Owen Mansel-Chan
|
87f2cad475
|
Merge pull request #427 from owen-mc/model-kubernetes-secret
Model kubernetes SecretInterface
|
2020-12-15 17:12:45 +00:00 |
|
Owen Mansel-Chan
|
1d3d4ed4bf
|
Update supported Go frameworks
|
2020-12-15 17:04:32 +00:00 |
|
Chris Smowton
|
de93b59245
|
Merge pull request #419 from smowton/smowton/feature/model-beego
Model Beego web framework
|
2020-12-15 16:15:59 +00:00 |
|
Nick Rolfe
|
ddb71790e9
|
Fix formatting
|
2020-12-15 16:01:13 +00:00 |
|
Owen Mansel-Chan
|
0980a50627
|
Remove erroneous import from stub
|
2020-12-15 16:00:58 +00:00 |
|
Owen Mansel-Chan
|
676ca529b5
|
Add tests
|
2020-12-15 16:00:58 +00:00 |
|
Owen Mansel-Chan
|
6ca2e0e38e
|
Add SecretInterface as source for cleartext logging query
|
2020-12-15 16:00:58 +00:00 |
|
Owen Mansel-Chan
|
8fd055bc60
|
Model SecretInterface from k8s.io/client-go/kubernetes/typed/core/v1
|
2020-12-15 16:00:51 +00:00 |
|
Tom Hvitved
|
9aadeedeb9
|
CFG: Model IfElsifAstNode in post-order
|
2020-12-15 17:00:12 +01:00 |
|
Max Schaefer
|
cf5891487d
|
Apply suggestions from code review
Co-authored-by: James Fletcher <42464962+jf205@users.noreply.github.com>
|
2020-12-15 15:56:05 +00:00 |
|
Tom Hvitved
|
bb88858633
|
CFG: Add test for nested ifs
|
2020-12-15 16:46:55 +01:00 |
|
Max Schaefer
|
f8d8a9b356
|
Apply suggestions from code review
Co-authored-by: James Fletcher <42464962+jf205@users.noreply.github.com>
|
2020-12-15 15:44:19 +00:00 |
|
james
|
7e3feb4f52
|
add beta note and tweak intro text
|
2020-12-15 15:35:28 +00:00 |
|
james
|
4720e6cd3b
|
typo
|
2020-12-15 15:26:07 +00:00 |
|
Nick Rolfe
|
3f5eab04b5
|
Create disjoint db types for different operators
|
2020-12-15 15:22:33 +00:00 |
|
Arthur Baars
|
ac9f439935
|
Merge pull request #70 from github/hvitved/cfg/rescue-part2
CFG: More adjustments for `rescue`/`ensure`
|
2020-12-15 16:06:26 +01:00 |
|
Rasmus Lerchedahl Petersen
|
638fcab12d
|
Python: Allow path from non-sourceNodes
This is against the philosophy, but we
have still restricted attributes.
We use this PR to test performance.
|
2020-12-15 15:35:16 +01:00 |
|
Rasmus Wriedt Larsen
|
8df186167e
|
Python: Reword QLDoc for class modeling with type-tracking
As discussed in https://github.com/github/codeql/pull/4797#discussion_r542423387
|
2020-12-15 15:15:03 +01:00 |
|
Chris Smowton
|
8e7abbac0a
|
Model Beego web framework
This excludes the ORM, email and validation components, which I will follow up with seperately.
|
2020-12-15 14:04:36 +00:00 |
|
Chris Smowton
|
8b6f229bd3
|
SafeUrlFlow: allow libraries to add sources
|
2020-12-15 14:01:59 +00:00 |
|
yoff
|
be5dbf2ccf
|
Merge pull request #4797 from RasmusWL/stdlib-http-source-modeling
Python: Model sources from stdlib HTTP servers
|
2020-12-15 14:49:32 +01:00 |
|
Tamas Vajk
|
3cf967458f
|
Fix failing test
|
2020-12-15 14:28:51 +01:00 |
|
Tom Hvitved
|
16c25f2a4c
|
CFG: Handle ensure blocks without body/rescues
|
2020-12-15 13:49:14 +01:00 |
|
Tom Hvitved
|
489b406e2a
|
CFG: Change column order in succExit/hasExitScope
|
2020-12-15 13:45:22 +01:00 |
|
Tom Hvitved
|
e784640cca
|
CFG: Add more test cases
|
2020-12-15 13:45:22 +01:00 |
|
james
|
99a634d2c2
|
add introduction to article
|
2020-12-15 12:11:29 +00:00 |
|
Tamas Vajk
|
adba961634
|
Add DB upgrade folder
|
2020-12-15 13:10:53 +01:00 |
|
Tamas Vajk
|
6cf3ca49e4
|
C#: Extract 'ImplicitObjectCreationExpressionSyntax'
|
2020-12-15 13:10:53 +01:00 |
|
Tom Hvitved
|
8c235323e7
|
Merge pull request #4796 from hvitved/csharp/cfg/simplify
C#: Various simplifications to CFG logic
|
2020-12-15 13:07:13 +01:00 |
|
Mathias Vorreiter Pedersen
|
9265e9ec3f
|
Merge pull request #4822 from geoffw0/swap
C++: Bring 'swap' models together.
