Tony Torralba
|
6f484d3d64
|
Merge pull request #8440 from github/workflow/coverage/update
Update CSV framework coverage reports
|
2022-03-15 10:58:27 +01:00 |
|
Asger Feldthaus
|
d628dc0b52
|
Ruby: sync ApiGraphModels.qll
|
2022-03-15 10:52:41 +01:00 |
|
Asger Feldthaus
|
82750638c6
|
JS: Verify models even if package is not used in database
|
2022-03-15 10:51:44 +01:00 |
|
Tony Torralba
|
fd4c9fd543
|
Cover a missing @tag security when @security-severity is used
|
2022-03-15 10:39:42 +01:00 |
|
Asger Feldthaus
|
a19f06ffc0
|
JS: Port checks to JS
|
2022-03-15 10:35:49 +01:00 |
|
Asger Feldthaus
|
7f8205684e
|
Ruby: verify tokens in identifying access path
|
2022-03-15 10:25:59 +01:00 |
|
Tony Torralba
|
82b2fd2d23
|
Exclude queries without precision
|
2022-03-15 10:22:10 +01:00 |
|
Dave Bartolomeo
|
f53a66b52a
|
Add working sign and modulus analysis
|
2022-03-15 05:16:23 -04:00 |
|
Mathias Vorreiter Pedersen
|
7e0e7d5004
|
Merge branch 'main' into use-taint-configuration-in-three-more-queries
|
2022-03-15 09:06:55 +00:00 |
|
Asger Feldthaus
|
97ca1155c3
|
JS: Sync ApiGraphModels.qll and test
|
2022-03-15 09:29:34 +01:00 |
|
Asger Feldthaus
|
65249dabd3
|
Ruby: add warning for wrong number of columns in CSV row
|
2022-03-15 09:28:21 +01:00 |
|
Erik Krogh Kristensen
|
c7509c4dd3
|
Merge branch 'main' into deadCode
|
2022-03-15 09:19:14 +01:00 |
|
Tony Torralba
|
18165cbb46
|
Exclude examples folder
|
2022-03-15 09:14:11 +01:00 |
|
Michael Nebel
|
ba67ea0445
|
C#: Fix performance issue with UselessNullCoalescingExpression query.
|
2022-03-15 09:09:45 +01:00 |
|
Jonas Jensen
|
d89c52f4b0
|
Merge pull request #8403 from erik-krogh/noUpper
Rename all upper-case variables, and all lower-case modules
|
2022-03-15 09:00:37 +01:00 |
|
haby0
|
e11c74c580
|
Delete redundant comments
|
2022-03-15 15:25:08 +08:00 |
|
haby0
|
4195eef9ba
|
Add CSV injection model
|
2022-03-15 15:15:38 +08:00 |
|
Asger Feldthaus
|
f28acbf3dc
|
Ruby: autoformat
|
2022-03-15 08:15:18 +01:00 |
|
ihsinme
|
62ecf54aaa
|
Update DangerousUseOfExceptionBlocks.cpp
|
2022-03-15 08:53:38 +03:00 |
|
ihsinme
|
e99eaeb256
|
Apply suggestions from code review
Co-authored-by: Geoffrey White <40627776+geoffw0@users.noreply.github.com>
|
2022-03-15 08:53:00 +03:00 |
|
github-actions[bot]
|
b10adfc8da
|
Add changed framework coverage reports
|
2022-03-15 00:13:15 +00:00 |
|
Arthur Baars
|
3311fedda7
|
Merge pull request #8365 from aibaars/qldoc-test
CI: add QLdoc test
|
2022-03-14 23:36:01 +01:00 |
|
Robert Marsh
|
143b79c0cc
|
C++/WIP: Generate IR for global variables
|
2022-03-14 17:12:30 -04:00 |
|
jorgectf
|
f10dac31f9
|
Format some tests
|
2022-03-14 22:12:22 +01:00 |
|
Robert Marsh
|
bf21a471ed
|
C++: add some global variables to IR tests
|
2022-03-14 17:11:36 -04:00 |
|
jorgectf
|
b62b8c8d28
|
Use SummaryModelCsv for the toString taint step
|
2022-03-14 21:47:06 +01:00 |
|
jorgectf
|
c683b48af7
|
Add MyBatisInjectionSink's QLDoc
