2022-04-20 14:54:02 +02:00 |
|
Tom Hvitved
|
ea229d361c
|
Sync files
|
2022-04-20 13:55:18 +02:00 |
|
Tom Hvitved
|
b4542c58c2
|
Ruby: Implement Argument[any] and Argument[n..]
|
2022-04-20 13:55:18 +02:00 |
|
Rasmus Wriedt Larsen
|
bb6969a175
|
Merge branch 'main' into promote-xxe
|
2022-04-20 13:42:02 +02:00 |
|
Tom Hvitved
|
501b03149f
|
Ruby: Mention newtype constructors in API graph label classes
|
2022-04-20 13:37:55 +02:00 |
|
Nick Rolfe
|
9b2a98326c
|
Ruby: update use of PostUpdateNode now that it's public
|
2022-04-20 12:08:41 +01:00 |
|
Nick Rolfe
|
9b6e610e24
|
Merge remote-tracking branch 'origin/main' into nickrolfe/incomplete_sanitization
|
2022-04-20 12:05:22 +01:00 |
|
Nick Rolfe
|
3d109a4051
|
Merge pull request #8777 from github/nickrolfe/post_update_node
Ruby: make PostUpdateNode public
|
2022-04-20 12:04:37 +01:00 |
|
Alex Denisov
|
682c910d49
|
Swift: package test SDK
|
2022-04-20 12:35:19 +02:00 |
|
Mathias Vorreiter Pedersen
|
3388196c27
|
Merge branch 'main' into smaller-join-in-get-root-cause
|
2022-04-20 11:16:00 +01:00 |
|
Rasmus Wriedt Larsen
|
888a38c060
|
Python: Add change-note
|
2022-04-20 11:46:09 +02:00 |
|
Rasmus Wriedt Larsen
|
d70f247001
|
Python: More private import python
|
2022-04-20 11:42:13 +02:00 |
|
Rasmus Wriedt Larsen
|
084c8eb22e
|
Python: Don't re-export python under DataFlow::
|
2022-04-20 11:42:10 +02:00 |
|
Rasmus Wriedt Larsen
|
5dbbd17bb2
|
Python: Add test to ensure we keep DataFlow imports clean
Currently we're not in a good state :(
|
2022-04-20 11:41:01 +02:00 |
|
Asger F
|
e60475618d
|
Merge pull request #8728 from asgerf/ql/library-coverage
QL: Add facilities for data flow
|
2022-04-20 11:40:18 +02:00 |
|
Nick Rolfe
|
f1b8af1db9
|
Ruby: rename PostUpdateNode::Range to PostUpdateNodeImpl
|
2022-04-20 10:35:40 +01:00 |
|
Asger Feldthaus
|
44216b29a9
|
JS: Autoformat
|
2022-04-20 11:14:42 +02:00 |
|
Asger Feldthaus
|
4c66f50352
|
JS: More tests
|
2022-04-20 11:14:42 +02:00 |
|
Asger Feldthaus
|
fec2837c1e
|
JS: Ensure accessors do not appear to be calls
|
2022-04-20 11:14:42 +02:00 |
|
Asger Feldthaus
|
ddb682b181
|
JS: Show all accessor calls in CG test
|
2022-04-20 11:14:41 +02:00 |
|
Asger Feldthaus
|
37a76f4441
|
JS: PropWrite is not a SourceNode
|
2022-04-20 11:14:41 +02:00 |
|
Asger Feldthaus
|
c9db6201ef
|
JS: Add call-graph test for accessor calls
|
2022-04-20 11:14:41 +02:00 |
|
Asger Feldthaus
|
7d5c80433d
|
JS: Handle accessor-calls to static accessors
|
2022-04-20 11:14:41 +02:00 |
|
Asger Feldthaus
|
37b3a6e5c0
|
JS: Add ClassNode.getStaticMember
|
2022-04-20 11:14:41 +02:00 |
|
Anders Schack-Mulligen
|
cb898ae03f
|
Merge pull request #8701 from aschackmull/doc/any-none
Doc: Add any() and none() to the language reference.
|
2022-04-20 10:49:42 +02:00 |
|
yoff
|
0c7130602a
|
Merge pull request #8731 from RasmusWL/delete-old-readme
Python: Delete old dataflow readme
|
2022-04-20 10:36:12 +02:00 |
|
yoff
|
a66153d73e
|
Merge pull request #8733 from RasmusWL/split-dataflow-private
Python: Split `DataFlowPrivate`
|
2022-04-20 10:21:05 +02:00 |
|
Erik Krogh Kristensen
|
10130eef6d
|
Merge pull request #8678 from erik-krogh/fileSource
JS: Add files as a source for `js/xss-through-dom`
|
2022-04-20 09:18:38 +02:00 |
|
Harry Maclean
|
942388e8bc
|
Pipe to jq --arg instead of gh api --jq
|
2022-04-20 11:41:38 +12:00 |
|
Harry Maclean
|
eba303dea7
|
Fix typo
|
2022-04-20 11:21:06 +12:00 |
|
luchua-bc
|
b76873fc8d
|
Add more test cases
|
2022-04-19 22:22:15 +00:00 |
|