Asger Feldthaus
|
4985fbb526
|
Shared: update getSummaryCsv and related test output
|
2022-02-21 08:21:53 +01:00 |
|
Asger Feldthaus
|
dcc523a2b7
|
Shared: auto format
|
2022-02-21 08:21:53 +01:00 |
|
Asger Feldthaus
|
7fcbdbeada
|
Shared: sync AccessPathSyntax.qll and FlowSummaryImpl.qll
|
2022-02-21 08:21:52 +01:00 |
|
Asger Feldthaus
|
d911e0abf8
|
Shared: use getToken instead of getLastToken
|
2022-02-21 08:21:52 +01:00 |
|
Asger Feldthaus
|
c4304a980d
|
Shared: add explicit this
|
2022-02-21 08:21:52 +01:00 |
|
Asger Feldthaus
|
dc6a13242b
|
Shared: update comment in AccessPathSyntax.qll
|
2022-02-21 08:21:52 +01:00 |
|
Asger Feldthaus
|
2907d53e17
|
Shared: sync AccessPathSyntax.qll and FlowSummaryImpl.qll
|
2022-02-21 08:21:52 +01:00 |
|
Asger Feldthaus
|
be63cf7049
|
Shared: fix qldoc and move getRawToken to top-level
|
2022-02-21 08:21:52 +01:00 |
|
Asger Feldthaus
|
c189df2341
|
Revert "JS: Add support for " of " syntax to help during transition"
This reverts commit 9bf522b3048c3b11f7e6d734ed797a613614a095.
|
2022-02-21 08:21:51 +01:00 |
|
Asger Feldthaus
|
57bf0b1432
|
Ruby: remove support for legacy syntax
|
2022-02-21 08:21:51 +01:00 |
|
Asger Feldthaus
|
e3605eed44
|
Ruby: update CSV rows to dot-separated syntax
|
2022-02-21 08:21:50 +01:00 |
|
Asger Feldthaus
|
7005d53a67
|
Ruby: manually rewrite DigSummary access path
|
2022-02-21 08:16:55 +01:00 |
|
Asger Feldthaus
|
6dbeb81f36
|
Ruby: use AccessPathSyntax.qll to parse input/output summary specs
|
2022-02-21 08:16:55 +01:00 |
|
Asger Feldthaus
|
0af9e8aa58
|
C#: remove support for legacy syntax
|
2022-02-21 08:16:55 +01:00 |
|
Asger Feldthaus
|
6bb15dcc27
|
C#: update CSV rows to dot-separated syntax
|
2022-02-21 08:16:55 +01:00 |
|
Asger Feldthaus
|
dffa1d1558
|
C#: use AccessPathSyntax.qll to parse input/output summary specs
|
2022-02-21 08:16:55 +01:00 |
|
Asger Feldthaus
|
affdbe9955
|
Java: remove support for legacy syntax
|
2022-02-21 08:16:55 +01:00 |
|
Asger Feldthaus
|
a121b73181
|
Java: update CSV rows to dot-separated syntax
|
2022-02-21 08:16:55 +01:00 |
|
Asger Feldthaus
|
7f808710ec
|
Java: update model generator
|
2022-02-21 08:16:54 +01:00 |
|
Asger Feldthaus
|
753c557dbe
|
Java: use AccessPathSyntax.qll to parse input/output summary specs
|
2022-02-21 08:16:54 +01:00 |
|
Asger Feldthaus
|
53935db6c6
|
JS: Add support for " of " syntax to help during transition
|
2022-02-21 08:16:54 +01:00 |
|
Asger Feldthaus
|
30254686d8
|
JS: Move ".."-parsing trick into AccessPathSyntax.qll
|
2022-02-21 08:16:54 +01:00 |
|
Asger Feldthaus
|
7c2cff3227
|
JS: Factor out AccessPathSyntax.qll
|
2022-02-21 08:16:54 +01:00 |
|
Asger Feldthaus
|
e2cbf47b16
|
JS: Fix accidental recursion
|
2022-02-21 08:16:53 +01:00 |
|
Harry Maclean
|
e4f801bea8
|
Merge pull request #7886 from github/hmac/split-ruby-std-library
Ruby: split standard library models into multiple files
|
2022-02-21 13:39:43 +13:00 |
|
Harry Maclean
|
9a60c7e4ac
|
Ruby: Update filename in test fixture
