intrigus
|
b7d94906bf
|
Add change note
|
2022-08-04 16:21:55 +02:00 |
|
intrigus
|
88ded4679a
|
Accept test changes
|
2022-08-04 16:21:53 +02:00 |
|
intrigus
|
c867a1a146
|
Test setProperty/put with taint stored earlier
|
2022-08-04 16:21:51 +02:00 |
|
intrigus
|
0b7f0fbe54
|
Accept test changes
|
2022-08-04 16:21:50 +02:00 |
|
intrigus
|
55618adf6a
|
Model java.util.Properties.setProperty
|
2022-08-04 16:21:48 +02:00 |
|
Tom Hvitved
|
01c0d4b59f
|
Ruby: Support more flow through keyword arguments
|
2022-08-04 16:20:08 +02:00 |
|
Anders Schack-Mulligen
|
43d4324f65
|
Java: Improve performance of ConfusingOverloading.
|
2022-08-04 16:05:30 +02:00 |
|
Tom Hvitved
|
38ede25385
|
Ruby: Add test that illustrates missing flow for keyword arguments
|
2022-08-04 14:39:22 +02:00 |
|
Michael Nebel
|
64e8660904
|
C#: Simplification of AspNetCoreRemoteFlowSourceMember.
|
2022-08-04 14:18:25 +02:00 |
|
Tom Hvitved
|
bc6a74b4dd
|
C#: Disable CLR tracer
Also remove old tracer configs, as we now use the Lua tracer.
|
2022-08-04 13:11:07 +02:00 |
|
mc
|
935def739c
|
Merge pull request #9955 from securingdev/patch-1
Update Other section with example exit code details
|
2022-08-04 10:26:45 +01:00 |
|
mc
|
df1633a838
|
Merge branch 'main' into patch-1
|
2022-08-04 10:13:23 +01:00 |
|
Anders Schack-Mulligen
|
a5a58f46eb
|
Merge pull request #9945 from aschackmull/java/wrappedinvocation-joinorder
Java: Improve join-order.
|
2022-08-04 11:12:23 +02:00 |
|
mc
|
360cff9c24
|
Merge branch 'main' into patch-1
|
2022-08-04 10:08:55 +01:00 |
|
Anders Schack-Mulligen
|
c2b99747d4
|
Merge pull request #9951 from aschackmull/java/notintersect-perf
Java: Improve join-order for `not haveIntersection`.
|
2022-08-04 11:08:02 +02:00 |
|
mc
|
8905df9abb
|
Merge branch 'main' into patch-1
|
2022-08-04 10:06:01 +01:00 |
|
mc
|
e4c9f8a9a2
|
Update docs/codeql/codeql-cli/exit-codes.rst
|
2022-08-04 10:05:52 +01:00 |
|
Chris Smowton
|
96091e4fa0
|
Merge pull request #9947 from github/smowton/fix/golang-path-injection-numeric-sanitizer
Go: note that numeric-typed nodes can't cause path traversal
|
2022-08-04 09:00:34 +01:00 |
|
Chris Smowton
|
af274354a0
|
Merge pull request #9956 from github/smowton/feature/tainted-path-query-mad
Make java/path-injection recognise create-file MaD sinks
|
2022-08-04 08:59:59 +01:00 |
|
Harry Maclean
|
ee9e6b1f2e
|
Ruby: Add change note
|
2022-08-04 17:27:34 +12:00 |
|
Harry Maclean
|
452811dbf2
|
Ruby: move change note
|
2022-08-04 17:25:55 +12:00 |
|
Harry Maclean
|
83393dc195
|
Ruby: Recognise more AR write accesses
This change means we recognise calls like
```rb
User.create(params)
User.update(id, params)
```
as instances of `PersistentWriteAccess`.
|
2022-08-04 17:22:46 +12:00 |
|
Harry Maclean
|
21b4918904
|
Ruby: Add getPositionalArgument
This gets positional arguments from a call. These are arguments which
are not keyword arguments.
