Tony Torralba
|
6799838ece
|
Simplification
|
2022-03-29 09:43:37 +02:00 |
|
haby0
|
bf8c7a2ea7
|
Added Sanitizer Guard
|
2022-03-29 14:29:33 +08:00 |
|
4B5F5F4B
|
9358b824c0
|
modify select clause to make codeql happy:)
|
2022-03-29 10:41:12 +08:00 |
|
luchua-bc
|
833d842113
|
Drop the getPath check from the library
|
2022-03-28 20:14:40 +00:00 |
|
Robert Marsh
|
3c1ec5a595
|
Merge branch 'main' into rdmarsh2/ir-global-vars
|
2022-03-28 16:06:17 -04:00 |
|
luchua-bc
|
657f615703
|
Fine tune the query and update qldoc
|
2022-03-28 20:05:12 +00:00 |
|
Robert Marsh
|
af6a4f31e7
|
C++: TranslatedInstructionContainer to RootElement
|
2022-03-28 15:20:48 -04:00 |
|
Robert Marsh
|
5811d0b2ad
|
C++: add AliasedDefinition to IR global var inits
|
2022-03-28 14:53:43 -04:00 |
|
Stephan Brandauer
|
9c3fcb6268
|
precise tracking of handlebars arguments
|
2022-03-28 17:26:43 +02:00 |
|
Asger Feldthaus
|
cf596a1856
|
JS: Add decorator edges in API graphs and corresponding MaD tokens
|
2022-03-28 15:34:40 +02:00 |
|
Erik Krogh Kristensen
|
20599d1846
|
Merge branch 'main' of github.com:github/codeql into labelNaming
|
2022-03-28 15:30:33 +02:00 |
|
Asger Feldthaus
|
e152416317
|
JS: write all CSV rows as literals
|
2022-03-28 15:30:18 +02:00 |
|
Asger F
|
e5f2b830f3
|
Merge pull request #8577 from asgerf/fix-mad-warning
JS/Ruby: Fix regexp in MaD checking
|
2022-03-28 15:29:16 +02:00 |
|
Asger F
|
f22df765ed
|
Merge pull request #8533 from asgerf/mad-receiver-token
JS/Ruby: Represent non-positional arguments with Argument/Parameter tokens
|
2022-03-28 15:28:52 +02:00 |
|
Geoffrey White
|
611b820cbc
|
C++: Change notes.
|
2022-03-28 14:27:21 +01:00 |
|
Erik Krogh Kristensen
|
e79eecb640
|
update toString() of API::Node, and update expected output that depends on the former
|
2022-03-28 15:23:45 +02:00 |
|
Nick Rolfe
|
9406aa2f29
|
Merge remote-tracking branch 'origin/main' into nickrolfe/constant_regexp
|
2022-03-28 13:05:34 +01:00 |
|
Asger Feldthaus
|
0b30ecf36a
|
Ruby: add select clause back to Summaries.ql
|
2022-03-28 13:57:50 +02:00 |
|
Erik Krogh Kristensen
|
36db492aa2
|
move the polynomialbacktracking-test to the test folder
|
2022-03-28 13:22:26 +02:00 |
|
Erik Krogh Kristensen
|
c5fb19c377
|
update the JS API-graph labels toString() to print the predicate calls on the API-graphs
|
2022-03-28 13:19:16 +02:00 |
|
Arthur Baars
|
85c4daa2bf
|
Address comments
|
2022-03-28 13:15:32 +02:00 |
|
Asger Feldthaus
|
d5bcd14733
|
Sync ApiGraphModels.qll
|
2022-03-28 12:43:55 +02:00 |
|
Asger Feldthaus
|
7e6206ed36
|
JS: Fix the regexp for valid MaD token arguments
|
2022-03-28 12:43:43 +02:00 |
|
Arthur Baars
|
2ae5e8158e
|
Python: import RegExpTreeView correctly
|
2022-03-28 12:41:32 +02:00 |
|
Nick Rolfe
|
a9eac19dac
|
Ruby: address review feedback
|
2022-03-28 11:19:24 +01:00 |
|
Arthur Baars
|
b103679d8a
|
JS/Ruby/Python: rename RegExpTreeView.qll to ReDoSUtilSpecific.qll
|
2022-03-28 12:17:26 +02:00 |
|
Arthur Baars
|
af1d949d06
|
Merge pull request #8489 from aibaars/regex-refactor
Ruby: refactor regex libraries
|
2022-03-28 12:17:00 +02:00 |
|
Geoffrey White
|
18f80eb3e3
|
C++: Loosen a few constraints slightly.
