Alex Ford
|
7f82aba7d4
|
qlformat
|
2023-07-31 14:57:14 +01:00 |
|
Alex Ford
|
2240e4bffb
|
Ruby: fix changenote date format
|
2023-07-31 14:56:53 +01:00 |
|
Felicity Chapman
|
9a334d3300
|
Add shortened link to changelog
|
2023-07-31 14:13:52 +01:00 |
|
Anders Schack-Mulligen
|
e87b8ba3d7
|
Java: Make the barrier in java/potentially-weak-cryptographic-algorithm less restrictive.
|
2023-07-31 14:28:53 +02:00 |
|
Asger F
|
a148c7cc87
|
JS: Mention log-injection sink kind in docs
|
2023-07-31 14:04:16 +02:00 |
|
Geoffrey White
|
1c64fb16f1
|
Merge pull request #13756 from geoffw0/sources2
Swift: CustomUrlSchemes test enhancements and minor model improvement
|
2023-07-31 12:53:03 +01:00 |
|
Asger F
|
da3eb28767
|
Apply suggestions from code review
Co-authored-by: Jorge <46056498+jorgectf@users.noreply.github.com>
|
2023-07-31 13:51:59 +02:00 |
|
Felicity Chapman
|
a0c0da78e9
|
Merge branch 'main' into 11185-add-note
|
2023-07-31 11:54:00 +01:00 |
|
Geoffrey White
|
c4b782407b
|
Merge pull request #13853 from geoffw0/commandinject
Swift: Autoformat experimental query.
|
2023-07-31 11:30:20 +01:00 |
|
Felicity Chapman
|
4d05b742d6
|
Merge branch 'main' into 11185-add-note
|
2023-07-31 10:58:03 +01:00 |
|
Felicity Chapman
|
32da3c3730
|
Add main note and include in articles
|
2023-07-31 10:50:47 +01:00 |
|
Geoffrey White
|
f921076fca
|
Swift: Autoformat.
|
2023-07-31 10:25:25 +01:00 |
|
Tony Torralba
|
5488abc512
|
Merge pull request #13850 from atorralba/atorralba/java/unimportant-generated-models
Java: Remove superfluous generated models
|
2023-07-31 11:25:03 +02:00 |
|
Tony Torralba
|
2cbb7ed296
|
Java: Add XXE sinks for MDHT
|
2023-07-31 11:13:17 +02:00 |
|
Tony Torralba
|
41f1315da9
|
Merge pull request #13772 from atorralba/atorralba/java/inputstream-wrapper-read-step
Java: Add taint steps for InputStream wrappers
|
2023-07-31 11:12:43 +02:00 |
|
Geoffrey White
|
e534afe634
|
Merge pull request #13726 from maikypedia/maikypedia/swift-command-injection
Swift: Add Command Injection query (CWE-078)
|
2023-07-31 10:06:22 +01:00 |
|
Geoffrey White
|
12f2539d1d
|
Swift: Use flowTo.
|
2023-07-31 10:03:25 +01:00 |
|
Geoffrey White
|
20b0969a97
|
Swift: Restore original Type.toString() behaviour.
|
2023-07-31 09:51:55 +01:00 |
|
Mathias Vorreiter Pedersen
|
2562f8a297
|
Merge pull request #13844 from jketema/forgotten-paren
C++: Add forgotten parentheses in ternary IR test
|
2023-07-31 10:03:06 +02:00 |
|
Tony Torralba
|
3bd4d34a47
|
Java: Remove superfluous generated models
|
2023-07-31 09:48:03 +02:00 |
|
Porcupiney Hairs
|
74e5c15eaa
|
Go : Improvements to Timing Attacks query
|
2023-07-31 06:30:47 +05:30 |
|
Owen Mansel-Chan
|
b5518047fa
|
Go: Add language-specific baseline configuration
|
2023-07-30 21:52:33 +01:00 |
|
Mathias Vorreiter Pedersen
|
4656130dab
|
Merge pull request #13843 from MathiasVP/revert-13792
|
2023-07-30 01:18:00 +02:00 |
|
Jeroen Ketema
|
0bc75ea9b7
|
C++: Add forgotten parentheses in ternary IR test
Without the parentheses, the expressions are parsed as `a ? x : (y = val)`.
|
2023-07-29 18:44:28 +02:00 |
|
Owen Mansel-Chan
|
93e5b2260e
|
Merge pull request #13834 from owen-mc/go/fix-compiler-error-messages-for-1.20.6
Backport: Compiler error messages changed in Go 1.20.6
|
2023-07-29 13:45:19 +01:00 |
|
Mathias Vorreiter Pedersen
|
fd1949092c
|
C++: Accept test changes.
