luchua-bc
|
babe744a30
|
Add SECURITY_PROTOCOL check
|
2021-01-13 03:49:08 +00:00 |
|
luchua-bc
|
07f45a51f8
|
Query to detect hash without salt
|
2021-01-13 02:49:00 +00:00 |
|
Esben Sparre Andreasen
|
d591c519a8
|
JS: reformulate js/server-crash as a path problem
|
2021-01-13 00:08:28 +01:00 |
|
intrigus
|
5b3086a93a
|
Java: Fix capitalization of JxBrowser
|
2021-01-12 22:43:41 +01:00 |
|
intrigus
|
1ebc9f4d93
|
Java: Only detect JxBrowser < 6.24
|
2021-01-12 22:39:08 +01:00 |
|
Rasmus Lerchedahl Petersen
|
4ee2f49f38
|
Python: model conversion during unpacking
|
2021-01-12 22:19:31 +01:00 |
|
Rasmus Lerchedahl Petersen
|
d8d8b45c6a
|
Python: add test annotations
|
2021-01-12 22:03:49 +01:00 |
|
Erik Krogh Kristensen
|
0a17b04650
|
refactor copy-pasted code into getAnLibraryInputParameter
|
2021-01-12 20:21:37 +01:00 |
|
Erik Krogh Kristensen
|
eaee5c2d87
|
add library input as source for js/polynomial-redos
|
2021-01-12 20:21:33 +01:00 |
|
Owen Mansel-Chan
|
9a51de56de
|
Add comment explaining \Q and \E in regex
|
2021-01-12 16:56:04 +00:00 |
|
Owen Mansel-Chan
|
9236ad752b
|
Improve formatting and style in Gin.qll
|
2021-01-12 16:56:04 +00:00 |
|
Owen Mansel-Chan
|
71774ed2d4
|
Remove redundant code
RawMessage implements Marshaler and Unmarshaler, so these methods are
covered by the two sections below
|
2021-01-12 16:56:04 +00:00 |
|
Owen Mansel-Chan
|
57ee3a8a64
|
Use set literal
|
2021-01-12 16:56:04 +00:00 |
|
Owen Mansel-Chan
|
fe1f08fb12
|
Use existing predicate
There already exists the predicate
implements(string pkg, string tp, string name)
which does exactly what this code does
|
2021-01-12 16:55:51 +00:00 |
|
Geoffrey White
|
3f09a047ae
|
C++: Test comments.
|
2021-01-12 14:52:52 +00:00 |
|
intrigus
|
2931e1f3fb
|
Java: Add change note for #4771
|
2021-01-12 15:37:45 +01:00 |
|
intrigus
|
1901f6bf55
|
Java: Make @id @name of query more similar.
|
2021-01-12 15:36:55 +01:00 |
|
Sauyon Lee
|
3f1197d605
|
Merge pull request #448 from sauyon/autoformat
Autoformatter update
|
2021-01-12 14:29:45 +00:00 |
|
intrigus
|
4fa8f5eab2
|
Java: Accept test changes
|
2021-01-12 15:29:03 +01:00 |
|
intrigus
|
b30872806d
|
Java: Add tests and test stubs.
|
2021-01-12 14:49:12 +01:00 |
|
intrigus
|
9b3070ab7c
|
Java: Add JXBrowser disabled certificate query.
