Asger F
|
4b82840e9d
|
Revert "JS: Skip files with unsupported file encoding"
codeql-cli/v2.7.1
|
2021-11-09 10:57:01 +00:00 |
|
Rasmus Lerchedahl Petersen
|
cb8f1b4593
|
Python: Add tests for aiopg
|
2021-11-09 11:49:31 +01:00 |
|
Chris Smowton
|
2c5fe1dedc
|
File names should be camel-case
|
2021-11-09 10:45:09 +00:00 |
|
Chris Smowton
|
bc9300ebf5
|
Copyedit examples
Fragments suffice for illustration, and the two bad and good examples can be easily combined
|
2021-11-09 10:42:58 +00:00 |
|
Chris Smowton
|
c18b11a470
|
Copy-edit query:
* Regular comments to qldoc
* Improve naming
* Update out-of-date documentation from earlier versions of the query
|
2021-11-09 10:31:30 +00:00 |
|
Geoffrey White
|
d9e02e83fe
|
Merge pull request #6825 from MathiasVP/use-shared-ssa-in-ir-dataflow
C++: Redesign IR dataflow using the shared SSA library
|
2021-11-09 10:19:50 +00:00 |
|
James Fletcher
|
1bacce487e
|
Merge pull request #7056 from jf205/sarif-query-help
Add new option to database analyze tutorial
|
2021-11-09 10:19:29 +00:00 |
|
CodeQL CI
|
954fd8d6f7
|
Merge pull request #7081 from github/revert-6924-js/skip-files-with-unsupported-encoding
Approved by esbena
|
2021-11-09 02:18:16 -08:00 |
|
Erik Krogh Kristensen
|
8727060ca7
|
add comment about modes of operation
Co-authored-by: Rasmus Wriedt Larsen <rasmuswriedtlarsen@gmail.com>
|
2021-11-09 11:15:12 +01:00 |
|
Chris Smowton
|
dda425ca8d
|
Improve query style
No need to highlight the sink again in the message when the sink is the alert location to begin with
|
2021-11-09 10:08:02 +00:00 |
|
Asger Feldthaus
|
87aa39cef2
|
JS: Limited tracking of object literals with methods
|
2021-11-09 11:06:41 +01:00 |
|
Chris Smowton
|
f7c19dea71
|
Copyedit qhelp
|
2021-11-09 10:05:18 +00:00 |
|
Asger F
|
0c6680b2c0
|
Revert "JS: Skip files with unsupported file encoding"
|
2021-11-09 09:07:54 +00:00 |
|
pupiles
|
7f68f85002
|
fomat .ql inline comment
|
2021-11-09 14:42:32 +08:00 |
|
ihsinme
|
55fe01018f
|
Update InsecureTemporaryFile.ql
|
2021-11-09 09:33:33 +03:00 |
|
ihsinme
|
8ddfea1dee
|
Update cpp/ql/src/experimental/Security/CWE/CWE-200/ExposureSensitiveInformationUnauthorizedActor.qhelp
Co-authored-by: Geoffrey White <40627776+geoffw0@users.noreply.github.com>
|
2021-11-09 09:20:39 +03:00 |
|
Asger Feldthaus
|
f14f9449ee
|
JS: Use getAMatchedString instead of getConstantString
|
2021-11-08 15:35:35 +01:00 |
|
Asger Feldthaus
|
b3e64f1669
|
JS: Add test
|
2021-11-08 15:32:43 +01:00 |
|
Erik Krogh Kristensen
|
330c2c42b5
|
Merge pull request #7075 from erik-krogh/cwe297
JS: add cwe-297 to `js/disabling-certificate-validation`
|
2021-11-08 14:35:58 +01:00 |
|
Erik Krogh Kristensen
|
5cafb86c88
|
Merge pull request #7074 from erik-krogh/cwe942
JS: add cwe-942 to `js/cors-misconfiguration-for-credentials`
|
2021-11-08 14:35:53 +01:00 |
|
Rasmus Lerchedahl Petersen
|
3f4c2ba24e
|
Python: Support debugging inline taint tests
The module `Conf` is created so that it can be imported
without importing the query predicates from the same file.
|
2021-11-08 14:08:11 +01:00 |
|
Anders Schack-Mulligen
|
1e0eb2f6e4
|
Merge pull request #7072 from aschackmull/java/nomagic-synchsetunsynchget
Java: Fix bad magic in SynchSetUnsynchGet.
|
2021-11-08 13:48:22 +01:00 |
|
Alex Ford
|
2581efc18a
|
ruby: downgrade rb/hardcoded-credentials precision from high to medium
|
2021-11-08 12:32:38 +00:00 |
|
Erik Krogh Kristensen
|
a2175a3207
|
add cwe-297 to js/disabling-certificate-validation
|
2021-11-08 13:26:53 +01:00 |
|
Erik Krogh Kristensen
|
507c8addb2
|
add cwe-942 to js/cors-misconfiguration-for-credentials
|
2021-11-08 13:12:19 +01:00 |
|
Cornelius Riemenschneider
|
76d2665132
|
Merge pull request #7071 from github/criemen/simplify-csharp-tracing-config
C#: Remove macos compatibility stanzas from tracing config.
