Geoffrey White
|
30468dd419
|
Swift: Implement field content as well.
|
2022-11-28 12:27:33 +00:00 |
|
Geoffrey White
|
ffbd201450
|
Swift: Implement basic model of WKUserScript.
|
2022-11-28 12:20:29 +00:00 |
|
Geoffrey White
|
116d9667e7
|
Swift: Remove special case from query.
|
2022-11-28 12:15:38 +00:00 |
|
Ian Lynagh
|
a32363de79
|
Kotlin: Avoid giving a single class 2 compiler-generated kinds
|
2022-11-28 12:14:50 +00:00 |
|
Ian Lynagh
|
7863bc2c99
|
Kotlin: Accept test output
|
2022-11-28 12:14:36 +00:00 |
|
Tom Hvitved
|
1e63893411
|
C#: Add integration test that checks whether env vars are passed through autobuilder
|
2022-11-28 13:12:24 +01:00 |
|
Geoffrey White
|
3971cbf294
|
Swift: Extend the taint test with WKUserScript.
|
2022-11-28 12:11:38 +00:00 |
|
Erik Krogh Kristensen
|
477a32831b
|
Merge pull request #11448 from github/erik-krogh/lgtm-codeql-js-extractor
JS: update `javascript/extractor/README.md` to mention CodeQL instead of LGTM
|
2022-11-28 13:10:25 +01:00 |
|
Arthur Baars
|
a879fd519a
|
Merge pull request #11295 from github/aibaars-patch-2
"CodeQL False positive" -> "CodeQL false positive"
|
2022-11-28 13:06:39 +01:00 |
|
Arthur Baars
|
a8effd1961
|
Ruby: add change note
|
2022-11-28 13:02:22 +01:00 |
|
Michael Nebel
|
d7e656a32a
|
Java: Add change note.
|
2022-11-28 12:30:36 +01:00 |
|
Michael Nebel
|
43a63d6373
|
Java: Convert all models to data extensions in testcases.
|
2022-11-28 12:30:36 +01:00 |
|
Michael Nebel
|
74f02cf855
|
Java: Allow empty package name in model definitions.
|
2022-11-28 12:30:35 +01:00 |
|
Michael Nebel
|
b96540c937
|
Java: Convert permissve-dot-regex-query to data extensions.
|
2022-11-28 12:30:35 +01:00 |
|
Michael Nebel
|
91840c613e
|
Java: Convert unsafe-url-forward to data extensions.
|
2022-11-28 12:30:35 +01:00 |
|
Michael Nebel
|
aed5ee4edc
|
Java: Convert thread-resource-abuse to data extensions.
|
2022-11-28 12:30:35 +01:00 |
|
Michael Nebel
|
07578f11d4
|
Java: Convert hardcoded-jwt-key models to data extensions.
|
2022-11-28 12:30:35 +01:00 |
|
Michael Nebel
|
ab12b6cc2b
|
Java: Convert android-web-resource-response to data extensions.
|
2022-11-28 12:30:35 +01:00 |
|
Michael Nebel
|
5c15ad412c
|
Java: Convert log4j-injection to data extensions.
|
2022-11-28 12:30:35 +01:00 |
|
Michael Nebel
|
665d40dc4b
|
Java: Convert file-path-injection to data extensions.
|
2022-11-28 12:30:35 +01:00 |
|
Michael Nebel
|
b61f515af2
|
Jave: Make support for query specific models.
|
2022-11-28 12:30:35 +01:00 |
|
Michael Nebel
|
805430983c
|
Java: Convert commons-io to data extensions.
|
2022-11-28 12:30:35 +01:00 |
|
Michael Nebel
|
d7aafbfe64
|
Java: Add model generator script that emits data extensions.
|
2022-11-28 12:30:35 +01:00 |
|
Michael Nebel
|
9c93402b26
|
Java: Convert integration test to use data extensions instead of inlined models.
|
2022-11-28 12:30:35 +01:00 |
|
Michael Nebel
|
157a228088
|
Java: Add query packs with names to enable dependency resolution.
|
2022-11-28 12:30:35 +01:00 |
|
Michael Nebel
|
2d309bb8f8
|
Java: Include the library query pack to get the data extensions included.