|
2022-03-28 11:16:57 +01:00 |
|
Geoffrey White
|
850646b8ba
|
C++: Deprecate the experimental version, forward to the new one.
|
2022-03-28 11:16:56 +01:00 |
|
Geoffrey White
|
3fed7bf6d0
|
C++: Extend cpp/cleartext-transmission using PrivateData.qll.
|
2022-03-28 11:16:56 +01:00 |
|
Geoffrey White
|
202b6d44a5
|
C++: Update SensitiveExprs.qll to clarify the relationship.
|
2022-03-28 10:54:56 +01:00 |
|
Geoffrey White
|
0453c0f0a1
|
C++: Convert to C++ and make it look more like SensitiveExprs.qll.
|
2022-03-28 10:54:55 +01:00 |
|
Geoffrey White
|
ec98269a24
|
C++: Copy PrivateData.qll from csharp.
|
2022-03-28 10:54:54 +01:00 |
|
Geoffrey White
|
bb272003b4
|
C++: More test cases.
|
2022-03-28 10:54:54 +01:00 |
|
Erik Krogh Kristensen
|
c98d024c0e
|
Merge pull request #8575 from erik-krogh/qlFixTypo
QL: fix Import::getImportString
|
2022-03-28 11:41:59 +02:00 |
|
Arthur Baars
|
accdd9499a
|
Ruby: drop unused predicates that do not exist in Python variant
|
2022-03-28 11:32:52 +02:00 |
|
Erik Krogh Kristensen
|
7ac6f5849c
|
fix Import::getImportString
|
2022-03-28 11:04:18 +02:00 |
|
Ahmed Farid
|
53f756b078
|
Update ZipSlip.expected
|
2022-03-28 08:54:44 +00:00 |
|
Mathias Vorreiter Pedersen
|
57c39e9642
|
Merge pull request #8574 from erik-krogh/qlForQlFixes
QL: two small improvements
|
2022-03-28 09:26:43 +01:00 |
|
Erik Krogh Kristensen
|
77aff04429
|
add a getImportString utility predicate to Import
|
2022-03-28 10:14:27 +02:00 |
|
Erik Krogh Kristensen
|
d4c8f42336
|
add QLDoc to the child relation for TopLevel
|
2022-03-28 09:54:08 +02:00 |
|
yoff
|
5efc19c39d
|
Merge pull request #7806 from erik-krogh/pyDef
Python: Add def nodes to API graphs
|
2022-03-28 08:09:14 +02:00 |
|
Rasmus Lerchedahl Petersen
|
d39410aa2d
|
python: backport review comment to Ruby
|
2022-03-28 07:35:14 +02:00 |
|
Rasmus Lerchedahl Petersen
|
774c811e97
|
python: move CSRF concepts inside HTTP::Server
|
2022-03-28 07:35:13 +02:00 |
|
Ahmed Farid
|
d89ed8b98b
|
Update zipslip_bad.py
|
2022-03-28 01:40:08 +00:00 |
|
Ahmed Farid
|
a50f051cdd
|
Update zipslip_bad.py
|
2022-03-28 01:38:58 +00:00 |
|
Ahmed Farid
|
cafbd98454
|
Update zipslip_bad.py
|
2022-03-28 01:08:39 +00:00 |
|
Ahmed Farid
|
f364e41dbe
|
Update ZipSlip.expected
|
2022-03-28 01:02:38 +00:00 |
|
Ahmed Farid
|
a8c14ed6c3
|
Update zipslip_bad.py
|
2022-03-28 01:00:38 +00:00 |
|
Ahmed Farid
|
ddba3b7784
|
Update ZipSlip.qll
|
2022-03-28 00:59:56 +00:00 |
|