calumgrant
|
d1f7eef7eb
|
Merge pull request #537 from hvitved/csharp/guards-splitting
C#: Make guards library work with CFG splitting
|
2018-11-26 18:19:37 +00:00 |
|
Geoffrey White
|
f034abc275
|
CPP: Add the Semmle security tests.
|
2018-11-26 17:52:34 +00:00 |
|
Aditya Sharad
|
7aef8fa945
|
Merge pull request #547 from pavgust/fix/cwe-497-performance
C++: Refactor CWE-497 for clarity and performance
|
2018-11-26 17:13:27 +00:00 |
|
Mark Shannon
|
516b29d2c9
|
Merge pull request #544 from pavgust/fix/python-hotfixes
Pull recent Python fixes to RC branch
|
2018-11-26 16:18:13 +00:00 |
|
Max Schaefer
|
8e54c7ab6c
|
Merge pull request #503 from asger-semmle/unsafe-global-object-access
JS: add method name injection query
|
2018-11-26 15:56:20 +00:00 |
|
Aditya Sharad
|
38095e2f96
|
Python: Add QL for VS workspace settings file.
|
2018-11-26 15:10:12 +00:00 |
|
Max Schaefer
|
588defd6b6
|
Merge pull request #519 from esben-semmle/js/nullish-coalescing-extractor-and-ql
JS: nullish coalescing support in extractor and QL
|
2018-11-26 15:03:23 +00:00 |
|
Kevin Backhouse
|
4877659578
|
Fix names.
|
2018-11-26 14:56:35 +00:00 |
|
Tom Hvitved
|
e069041bd5
|
Merge pull request #431 from calumgrant/cs/extractor/fsharp-core
C#: Fix extraction of method signatures
|
2018-11-26 15:07:33 +01:00 |
|
Jonas Jensen
|
fcd53ae631
|
Merge pull request #540 from geoffw0/cpp-296
CPP: Fix false positive from AutoGeneratedFile.qll.
|
2018-11-26 15:03:21 +01:00 |
|
Tom Hvitved
|
7dc0a8132e
|
Merge pull request #513 from calumgrant/cs/cwe-134
C#: New query cs/uncontrolled-format-string
|
2018-11-26 14:58:54 +01:00 |
|
calum
|
de36151c4a
|
C#: Add regression test and fix for type mentions of type parameter constraints.
|
2018-11-26 13:51:02 +00:00 |
|
semmle-qlci
|
03fd5498d9
|
Merge pull request #542 from xiemaisi/js/move-project-file-back-to-code
Approved by esben-semmle
|
2018-11-26 11:41:39 +00:00 |
|
Max Schaefer
|
a1772a9ae4
|
Merge pull request #543 from markshannon/python-backward-compat-default
Python: Add default.qll for backwards compatibility with older queries and libraries.
|
2018-11-26 11:27:17 +00:00 |
|
Mark Shannon
|
4d8f5e1020
|
Python: Add default.qll for backwards compatibility with older queries and libraries.
|
2018-11-26 11:25:28 +00:00 |
|
Esben Sparre Andreasen
|
2d7f09d321
|
JS(ql): support nullish coalescing operators
|
2018-11-26 10:31:19 +01:00 |
|
Esben Sparre Andreasen
|
a2a798e59c
|
JS(extractor): support nullish coalescing operators
|
2018-11-26 09:45:19 +01:00 |
|
Max Schaefer
|
93f4ee8813
|
JavaScript: Remove Eclipse metadata files for extractor.
|
2018-11-26 08:24:33 +00:00 |
|
Arthur Baars
|
8d7ace25bf
|
Merge pull request #535 from adityasharad/merge/master-next-231118
Merge master into next.
|
2018-11-25 20:19:23 +01:00 |
|
Kevin Backhouse
|
bc752e1a98
|
Add post-dominators.
|
2018-11-24 18:23:27 +00:00 |
|
Geoffrey White
|
f338a4f0d6
|
CPP: Fix false positive from AutoGeneratedFile.qll.
|
2018-11-23 17:34:18 +00:00 |
|
Taus
|
f0fbed76e7
|
Merge pull request #539 from markshannon/python-path-fix-siblings
Python: Fix parents relation for path queries.
|
2018-11-23 17:59:04 +01:00 |
|
Aditya Sharad
|
c20b688a3f
|
Merge master into next.
|
2018-11-23 16:36:31 +00:00 |
|
Taus
|
3cee874ee3
|
Merge pull request #536 from markshannon/python-more-shell-injection
Python: Some additional sinks for command injection.
