Harry Maclean
|
ba83b7c6c7
|
Merge pull request #10599 from hmac/hmac/actioncontroller-datastreaming
Ruby: Model send_file
|
2022-10-03 09:44:05 +13:00 |
|
erik-krogh
|
39ffa558f1
|
make a few more queries consistent with the other languages
|
2022-10-02 22:38:25 +02:00 |
|
Alex Ford
|
5c32c8badf
|
Merge pull request #10560 from alexrford/ruby/yaml-load_file
Ruby: treat `Psych` and `YAML` as aliases for rb/unsafe-deserialization
|
2022-10-02 20:19:10 +01:00 |
|
Karim Ali
|
9e3d5f49c5
|
add interprocedural cases to the tests
|
2022-10-02 15:54:39 +02:00 |
|
Karim Ali
|
72ba77d900
|
Add rule that checks for using the insecure ECB block mode for encryption
|
2022-10-02 15:53:39 +02:00 |
|
Karim Ali
|
5e189b8c75
|
update qhelp
Co-authored-by: Geoffrey White <40627776+geoffw0@users.noreply.github.com>
|
2022-10-02 15:50:26 +02:00 |
|
Karim Ali
|
677946d19d
|
update typos to address requested changes
|
2022-10-02 15:50:26 +02:00 |
|
Karim Ali
|
dbc86b2cd8
|
update qhelp to adjust for US spelling + improved readability
Co-authored-by: mc <42146119+mchammer01@users.noreply.github.com>
|
2022-10-02 15:50:26 +02:00 |
|
Karim Ali
|
a23e17a370
|
fix typo in qhelp
Co-authored-by: Geoffrey White <40627776+geoffw0@users.noreply.github.com>
|
2022-10-02 15:50:26 +02:00 |
|
Karim Ali
|
2409ba2c05
|
update query description
|
2022-10-02 15:50:26 +02:00 |
|
Karim Ali
|
2080f0dd36
|
address style violation in generated alerts
|
2022-10-02 15:50:26 +02:00 |
|
Karim Ali
|
f060f056c2
|
rename ECBEncryption to please the codeql formatter
|
2022-10-02 15:50:26 +02:00 |
|
Karim Ali
|
fe024ef91e
|
change TaintTracking::Configuration to DataFlow::Configuration
|
2022-10-02 15:50:25 +02:00 |
|
Karim Ali
|
21d5e417d1
|
add interprocedural cases to the tests
|
2022-10-02 15:50:25 +02:00 |
|
Karim Ali
|
9576e4c008
|
update qhelp to include a description for the accompanying example
|
2022-10-02 15:50:25 +02:00 |
|
Karim Ali
|
746f535ee5
|
Add rule that checks for using the insecure ECB block mode for encryption
|
2022-10-02 15:50:25 +02:00 |
|
erik-krogh
|
2f673efc67
|
autoformat
|
2022-10-01 13:21:20 +02:00 |
|
erik-krogh
|
129cda00db
|
get a few more queries in sync with other languages
|
2022-10-01 11:17:48 +02:00 |
|
erik-krogh
|
acfcc4bfe2
|
update two more queries to better follow the style-guide
|
2022-10-01 10:59:59 +02:00 |
|
erik-krogh
|
7d643e41f3
|
Merge branch 'main' into java-followMsg
|
2022-10-01 10:48:06 +02:00 |
|
Erik Krogh Kristensen
|
17e6b2af37
|
Merge pull request #10557 from erik-krogh/csharp-followMsg
C#: Update the alert messages to better follow the style guide
|
2022-10-01 10:47:43 +02:00 |
|
Aditya Sharad
|
fdd71d4647
|
Docs: Address review feedback on system requirements
|
2022-09-30 14:11:47 -07:00 |
|
erik-krogh
|
e2fe63f94a
|
autoformat
|
2022-09-30 23:11:43 +02:00 |
|
Robert Marsh
|
84f9c9b224
|
C++: query help for ConstantSizeArrayOffByOne.ql
|
2022-09-30 15:15:24 -04:00 |
|
Robert Marsh
|
159f11cd28
|
C++: fill in more query metadata
|
2022-09-30 15:07:08 -04:00 |
|
Robert Marsh
|
8972176242
|
C++: autoformat
|
2022-09-30 14:22:33 -04:00 |
|
Tom Hvitved
|
292bc67125
|
Merge pull request #10620 from hvitved/ruby/call-graph-protected-methods
Ruby: Account for `protected` methods in call graph
|
2022-09-30 19:31:36 +02:00 |
|
Mathias Vorreiter Pedersen
|
cd65e73ade
|
C++: Fix database inconsistency issue from ODR violation.
