CodeQL CI
|
8e57f57643
|
Merge pull request #4559 from erik-krogh/redis
Approved by asgerf
|
2020-10-28 11:47:12 +00:00 |
|
Nick Rolfe
|
f4b9c0c71a
|
Merge remote-tracking branch 'origin/main' into ql_gen
|
2020-10-28 11:41:18 +00:00 |
|
Taus Brock-Nannestad
|
1503c5ea16
|
Python: Remove refersTo from regex.qll
This was causing the old `Object` API stuff to be evaluated when using
our new library models (specifically the Django model).
|
2020-10-28 12:41:17 +01:00 |
|
Nick Rolfe
|
24b4586ddd
|
Merge pull request #14 from github/aibaars/remove-storage-index
Extractor: fix child index values
|
2020-10-28 11:37:38 +00:00 |
|
Tamas Vajk
|
1830eea50a
|
C#: Cleanup TypeMentions in AST printing
|
2020-10-28 12:34:12 +01:00 |
|
Nick Rolfe
|
11152583d5
|
Add get_name() method to simplify logic in field handling
|
2020-10-28 11:30:50 +00:00 |
|
Tamas Vajk
|
444b100c51
|
Minor fix in definitions.qll
|
2020-10-28 12:23:12 +01:00 |
|
Nick Rolfe
|
53de99e6af
|
Regenerate QL with fix to Top::getAFieldOrChild
|
2020-10-28 11:22:21 +00:00 |
|
Nick Rolfe
|
7b51030dd4
|
Merge remote-tracking branch 'origin/ql_gen' into ql_gen
|
2020-10-28 11:20:58 +00:00 |
|
Nick Rolfe
|
b4f9599dd9
|
Simplify hashmap insertion
|
2020-10-28 11:20:47 +00:00 |
|
Tamas Vajk
|
a9e93e5681
|
C#: Fix GenericType locations in jump-to-definition
|
2020-10-28 12:07:27 +01:00 |
|
Anders Schack-Mulligen
|
f3e2bd0fd9
|
Merge pull request #3141 from pwntester/InsecureBeanValidation
Insecure Bean Validation query
|
2020-10-28 12:04:12 +01:00 |
|
Nick Rolfe
|
679ca6d0f1
|
Update Actions workflow to generate ruby_ast.qll
|
2020-10-28 11:04:09 +00:00 |
|
Nick Rolfe
|
17820e017c
|
Fix Top::getAFieldOrChild() so it doesn't take an index arg
Co-authored-by: Arthur Baars <aibaars@github.com>
|
2020-10-28 11:02:42 +00:00 |
|
Nick Rolfe
|
bc22631c32
|
Simplify QL model following review feedback
|
2020-10-28 11:00:40 +00:00 |
|
Erik Krogh Kristensen
|
75d996a0f9
|
make promisify smaller
|
2020-10-28 11:59:21 +01:00 |
|
Erik Krogh Kristensen
|
bce06d3194
|
add test that promisify is not imprecise
|
2020-10-28 11:59:03 +01:00 |
|
Erik Krogh Kristensen
|
c49d5081cc
|
Update javascript/ql/src/semmle/javascript/frameworks/NoSQL.qll
Co-authored-by: Asger F <asgerf@github.com>
|
2020-10-28 11:45:58 +01:00 |
|
Nick Rolfe
|
77fdafdc95
|
Simplify error handling with if let
|
2020-10-28 10:35:33 +00:00 |
|
Nick Rolfe
|
59580d51bb
|
Merge remote-tracking branch 'origin/main' into ql_gen
|
2020-10-28 10:30:36 +00:00 |
|
Tamas Vajk
|
64b584b4a3
|
C#: Fix PR review findings in NamespaceDeclaration
|
2020-10-28 11:30:17 +01:00 |
|
Tamas Vajk
|
9cc7424cd0
|
C#: Simplify TypeMentions in PrintAST
|
2020-10-28 11:28:06 +01:00 |
|
Tamas Vajk
|
c2e8d3fb3b
|
C#: Minor fix in TypeMention
|
2020-10-28 11:28:06 +01:00 |
|
Asger Feldthaus
|
a9adb2912a
|
JS: Improve lodash model
|
2020-10-28 10:09:41 +00:00 |
|
Asger Feldthaus
|
9fc5c0bdb8
|
JS: Update ComposedFunctions
|
2020-10-28 10:09:40 +00:00 |
|
Tom Hvitved
|
92461d41e0
|
C#: Add change note
|
2020-10-28 11:02:12 +01:00 |
|
Tom Hvitved
|
28607927ee
|
C#: Update CIL tests
|
2020-10-28 10:57:01 +01:00 |
|
Chris Smowton
|
0f637c5887
|
Merge pull request #379 from smowton/model-revel
Model Revel
|
2020-10-28 09:56:25 +00:00 |
|
Chris Smowton
|
7ddb289910
|
Merge pull request #389 from github/aibaars/fix-broken-links
Update links in ql/docs/experimental.md
|
2020-10-28 09:55:21 +00:00 |
|
Cornelius Riemenschneider
|
f1f64fb7df
|
C++: Make BuiltInVarArgs* classes subclasses of VarArgsExpr.
