Geoffrey White
|
7648e8f6a3
|
Swift: Recognize more sources.
|
2023-01-20 15:08:12 +00:00 |
|
Jean Helie
|
9e6f9c2705
|
Merge pull request #11709 from github/jhelie/add-shell-command-injection
ATM: add boosted version for `ShellCommandInjectionFromEnvironment` query
|
2023-01-20 16:03:30 +01:00 |
|
Geoffrey White
|
581c478872
|
Swift: Model RNCryptor.
|
2023-01-20 14:50:23 +00:00 |
|
Geoffrey White
|
bb59d055ff
|
Swift: Add tests for RNCryptor library.
|
2023-01-20 14:50:21 +00:00 |
|
Mathias Vorreiter Pedersen
|
3059ce3070
|
Merge pull request #11938 from github/release-prep/2.12.1
Release preparation for version 2.12.1
codeql-cli/v2.12.1
|
2023-01-20 14:30:42 +00:00 |
|
Alex Ford
|
8ae993185c
|
Ruby: fix missing docs
|
2023-01-20 13:40:19 +00:00 |
|
Alex Ford
|
c986ea1070
|
Ruby: scope local_assigns synthetic globals to both render call and template file
|
2023-01-20 13:40:19 +00:00 |
|
Alex Ford
|
14c896215c
|
Ruby: factor out some RenderCall methods into a helper module
|
2023-01-20 13:40:19 +00:00 |
|
Alex Ford
|
03070c9fd0
|
Ruby: restrict AccessLocalsKeySummary to method calls against self
|
2023-01-20 13:40:19 +00:00 |
|
Alex Ford
|
f6516db105
|
Ruby: correct preservesValue in AccessLocalsKeySummary
|
2023-01-20 13:40:19 +00:00 |
|
Alex Ford
|
ab72301a4c
|
Ruby: add a change note for rails render locals dataflow
|
2023-01-20 13:40:19 +00:00 |
|
Alex Ford
|
8fec4b804f
|
Ruby: StoredXSS test whitespace change
|
2023-01-20 13:40:19 +00:00 |
|
Alex Ford
|
fd8dd5e103
|
Ruby: update StoredXSS test output
|
2023-01-20 13:40:19 +00:00 |
|
Alex Ford
|
8845157d08
|
Ruby: slightly limit AccessLocalsKeySummary summarized callables
|
2023-01-20 13:40:19 +00:00 |
|
Alex Ford
|
b5cc1087fe
|
Ruby: add LocalAssignsHashSyntheticGlobal#getARenderCall predicate
|
2023-01-20 13:40:19 +00:00 |
|
Alex Ford
|
022171923c
|
Ruby: fix some ql for ql alerts
|
2023-01-20 13:40:19 +00:00 |
|
Alex Ford
|
bea110b598
|
Ruby: remove blank line in test file
|
2023-01-20 13:40:19 +00:00 |
|
Alex Ford
|
b78ae1608e
|
Ruby: remove a fixed TODO
|
2023-01-20 13:40:19 +00:00 |
|
Alex Ford
|
e5fbc92856
|
Ruby: generalize rails flow step for accessing render locals hash in view
|
2023-01-20 13:40:19 +00:00 |
|
Alex Ford
|
e4df1f5a6f
|
Ruby: add missing toString case for synthetic globals
|
2023-01-20 13:31:43 +00:00 |
|
Jeroen Ketema
|
cddaa0c8fa
|
Apply suggestions from code review
|
2023-01-20 14:10:27 +01:00 |
|
Michael Nebel
|
4d321d6833
|
C#: Add upgrade and downgrade scripts.
|
2023-01-20 13:39:41 +01:00 |
|
Michael Nebel
|
6c7c0854d1
|
C#: Add change note.
|
2023-01-20 13:39:41 +01:00 |
|
Michael Nebel
|
5a1e96d671
|
C#: Update string literal test query and expected output.
|
2023-01-20 13:39:41 +01:00 |
|
Michael Nebel
|
5c5d330704
|
C#: Add UTF-8 encoded string test case.
|
2023-01-20 13:39:41 +01:00 |
|
Michael Nebel
|
20398f1299
|
C#: Add PrintAst testcase for C# 11 test code.
|
2023-01-20 13:39:41 +01:00 |
|
Michael Nebel
|
c52dbcbb52
|
C#: Update all PrintAst test expected output.