|
2021-11-08 13:11:44 +01:00 |
|
james
|
96ff2f5125
|
use correct type of link
|
2021-11-08 12:06:20 +00:00 |
|
james
|
dfe77f844f
|
fix errors in debugging-data-flow-queries-using-partial-flow.rst
|
2021-11-08 11:59:53 +00:00 |
|
Chris Smowton
|
f96733f270
|
Merge pull request #602 from github/criemen/update-tracing-config
Remove macos compatibility stanzas from tracing config.
|
2021-11-08 11:46:44 +00:00 |
|
Cornelius Riemenschneider
|
17a9dbfb62
|
Add port of the existing compiler-tracing.spec files to the new Lua tracing infrastructure.
|
2021-11-08 12:29:06 +01:00 |
|
Erik Krogh Kristensen
|
0ab510f543
|
add test that requires flowToExpr
|
2021-11-08 12:25:45 +01:00 |
|
james
|
c94bfc306a
|
improve links
|
2021-11-08 11:18:41 +00:00 |
|
Erik Krogh Kristensen
|
3d6a5263e0
|
improve qhelp
Co-authored-by: Esben Sparre Andreasen <esbena@github.com>
|
2021-11-08 12:02:39 +01:00 |
|
Mathias Vorreiter Pedersen
|
8e496f7121
|
C++: Pull in the latest changes to 'SsaImplCommon'.
|
2021-11-08 10:46:54 +00:00 |
|
Mathias Vorreiter Pedersen
|
fff5d293ff
|
Merge branch 'main' into use-shared-ssa-in-ir-dataflow
|
2021-11-08 10:44:36 +00:00 |
|
Anders Schack-Mulligen
|
92fb7f555c
|
Java: Fix bad magic in SynchSetUnsynchGet.
|
2021-11-08 11:42:20 +01:00 |
|
Cornelius Riemenschneider
|
03ff2c622a
|
Remove macos compatibility stanzas from tracing config.
|
2021-11-08 11:30:31 +01:00 |
|
Cornelius Riemenschneider
|
a49265fb63
|
Remove macos compatibility stanzas from tracing config.
|
2021-11-08 11:27:27 +01:00 |
|
Anders Schack-Mulligen
|
613e971987
|
Merge pull request #7039 from github/turbo-js-java-lib-modeling-ghes-3-3-p-1
Add updated framework support for JS/Java
|
2021-11-08 11:08:34 +01:00 |
|
CodeQL CI
|
6f80387ac1
|
Merge pull request #6993 from asgerf/js/tainted-path-regexp-contains-check
Approved by erik-krogh
|
2021-11-08 01:52:28 -08:00 |
|
jorgectf
|
c0a0c5d811
|
Cover footer and subscription_tracking html injection
|
2021-11-08 10:51:11 +01:00 |
|
jorgectf
|
5774ce2479
|
Improve django test
|
2021-11-08 10:34:16 +01:00 |
|
jorgectf
|
f4a73fcc59
|
Add RFS to sendgrid test
|
2021-11-08 10:33:57 +01:00 |
|
CodeQL CI
|
618d135b0a
|
Merge pull request #7060 from RasmusWL/hashlib-new-type-tracker
Approved by yoff
|
2021-11-08 01:31:40 -08:00 |
|
jorgectf
|
d316974157
|
Add HtmlContent additional taint step
|
2021-11-08 10:23:50 +01:00 |
|
Tom Hvitved
|
77aca0a365
|
Merge pull request #7041 from hvitved/csharp/consistent-ids
C#: Use `cs/` prefix in all query IDs
|
2021-11-08 09:55:11 +01:00 |
|
Anders Schack-Mulligen
|
85fdbda16f
|
Merge pull request #7002 from aschackmull/java/field-node
Java: Add FieldValueNode to break up cartesian step relation.
|
2021-11-08 09:31:42 +01:00 |
|
Mathias Vorreiter Pedersen
|
021d9415b8
|
Merge branch 'main' into use-range-analysis-in-buffer-write
|
2021-11-08 08:22:49 +00:00 |
|
Anders Schack-Mulligen
|
e0b121cd90
|
Merge pull request #7047 from hvitved/csharp/ssa/dominance-frontier
Shared SSA: Improved dominance frontier calculation
|
2021-11-08 08:50:46 +01:00 |
|
Pierre
|
4af3775b72
|
Add requirements for Apple Silicon
|
2021-11-08 01:37:31 +01:00 |
|