|
2020-10-28 10:48:00 +01:00 |
|
Tamás Vajk
|
7c3964a388
|
Merge pull request #4543 from tamasvajk/feature/configureawait
C#: Add flow summary for 'Task.ConfigureAwait()'
|
2020-10-28 10:42:44 +01:00 |
|
Rasmus Lerchedahl Petersen
|
9fd1bf60fa
|
Merge branch 'main' of github.com:github/codeql into python-port-path-injection
|
2020-10-28 10:24:23 +01:00 |
|
Arthur Baars
|
31cd26fded
|
Update links in ql/docs/experimental.md
|
2020-10-28 10:12:52 +01:00 |
|
Geoffrey White
|
09372f5c81
|
C++: Remove misleading comment.
|
2020-10-28 09:04:10 +00:00 |
|
Erik Krogh Kristensen
|
2e514c4d7b
|
add model for Node Redis
|
2020-10-28 09:52:54 +01:00 |
|
Anders Schack-Mulligen
|
34ae6e0576
|
Apply suggestions from code review
Co-authored-by: Shati Patel <42641846+shati-patel@users.noreply.github.com>
|
2020-10-28 09:15:08 +01:00 |
|
Tom Hvitved
|
02ca8fe3b7
|
Merge pull request #4556 from hvitved/csharp/dataflow/tuple-perf
C#: Fix bad join-order in `System.Tuple` flow-summaries
|
2020-10-28 08:50:37 +01:00 |
|
Tamas Vajk
|
7a1e1996e4
|
C#: Remove unneded class from CompilerServices.qll
|
2020-10-28 08:42:20 +01:00 |
|
luchua-bc
|
99c79f4aa3
|
Enhance the dataflow sink and update test cases
|
2020-10-28 03:07:01 +00:00 |
|
Dave Bartolomeo
|
27ad7bc297
|
Merge pull request #4560 from MathiasVP/instruction-tag-for-this-addr-and-load
C++: Make sure getInstructionTagId has a result for `this` related IPA branches
|
2020-10-27 21:01:09 -04:00 |
|
luchua-bc
|
3cc3fe9d37
|
Switch to TaintPreservingCallable and add test cases
|
2020-10-28 00:33:07 +00:00 |
|
Arthur Baars
|
fe1d8ec15f
|
Extractor: fix child index values
|
2020-10-27 22:32:53 +01:00 |
|
Mathias Vorreiter Pedersen
|
ad9e7b7343
|
C++: Give getInstructionTagId a result when tag is ThisAddressTag or ThisLoadTag
|
2020-10-27 22:16:01 +01:00 |
|
Alvaro Muñoz
|
77b551b693
|
Update java/ql/src/Security/CWE/CWE-094/InsecureBeanValidation.qhelp
Co-authored-by: Shati Patel <42641846+shati-patel@users.noreply.github.com>
|
2020-10-27 21:12:17 +01:00 |
|
Alvaro Muñoz
|
b9c75ea462
|
Update java/ql/src/Security/CWE/CWE-094/InsecureBeanValidation.qhelp
Co-authored-by: Shati Patel <42641846+shati-patel@users.noreply.github.com>
|
2020-10-27 21:12:00 +01:00 |
|
Alvaro Muñoz
|
ac116da0dc
|
Update java/ql/src/Security/CWE/CWE-094/InsecureBeanValidation.qhelp
Co-authored-by: Shati Patel <42641846+shati-patel@users.noreply.github.com>
|
2020-10-27 21:11:48 +01:00 |
|
Alvaro Muñoz
|
d5b470ea0c
|
Update java/ql/src/Security/CWE/CWE-094/InsecureBeanValidation.qhelp
Co-authored-by: Shati Patel <42641846+shati-patel@users.noreply.github.com>
|
2020-10-27 21:11:27 +01:00 |
|
Alvaro Muñoz
|
9785013c29
|
Update java/ql/src/Security/CWE/CWE-094/InsecureBeanValidation.qhelp
Co-authored-by: Shati Patel <42641846+shati-patel@users.noreply.github.com>
|
2020-10-27 21:11:15 +01:00 |
|
Alvaro Muñoz
|
d221930c81
|
Update java/ql/src/Security/CWE/CWE-094/InsecureBeanValidation.qhelp
Co-authored-by: Shati Patel <42641846+shati-patel@users.noreply.github.com>
|
2020-10-27 21:10:56 +01:00 |
|
Alvaro Muñoz
|
a9ea63b976
|
Update java/change-notes/2020-10-27-insecure-bean-validation.md
Co-authored-by: Shati Patel <42641846+shati-patel@users.noreply.github.com>
|
2020-10-27 21:10:46 +01:00 |
|