|
2023-07-29 11:29:06 +02:00 |
|
Mathias Vorreiter Pedersen
|
ce9a14b692
|
Revert "Merge pull request #13792 from MathiasVP/swap-argument-order-in-invalid-ptr-deref"
This reverts commit 1fa6511482, reversing
changes made to 4676ca5a4a.
|
2023-07-29 11:26:41 +02:00 |
|
Jeongsoo Lee
|
4529d8b75a
|
Add support for log injection in MaD
|
2023-07-28 22:37:56 +00:00 |
|
Sarita Iyer
|
f6b6a988ca
|
Update supported-frameworks.rst
|
2023-07-28 17:21:55 -04:00 |
|
Robert Marsh
|
22ae430e65
|
Swift: accept more test changes from hiding InOutExpr
|
2023-07-28 20:43:25 +00:00 |
|
Robert Marsh
|
bb4fe2002f
|
Merge branch 'main' into rdmarsh2/swift/array-content-flow
|
2023-07-28 20:41:23 +00:00 |
|
Alexandre Boulgakov
|
3e7a7fe54e
|
Swift: Mangle ArchetypeTypes with different constraints in different extensions.
|
2023-07-28 21:39:52 +01:00 |
|
Ian Lynagh
|
01a512b677
|
Kotlin: Pass on a parentId
|
2023-07-28 17:46:05 +01:00 |
|
Owen Mansel-Chan
|
0895853a23
|
Delete unused testing predicate
|
2023-07-28 17:09:53 +01:00 |
|
Ian Lynagh
|
e8f4aee1cf
|
Kotlin: Remove some redundant braces
|
2023-07-28 17:02:24 +01:00 |
|
Owen Mansel-Chan
|
00d5cb737c
|
Different approach to avoiding getTarget()
|
2023-07-28 17:00:36 +01:00 |
|
Owen Mansel-Chan
|
d2b8d836e9
|
Avoid using getTarget() as it may not exist
Try to also deal with the case that we are calling a function
through a variable that it has been assigned to.
|
2023-07-28 17:00:34 +01:00 |
|
Stephan Brandauer
|
40eab180cc
|
Merge pull request #13823 from github/kaeluka/support-argument-this-in-frameworkmode-metadata-extraction
Java: Support Argument[this] and parameters of bodiless interface methods in framework mode metadata extraction
|
2023-07-28 17:38:39 +02:00 |
|
Tony Torralba
|
08cba7dc5f
|
Merge pull request #13713 from pwntester/java/struts2_source_taint_inheriting
[Java] Implement field taint inheritance for Struts2 unmarshalled objects
|
2023-07-28 16:46:27 +02:00 |
|
Robert Marsh
|
6039af0087
|
Swift: autoformat
|
2023-07-28 14:34:57 +00:00 |
|
Robert Marsh
|
7ed520ab54
|
Swift: update test expectations after hiding InOutExpr
|
2023-07-28 14:29:24 +00:00 |
|
Owen Mansel-Chan
|
a020189895
|
Merge pull request #13822 from owen-mc/dataflow/mergepathgraph3-signature-fix
Dataflow: MergePathGraph3 signature fix
|
2023-07-28 15:15:43 +01:00 |
|
Chris Smowton
|
f08879a2df
|
Format; add change note
|
2023-07-28 14:16:30 +01:00 |
|
Chris Smowton
|
6fa2d2764d
|
Don't treat logrus' WithContext method as a logging function
This isn't output by the default formatters (though a custom formatter could potentially output things stored in it)
|
2023-07-28 14:11:03 +01:00 |
|
Shati Patel
|
a98ae8941c
|
Merge pull request #13832 from github/shati-patel/docs-indentation
Docs: Fix indentation in tutorial examples
|
2023-07-28 14:07:16 +01:00 |
|
Tony Torralba
|
2dff0ce5b4
|
Merge pull request #13712 from pwntester/java/new_struts2_models
[Java] New models for Struts2 framework
|
2023-07-28 14:31:25 +02:00 |
|
Stephan Brandauer
|
8bf960bd44
|
Java: fix QL-for-QL alert
|
2023-07-28 14:28:47 +02:00 |
|
Stephan Brandauer
|
021eedfdf1
|
Java: format
|
2023-07-28 14:26:34 +02:00 |
|
Owen Mansel-Chan
|
84dacbfbfd
|
Compiler error messages changed in Go 1.20.6
|
2023-07-28 13:13:01 +01:00 |
|
Stephan Brandauer
|
82fd0e45aa
|
Java: support Argument[this] in NotAModelApiParameter
|
2023-07-28 14:04:53 +02:00 |
|