|
2022-11-28 12:30:35 +01:00 |
|
Michael Nebel
|
b3a3b676ba
|
Java: Remove manual models from QL code.
|
2022-11-28 12:30:34 +01:00 |
|
Michael Nebel
|
f4e1867d28
|
Java: Define extensible predicates to at least be empty.
|
2022-11-28 12:30:34 +01:00 |
|
Michael Nebel
|
0abeb831c7
|
Java: Move summaryModel predicate, which constructs a CSV row to the testcode where it is used.
|
2022-11-28 12:30:34 +01:00 |
|
Michael Nebel
|
663d091776
|
Java: Invert dependencies and use the extensible predicates.
|
2022-11-28 12:30:34 +01:00 |
|
Michael Nebel
|
9cb5ff1cdc
|
Java: Add data extensions for all manual models.
|
2022-11-28 12:30:34 +01:00 |
|
Michael Nebel
|
8e25cac653
|
Java: Add extensible predicates.
|
2022-11-28 12:30:34 +01:00 |
|
Michael Nebel
|
7b6f202f23
|
Java: Renaming.
|
2022-11-28 12:30:34 +01:00 |
|
Michael Nebel
|
63e2206d16
|
Java: Prepare QL pack for data extensions.
|
2022-11-28 12:30:34 +01:00 |
|
Michael Nebel
|
fc4b9827b9
|
Java: Add script for converting extensions.
|
2022-11-28 12:30:34 +01:00 |
|
Michael Nebel
|
9f7103c4fb
|
Java: Add queries for extracting sources, sinks and summaries.
|
2022-11-28 12:30:34 +01:00 |
|
Michael Nebel
|
a8ee878356
|
Java: Add bi-directional import of FragmentInjection.
|
2022-11-28 12:30:33 +01:00 |
|
Michael Nebel
|
663112576a
|
Java: Update commons-io models.
|
2022-11-28 12:30:33 +01:00 |
|
Erik Krogh Kristensen
|
7a3898168f
|
Update README.md
|
2022-11-28 12:12:36 +01:00 |
|
Tom Hvitved
|
cde05e1190
|
Data flow: Sync files
|
2022-11-28 12:11:38 +01:00 |
|
Tom Hvitved
|
c65780ee99
|
Data flow: Inline revFlowInNotToReturn
|
2022-11-28 12:11:18 +01:00 |
|
Tom Hvitved
|
bdb205a318
|
Data flow: Track return kind instead of return position in pruning stages 2-4
|
2022-11-28 12:11:18 +01:00 |
|
Tom Hvitved
|
4346a7f426
|
Data flow: Inline fwdFlowOutNotFromArg
|
2022-11-28 12:11:18 +01:00 |
|
Tom Hvitved
|
70d2a0df8a
|
Data flow: Track parameter position instead of parameter in pruning stages 2-4
|
2022-11-28 12:11:12 +01:00 |
|
Taus
|
530b795eaa
|
Merge pull request #11402 from yoff/python/port-super-not-enclosing-class
Python: port `py/super-not-enclosing-class`
|
2022-11-28 11:52:57 +01:00 |
|
Nick Rolfe
|
8a94cabdbf
|
Merge pull request #11250 from github/nickrolfe/stack-trace-exposure
Ruby: add stack-trace exposure query
|
2022-11-28 10:45:59 +00:00 |
|
Asger F
|
e99571baae
|
Update javascript/ql/lib/semmle/javascript/frameworks/data/internal/ApiGraphModelsSpecific.qll
Co-authored-by: Erik Krogh Kristensen <erik-krogh@github.com>
|
2022-11-28 11:45:08 +01:00 |
|
Geoffrey White
|
dc02fa0386
|
Swift: Make ql-for-ql happy.
|
2022-11-28 10:17:11 +00:00 |
|
Geoffrey White
|
b3d2e759a6
|
Swift: Update swift/sql-injection to include local flow sources.
|
2022-11-28 10:11:44 +00:00 |
|
Geoffrey White
|
a5a459fe0a
|
Swift: Update swift/unsafe-js-eval to include local flow sources.
|
2022-11-28 10:11:44 +00:00 |
|