|
2018-11-23 17:12:20 +01:00 |
|
yh-semmle
|
17b063f0b2
|
Merge pull request #473 from sb-semmle/add-properties-files-to-java-schema
Add properties files to java schema
|
2018-11-23 11:09:00 -05:00 |
|
yh-semmle
|
f4ec168666
|
Merge pull request #533 from aschackmull/java/inherit-bugfix-changenote
Java: Add change note for #459.
|
2018-11-23 10:53:44 -05:00 |
|
Mark Shannon
|
3190b12544
|
Python: Fix parent relation for path-queries.
|
2018-11-23 15:04:01 +00:00 |
|
Mark Shannon
|
bfc001cc68
|
Python: Add change note for requests without cert verification query.
|
2018-11-23 14:48:19 +00:00 |
|
Mark Shannon
|
6588606739
|
Python: Account for other 'falsey' values in query.
|
2018-11-23 14:42:45 +00:00 |
|
Mark Shannon
|
06e5bc8359
|
Python: Add qhelp for new query.
|
2018-11-23 14:42:45 +00:00 |
|
Mark Shannon
|
45e864a395
|
Python: New query to test for requests without validation.
|
2018-11-23 14:42:45 +00:00 |
|
Mark Shannon
|
f0206a2ff4
|
Python: Tests for new query: requests called with verify=False.
|
2018-11-23 14:42:45 +00:00 |
|
Mark Shannon
|
7f5d46b32f
|
Python: Add change note for new sinks.
|
2018-11-23 14:30:57 +00:00 |
|
Mark Shannon
|
b94493aec3
|
Python: Add extra sinks for command-injection query.
|
2018-11-23 14:29:02 +00:00 |
|
Taus
|
ceb316df60
|
Merge pull request #527 from markshannon/python-security-change-note
Collated python change notes
|
2018-11-23 15:28:18 +01:00 |
|
Pavel Avgustinov
|
d4b2c01634
|
Lift out intermediate helper predicate.
|
2018-11-23 14:22:44 +00:00 |
|
Tom Hvitved
|
03e69e9945
|
C#: Make guards library work with CFG splitting
|
2018-11-23 15:20:33 +01:00 |
|
Tom Hvitved
|
228189db5a
|
C#: Add tests for guards inside split CFG blocks
|
2018-11-23 15:20:27 +01:00 |
|
Taus
|
61f5c2e834
|
Merge pull request #516 from markshannon/python-path-queries
Python path queries
|
2018-11-23 15:20:19 +01:00 |
|
Anders Schack-Mulligen
|
d24145831b
|
Java: Add change note for #459.
|
2018-11-23 14:21:30 +01:00 |
|
Aditya Sharad
|
10dc183495
|
Merge pull request #512 from hvitved/csharp/autobuilder/dirs-proj
C#: Recognize `.proj` files in autobuilder
|
2018-11-23 13:18:04 +00:00 |
|
Mark Shannon
|
4f5cfbc336
|
Correct change for extractor logging levels.
|
2018-11-23 13:03:16 +00:00 |
|
Mark Shannon
|
95f1935eaa
|
Python change notes: Merge in internal change notes.
|
2018-11-23 12:55:04 +00:00 |
|
semmle-qlci
|
04c2b23abd
|
Merge pull request #520 from esben-semmle/js/clear-text-logging-taint-kinds
Approved by asger-semmle
|
2018-11-23 12:40:40 +00:00 |
|
Mark Shannon
|
61bd8682df
|
Python: Improve API and representation of taint tracking nodes. Update queries and tests accordingly.
|
2018-11-23 12:32:14 +00:00 |
|
calum
|
b67bc7b612
|
C#: Fix id generation of constructed methods, by avoid id clashes by ensuring that method type parameters are qualified where necessary. Add a qltest.
|
2018-11-23 12:11:10 +00:00 |
|
calum
|
051dd191ac
|
C#: Change notes.
|
2018-11-23 12:11:10 +00:00 |
|
calum
|
e00807d66b
|
C#: Fix decoding method type parameters in FSharp.Core.
|
2018-11-23 12:09:52 +00:00 |
|
semmle-qlci
|
817456ee9f
|
Merge pull request #529 from asger-semmle/js-line-map
Approved by xiemaisi
|
2018-11-23 12:00:17 +00:00 |
|
Anders Schack-Mulligen
|
a0d8888224
|
Merge pull request #531 from yh-semmle/java/deprecate-vcs
Java: deprecate queries that use `VCS.qll`
|
2018-11-23 11:59:17 +01:00 |
|