codeql-cli/v2.4.1
|
2020-12-15 12:45:43 +01:00 |
|
Rasmus Wriedt Larsen
|
050e720770
|
Python: Minor rewrite
Co-authored-by: yoff <lerchedahl@gmail.com>
|
2020-12-15 12:02:56 +01:00 |
|
Rasmus Wriedt Larsen
|
272feedb69
|
Merge branch 'main' into stdlib-http-source-modeling
|
2020-12-15 11:59:23 +01:00 |
|
Arthur Baars
|
5108b369e1
|
Merge pull request #64 from github/hvitved/cfg/rescue
Implement CFG logic for `rescue-ensure`
|
2020-12-15 11:43:14 +01:00 |
|
Rasmus Wriedt Larsen
|
ed53742f03
|
Python: Fix additional taint-steps for cgi
So there isn't flow from *any* instance to *any* access of the methods,
but only from the _actual_ instance where the method is accessed.
|
2020-12-15 11:41:00 +01:00 |
|
Max Schaefer
|
00f244c1d4
|
JavaScript: Add documentation about new way of adding remote flow sources.
|
2020-12-15 10:16:20 +00:00 |
|
Geoffrey White
|
4bf2f3af50
|
C++: Fix comment.
|
2020-12-15 10:15:41 +00:00 |
|
Rasmus Lerchedahl Petersen
|
e64af59667
|
Merge branch 'main' of github.com:github/codeql into tausbn-python-add-source-nodes
|
2020-12-15 11:13:35 +01:00 |
|
Rasmus Lerchedahl Petersen
|
a152833a51
|
Merge branch 'python-add-source-nodes' of https://github.com/tausbn/codeql into tausbn-python-add-source-nodes
|
2020-12-15 11:13:02 +01:00 |
|
Tamás Vajk
|
e391356893
|
Merge pull request #4630 from tamasvajk/feature/csharp9-init-prop
C#: Add support for init only accessors
|
2020-12-15 11:12:32 +01:00 |
|
Tom Hvitved
|
a76e6848c7
|
CFG: Address more review comments
|
2020-12-14 20:45:57 +01:00 |
|
Geoffrey White
|
d7a92e581f
|
Merge branch 'main' into swap
|
2020-12-14 17:54:11 +00:00 |
|
Geoffrey White
|
9c77d3c829
|
C++: Add AliasFunction model.
|
2020-12-14 17:52:02 +00:00 |
|
Sauyon Lee
|
3617a801db
|
Merge pull request #429 from sauyon/smowton/admin/refactor-http-module
Refactor HTTP module
|
2020-12-14 09:25:43 -08:00 |
|
Geoffrey White
|
f9a7322d68
|
C++: Remove redundant check.
|
2020-12-14 17:16:16 +00:00 |
|
luchua-bc
|
523f0fb247
|
Enhance the query and update qldoc
|
2020-12-14 17:01:30 +00:00 |
|
Tamas Vajk
|
74c88e6bac
|
Add DB stats
|
2020-12-14 17:16:29 +01:00 |
|
Jason Rogers
|
3a83fbd765
|
Refactor HTTP module
This makes it easier to identify related classes and support future expansion.
|
2020-12-14 07:16:24 -08:00 |
|
Geoffrey White
|
e02ebfb9bd
|
C++: Add extra cases to Allocation / Deallocation.
|
2020-12-14 14:00:36 +00:00 |
|
Tom Hvitved
|
ec4ead2117
|
Apply suggestions from code review
Co-authored-by: Arthur Baars <aibaars@github.com>
|
2020-12-14 14:53:35 +01:00 |
|
Geoffrey White
|
899d1ab6d8
|
C++: Add tests of strdup (and variants) as allocators.
|
2020-12-14 13:50:11 +00:00 |
|