|
2022-09-30 17:04:23 +01:00 |
|
Tamas Vajk
|
343e45ee0f
|
Fix kotlinFunctionToJavaEquivalent to ignore nullability
|
2022-09-30 17:39:42 +02:00 |
|
Robert Marsh
|
8ac8101a75
|
C++: convert to path-problem
|
2022-09-30 11:35:02 -04:00 |
|
Robert Marsh
|
423e0bf99a
|
C++: respond to style comments on PR
|
2022-09-30 11:27:14 -04:00 |
|
james
|
4fda17c1c0
|
remove mentions of lgtm.com from some docs
|
2022-09-30 15:42:34 +01:00 |
|
Tamas Vajk
|
e490a854ce
|
Simplify kotlinFunctionToJavaEquivalent and accept consistency errors
|
2022-09-30 16:28:26 +02:00 |
|
Tamas Vajk
|
c4487110db
|
Accept consistency check findings
|
2022-09-30 16:28:26 +02:00 |
|
Tamas Vajk
|
11de55e3cb
|
Kotlin: Add consistency query to check missing java equivalent functions
|
2022-09-30 16:28:26 +02:00 |
|
Tom Hvitved
|
dd7458acc8
|
Ruby: Add more call graph tests for protected methods
|
2022-09-30 16:24:34 +02:00 |
|
Tom Hvitved
|
32d002ed60
|
Merge pull request #10627 from hvitved/ruby/synthesis-reduce-non-linear-rec
Ruby: Reduce size of input predicate for non-linear recursion
|
2022-09-30 15:36:21 +02:00 |
|
Mathias Vorreiter Pedersen
|
56b5010f6b
|
C++: Convert the SimpleRangeAnalysis test to an InlineExpectationsTest.
|
2022-09-30 14:23:18 +01:00 |
|
Mathias Vorreiter Pedersen
|
d14b2c2880
|
C++: Put quotes around expectation comments with spaces.
|
2022-09-30 14:23:18 +01:00 |
|
Mathias Vorreiter Pedersen
|
c4c7c95db2
|
C++: Add SimpleRangeAnalysis test file to the new range-analysis library test directory.
|
2022-09-30 14:23:14 +01:00 |
|
Tamás Vajk
|
5017b21579
|
Merge pull request #10617 from tamasvajk/kotlin-op-calls
Kotlin: extract operator expression when operator is in method call form
|
2022-09-30 15:19:03 +02:00 |
|
Arthur Baars
|
d54a3059b4
|
Merge pull request #10642 from github/aibaars-patch-2
Run QLHelp preview for all languages
|
2022-09-30 15:13:48 +02:00 |
|
Tom Hvitved
|
3ec43dbd16
|
Ruby: Do not attempt to track precise hash indices for floats and complex numbers
|
2022-09-30 14:57:50 +02:00 |
|
Tom Hvitved
|
dc432c7774
|
Sync shared files
|
2022-09-30 14:56:56 +02:00 |
|
Tom Hvitved
|
e5d884a905
|
Ruby: Cache predicates in ApiGraphModels::ModelOutput
|
2022-09-30 14:56:55 +02:00 |
|
Tom Hvitved
|
299339f817
|
Ruby: Expose relevant predicates from internal/Module.qll and make sure they are cached
|
2022-09-30 14:56:55 +02:00 |
|
erik-krogh
|
318718c428
|
update expected output
|
2022-09-30 14:51:41 +02:00 |
|
Nora Dimitrijević
|
28606c561d
|
C++: Simplify normalizeExpr
This has a comparable but different set of FPs as the previous version.
But arguably it's an improvement.
|
2022-09-30 14:35:54 +02:00 |
|
Asger F
|
6e1914ad01
|
Merge pull request #10375 from asgerf/rb/summarize-loads-v2
Ruby: type-tracking and API edges through simple library callables
|
2022-09-30 14:25:17 +02:00 |
|
Tamas Vajk
|
121a5645b8
|
Kotlin: extract operator expression when operator is in method call form
|
2022-09-30 13:48:53 +02:00 |
|