Bt2018
819a599e2c
Correct the name tag and change the placeholders in the query
2020-05-14 08:13:21 -04:00
Geoffrey White
78f098f37a
C++: Test Function.getParameterString().
2020-05-14 13:05:39 +01:00
Mathias Vorreiter Pedersen
f414b277ba
C++: Modify complex.cpp test to account for longer access paths in the dataflow library
2020-05-14 13:58:04 +02:00
Pavel Avgustinov
3cc13db3a0
NodeJSLib: Restore backwards-compatibility.
2020-05-14 12:51:09 +01:00
Geoffrey White
53a53fb633
C++: Modernize the Functions test.
2020-05-14 12:50:57 +01:00
Bt2018
9a7ab4ee32
Correct comment of the HostVerificationMethodAccess method access
2020-05-14 07:43:17 -04:00
Shati Patel
3af98aaf44
Merge pull request #3469 from shati-patel/delete-spec
...
CodeQL docs migration: Delete `ql-spec` Sphinx project
2020-05-14 11:12:19 +01:00
Asger Feldthaus
1cdb51741f
JS: Dont use deprecated API in test case
2020-05-14 11:08:31 +01:00
Anders Schack-Mulligen
5c9fb2312e
Merge pull request #3090 from luchua-bc/java-insert-sensitive-info-into-log
...
Java: CWE-532 sensitive info logging
2020-05-14 11:43:47 +02:00
Shati Patel
cb2f7c4b15
CodeQL docs migration: Delete ql-spec Sphinx project
2020-05-14 10:32:01 +01:00
Sauyon Lee
ee0f3c9fba
Address review comments
2020-05-14 02:30:14 -07:00
Sauyon Lee
804165c9ef
Fix comment in ReflectedXss nonhtmlcontenttype
...
Co-authored-by: Max Schaefer <54907921+max-schaefer@users.noreply.github.com >
2020-05-14 02:28:15 -07:00
Mathias Vorreiter Pedersen
f5f3405ec3
C++: Modify IR field flow tests to use InlineExpectationsTest.qll
2020-05-14 11:11:21 +02:00
Pavel Avgustinov
ab2d059ed4
JavaScript: Model extra sinks in vm module
2020-05-14 10:01:40 +01:00
Max Schaefer
1fbf552ef5
Merge pull request #140 from sauyon/depstubber-update
...
Update dependency stubs
2020-05-14 09:29:17 +01:00
Erik Krogh Kristensen
b12e21edcc
add test for new zipslip sanitizer
2020-05-14 10:11:37 +02:00
Erik Krogh Kristensen
422ade16db
Apply suggestions from code review
...
Co-authored-by: Esben Sparre Andreasen <esbena@github.com >
2020-05-14 10:05:59 +02:00
Erik Krogh Kristensen
ce5356f592
change note
2020-05-14 09:48:50 +02:00
Erik Krogh Kristensen
4175d36269
add test case
2020-05-14 09:46:54 +02:00
Erik Krogh Kristensen
b727fa81a0
add a path sanitizer to zipslip
2020-05-14 09:46:50 +02:00
Erik Krogh Kristensen
71e7083dcb
add "linkname" as a file-name-property for zip-slip
2020-05-14 09:06:23 +02:00
Erik Krogh Kristensen
a19718a10f
add fs.link and fs.linkSync as writing file system calls
2020-05-14 09:00:50 +02:00
Mathias Vorreiter Pedersen
671242ce5e
C++: Add upgrade script
2020-05-14 08:49:34 +02:00
Mathias Vorreiter Pedersen
dbba2269ad
C++: Add stats
2020-05-14 08:47:16 +02:00
yoff
e5eadf9126
Update python/ql/test/query-tests/Functions/general/protocols.py
...
