Chris Smowton
|
3b49594c20
|
Kotlin: Add Callable.getKotlinParameterDefaultsProxy
|
2022-10-12 11:29:55 +01:00 |
|
Mathias Vorreiter Pedersen
|
9eca56cbe2
|
Merge pull request #10779 from MathiasVP/add-uninitialized-dataflow-predicate-to-ir-dataflow
C++: Add `UninitializedNode` to experimental IR dataflow
|
2022-10-12 11:09:01 +01:00 |
|
sylwia-budzynska
|
7bcd247128
|
Apply suggestions from code review
Co-authored-by: Rasmus Wriedt Larsen <rasmuswriedtlarsen@gmail.com>
|
2022-10-12 12:08:20 +02:00 |
|
Tom Hvitved
|
9bd25220d4
|
Merge pull request #10760 from hvitved/ruby/regex-taint-flow-restrict
Ruby: Restrict regexp taint flow to `String` summaries
|
2022-10-12 11:59:08 +02:00 |
|
Tamás Vajk
|
56797c515b
|
Merge pull request #10776 from tamasvajk/kotlin-missing-override-fix
Kotlin/Java: Exclude generated code from `java/missing-override-annotation`
|
2022-10-12 11:30:20 +02:00 |
|
Nick Rolfe
|
39107047bf
|
Merge pull request #10735 from github/nickrolfe/actionmailer
Ruby: add `ActionMailer#params` as a `RemoteFlowSource`
|
2022-10-12 10:21:11 +01:00 |
|
Tom Hvitved
|
202549bdd9
|
Merge pull request #10758 from hvitved/ruby/type-tracking-level-step
Type tracking: Split up `levelStep` into `levelStepCall` and `levelStepNoCall`
|
2022-10-12 10:42:01 +02:00 |
|
Josh Soref
|
c92ce69f48
|
spelling: when
Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>
|
2022-10-12 04:40:26 -04:00 |
|
Josh Soref
|
9d6ea28448
|
spelling: the
Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>
|
2022-10-12 04:40:26 -04:00 |
|
Josh Soref
|
a8e5a12ec2
|
spelling: specific
Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>
|
2022-10-12 04:40:26 -04:00 |
|
Josh Soref
|
b9d8903bdb
|
spelling: similarly
Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>
|
2022-10-12 04:40:26 -04:00 |
|
Josh Soref
|
9eac158d7c
|
spelling: revocation
Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>
|
2022-10-12 04:40:26 -04:00 |
|
Josh Soref
|
08a79531cf
|
spelling: response
Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>
|
2022-10-12 04:40:26 -04:00 |
|
Josh Soref
|
1a14c06008
|
spelling: receiver
Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>
|
2022-10-12 04:40:26 -04:00 |
|
Josh Soref
|
061d1ee9fe
|
spelling: presence
Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>
|
2022-10-12 04:40:26 -04:00 |
|
Josh Soref
|
71b0613f9a
|
spelling: parenthesized
Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>
|
2022-10-12 04:40:26 -04:00 |
|
Josh Soref
|
ba0f34afed
|
spelling: owasp
Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>
|
2022-10-12 04:40:26 -04:00 |
|
Josh Soref
|
0919507565
|
spelling: outside
Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>
|
2022-10-12 04:40:26 -04:00 |
|
Josh Soref
|
7e0bbf1bdb
|
spelling: optimization
Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>
|
2022-10-12 04:40:25 -04:00 |
|
Josh Soref
|
114653162c
|
spelling: operator
Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>
|
2022-10-12 04:40:25 -04:00 |
|
Josh Soref
|
c77f685c0c
|
spelling: operations
Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>
|
2022-10-12 04:40:25 -04:00 |
|
Asger F
|
e55be83645
|
Ruby: add 'render file:' as file system access
|
2022-10-12 09:47:04 +02:00 |
|
Jami Cogswell
|
29de0c6748
|
make one config for asymm with flow states; seems to work...
