Yunus AYDIN
5468767fa0
fix changelog pipeline error
2023-11-14 00:09:05 +03:00
Yunus AYDIN
a007d6edb0
Merge branch 'github:main' into main
2023-11-14 00:03:25 +03:00
Yunus AYDIN
1c0aa679a6
Add Changelog for the Pull Request
2023-11-14 00:02:56 +03:00
Sam Browning
458baeff32
Add content on queries panel and language selector
2023-11-13 15:59:51 -05:00
Yunus AYDIN
4317e58414
Add Web Cache Deception QHelp and Example Code Snippet for Vulnerable and Fixed Version
2023-11-13 23:54:29 +03:00
Yunus AYDIN
78a6522190
Rename Folder
2023-11-13 23:40:51 +03:00
Yunus AYDIN
95395322a8
Format Document
2023-11-13 23:39:58 +03:00
Yunus AYDIN
1eb1293230
Add Web Cache Deception Query and Example Code Snippet
2023-11-13 23:35:17 +03:00
Geoffrey White
c14d4042e0
Merge pull request #14748 from geoffw0/pathinjectionsinks
...
Swift: Add more path injection sinks
2023-11-13 20:15:16 +00:00
Geoffrey White
5a451e964d
Swift: Model mainDocumentURL.
2023-11-13 19:51:51 +00:00
Geoffrey White
b157d73c10
Swift: Make the URLRequest test more accurate.
2023-11-13 19:36:03 +00:00
Geoffrey White
985d1990eb
Swift: Fix typo.
2023-11-13 18:55:11 +00:00
Geoffrey White
463096e4be
Swift: Modernize tainted content in WebView.qll.
2023-11-13 18:30:40 +00:00
Geoffrey White
892beeab6d
Swift: Add test case.
2023-11-13 18:25:59 +00:00
Geoffrey White
9ec2f9204b
Swift: Correct components(separatedBy:) models.
2023-11-13 17:43:21 +00:00
Mathias Vorreiter Pedersen
c73e6f1fa8
C++: Accept more test changes.
2023-11-13 16:51:07 +00:00
Mathias Vorreiter Pedersen
9aafbfce13
C++: Fix test annotation.
2023-11-13 16:17:18 +00:00
Mathias Vorreiter Pedersen
cc6268339b
C++: Fix failing test and accept test cases.
2023-11-13 15:57:22 +00:00
Mathias Vorreiter Pedersen
834b07e6ad
C++: Add failing tests.
2023-11-13 15:54:41 +00:00
Mathias Vorreiter Pedersen
8be6aeda3e
Merge pull request #14769 from MathiasVP/fix-nonterminating-test
...
C++: Fix nonterminating test
2023-11-13 15:49:39 +00:00
Owen Mansel-Chan
359dcf37e9
Merge pull request #14649 from Kwstubbs/go-cors
...
Go: Add Cors Gin Support
2023-11-13 15:46:59 +00:00
Mathias Vorreiter Pedersen
eb263e747f
C++: Make sure the test terminates.
2023-11-13 15:25:48 +00:00
Mathias Vorreiter Pedersen
bc576f658e
C++: Add a test that fails because of a non-terminating test that dominates this one.
2023-11-13 15:24:56 +00:00
Taus
cfdeb0edf5
Python: Define getScope and getAChildNode for new nodes
2023-11-13 15:19:54 +00:00
Geoffrey White
6f56a656e4
Merge pull request #14761 from geoffw0/moderntest
...
Swift: Update the inline dataflow tests
2023-11-13 14:59:08 +00:00
Alex Denisov
031f453af8
Swift: CFG for Copy/Consume expressions
2023-11-13 15:55:37 +01:00
Alex Denisov
002f2a0985
Swift: extract BorrowExpr
2023-11-13 15:55:37 +01:00
Alex Denisov
d21e27c717
Swift: extract ConsumeExpr
2023-11-13 15:55:37 +01:00
Alex Denisov
30e4822fb7
Swift: extract CopyExpr
2023-11-13 15:55:37 +01:00
Owen Mansel-Chan
d931ade182
Merge pull request #13366 from maikypedia/maikypedia/go-ldap-improper-auth
...