|
2021-01-12 14:48:22 +01:00 |
|
Sauyon Lee
|
c11028229a
|
Bump codeql version
|
2021-01-12 13:15:31 +00:00 |
|
Sauyon Lee
|
7a4dbc6fa7
|
Autoformatter update
|
2021-01-12 13:13:15 +00:00 |
|
Rasmus Wriedt Larsen
|
2ba7ed4940
|
Python: Add note about future work for getARequestHandler
|
2021-01-12 13:32:43 +01:00 |
|
Esben Sparre Andreasen
|
3c9c79a550
|
JS: remove flow labels from js/resource-exhaustion
|
2021-01-12 13:20:20 +01:00 |
|
Esben Sparre Andreasen
|
5965035c09
|
JS: add query js/resource-exhaustion
|
2021-01-12 13:20:20 +01:00 |
|
Rasmus Lerchedahl Petersen
|
a1ab5cc2b8
|
Python: start support for nested unpacking
|
2021-01-12 13:09:12 +01:00 |
|
Rasmus Lerchedahl Petersen
|
9c08467828
|
Python: add tests for conversion during unpacking
|
2021-01-12 12:46:51 +01:00 |
|
Chris Smowton
|
c79e4f7836
|
Merge pull request #447 from smowton/smowton/admin/git-change-note
Add change-note for addition of `git` to the list of known interpreters for the go/command-injection query
|
2021-01-12 11:33:49 +00:00 |
|
Rasmus Lerchedahl Petersen
|
4d9f5be2bc
|
Python: Add more unpacking tests
|
2021-01-12 12:30:03 +01:00 |
|
CodeQL CI
|
1c8547c897
|
Merge pull request #4774 from erik-krogh/forms
Approved by asgerf
|
2021-01-12 02:01:38 -08:00 |
|
Mathias Vorreiter Pedersen
|
84f1b11448
|
Merge branch 'main' into mathiasvp/reverse-read-take-3
|
2021-01-12 10:37:32 +01:00 |
|
Esben Sparre Andreasen
|
847687974f
|
JS: only select non-nullable terms in the broken sanitizer
|
2021-01-12 08:50:19 +01:00 |
|
Esben Sparre Andreasen
|
40cfbab335
|
JS: address review feedback
|
2021-01-12 08:49:08 +01:00 |
|
ihsinme
|
bbd3f7631e
|
Delete test.c
sorry i was in a hurry
|
2021-01-11 23:52:26 +03:00 |
|
ihsinme
|
b92d63d5df
|
Delete CompilerRemovalOfCodeToClearBuffers.qlref
sorry i was in a hurry
|
2021-01-11 23:51:37 +03:00 |
|
ihsinme
|
05f866e912
|
Delete CompilerRemovalOfCodeToClearBuffers.expected
sorry i was in a hurry
|
2021-01-11 23:51:18 +03:00 |
|
ihsinme
|
d7a5e61f8e
|
Delete CompilerRemovalOfCodeToClearBuffers.qhelp
sorry i was in a hurry
|
2021-01-11 23:50:47 +03:00 |
|
ihsinme
|
c38cfcb735
|
Delete CompilerRemovalOfCodeToClearBuffers.ql
sorry i was in a hurry
|
2021-01-11 23:50:19 +03:00 |
|
ihsinme
|
65ff526eef
|
Delete CompilerRemovalOfCodeToClearBuffers.c
sorry i was in a hurry
|
2021-01-11 23:49:53 +03:00 |
|
ihsinme
|
ed6d8e3d18
|
Add files via upload
|
2021-01-11 23:40:38 +03:00 |
|
ihsinme
|
b185a33157
|
Add files via upload
|
2021-01-11 23:39:02 +03:00 |
|
Geoffrey White
|
7409dd015e
|
C++: Autoformat.
|
2021-01-11 18:58:32 +00:00 |
|
Chris Smowton
|
a9cff82161
|
Add change-note for addition of git to the list of known interpreters for the go/command-injection query.
|
2021-01-11 18:48:54 +00:00 |
|
ihsinme
|
b28444b55c
|
Update MemoryLeakOnFailedCallToRealloc.ql
I thought since there is no work on this PR, I will delete the residual import.
|
2021-01-11 21:17:49 +03:00 |
|
intrigus
|
85286f362c
|
Java: Replace global flow by local flow
|
2021-01-11 19:02:07 +01:00 |
|
intrigus-lgtm
|
722bd4dafa
|
Java: Revise qhelp
|
2021-01-11 18:57:24 +01:00 |
|
intrigus-lgtm
|
4cfdb10ddc
|
Java: Improve QLDoc & simplify code
Co-authored-by: Anders Schack-Mulligen <aschackmull@users.noreply.github.com>
|
2021-01-11 18:50:43 +01:00 |
|
Geoffrey White
|
1cde5e1828
|
C++: Test of taint through ConstructorDelegationInit.
|
2021-01-11 17:35:50 +00:00 |
|
luchua-bc
|
86c04e6971
|
Detect the scenario of passwords concatenated with a salt to reduce FPs
|
2021-01-11 16:59:57 +00:00 |
|