50816 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
erik-krogh	c029048306	port the Java regex/redos queries to use the shared pack	2022-11-14 21:29:41 +01:00
erik-krogh	d5b066636f	use namespace in PrintAst.qll to avoid conflict with Top	2022-11-14 21:29:41 +01:00
erik-krogh	b737bdbca0	add a Java implementation of RegexTreeViewSig	2022-11-14 21:29:41 +01:00
erik-krogh	20254dfc08	move existing regex-tree into a module	2022-11-14 21:29:41 +01:00
erik-krogh	af1470de07	add codeql/regex as a dependency	2022-11-14 21:29:41 +01:00
Ed Minnix	2fb9536847	Java: documentation cleanup for WebView file access query	2022-11-14 15:14:09 -05:00
Ed Minnix	7a0544d80e	Java: test files for WebView file access query	2022-11-14 15:11:15 -05:00
Erik Krogh Kristensen	d2857006cf	Merge pull request #11247 from erik-krogh/py-redosMod ... Python: use the shared regex pack	2022-11-14 21:10:43 +01:00
Ed Minnix	73d6360eee	Java: add setAllowFileAccess to CrossOriginAccessMethod in WebView.qll ... Local file access is enabled using the `WebSettings#setAllowFileAccess` method.	2022-11-14 15:07:46 -05:00
Ed Minnix	89411a1db2	Fix alert message style	2022-11-14 14:41:06 -05:00
Ed Minnix	1132572620	Java: add test cases for setJavaScriptEnabled query	2022-11-14 14:33:12 -05:00
Tiferet Gazit	855eddab80	Merge pull request #11174 from github/tiferet/non-sink-endpoint-characteristics ... Non-sink endpoint characteristics	2022-11-14 09:37:25 -08:00
Erik Krogh Kristensen	99636ba344	fix typo ... Co-authored-by: yoff <lerchedahl@gmail.com>	2022-11-14 17:35:55 +01:00
erik-krogh	324e0e8f90	always sort both by location and by term tostring	2022-11-14 17:33:48 +01:00
Ed Minnix	a7e7334f0f	Java: Documentation cleanup for setJavascriptEnabled	2022-11-14 11:10:43 -05:00
Rasmus Lerchedahl Petersen	4f159371f9	Python: add change notes	2022-11-14 17:01:45 +01:00
Rasmus Lerchedahl Petersen	9c7fee225c	Python: remove redundant override	2022-11-14 16:45:34 +01:00
Rasmus Lerchedahl Petersen	3ee756694f	Python: add missing qldoc ... also add to ordinary `except`	2022-11-14 16:45:22 +01:00
Ian Lynagh	7bf55c5846	Merge pull request #11251 from igfoo/igfoo/total ... Kotlin: Add total number of diagnostics to telemetry	2022-11-14 15:09:57 +00:00
Edward Minnix III	55fad8ab23	Java: Fix description of setJavascriptEnabled query ... Co-authored-by: Tony Torralba <atorralba@users.noreply.github.com>	2022-11-14 10:04:01 -05:00
Edward Minnix III	7e5970f338	Java: Fix typos/formatting in setJavascriptEnabled query ... Typos and formatting changes. Co-authored-by: Tony Torralba <atorralba@users.noreply.github.com>	2022-11-14 10:02:20 -05:00
Tony Torralba	5791e8b9a2	Slight renaming	2022-11-14 15:46:44 +01:00
Tony Torralba	07de92cdb6	Move AEXML.qll to avoid nesting	2022-11-14 15:46:44 +01:00
Tony Torralba	f2888dcb1e	Add sinks and tests for the AEXML library.	2022-11-14 15:46:44 +01:00
Tony Torralba	3ef7f3f44d	Merge pull request #11120 from atorralba/atorralba/swift/xxe-query-xmldocument-sinks ... Swift: Adds XMLDocument sinks to the XXE query	2022-11-14 15:46:02 +01:00