Go: Add Improper LDAP Authentication query (CWE-287)
2023-11-13 14:48:19 +00:00
Sam Browning
ed9a0ea155
Merge branch 'main' of https://github.com/github/codeql
2023-11-13 08:40:42 -05:00
Geoffrey White
c3577b34d3
Swift: Clean up logic.
2023-11-13 12:37:35 +00:00
Geoffrey White
e4da8da5d9
Swift: Update the example code.
2023-11-13 12:33:20 +00:00
Tamas Vajk
b455b2c1a6
C#: Change IsARM to Apple silicon check
2023-11-13 13:20:13 +01:00
Anders Schack-Mulligen
dc4dda1dbc
Merge pull request #14757 from aschackmull/rangeanalysis/simplify
...
Rangeanalysis: Misc simplifications
2023-11-13 13:16:04 +01:00
Geoffrey White
098ea50068
Swift: Repair non-inline dataflow test.
2023-11-13 12:09:08 +00:00
Geoffrey White
6e291711ac
Swift: Update just enough tests to prove that that source labels are working.
2023-11-13 11:47:24 +00:00
Geoffrey White
fca6ccd2f1
Swift: Remove more unused code.
2023-11-13 11:47:22 +00:00
AlexDenisov
291bb2210c
Merge pull request #14759 from github/alexdenisov/experimental-tuple
...
Swift: mark BuiltinTuple as experimental
2023-11-13 12:24:06 +01:00
Geoffrey White
4bf717c3e4
Swift: Use InlineFlowTest.qll in the data flow inline tests, so that we have less code duplication and can use flow labels.
2023-11-13 11:06:05 +00:00
Geoffrey White
d15c46836b
Swift: Add features tom InlineFlowTest.qll: extended source/sink names, custom flow tags, use of line-numbers as a fallback value.
2023-11-13 10:55:17 +00:00
Alex Denisov
c0fce80b7d
Swift: mark BuiltinTuple as experimental
2023-11-13 11:34:51 +01:00
Cornelius Riemenschneider
1b7e3814b0
Merge pull request #14719 from github/criemen/java-int-tests
...
Java integration tests: More preparations to be executed on GH M1 machines
2023-11-13 11:16:51 +01:00
Rasmus Wriedt Larsen
e1c47f5584
Python: Reorganize taint tests of re
...
Mostly to highlight that with flow-summary modeling, we don't expect
taint for a lot of these.
I aslo opted to make `finditer()` tainted for consistency.
2023-11-13 10:56:29 +01:00
Rasmus Wriedt Larsen
ffc27b5301
Python: Solve problems with missing TTupleElementContent
...
Ruby uses 10 as their number. I considered doing the same, but didn't
really care _too_ much about it 🤷
14cfb82a8c/ruby/ql/lib/codeql/ruby/dataflow/internal/DataFlowPrivate.qll (L636)
2023-11-13 10:48:51 +01:00
Rasmus Wriedt Larsen
c3fa3f26a7
Python: Fix problems with missing TAttributeContent
2023-11-13 10:46:40 +01:00
Rasmus Wriedt Larsen
943b2a2ed1
Python: Highlight problem with flow summaries and TAttributeContent
2023-11-13 10:42:13 +01:00
Anders Schack-Mulligen
bf6cfd3bef
Rangeanalysis: Simplify api.
2023-11-13 10:35:44 +01:00
Anders Schack-Mulligen
30aefabb2a
Rangeanalysis: Rename predicate.
2023-11-13 10:35:44 +01:00
Anders Schack-Mulligen
f05b75e04f
Rangeanalysis: RIP standard order.
2023-11-13 10:35:44 +01:00
