Anders Schack-Mulligen
|
e3a12c5fea
|
Merge pull request #4004 from Marcono1234/patch-2
[Java] Clarify Wildcard.hasUpperBound() doc
|
2020-08-07 13:06:13 +02:00 |
|
Asger Feldthaus
|
64f58b74f6
|
JS: Fix extractor crash when some parameters have no type annotation
|
2020-08-07 11:56:54 +01:00 |
|
Tom Hvitved
|
c20d763490
|
Merge pull request #3951 from raulgarciamsft/users/raulgarciamsft/dataset_serialization
C#: DataSet serialization
|
2020-08-07 12:54:10 +02:00 |
|
Jonas Jensen
|
c8911ab973
|
C++: Test range-based-for with std::vector too
|
2020-08-07 12:40:00 +02:00 |
|
Anders Schack-Mulligen
|
77db87efb7
|
Merge pull request #3968 from rvermeulen/java-importable-cwe-090
Java: Move LDAP injection sinks, sanitizers, and additional taint steps to importable location
|
2020-08-07 11:57:51 +02:00 |
|
Arthur Baars
|
c177eff3d8
|
Merge pull request #4027 from aschackmull/java/weak-crypto-precision
Java: Update precision of java/weak-cryptographic-algorithm.
|
2020-08-07 10:31:38 +02:00 |
|
Anders Schack-Mulligen
|
f9de8eb3b4
|
Java: Update precision of java/weak-cryptographic-algorithm.
|
2020-08-07 09:40:21 +02:00 |
|
Anders Schack-Mulligen
|
05e956b374
|
Merge pull request #4022 from aibaars/int-to-long
Java: remove security tag from java/integer-multiplication-cast-to-long
|
2020-08-07 09:32:43 +02:00 |
|
Marcono1234
|
0e54b498b7
|
Clarify Wildcard.hasTypeBound() doc
|
2020-08-06 23:15:25 +02:00 |
|
Marcono1234
|
f477e09190
|
Clarify Wildcard.hasUpperBound() doc
|
2020-08-06 23:15:16 +02:00 |
|
Remco Vermeulen
|
3ae3a879d2
|
Fix qldoc grammar and style mistakes
Co-authored-by: intrigus-lgtm <60750685+intrigus-lgtm@users.noreply.github.com>
|
2020-08-06 23:00:03 +02:00 |
|
Raul Garcia
|
3682a902de
|
Update csharp/ql/src/experimental/Security Features/Serialization/DataSetSerialization.qhelp
Co-authored-by: James Fletcher <42464962+jf205@users.noreply.github.com>
|
2020-08-06 12:09:02 -07:00 |
|
Geoffrey White
|
6e18be43f3
|
C++: Change note.
|
2020-08-06 19:27:12 +01:00 |
|
Geoffrey White
|
0281456948
|
C++: Add a 1.26 change note file (what happened to the templates?)
|
2020-08-06 19:21:06 +01:00 |
|
Geoffrey White
|
0534c69c76
|
C++: Autoformat.
|
2020-08-06 19:11:46 +01:00 |
|
Geoffrey White
|
0b5b7fa095
|
C++: Fix another edge case.
|
2020-08-06 19:06:42 +01:00 |
|
Geoffrey White
|
b3f3f6d95a
|
C++: Fix edge case.
|
2020-08-06 19:03:43 +01:00 |
|
Geoffrey White
|
cbf30e37ed
|
C++: Fix the issue.
|
2020-08-06 18:50:18 +01:00 |
|
Geoffrey White
|
a7564c9e0e
|
C++: Add a test of unsigned count-down loops.
