Asger Feldthaus
|
76e841830f
|
JS: Check for labeled barriers in reachableFromInput
|
2021-11-03 13:10:20 +01:00 |
|
Erik Krogh Kristensen
|
9cf34f19bb
|
Merge branch 'main' into extractBigReg
|
2021-11-03 13:08:51 +01:00 |
|
Erik Krogh Kristensen
|
264f4ab5ab
|
add js/session-fixation query
|
2021-11-03 13:04:41 +01:00 |
|
Nick Rolfe
|
dd17271ec8
|
Merge remote-tracking branch 'origin/main' into nickrolfe/regex_injection
|
2021-11-03 11:55:42 +00:00 |
|
Arthur Baars
|
aab8c64973
|
Ruby: fix compilation error
|
2021-11-03 12:32:45 +01:00 |
|
Chris Smowton
|
6d90b81655
|
Merge pull request #597 from owen-mc/var-args
Update dbscheme to add table for variadic signature types
|
2021-11-03 11:29:45 +00:00 |
|
Arthur Baars
|
2c5d5ecdd8
|
Ruby: QLTest: fix pack search path for upgrades
|
2021-11-03 12:14:58 +01:00 |
|
Arthur Baars
|
32765e9bc1
|
Ruby: trigger jobs on workflow change
|
2021-11-03 12:14:58 +01:00 |
|
Mathias Vorreiter Pedersen
|
dfbfbe4953
|
Merge branch 'main' into use-shared-ssa-in-ir-dataflow
|
2021-11-03 10:39:22 +00:00 |
|
Mathias Vorreiter Pedersen
|
ad5619ff07
|
Revert "C++: Don't count write operations as uses."
This reverts commit 092beb8b73.
|
2021-11-03 10:37:32 +00:00 |
|
Chris Smowton
|
b023b405b1
|
Merge pull request #599 from smowton/smowton/fix/comparison-barrier-join-order
Improve join order in InsufficientKeySize.ql
|
2021-11-03 10:08:25 +00:00 |
|
Tom Hvitved
|
ab37ae6613
|
Merge pull request #7036 from hvitved/ruby/truncate-get-value-text
Ruby: Truncate concatenated strings in `getValueText`
|
2021-11-03 10:57:43 +01:00 |
|
Rasmus Lerchedahl Petersen
|
05aa314ac9
|
Python: Add tests for non-async constructs
|
2021-11-03 10:54:36 +01:00 |
|
Tony Torralba
|
7d88f80fb9
|
Add tests for summaries
|
2021-11-03 10:35:38 +01:00 |
|
ihsinme
|
c175f0aa9d
|
Update IncorrectChangingWorkingDirectory.ql
|
2021-11-03 12:25:30 +03:00 |
|
Tom Hvitved
|
51f4f57617
|
C#: Use cs/ prefix in all query IDs
|
2021-11-03 10:25:21 +01:00 |
|
Anders Schack-Mulligen
|
e6145f04d2
|
Merge pull request #6966 from atorralba/atorralba/android-explicit-intent-sanitizer
Android: Add ExplicitIntentSanitizer and allowIntentExtrasImplicitRead
|
2021-11-03 10:20:09 +01:00 |
|
Erik Krogh Kristensen
|
ab4780c505
|
Merge pull request #7032 from erik-krogh/cwe497
JS: add CWE-497 to js/stack-trace-exposure
|
2021-11-03 08:55:49 +01:00 |
|
Ethan P
|
b9eb278380
|
Add new file to index
|
2021-11-02 21:55:25 -07:00 |
|
Ethan P
|
98eb848e22
|
add link to new article
|
2021-11-02 21:35:39 -07:00 |
|
Ethan P
|
06cacfdd83
|
Create extractor-options.rst
|
2021-11-02 21:21:31 -07:00 |
|
Pierre
|
cf5b317eb1
|
Add updated framework support for JS/Java
Release: https://github.com/github/releases/issues/1724
|
2021-11-02 22:02:05 +01:00 |
|
Mathias Vorreiter Pedersen
|
4a2894a707
|
Merge pull request #7025 from MathiasVP/nomagic-parameterCand
Dataflow: Replace a 'noinline' pragma with a 'nomagic' pragma
|
2021-11-02 20:40:44 +00:00 |
|
Arthur Baars
|
eb645ba963
|
Merge remote-tracking branch 'origin/rc/3.3' into 'main'
|
2021-11-02 21:10:41 +01:00 |
|
Tom Hvitved
|
8b287a7846
|
Ruby: Truncate concatenated strings in getValueText
|
2021-11-02 18:19:49 +01:00 |
|
Chris Smowton
|
a10407823a
|
Merge pull request #600 from owen-mc/incorrect-integer-conversion
Improve "Incorrect integer conversion" query
|
2021-11-02 17:00:29 +00:00 |
|
Owen Mansel-Chan
|
8ea1f87d2b
|
Add change note
|
2021-11-02 15:09:43 +00:00 |
|
Owen Mansel-Chan
|
7c1b7b8810
|
Fix strictnessOffset in isBoundFor
|
2021-11-02 15:09:39 +00:00 |
|
Owen Mansel-Chan
|
7de6e17d86
|
Recognise math.MaxInt and math.MaxUint
Treat them as if we were on a 32-bit architecture.
