semmle-qlci
00d490e84d
Merge pull request #945 from asger-semmle/extensible-module-import
...
Approved by xiemaisi
2019-02-26 09:26:28 +00:00
Esben Sparre Andreasen
9511bdf6ae
JS: address review comment
2019-02-26 10:07:00 +01:00
Max Schaefer
c2a5350bf2
Merge pull request #982 from asger-semmle/closure-string-lib
...
JS: model string functions from closure library
2019-02-26 08:26:14 +00:00
Nick Rolfe
53de2d8d3e
Merge pull request #830 from ian-semmle/constexpr
...
C++: Add Function.{isDeclaredConstexpr,isConstexpr}() predicates
2019-02-25 22:11:24 +00:00
Robert Marsh
af490a9b3e
C++: fix PrimaryInstruction for call side effects
2019-02-25 11:41:40 -08:00
Asger F
93440014a0
JS: only propagate through first argument of truncate()
2019-02-25 17:11:55 +00:00
Asger F
d45f670646
JS: remove duplicate modelling of urlDecode/urlEncode
2019-02-25 17:04:56 +00:00
Asger F
29de1411b7
JS: remove restriction on truncate calls
2019-02-25 17:00:47 +00:00
Asger F
50e8f83ad5
JS: use globalVarRef/SourceNode instead
2019-02-25 16:54:45 +00:00
Asger F
8354909d46
JS: add closure library in globalObjectRef
2019-02-25 16:45:47 +00:00
Asger F
d70d0e21cc
JS: add format function
2019-02-25 16:30:44 +00:00
Asger F
fab0afd755
JS: model string functions from closure library
2019-02-25 16:08:47 +00:00
Max Schaefer
bea75e2d1c
Merge pull request #981 from esben-semmle/js/fix-docstring
...
JS: fix docstring: s/node1/pred + s/node2/succ
2019-02-25 16:04:15 +00:00
Ian Lynagh
ad126b93cf
C++: Remove a use of deprecated Function.getFullSignature()
2019-02-25 15:51:39 +00:00
Esben Sparre Andreasen
8e01ccd892
JS: fix docstring: s/node1/pred + s/node2/succ
2019-02-25 16:51:30 +01:00
Mark Shannon
c48ab48dbc
Merge pull request #971 from felicity-semmle/ql/SD-3009-add-files
...
Move support information to QL repository for easier maintenance
2019-02-25 15:36:18 +00:00
semmle-qlci
58cc8d0ecc
Merge pull request #936 from xiemaisi/js/revive-electron-support
...
Approved by esben-semmle
2019-02-25 15:23:20 +00:00
Esben Sparre Andreasen
ab1b1c1431
JS: update docstring
2019-02-25 16:11:35 +01:00
Esben Sparre Andreasen
4dc147d506
JS: rename CapturedSource -> LocalObject (files)
2019-02-25 16:09:07 +01:00
Asger F
050626aca0
JS: remove audit alerts from package.json
2019-02-25 15:04:47 +00:00
Esben Sparre Andreasen
66367987af
JS: rename CapturedSource -> LocalObject
2019-02-25 16:04:37 +01:00
Esben Sparre Andreasen
65fb1423b7
JS: format test case (update expected output)
2019-02-25 15:55:44 +01:00
Esben Sparre Andreasen
1150f4c02b
JS: add documentation to test case
2019-02-25 15:52:23 +01:00
Esben Sparre Andreasen
0d94fe3f54
JS: analyze assignments in with correctly
2019-02-25 15:32:17 +01:00
Esben Sparre Andreasen
047b69a4c2
JS: address review comments
2019-02-25 15:19:00 +01:00
Esben Sparre Andreasen
46a1c75549
Merge pull request #973 from xiemaisi/js/remove-package-json
...
JavaScript: Delete an unused `package.json` in a test.
2019-02-25 14:05:22 +01:00
Ian Lynagh
f02a4ce63e
C++: Accept test changes following new *constexpr specifiers
2019-02-25 12:48:48 +00:00
Ian Lynagh
133e2d04be
C++: Add a changenote for Function.{isDeclaredConstexpr,isConstexpr}()
2019-02-25 12:48:48 +00:00
Ian Lynagh
4bd03d52f1
C++: Add constexpr support for functions
2019-02-25 12:48:48 +00:00
Ian Lynagh
5db38ef14b
C++: Add a test for constexpr functions
2019-02-25 12:48:48 +00:00
Asger F
7d14429dce
JS: handle deeper access paths in Closure::moduleImport
2019-02-25 12:31:18 +00:00
Asger F
2f6496f6bd
JS: add test with undeclared nested access
2019-02-25 12:27:36 +00:00
Jonas Jensen
a9f8a53dac
Merge pull request #972 from geoffw0/rtl
...
CPP: Add support for the Rtl* functions in BufferAccess.ql
2019-02-25 13:07:05 +01:00
semmle-qlci
c31ccbc114
Merge pull request #925 from asger-semmle/closure-reorg
...
Approved by xiemaisi
2019-02-25 12:02:00 +00:00
Geoffrey White
2ad0ac2c12
Merge pull request #974 from jbj/alloca-delete-precision
...
C++: Remove @precision of AllocaInLoop.ql
2019-02-25 11:48:56 +00:00
Esben Sparre Andreasen
b0358d7d11
JS: autoformat
2019-02-25 12:44:55 +01:00
Asger F
707886f259
JS: minor qldoc fixes
2019-02-25 11:31:09 +00:00
Asger F
b31d7d1f5f
JS: add test case
2019-02-25 11:31:09 +00:00
Asger F
eab034ccfd
JS: add ModuleImportNode::Range
2019-02-25 11:31:08 +00:00
Asger F
e9bc728919
JS: fixes in qldoc
2019-02-25 11:26:12 +00:00
Esben Sparre Andreasen
97edfc5524
JS: address review comments
2019-02-25 12:17:56 +01:00
Esben Sparre Andreasen
80a716f3b3
JS: fixup visibility of DataFlow::HtmlAttributeNode
2019-02-25 12:17:56 +01:00
Esben Sparre Andreasen
4ce7ec1661
JS: add XSS vector for Vue's v-html
2019-02-25 12:17:56 +01:00
Esben Sparre Andreasen
4c5e48fbbc
JS: introduce DataFlow::HtmlAttributeNode
2019-02-25 12:17:56 +01:00
Esben Sparre Andreasen
da1ffcfd1b
JS: introduce Vue Template Element
2019-02-25 12:17:33 +01:00
Esben Sparre Andreasen
9f4f945975
JS: introduce Vue::InstanceHeapStep
2019-02-25 12:17:33 +01:00
Jonas Jensen
2181bca389
C++: Remove @precision of AllocaInLoop.ql
...
A PR check was failing because this query was enabled on LGTM but had no
qhelp. I'm removing the `@precision` for now to take it off LGTM, and
then we can add it back when it has qhelp, tests, and change note.
2019-02-25 11:45:34 +01:00
Asger F
614ba92fac
JS: add ClassContainsTwo.expected
2019-02-25 09:51:40 +00:00
Asger F
86153be64b
JS: fix qldoc
2019-02-25 09:51:31 +00:00
semmle-qlci
014d4b9ed0
Merge pull request #934 from asger-semmle/module-import
...
Approved by xiemaisi
2019-02-25 09:46:52 +00:00
