Esben Sparre Andreasen
72092529d1
JS: add change note for js/unused-local-variable
2018-11-28 13:25:26 +01:00
Esben Sparre Andreasen
f3c90114df
JS: add empty 1.20 change note
2018-11-28 13:24:26 +01:00
Esben Sparre Andreasen
54e2215db4
JS: support require in isReactImportForJSX
2018-11-28 13:16:55 +01:00
Esben Sparre Andreasen
737a816e6f
JS: refactor isReactImportForJSX
2018-11-28 13:16:55 +01:00
Max Schaefer
9c98aaf4bd
JavaScript: Refactor a few predicates to avoid materialisations.
2018-11-28 10:51:29 +00:00
Mark Shannon
eefb45c94b
Python: jinja2-without-escaping query: Clean up query and account for Template class in tests.
2018-11-28 10:46:44 +00:00
Mark Shannon
dff36e22ff
Fix typo.
2018-11-28 10:46:44 +00:00
Mark Shannon
1080525d7d
Python: Add missing test stub.
2018-11-28 10:45:48 +00:00
Mark Shannon
2518ac561e
Python: Add change note for jinja2-autoescape query.
2018-11-28 10:45:48 +00:00
Mark Shannon
243280dc00
Python: New query to check for use of jinja2 templates without auto-escaping.
2018-11-28 10:45:19 +00:00
Max Schaefer
39f1c7904b
JavaScript: Address review comments.
2018-11-28 09:44:58 +00:00
semmle-qlci
e66691a90c
Merge pull request #551 from asger-semmle/js-extractor-shebang
...
Approved by xiemaisi
2018-11-28 08:49:44 +00:00
Max Schaefer
31d23b6295
JavaScript: Sort change notes alphabetically.
2018-11-28 08:16:31 +00:00
Max Schaefer
f9de1d44ca
JavaScript: Add change notes.
2018-11-28 08:16:31 +00:00
Max Schaefer
f1c538a97b
JavaScript: Restrict RemotePropertyInjection query to avoid double-reporting.
...
This query now only flags user-controlled property and header writes, method calls are handled by the new unsafe/unvalidated method call queries.
2018-11-28 08:16:31 +00:00
Max Schaefer
2889e07eb8
JavaScript: Add new query UnvalidatedDynamicMethodCall.
2018-11-28 08:16:31 +00:00
Dave Bartolomeo
5d997c7135
C++: Big QLDoc comment for ChiInstruction
2018-11-27 17:09:26 -08:00
Dave Bartolomeo
53cd5e9994
C++: Fix bug introduced by earlier commit
2018-11-27 14:57:58 -08:00
Dave Bartolomeo
7e6e6f00c1
C++: Fix IR for designated array initializers
2018-11-27 14:57:23 -08:00
Dave Bartolomeo
0a20f9ffbf
C++: Print field names and element indices for aggregate literals in PrintAST
2018-11-27 13:26:18 -08:00
Dave Bartolomeo
90b79eb5f3
C++: Accept GVN test expectations with Chi nodes
2018-11-27 12:56:23 -08:00
Mark Shannon
31ac33e723
Merge pull request #528 from taus-semmle/python-flask-debug
...
Python: Implement check for flask debug mode.
2018-11-27 19:42:26 +00:00
Taus Brock-Nannestad
7f94c257a7
Change precision to high.
2018-11-27 19:02:44 +01:00
Taus
2b340b4804
Merge pull request #530 from markshannon/python-no-cert-validation
...
New query to check for making a request without cert verification.
2018-11-27 19:01:10 +01:00
Geoffrey White
7107cec503
CPP: Add test cases.
2018-11-27 17:20:14 +00:00
Mark Shannon
435b309852
Python: Add utility predicate for finding ModuleObject by name.
2018-11-27 17:06:40 +00:00
Taus Brock-Nannestad
6ebf504d97
Update test results after stub change.
2018-11-27 16:59:19 +01:00
Taus Brock-Nannestad
8d341ab467
Fix stub file.
2018-11-27 16:56:09 +01:00
Arthur Baars
044dcfbf66
Merge pull request #549 from adityasharad/merge/1.19-next-271118
...
Merge rc/1.19 into next.
2018-11-27 16:54:43 +01:00
Asger F
623a80fe90
TS: declassify files with unrecognized shebang line
2018-11-27 14:59:03 +00:00
Taus Brock-Nannestad
b393d9ad04
Add change note.
2018-11-27 15:21:02 +01:00
Taus Brock-Nannestad
a4da245809
Python: Implement check for flask debug mode.
2018-11-27 15:14:38 +01:00
Tom Hvitved
41edd61e2e
Merge pull request #545 from calumgrant/cs/typemention-constraints
...
C#: Fix for type mentions of type parameter constraints
2018-11-27 14:25:48 +01:00
Aditya Sharad
5d5bfc215e
Merge rc/1.19 into next.
2018-11-27 12:04:46 +00:00
Max Schaefer
cf1e7cff3f
JavaScript: Move an auxiliary predicate into shared library.
2018-11-27 12:03:25 +00:00
Mark Shannon
698957e2cf
Python: Correct case of query name and improve help.
2018-11-27 11:32:40 +00:00
Geoffrey White
a85dfb1c4e
Merge pull request #548 from jbj/security-tags-1.19
...
C++: Update security tag in change note
2018-11-27 11:13:56 +00:00
Jonas Jensen
c8e34bff6c
C++: Update security tag in change note
...
These two queries have the `security` tag in the `.ql` file, but it was
missing in the change note.
2018-11-27 11:03:42 +01:00
Jonas Jensen
c403bb1cad
Merge pull request #541 from kevinbackhouse/CppPostDominators
...
Add post-dominators
2018-11-27 08:23:43 +01:00
Dave Bartolomeo
689002a22e
C++: Fix handling of Chi instructions in sign analysis
2018-11-26 16:46:39 -08:00
Robert Marsh
f4ce7b9648
C++: respond to further PR review comments
2018-11-26 16:16:46 -08:00
Robert Marsh
7ef0d5e98d
C++: respond to technical nits
2018-11-26 15:47:47 -08:00
Dave Bartolomeo
2b9afe95e8
C++: Accept test output after rebase
2018-11-26 12:08:19 -08:00
Robert Marsh
799eb06eea
C++: add AliasedDefinition for aliased SSA
2018-11-26 12:08:19 -08:00
Robert Marsh
3ee033d96e
C++: IR sanity fixes for Chi nodes
2018-11-26 12:08:19 -08:00
Robert Marsh
b401cd97f2
C++: use UnmodeledDefinition in UnmodeledUse
2018-11-26 12:08:19 -08:00
Robert Marsh
927f935e62
C++: hook ChiInstructions into the operand graph
2018-11-26 12:08:19 -08:00
Robert Marsh
a33b59103a
C++: insert Chi nodes in the IR successor relation
...
This commit adds Chi nodes to the successor relation and accounts for
them in the CFG, but does not add them to the SSA data graph. Chi nodes
are inserted for partial writes to any VirtualVariable, regardless of
whether the partial write reaches any uses.
2018-11-26 12:08:18 -08:00
Dave Bartolomeo
1fb36ff7e7
C++: Add conservative side effects for function calls
2018-11-26 12:08:18 -08:00
Robert Marsh
f9ed39915f
C++: recompute IRBlock membership at each stage
...
This enables the addition of new instructions in later phases of IR
construction; in particular, aliasing write instructions and inference
instructions.
2018-11-26 12:08:18 -08:00