|
2021-11-02 15:09:06 +00:00 |
|
Owen Mansel-Chan
|
a104a50940
|
Move max int value call into UpperBoundCheckGuard
|
2021-11-02 15:09:06 +00:00 |
|
Owen Mansel-Chan
|
5027d3fa44
|
Avoid using getIntValue()
Because it does not have a result if the value is
too large to fit in a 32-bit signed integer type
|
2021-11-02 15:09:05 +00:00 |
|
Owen Mansel-Chan
|
2cc0c80188
|
Add extra tests
|
2021-11-02 15:09:05 +00:00 |
|
Owen Mansel-Chan
|
be22373f3e
|
Move Incorrect Integer Conversion tests to InlineFlowTest
|
2021-11-02 15:09:00 +00:00 |
|
Erik Krogh Kristensen
|
9d99ce12c4
|
add CWE-497 to js/stack-trace-exposure
|
2021-11-02 15:43:55 +01:00 |
|
Rasmus Wriedt Larsen
|
8cd9fdebf9
|
Python: Model flask_admin
|
2021-11-02 15:43:13 +01:00 |
|
Rasmus Wriedt Larsen
|
ab88d945e2
|
Python: Add flask_admin tests
|
2021-11-02 15:41:57 +01:00 |
|
Rasmus Wriedt Larsen
|
c2632cff3d
|
Python: Add RequestHandler meta query
|
2021-11-02 15:41:57 +01:00 |
|
Rasmus Lerchedahl Petersen
|
768932d7b3
|
Python: Add tainttracking step that was removed
when the correpsonding datadlow step was removed.
|
2021-11-02 15:01:47 +01:00 |
|
Rasmus Lerchedahl Petersen
|
07d5086b07
|
Python: support user defined taint source
|
2021-11-02 15:00:23 +01:00 |
|
Dave Bartolomeo
|
d828ab7fd2
|
Merge pull request #6955 from github/codeql-ruby-3.3
RC 3.3: merge codeql-ruby repository into github/codeql
|
2021-11-02 09:57:49 -04:00 |
|
Erik Krogh Kristensen
|
5975e19f53
|
sync identical files
|
2021-11-02 14:45:33 +01:00 |
|
Erik Krogh Kristensen
|
2a8807efe4
|
add change note
|
2021-11-02 14:45:33 +01:00 |
|
Erik Krogh Kristensen
|
076a3dca1f
|
add qhelp
|
2021-11-02 14:45:33 +01:00 |
|
Erik Krogh Kristensen
|
d9a214767b
|
add support for node-rsa
|
2021-11-02 14:45:33 +01:00 |
|
Erik Krogh Kristensen
|
49ea53f32b
|
move ExpressJwt that was inside the Hasha module
|
2021-11-02 14:45:33 +01:00 |
|
Erik Krogh Kristensen
|
2c013214f7
|
add Diffie-Hellman from the crypto library
|
2021-11-02 14:45:33 +01:00 |
|
Erik Krogh Kristensen
|
1df8ec2cae
|
add insufficient key size model for node-forge
|
2021-11-02 14:45:33 +01:00 |
|
Erik Krogh Kristensen
|
62039b866c
|
add cryptographic key model to the crypto-js library
|
2021-11-02 14:45:33 +01:00 |
|
Erik Krogh Kristensen
|
028799deb6
|
implement a simple InsufficientKeySize query
|
2021-11-02 14:45:30 +01:00 |
|
Erik Krogh Kristensen
|
7a9315f146
|
use set literal
|
2021-11-02 14:45:14 +01:00 |
|