|
2022-10-11 22:29:48 -04:00 |
|
Jami Cogswell
|
3e8748e639
|
add path-graph back to query alerts
|
2022-10-11 16:56:11 -04:00 |
|
Jami Cogswell
|
26f4abf12b
|
remove globalflow for key(pair)gen
|
2022-10-11 16:56:11 -04:00 |
|
Jami Cogswell
|
e64825ff7a
|
fix code-scanning bot problems
|
2022-10-11 16:56:11 -04:00 |
|
Jami Cogswell
|
b6a8c27d48
|
delete experimental files
|
2022-10-11 16:56:11 -04:00 |
|
Jami Cogswell
|
bd76b1fcc0
|
clean-up and update configurations to have specs as sink
|
2022-10-11 16:56:10 -04:00 |
|
Jami Cogswell
|
0c2cff253f
|
updates from discussing with Tony
|
2022-10-11 16:56:10 -04:00 |
|
Jami Cogswell
|
3cc7f143b2
|
clean up code somewhat
|
2022-10-11 16:56:10 -04:00 |
|
Jami Cogswell
|
f5a2fef7a3
|
update tests for non-path version
|
2022-10-11 16:56:10 -04:00 |
|
Jami Cogswell
|
b0af9f936c
|
added kg taintracking config to all
|
2022-10-11 16:56:10 -04:00 |
|
Jami Cogswell
|
b7123c17f8
|
draft of adding kpg tracking into dataflow config
|
2022-10-11 16:56:10 -04:00 |
|
Jami Cogswell
|
cdac0e2b52
|
add local algo name tracking, still need to add ability to track algo name when KeyGen obj is param to other method
|
2022-10-11 16:56:10 -04:00 |
|
Jami Cogswell
|
c414ee0e25
|
add ECC dataflow config; passes all test cases; still don't have algo name tracking
|
2022-10-11 16:56:10 -04:00 |
|
Jami Cogswell
|
5e2ef66014
|
refactoring to use both dataflow configs; commit before deleting unused code
|
2022-10-11 16:56:10 -04:00 |
|
Jami Cogswell
|
ac707198d5
|
commit before adding taint flow back (since no taint flow doesn't capture all cases)
|
2022-10-11 16:56:10 -04:00 |
|
Jami Cogswell
|
8ffd2522e7
|
add draft code to find algo type to replace tainttracking configs
|
2022-10-11 16:56:10 -04:00 |
|
Jami Cogswell
|
d3b1a04c13
|
handle FN case with simple VarAccess; add draft of dataflow config to handle complex VarAccess
|
2022-10-11 16:56:10 -04:00 |
|
Jami Cogswell
|
7de9c05c9d
|
use CompileTimeConstantExpr for FN with VarAccess, and remove KeyGeneratorInitConfiguration
|
2022-10-11 16:56:10 -04:00 |
|
Jami Cogswell
|
75794ec7a7
|
false negative testing - before rewrite for variable dataflow
|
2022-10-11 16:56:10 -04:00 |
|
Jami Cogswell
|
7d94590d79
|
add change note
|
2022-10-11 16:56:10 -04:00 |
|
Jami Cogswell
|
9eb45c3787
|
refactor tests and code, update help file
|
2022-10-11 16:56:10 -04:00 |
|
Jami Cogswell
|
657e1e62ca
|
start refactoring query logic into lib file
|
2022-10-11 16:56:10 -04:00 |
|
Jami Cogswell
|
3643c9e658
|
update metadata
|
2022-10-11 16:56:10 -04:00 |
|
Jami Cogswell
|
9b7df354e6
|
move files
|
2022-10-11 16:56:10 -04:00 |
|
Alex Ford
|
bf4dac78c5
|
Ruby: remove some singleton set literals
|
2022-10-11 21:44:52 +01:00 |
|
Alex Ford
|
d3c8ce3f48
|
Ruby: ActiveSupport extends Pathname with an existence method that may return itself
|
2022-10-11 21:35:58 +01:00 |
|
Henry Mercer
|
bfa9765a6d
|
Merge branch 'main' into codeql-ci/js/ml-powered-pack-release-0.3.5
|
2022-10-11 19:06:01 +01:00 |
|
github-actions[bot]
|
06bbede92b
|
JS: Bump version of ML-powered library and query packs to 0.3.6
|
2022-10-11 17:58:33 +00:00 |
|