Geoffrey White	3e6eedec30	Swift: Fix test output after merge.	2022-11-14 14:42:56 +00:00
Asger F	2bcf9b86cf	JS: Bump extractor version string	2022-11-14 15:09:50 +01:00
Asger F	5f18484fa9	JS: Change note	2022-11-14 15:09:30 +01:00
Asger F	b028d72d51	JS: Handle DynamicImport in the context of a type	2022-11-14 15:07:59 +01:00
Chris Smowton	61149f297c	Merge pull request #11232 from grddev/patch-1 ... Go: Optimize trap.Writer by buffering gzip writes	2022-11-14 14:01:47 +00:00
Ian Lynagh	fab2d30f38	Kotlin: Make emitDiagnostic private	2022-11-14 13:53:16 +00:00
Ian Lynagh	1e6ef99a50	Merge pull request #11249 from igfoo/igfoo/telem-compilation-info ... Java/Kotlin: Add compilation info to telemetry	2022-11-14 13:51:35 +00:00
Geoffrey White	5460004223	Merge branch 'main' into HEAD	2022-11-14 13:44:39 +00:00
Tom Hvitved	b242bd6468	Merge pull request #11080 from github/revert-11074-revert-10576-ssa/consistency-queries ... Revert "Revert "SSA: Turn consistency predicates into `query` predicates""	2022-11-14 14:43:58 +01:00
Ian Lynagh	847ecd1eec	Java/Kotlin: Small refactoring of ExtractorInformation	2022-11-14 13:09:49 +00:00
Nick Rolfe	c80fbff648	Ruby: add changenote for Enumerable#index_by flow summary	2022-11-14 12:47:50 +00:00
Ian Lynagh	b20f8fc8c9	Kotlin: Add total number of diagnostics to telemetry	2022-11-14 12:27:54 +00:00
Nick Rolfe	c660ea100b	Ruby: add changenote for rb/stack-trace-exposure	2022-11-14 12:26:40 +00:00
Nick Rolfe	b39e2ef71c	Ruby: add stacktrace exposure query	2022-11-14 12:26:40 +00:00
Tony Torralba	52bd140213	Fix test expectations	2022-11-14 12:41:13 +01:00
Tony Torralba	c03eab2410	Add XMLDocument sinks	2022-11-14 12:41:13 +01:00
Tony Torralba	a21db3b3c2	Merge pull request #11086 from atorralba/atorralba/swift/xxe-query ... Swift: Add new query for XML External Entities (XML) vulnerabilities	2022-11-14 12:34:30 +01:00
Ian Lynagh	87ee979a12	Java/Kotlin: Add compilation info to telemetry ... This will give info about which kotlinc versions are used.	2022-11-14 11:31:37 +00:00
Nora Dimitrijević	16ba5b1bb5	Swift: update doctests	2022-11-14 12:30:16 +01:00
Ian Lynagh	3afd895d41	Merge pull request #11217 from igfoo/igfoo/kotlin_version_rec ... Java/Kotlin: Write Kotlin version information to the database	2022-11-14 10:55:46 +00:00
Nick Rolfe	83b3312467	Merge pull request #11207 from github/nickrolfe/arel-sql ... Ruby: add `SqlConstruction` concept, and implement it for calls to `Arel.sql`	2022-11-14 10:21:37 +00:00
Nick Rolfe	0dadf0bbb4	Ruby: add flow summary for Enumerable#index_by	2022-11-14 10:01:24 +00:00
Arthur Baars	dd519cc9bf	Ruby: also treat included/prepended modules as subclasses	2022-11-14 10:56:56 +01:00
yoff	dd525a4f9b	Merge pull request #11061 from erik-krogh/shared-redosMod ... ReDoS: add a shared regex pack	2022-11-14 10:53:05 +01:00
AlexDenisov	d19bde8cb1	Merge pull request #11205 from github/alexdenisov/swift-db-upgrades-infra ... Swift: db up/downgrade scripts	2022-11-14 09:51:15 +01:00