Co-authored-by: Rasmus Wriedt Larsen <rasmuswriedtlarsen@gmail.com >
2020-05-14 07:34:53 +02:00
Rasmus Lerchedahl Petersen
c7ddd2c20c
Python: make test for unicode names pass
2020-05-14 07:31:03 +02:00
Rasmus Lerchedahl Petersen
de50aabd60
Python: test for unicode names
2020-05-14 07:30:29 +02:00
Rasmus Lerchedahl Petersen
4c7cf2ac2d
Python: Make test pass
...
Also checked that the OP's snapshot no longer has alerts from
`duplicate_char_in_class`
2020-05-14 07:06:59 +02:00
Robert Marsh
396ccda81f
Merge pull request #3422 from Cornelius-Riemenschneider/inbounds-ptr
...
C++: Add InBoundsPointerDeref.qll to experimental
2020-05-13 16:55:42 -07:00
Mathias Vorreiter Pedersen
8f3ba75534
C++: Remove abstract keyword from Access and Cast and create .dbscheme unions
2020-05-13 23:15:11 +02:00
Dave Bartolomeo
ea2081ca40
Merge pull request #3459 from dbartol/github/codeql-c-analysis-team/69
...
C++/C#: Remove `UnmodeledUse` instruction
2020-05-13 13:13:40 -04:00
Sauyon Lee
97b3ec5cfc
Update dependency stubs
2020-05-13 10:07:14 -07:00
Rasmus Lerchedahl Petersen
f9f52b0105
Python: test for unicode in raw strings
2020-05-13 18:47:36 +02:00
Sauyon Lee
ac55287210
Merge pull request #138 from max-schaefer/fix-tests
...
Fix frontend errors in two tests and a code example
2020-05-13 08:50:35 -07:00
Asger Feldthaus
2ef7719b06
JS: PathExprInModule deprecation notice
2020-05-13 16:35:24 +01:00
Asger Feldthaus
3846f534a8
JS: Factor out overridden part of PathExpr.getSearchRoot
2020-05-13 16:34:43 +01:00
Asger Feldthaus
5f510878f3
JS: Remove PathExprBase and PathExprInModule
2020-05-13 16:34:28 +01:00
Sauyon Lee
b8b9ff13f3
Merge pull request #139 from max-schaefer/cleanup-131
...
Cleanup of `io` model
2020-05-13 08:29:45 -07:00
Max Schaefer
d5fcf28e03
Add change note.
...
While we didn't see any new results in the evaluation, this is a fairly substantial amount of changes, so adding a change note is probably justified.
2020-05-13 15:55:52 +01:00
Max Schaefer
e852caea07
Cleanup of Io module.
...
- Undid rename from `Io` to `IO`
- Ensured function signatures in comments have leading `func`
- Removed superfluous `extends Function` clauses
- Renamed a few classes to be more consistent.
2020-05-13 15:55:52 +01:00
Max Schaefer
41b5fc17ab
Inline two single-use predicates.
...
This fixes a TODO.
2020-05-13 15:40:36 +01:00
Max Schaefer
6e58524b78
Fix a typo.
2020-05-13 15:40:31 +01:00
Max Schaefer
ec2314310e
Fix code example in query.
2020-05-13 15:38:48 +01:00
Max Schaefer
ac9e39120b
Fix unused variable in test.
2020-05-13 15:28:49 +01:00
Max Schaefer
e034458574
Fix MongoDB tests.
2020-05-13 15:25:54 +01:00
Asger Feldthaus
2d88385ffb
JS: Cache moduleImport
2020-05-13 15:07:13 +01:00
Mathias Vorreiter Pedersen
34314d0cb6
C++: Annotation field flow tests with [IR] and [AST]
2020-05-13 15:16:02 +02:00
Calum Grant
f5daeea618
Merge pull request #3421 from hvitved/csharp/dataflow/change-note
...
C#/Java/C++: Add change note for #3110
2020-05-13 13:53:01 +01:00
semmle-qlci
2a341d973d
Merge pull request #3458 from esbena/js/NoSQLCodeInjection
...
Approved by erik-krogh
2020-05-13 13:33:28 +01:00
Bt2018
7b88988981
Convert to path-problem query
2020-05-13 08:09:22 -04:00
