Tom Hvitved
|
9a7628c988
|
Ruby: Add data flow tests for constructors
|
2022-12-14 12:57:39 +01:00 |
|
Tom Hvitved
|
25b2d11368
|
Merge pull request #11635 from hvitved/dataflow/approx-content
Data flow: Introduce `ApproxContent` in a new pruning stage between stages 2 and 3
|
2022-12-14 12:56:50 +01:00 |
|
Asger F
|
b63c658e3b
|
JS: recognize tiny-csrf
|
2022-12-14 12:30:15 +01:00 |
|
Asger F
|
162419138d
|
JS: Replace csurf -> lusca.csrf from example and qhelp
|
2022-12-14 12:30:15 +01:00 |
|
Owen Mansel-Chan
|
3c6f466e78
|
Include downgrade scripts in extractor pack
|
2022-12-14 10:46:20 +00:00 |
|
Owen Mansel-Chan
|
14e6f9fee2
|
Remove @errorexpr from the dbscheme (use @badexpr)
|
2022-12-14 10:46:19 +00:00 |
|
Henry Mercer
|
6023a1225c
|
Merge pull request #11673 from github/codeql-ci/atm/release-0.4.4
JS: Bump version numbers of ML-powered packs after 0.4.4 release
|
2022-12-14 10:27:00 +00:00 |
|
Alvaro Muñoz
|
701676eea1
|
Update javascript/ql/lib/semmle/javascript/frameworks/Spife.qll
Co-authored-by: Erik Krogh Kristensen <erik-krogh@github.com>
|
2022-12-14 10:18:47 +01:00 |
|
Tamás Vajk
|
a6d227d52e
|
Merge pull request #11599 from igfoo/igfoo/diags
Java/Kotlin: Update the diagnostic severity documentation
|
2022-12-14 10:13:30 +01:00 |
|
Michael Nebel
|
54701f539e
|
Merge pull request #11683 from github/workflow/coverage/update
Update CSV framework coverage reports
|
2022-12-14 09:41:23 +01:00 |
|
Paolo Tranquilli
|
a80e9206c8
|
Merge pull request #11639 from github/alexdenisov/switch-to-bootstrapped-swift
Swift: switch to bootstrapped Swift compiler
|
2022-12-14 09:04:19 +01:00 |
|
github-actions[bot]
|
d905bed92f
|
Add changed framework coverage reports
|
2022-12-14 00:17:01 +00:00 |
|
Jami Cogswell
|
c956589945
|
Java: remove dot before percent
|
2022-12-13 17:46:20 -05:00 |
|
Jami Cogswell
|
dee251e5d6
|
Java: update isJdkInternal
|
2022-12-13 17:46:20 -05:00 |
|
Jami
|
11bd35661c
|
Merge branch 'main' into jcogs33/exclude-funcexpr-from-dataflowtargetapi
|
2022-12-13 17:10:39 -05:00 |
|
Edward Minnix III
|
40c759e61a
|
Add @name property
Co-authored-by: Sam Browning <106113886+sabrowning1@users.noreply.github.com>
|
2022-12-13 16:14:28 -05:00 |
|
Erik Krogh Kristensen
|
8a89849476
|
Merge pull request #11660 from erik-krogh/dynamic-useInstanceOf
Py/JS/RB: Use instanceof in more places
|
2022-12-13 21:50:13 +01:00 |
|
Tamás Vajk
|
8e500ec0f3
|
Merge pull request #11675 from tamasvajk/kotlin-error-expr-consistency
Kotlin: Report CFG dead end consistency issues on `ErrorExpr`
|
2022-12-13 20:22:47 +01:00 |
|
Henry Mercer
|
a3933fbf4f
|
Bump minor versions of packs we regularly release
|
2022-12-13 18:59:24 +00:00 |
|
Jeroen Ketema
|
19fb73ce24
|
C++: Update tests after frontend changes
|
2022-12-13 19:52:59 +01:00 |
|
Henry Mercer
|
7167f078be
|
Merge branch 'main' into henrymercer/mergeback-3.8
|
2022-12-13 18:40:53 +00:00 |
|
erik-krogh
|
d95a4a7baf
|
add a second example of how to use module_eval without constructing a code-string
|
2022-12-13 19:33:45 +01:00 |
|
Jami Cogswell
|
be7b4151af
|
Java: update getNumApis and remove package binding from query body
|
2022-12-13 12:54:43 -05:00 |
|
erik-krogh
|
ccf520a5cd
|
Merge branch 'main' into unsafeCodeConstruction
|
2022-12-13 18:31:49 +01:00 |
|
Siara
|
141bc41881
|
Update docs/codeql/writing-codeql-queries/introduction-to-ql.rst