|
2020-08-06 18:44:22 +01:00 |
|
Arthur Baars
|
f16c263393
|
Java: remove security tag from java/integer-multiplication-cast-to-long
|
2020-08-06 17:42:01 +02:00 |
|
Rasmus Lerchedahl Petersen
|
3db1ceeb70
|
Python: format ql
|
2020-08-06 15:42:14 +02:00 |
|
Rasmus Lerchedahl Petersen
|
614103c3b6
|
Python: Test calls rather than flows
|
2020-08-06 15:40:41 +02:00 |
|
Jonas Jensen
|
7cc877cbbb
|
C++: Taint through RangeBasedForStmt (AST only)
|
2020-08-06 15:37:41 +02:00 |
|
Rasmus Lerchedahl Petersen
|
ce86a8b72e
|
Python: format ql
|
2020-08-06 14:42:56 +02:00 |
|
Rasmus Lerchedahl Petersen
|
e77ceaf4b8
|
Python: Track dictionary keys
Also, less hacky comprehension,
but I think we still want to fix the extractor
|
2020-08-06 13:31:54 +02:00 |
|
Remco Vermeulen
|
408db412dc
|
Add missing predicate qldoc
|
2020-08-06 13:29:02 +02:00 |
|
Max Schaefer
|
97291e4c41
|
Merge pull request #279 from github/rc/1.25
Merge rc/1.25 into master
|
2020-08-06 11:18:11 +01:00 |
|
Remco Vermeulen
|
5a819422c1
|
Reuse Unit class from TaintTracking
|
2020-08-06 12:02:34 +02:00 |
|
Remco Vermeulen
|
7f7ad88dea
|
Limit LdapAdditionalTaintStep to Ldap configuration
|
2020-08-06 11:35:03 +02:00 |
|
Anders Schack-Mulligen
|
205dd1aead
|
Merge pull request #3881 from intrigus-lgtm/more-pathcreations
Java: Centralize and model additional path creations.
|
2020-08-06 11:21:39 +02:00 |
|
Max Schaefer
|
75795d80c4
|
Improve performance of upgrade script.
|
2020-08-06 09:51:36 +01:00 |
|
Max Schaefer
|
90bab34e88
|
Merge pull request #277 from sauyon/file-url-fix
autobuilder: Don't try to determine import paths for file URLs
|
2020-08-06 09:46:10 +01:00 |
|
Sauyon Lee
|
8e6c1835dd
|
autobuilder: Don't try to determine import paths for file URLs
Also improve logging
|
2020-08-05 23:21:34 -07:00 |
|
luchua-bc
|
b821f918e5
|
Address issues with matching empty host and host in a concatenated string
|
2020-08-06 01:53:29 +00:00 |
|
luchua-bc
|
9a8eed8440
|
Enhance address match
|
2020-08-05 19:57:31 +00:00 |
|
intrigus
|
1011325cf7
|
Accept test changes.
|
2020-08-05 21:45:41 +02:00 |
|
Rasmus Lerchedahl Petersen
|
7c235597de
|
Python: More precise dataflow for tuples
(and dictionaries, but that is not fleshed out)
|
2020-08-05 19:22:54 +02:00 |
|
Slavomir
|
b0259632e1
|
Remove Read method
|
2020-08-05 18:37:35 +02:00 |
|
Slavomir
|
6fda46b565
|
Add compress/zlib taint tracking
|
2020-08-05 18:35:47 +02:00 |
|
Slavomir
|
441d29b2b7
|
Add compress/lzw taint tracking
|
2020-08-05 18:34:05 +02:00 |
|
Slavomir
|
053496dbcc
|
Add compress/gzip taint tracking
|
2020-08-05 18:32:51 +02:00 |
|
Slavomir
|
7e5077c174
|
Add compress/flate taint tracking
|
2020-08-05 18:31:13 +02:00 |
|
Slavomir
|
6e2af3ead1
|
Add compress/bzip2 taint tracking
|
2020-08-05 18:29:12 +02:00 |
|
Max Schaefer
|
4e409aa9fa
|
Merge pull request #274 from gagliardetto/standard-lib-pt-2
Add taint tracking for bufio and bytes packages
|
2020-08-05 17:10:08 +01:00 |
|
Remco Vermeulen
|
a1411407c1
|
Consolidate sanitizers into default sanitizer
|
2020-08-05 17:07:05 +02:00 |
|
Remco Vermeulen
|
0c09d66d43
|
Consolidate different sinks into a default sink.
|
2020-08-05 16:53:50 +02:00 |
|
Erik Krogh Kristensen
|
f1dc36244c
|
update tests and queries that used getId()
|
2020-08-05 14:32:09 +00:00 |
|
James Fletcher
|
7f8bf21325
|
Merge pull request #4016 from jf205/learn-codeql/styles
CodeQL docs: update CSS and master page template
|
2020-08-05 14:20:13 +01:00 |
|
yoff
|
e642808a75
|
Update python/ql/test/experimental/dataflow/coverage/classes.py
Co-authored-by: intrigus-lgtm <60750685+intrigus-lgtm@users.noreply.github.com>
|
2020-08-05 15:12:27 +02:00 |
|
Jonas Jensen
|
5f635aca36
|
Merge pull request #3768 from geoffw0/copymove
C++: Clean up ConversionConstructor.
|
2020-08-05 14:35:05 +02:00 |
|