|
2022-08-04 17:22:46 +12:00 |
|
Harry Maclean
|
d4f7f2b75e
|
Ruby: Add test for AR PersistentWriteAccesses
|
2022-08-04 17:22:46 +12:00 |
|
Harry Maclean
|
7ed81db32d
|
Ruby: Move ActiveRecord tests to new directory
|
2022-08-04 17:22:46 +12:00 |
|
Harry Maclean
|
def1b3c3b3
|
Ruby: QLDoc fix
|
2022-08-04 17:21:29 +12:00 |
|
Harry Maclean
|
fdbe16945f
|
Ruby: Add change note
|
2022-08-04 17:19:05 +12:00 |
|
Shyam Mehta
|
76cecc170e
|
Fix documentation
|
2022-08-03 14:30:17 -04:00 |
|
Geoffrey White
|
997068a9cb
|
Swift: Fix a suggestion merge conflict.
|
2022-08-03 18:16:31 +01:00 |
|
Geoffrey White
|
873c62ef78
|
Swift: Apply another code review suggestion.
|
2022-08-03 18:16:01 +01:00 |
|
Geoffrey White
|
e4dab17318
|
Apply suggestions from code review
Co-authored-by: Mathias Vorreiter Pedersen <mathiasvp@github.com>
|
2022-08-03 18:14:14 +01:00 |
|
Geoffrey White
|
9d49986345
|
Swift: Make QL-for-QL happy.
|
2022-08-03 17:18:57 +01:00 |
|
Mathias Vorreiter Pedersen
|
9355f9132e
|
Merge pull request #9961 from MathiasVP/swift-cache-lastRefRedef
Swift: Cache `lastRefRedef`
|
2022-08-03 15:43:35 +01:00 |
|
Alex Ford
|
33fbec1174
|
Merge pull request #9917 from github/post-release-prep/codeql-cli-2.10.2
Post-release preparation for codeql-cli-2.10.2
|
2022-08-03 15:17:00 +01:00 |
|
Mathias Vorreiter Pedersen
|
97bd007592
|
Merge pull request #9962 from intrigus-lgtm/patch-7
C: Add additional reference to CERT C coding standard
|
2022-08-03 15:00:33 +01:00 |
|
Geoffrey White
|
39f1352847
|
Swift: Complete the rename.
|
2022-08-03 14:45:20 +01:00 |
|
Geoffrey White
|
81bd61288c
|
Swift: I think CWE-079 is the more accurate CWE for this query.
|
2022-08-03 14:45:19 +01:00 |
|
Geoffrey White
|
c635895644
|
Swift: Documentation.
|
2022-08-03 14:45:18 +01:00 |
|
Alex Ford
|
440547c958
|
Merge branch 'main' into post-release-prep/codeql-cli-2.10.2
|
2022-08-03 13:44:37 +01:00 |
|
Arthur Baars
|
912dce3ea7
|
Merge branch 'main' into gh-codeql-nightly
|
2022-08-03 14:43:07 +02:00 |
|
Arthur Baars
|
e23a45d02c
|
Merge pull request #9959 from aibaars/order-order
Ruby: PrintAST: more stable order for synthesized nodes
|
2022-08-03 14:42:42 +02:00 |
|
intrigus-lgtm
|
c59e6586f7
|
Add additional reference to CERT C coding standard
|
2022-08-03 14:19:53 +02:00 |
|
Mathias Vorreiter Pedersen
|
be7ba925f9
|
Swift: Cache 'lastRefRedef'.
|
2022-08-03 11:14:55 +01:00 |
|
Arthur Baars
|
35f7fdf24b
|
Update ruby/ql/lib/codeql/ruby/printAst.qll
Co-authored-by: Tom Hvitved <hvitved@github.com>
|
2022-08-03 12:06:47 +02:00 |
|
Chris Smowton
|
977823bd76
|
Create 2022-08-03-tainted-path-mad.md
|
2022-08-03 10:54:35 +01:00 |
|
Chris Smowton
|
84a4b6a866
|
Make reporting locations consistent with PathCreation; add test
|
2022-08-03 10:42:09 +01:00 |
|
Geoffrey White
|
8d9653a999
|
Swift: Generated security-severity tag.
|
2022-08-03 09:54:54 +01:00 |
|
Geoffrey White
|
ea17b852b4
|
Swift: Explain ExternalRemoteFlowSource.
|
2022-08-03 09:42:51 +01:00 |
|
Geoffrey White
|
651b73e21e
|
Swift: Check for tainted baseURL.
|
2022-08-03 09:42:48 +01:00 |
|
Rasmus Wriedt Larsen
|
8fb85a98d8
|
Merge branch 'main' into post-release-prep/codeql-cli-2.10.2
|
2022-08-03 10:42:02 +02:00 |
|