Co-authored-by: James Fletcher <42464962+jf205@users.noreply.github.com>
|
2022-12-13 09:22:16 -08:00 |
|
Siara
|
44f91ad723
|
Update docs/codeql/reusables/codespaces-template-note.rst
Co-authored-by: James Fletcher <42464962+jf205@users.noreply.github.com>
|
2022-12-13 09:22:07 -08:00 |
|
Edward Minnix III
|
a2c886d367
|
Grammar and wording changes from docs review
Co-authored-by: Sam Browning <106113886+sabrowning1@users.noreply.github.com>
|
2022-12-13 11:57:46 -05:00 |
|
Edward Minnix III
|
a85de2b5f4
|
Merge pull request #10865 from egregius313/egregius313/android-activity-alias
Java: Add library support for activity-alias elements in AndroidManifest.qll
|
2022-12-13 11:52:01 -05:00 |
|
Jami Cogswell
|
a33436a39b
|
Java: update hasProvenance
|
2022-12-13 11:26:23 -05:00 |
|
Jami Cogswell
|
3da2fb933b
|
Java: remove parentheses
|
2022-12-13 11:08:00 -05:00 |
|
Jami Cogswell
|
028fc29639
|
Java: group test methods
|
2022-12-13 11:02:21 -05:00 |
|
Jami Cogswell
|
a889cc4f65
|
Java/C#: remove isTestLibrary
|
2022-12-13 10:34:04 -05:00 |
|
Jami
|
9b0163ce22
|
Merge pull request #11624 from jcogs33/jcogs33/exclude-paramless-constructors-from-dataflowtargetapi
Java/C#: exclude parameterless constructors from `DataFlowTargetApi`
|
2022-12-13 10:05:57 -05:00 |
|
Jami Cogswell
|
91c1ec3be6
|
C#: exclude AnonymousFunctionExpr from DataFlowTargetApi
|
2022-12-13 09:54:05 -05:00 |
|
Jami Cogswell
|
1c06378a53
|
Java: exclude FunctionalExprs from DataFlowTargetApi
|
2022-12-13 09:54:05 -05:00 |
|
Tamas Vajk
|
5cc2868857
|
Kotlin: Report CFG dead end consistency issues on ErrorExpr
|
2022-12-13 15:51:33 +01:00 |
|
Anders Schack-Mulligen
|
a29e529690
|
Shared: Add missing qldoc.
|
2022-12-13 15:49:30 +01:00 |
|
Asger F
|
bfe9ee3ead
|
Merge pull request #11672 from asgerf/js/extensions
JS: Add data extension sinks
|
2022-12-13 15:34:11 +01:00 |
|
Henry Mercer
|
423374a7b8
|
Merge branch 'main' into codeql-ci/atm/release-0.4.4
|
2022-12-13 14:26:21 +00:00 |
|
github-actions[bot]
|
745823ca60
|
JS: Bump version of ML-powered library and query packs to 0.4.5
|
2022-12-13 13:32:52 +00:00 |
|
github-actions[bot]
|
ea13925a92
|
JS: Bump patch version of ML-powered library and query packs
|
2022-12-13 13:28:09 +00:00 |
|
Alex Denisov
|
ee94849528
|
Swift: switch to bootstrapped Swift compiler
|
2022-12-13 13:59:13 +01:00 |
|
Tony Torralba
|
85b3092b16
|
Add security-severity and fix alert message
|
2022-12-13 12:01:01 +01:00 |
|
Asger F
|
6b15839221
|
JS: Add tests for the examples used in the docs
|
2022-12-13 11:33:12 +01:00 |
|
Asger F
|
ba1364a4cb
|
JS: Add sinks mentioned in doc
Note that 'sql-injection' was already added
|
2022-12-13 11:33:12 +01:00 |
|
Alvaro Muñoz
|
270a4355df
|
format Restify.qll
|
2022-12-13 11:22:24 +01:00 |
|
Alvaro Muñoz
|
4ba3190d29
|
Replace API::Node with DataFlow::Node for Spife's RouteSetup
|
2022-12-13 11:10:04 +01:00 |
|
Felicity Chapman
|
cbbce9b98a
|
Update docs/codeql/writing-codeql-queries/introduction-to-ql.rst
|
2022-12-13 09:56:50 +00:00 |
|
Michael Nebel
|
b8ef961498
|
Merge pull request #9415 from JarLob/sockets
Add TCP and UDP socket client taint sources
|
2022-12-13 10:39:33 +01:00 |
|
Felicity Chapman
|
6aaaf4267b
|
Update docs/codeql/writing-codeql-queries/introduction-to-ql.rst
|
2022-12-13 09:37:49 +00:00 |
|