|
2023-01-20 13:39:41 +01:00 |
|
Michael Nebel
|
c87668a91d
|
C#: Library support for string UTF8/UTF16 encodings.
|
2023-01-20 13:39:41 +01:00 |
|
Michael Nebel
|
e8eedb7b4d
|
C#: Extractor support for UTF-8 encoded strings.
|
2023-01-20 13:39:41 +01:00 |
|
Michael Nebel
|
72fa3bd905
|
C#: Add test cases for raw string literals.
|
2023-01-20 13:39:41 +01:00 |
|
Michael Nebel
|
3b93cd45ea
|
C#: Extract the ValueText instead of Text for interpolated string literals as this contains the value after eg. indentation processing.
|
2023-01-20 13:39:41 +01:00 |
|
Michael Nebel
|
ad20e81d05
|
C#: Add test for interpolated strings, where newlines are used in the provided expression.
|
2023-01-20 13:39:41 +01:00 |
|
Philip Ginsbach
|
3998c9a89a
|
document the existence of a global QlBuiltins module
|
2023-01-20 12:16:24 +00:00 |
|
Philip Ginsbach
|
127b1ac114
|
update handbook and reference with signature namespaces
|
2023-01-20 12:16:22 +00:00 |
|
github-actions[bot]
|
005b3e4a47
|
Release preparation for version 2.12.1
|
2023-01-20 12:03:19 +00:00 |
|
Geoffrey White
|
976b0401be
|
Merge pull request #11876 from geoffw0/coredata
Swift: Improve Core Data sinks for swift/cleartext-storage-database
|
2023-01-20 11:02:03 +00:00 |
|
Harry Maclean
|
16baea22c0
|
Ruby: doc fix
Co-authored-by: Alex Ford <alexrford@users.noreply.github.com>
|
2023-01-20 22:06:29 +13:00 |
|
Paolo Tranquilli
|
1c086aae7c
|
Swift: add internal imports to ParentChild.qll
|
2023-01-20 09:59:36 +01:00 |
|
Ian Lynagh
|
05c80b3f3c
|
Merge pull request #11894 from igfoo/igfoo/make-private
Kotlin: Make a couple of functions private
|
2023-01-19 20:59:32 +00:00 |
|
Sarita Iyer
|
3a8479614b
|
fix link
|
2023-01-19 15:13:34 -05:00 |
|
Paolo Tranquilli
|
e840b8f707
|
Swift: add and fix some schema.py documentation
|
2023-01-19 18:07:47 +01:00 |
|
Ian Lynagh
|
c2d5281e73
|
Merge pull request #11930 from igfoo/igfoo/fetch-codeql
CI: fetch-codeql: Set $CODEQL_FETCHED_CODEQL_PATH in the enivironment
|
2023-01-19 15:33:08 +00:00 |
|
Sarita Iyer
|
a83a98226c
|
Update README.rst
|
2023-01-19 09:45:43 -05:00 |
|
Sarita Iyer
|
27a5051282
|
Update README.md
|
2023-01-19 09:45:01 -05:00 |
|
Sarita Iyer
|
894a494186
|
Apply suggestions from code review
Co-authored-by: Andrew Eisenberg <aeisenberg@github.com>
|
2023-01-19 09:39:55 -05:00 |
|
Paolo Tranquilli
|
c2c14cdddb
|
Merge pull request #11929 from github/redsun82/swift-expand-ref-in-auto-docs
Swift: expand `ref` in autogenerated docs
|
2023-01-19 15:24:05 +01:00 |
|
Michael B. Gale
|
14cc27e49b
|
Merge pull request #11910 from owen-mc/go/log-injection-sanitizer-newreplacer-replace
Add missing string replacement sanitizers to log-injection and string-break
|
2023-01-19 14:23:03 +00:00 |
|
Michael Nebel
|
dc223cb82e
|
Sync files and make corresponding changes for other languages.
|
2023-01-19 15:14:06 +01:00 |
|
Chris Smowton
|
9a5e1f5e28
|
Make import private
|
2023-01-19 14:10:17 +00:00 |
|
Michael Nebel
|
9cd1dc70e5
|
C#: Remove the Csv postfix of some predicates.
|
2023-01-19 15:02:52 +01:00 |
|