james
3d9efa1dc2
recombine projects
2020-11-12 10:43:03 +00:00
james
a23b351201
move global sphinx files
2020-11-12 10:43:02 +00:00
james
ad0f99eb1b
fix links to java files
2020-11-12 10:43:02 +00:00
james
164065377f
correct java tutorial filename
2020-11-12 10:43:02 +00:00
james
132d9814e6
label index articles
2020-11-12 10:43:02 +00:00
james
8878248ff7
add labels to articles
2020-11-12 10:43:02 +00:00
james
bab6d04139
ql language ref: change code blocks
2020-11-12 10:43:02 +00:00
james
28c7c42e34
add local objects.inv
2020-11-12 10:43:02 +00:00
james
c300ccf300
sort out codeql-cli-manual
2020-11-12 10:43:02 +00:00
james
896d46469b
reorg sphinx docs
2020-11-12 10:43:01 +00:00
Nick Rolfe
056879eb97
Merge pull request #35 from github/aibaars/cargo-update
...
Run: cargo update
2020-11-12 10:34:50 +00:00
Mathias Vorreiter Pedersen
00f067be84
Update cpp/change-notes/2020-11-12-unsafe-use-of-this.md
...
Co-authored-by: Jonas Jensen <jbj@github.com >
2020-11-12 11:28:12 +01:00
James Fletcher
19b974832b
Merge pull request #4658 from github/main-126-merge
...
Merge rc/1.26 into main branch
2020-11-12 10:18:24 +00:00
Asger Feldthaus
4d3d982bde
JS: Autoformat date-functions file
2020-11-12 10:07:30 +00:00
james
9fc84f8061
Merge branch 'rc/1.26' into main-126-merge
2020-11-12 09:55:32 +00:00
Mathias Vorreiter Pedersen
50e90510ef
C++: Follow the new change-note protocol.
2020-11-12 10:27:11 +01:00
Mathias Vorreiter Pedersen
4c27c3757c
C++: Respond to more review comments.
2020-11-12 10:27:03 +01:00
Arthur Baars
8d1ed4bf89
Run: cargo update
...
This pulls in improvements to the tree-sitter-ruby repository.
2020-11-12 10:25:40 +01:00
Tamás Vajk
b5ef3bd5ec
Merge pull request #4516 from tamasvajk/feature/attributes
...
C#: Refactor attribute extraction
2020-11-12 09:57:46 +01:00
Arthur Baars
557d990a0d
Remove cargo fmt workaround on OSX
...
The `fmt` component is now installed by default on OSX.
2020-11-12 09:29:26 +01:00
Sauyon Lee
f129949a38
Apply review comments
...
Co-authored-by: Chris Smowton <smowton@github.com >
2020-11-11 23:49:23 -08:00
Sauyon Lee
efddef7fa2
Add tests for stored XSS query
2020-11-11 23:13:12 -08:00
Sauyon Lee
d517125507
Add tests for SQL framework
2020-11-11 23:13:12 -08:00
Sauyon Lee
30b17d9762
Add StoredXSS query
2020-11-11 23:13:11 -08:00
Sauyon Lee
36bbf1eeb9
Improve models for database/sql
2020-11-11 22:10:16 -08:00
Arthur Baars
44150600ab
Add QLTest workflow
2020-11-11 21:57:50 +01:00
yo-h
7c3ea0e264
Merge pull request #4602 from aschackmull/java/changenote-3812
...
Java: Add change note for #3812 .
2020-11-11 15:14:58 -05:00
Erik Krogh Kristensen
044fbc0b49
optimize the regexp parser
2020-11-11 21:13:11 +01:00
Erik Krogh Kristensen
de6b21986c
bump extractor version string
2020-11-11 21:10:03 +01:00
Erik Krogh Kristensen
74d933d475
move change note
2020-11-11 21:09:08 +01:00
Erik Krogh Kristensen
67d581edec
Update javascript/2020-11-09-jwt.md
...
Co-authored-by: Asger F <asgerf@github.com >
2020-11-11 21:06:30 +01:00
Geoffrey White
2aa6ff6239
C++: Add comments about the temporary exclusions.
2020-11-11 17:33:16 +00:00
Mathias Vorreiter Pedersen
44e38ab6d2
Merge branch 'unsafe-use-of-this-query' of github.com:MathiasVP/ql into unsafe-use-of-this-query
2020-11-11 18:30:20 +01:00
Mathias Vorreiter Pedersen
e1ef41bd38
C++: Respond to review comments.
2020-11-11 18:29:51 +01:00
Mathias Vorreiter Pedersen
de0ca0aa74
Update cpp/ql/src/Likely Bugs/OO/UnsafeUseOfThis.cpp
...
Co-authored-by: Geoffrey White <40627776+geoffw0@users.noreply.github.com >
2020-11-11 18:12:49 +01:00
luchua-bc
dcb7324643
Add the constraint that the caller method must throw an exception
2020-11-11 16:47:53 +00:00
Geoffrey White
5359e13421
C++: Remove abstraction of OperatorNew/DeleteAllocationFunction.
2020-11-11 15:35:34 +00:00
Arthur Baars
080c56c9eb
Add QL test support
2020-11-11 16:32:44 +01:00
yoff
86fc9e62ef
Merge pull request #4650 from RasmusWL/python-set-literal-formatting
...
Python: Update set literal formatting
2020-11-11 15:35:12 +01:00
Arthur Baars
db35abdf17
Merge pull request #32 from github/getFileBySourceArchiveName
...
Replace getEncodedFile with getFileBySourceArchiveName predicate
2020-11-11 13:46:10 +01:00
Alvaro Muñoz
30d8dce389
check that either there are no custom message interpolator configured, or there is at least one that is insecure
2020-11-11 12:53:54 +01:00
CodeQL CI
f9d62adcb2
Merge pull request #4567 from asgerf/js/date-functions
...
Approved by erik-krogh
2020-11-11 11:17:30 +00:00
Alvaro Muñoz
c3bc0d6c15
Apply formatting
2020-11-11 12:06:39 +01:00
Alvaro Muñoz
5b1858a514
Do not report the issue only if all message interpolators are secure
2020-11-11 11:50:15 +01:00
Chris Smowton
82a5b5f264
Merge pull request #369 from sauyon/checkdeps
...
Check dependencies before skipping dependency installation
2020-11-11 09:54:33 +00:00
Chris Smowton
04cec8b542
Merge pull request #400 from sauyon/autoformat
...
Autoformat tests
2020-11-11 09:51:50 +00:00
Rasmus Wriedt Larsen
611398586d
Merge pull request #4649 from yoff/python-dataflow-cfgparameters
...
Python: Make `ParameterNode` a `CfgNode`
2020-11-11 10:22:12 +01:00
Tamas Vajk
453c97a8c3
Fix expected files of failing tests
2020-11-11 09:57:52 +01:00
Tom Hvitved
e57134e8a4
C#: Address comments
2020-11-11 09:54:51 +01:00
Tom Hvitved
d6515e7963
C#: Changes to extraction of attributes in assemblies
...
- Only cache on `AttributeData` and not the parent entity.
- Move `CreateGeneratedExpressionFromArgument` to `Expression.cs`.
- Restructure the various `CreateGenerated` methods so child entities are
created inside them (and therefore no need to expose child index logic).
- Add locations to generated expressions.
- Avoid linear lookup in `CompilationUnit.cs`.
- Consolidate tests.
2020-11-11 09:54:51 +01:00