|
2022-03-14 21:41:36 +01:00 |
|
jorgectf
|
8482c01959
|
Make MyBatisProviderStep an AdditionalValueStep
|
2022-03-14 21:35:26 +01:00 |
|
Erik Krogh Kristensen
|
195ce9c58a
|
add some API-nodes to js/disabling-certificate-validation
|
2022-03-14 21:33:13 +01:00 |
|
jorgectf
|
32f494eba1
|
Use SummaryModelCsv in MyBatisAbstractSQLMethodsStep
|
2022-03-14 21:32:55 +01:00 |
|
jorgectf
|
d47fcedd21
|
Add tests
|
2022-03-14 21:31:51 +01:00 |
|
Jorge
|
158366ab46
|
Apply suggestions from code review
Co-authored-by: Tony Torralba <atorralba@users.noreply.github.com>
|
2022-03-14 21:27:37 +01:00 |
|
Arthur Baars
|
6a74e761c8
|
Merge pull request #8398 from github/post-release-prep/codeql-cli-2.8.3
Post-release preparation for codeql-cli-2.8.3
|
2022-03-14 21:05:09 +01:00 |
|
Arthur Baars
|
be412b1b5d
|
Merge pull request #702 from github/post-release-prep/codeql-cli-2.8.3
Post-release preparation for codeql-cli-2.8.3
|
2022-03-14 21:04:37 +01:00 |
|
Geoffrey White
|
73710e9edb
|
C++: Fix QLDoc.
|
2022-03-14 19:11:43 +00:00 |
|
Tom Hvitved
|
d3d20c69dd
|
Merge pull request #8425 from hvitved/csharp/structural-comparision-fix
C#: Avoid combinatorial explosion in structural comparison library
|
2022-03-14 20:10:40 +01:00 |
|
Geoffrey White
|
7c93eb1eaf
|
C++: Fix large newtype.
|
2022-03-14 19:06:41 +00:00 |
|
Geoffrey White
|
d1b04b4e07
|
C++: Use asDefiningArgument() where appropriate.
|
2022-03-14 17:53:47 +00:00 |
|
Henry Mercer
|
5102cadf8e
|
Merge pull request #8404 from github/codeql-ci/js-atm-new-release
JS: Bump version numbers of ML-powered packs after 0.1.0 release
|
2022-03-14 17:32:37 +00:00 |
|
Dave Bartolomeo
|
20c3cfb1a0
|
Squash a few sign analysis diffs due to range analysis fixes
|
2022-03-14 13:07:45 -04:00 |
|
Tony Torralba
|
03f3535188
|
Added MissingSecuritySeverity query
|
2022-03-14 17:53:08 +01:00 |
|
Asger Feldthaus
|
fee32d3480
|
Elaborate on qldoc for API::EntryPoint
|
2022-03-14 17:52:07 +01:00 |
|
Asger Feldthaus
|
be65b9bebc
|
Ruby: remove spurious Instance token from getExtraSuccessorFromInvoke
|
2022-03-14 17:39:43 +01:00 |
|
Asger Feldthaus
|
072ad8f4a7
|
Ruby: add (from model) to remote flow description
|
2022-03-14 17:39:17 +01:00 |
|
Asger Feldthaus
|
37bbd46e43
|
Ruby: fix broken comment
|
2022-03-14 17:33:57 +01:00 |
|
Asger Feldthaus
|
c9d7651c59
|
Be explicit about re-exporting
|
2022-03-14 17:26:30 +01:00 |
|
Nick Rolfe
|
488c8ef609
|
Ruby: accept test changes after adding more literals
|
2022-03-14 15:49:22 +00:00 |
|
Nick Rolfe
|
2a892c39ac
|
Ruby: add change note for getConstantValue improvements
|
2022-03-14 15:45:58 +00:00 |
|
Nick Rolfe
|
a39aed52c6
|
Ruby: add more tests for edge cases in parsing of integers
|
2022-03-14 15:45:57 +00:00 |
|
Nick Rolfe
|
6c5868cfb5
|
Ruby: use NumberUtils in parseInteger
And make parse{Binary,Octal,Hex}Int hold only for values in the range
0 to 2^31-1 (incl.)
|
2022-03-14 15:45:57 +00:00 |
|