|
2022-02-21 09:43:36 +13:00 |
|
Alex Ford
|
6b8537c4e0
|
Ruby: FileSystemWriteAccess changenote
|
2022-02-20 20:14:01 +00:00 |
|
Alex Ford
|
baabe66551
|
Ruby: update Files.ql tests for write accesses
|
2022-02-20 19:28:12 +00:00 |
|
Alex Ford
|
12ce3d4784
|
Ruby: Implement FileSystemWriteAccess for IO/File API
|
2022-02-20 19:27:11 +00:00 |
|
Alex Ford
|
4f0174e89a
|
Ruby: add FileSystemWriteAccess concept
|
2022-02-20 19:26:54 +00:00 |
|
jorgectf
|
c5f30d99d5
|
Create an extendable AdditionalTaintStep class in customizations
|
2022-02-20 17:34:12 +01:00 |
|
Dave Bartolomeo
|
ac9e2d0c6d
|
Parallel semantic modulus analysis
|
2022-02-18 17:43:27 -05:00 |
|
Dave Bartolomeo
|
e2e2c0e540
|
Fix a few bugs to make results of semantic sign analysis match the original AST analysis
|
2022-02-18 17:03:10 -05:00 |
|
Dave Bartolomeo
|
99f24e5a9e
|
Fix up sign analysis and create diff query
|
2022-02-18 13:03:26 -05:00 |
|
Dave Bartolomeo
|
5bd5f39ad8
|
Try parallel versions of sign analysis, AST vs. semantic
|
2022-02-18 12:28:36 -05:00 |
|
Rasmus Wriedt Larsen
|
9d81fd3b95
|
Python: Improve sanitizer/guards tests
Based on review conversation
|
2022-02-18 14:12:41 +01:00 |
|
Rasmus Wriedt Larsen
|
7aa559f4aa
|
Python: Restore dataflow consistency queries
|
2022-02-18 13:47:29 +01:00 |
|
Rasmus Wriedt Larsen
|
c5b6fb37b7
|
Python: Clean up NormalDataflowTest.qll
|
2022-02-18 13:47:29 +01:00 |
|
Rasmus Wriedt Larsen
|
67ca14876a
|
Python: Apply suggestions from code review
Co-authored-by: yoff <lerchedahl@gmail.com>
|
2022-02-18 13:47:07 +01:00 |
|
Alex Ford
|
dd383f942f
|
Merge remote-tracking branch 'origin/main' into ruby/clear-text-logging
|
2022-02-17 15:32:31 +00:00 |
|
Alex Ford
|
33f4fffe16
|
Ruby: Simplify sub!/gsub! sanitizers for cleartext logging query
|
2022-02-17 13:10:44 +00:00 |
|
Jeroen Ketema
|
d4832b48c6
|
C++: Update DB scheme stats
|
2022-02-17 11:48:42 +01:00 |
|
Jeroen Ketema
|
e2bc4c88e4
|
C++: Expose is_structured_binding as a member of Variable
|
2022-02-17 11:44:08 +01:00 |
|
Jeroen Ketema
|
f875d722b0
|
C++: Add DB upgrade and downgrade scripts
|
2022-02-17 11:44:08 +01:00 |
|
Jeroen Ketema
|
f358f8f265
|
C++: Add DB relation identifying structured bindings
|
2022-02-17 11:44:08 +01:00 |
|
Asger Feldthaus
|
69995d5750
|
Shared: rephrase request forgery name and description
|
2022-02-17 09:07:08 +01:00 |
|
Asger Feldthaus
|
51442ddf47
|
JS: Add change note
|
2022-02-17 09:07:08 +01:00 |
|
Asger Feldthaus
|
3496ae131b
|
JS: Factor out <recommendation> part of qhelp
|
2022-02-17 09:07:08 +01:00 |
|
Harry Maclean
|
bfd2c14555
|
Ruby: Add shim StandardLibrary.qll
This file re-exports everything it used to define, marking each as
deprecated to warn users that they should import `Core` or `Stdlib`
instead.
|
2022-02-17 20:44:04 +13:00 |
|
Harry Maclean
|
459f949c24
|
Ruby: fix old import in ActiveSupport
codeql.ruby.frameworks.StandardLibrary is deprecated
|
2022-02-17 20:44:04 +13:00 |
|