Jeroen Ketema
|
d9b0a5918c
|
Merge pull request #16018 from jketema/tls-precision
C++: Add precision to `cpp/boost/tls-settings-misconfiguration` and `cpp/boost/use-of-deprecated-hardcoded-security-protocol`
|
2024-03-22 16:17:34 +01:00 |
|
Jeroen Ketema
|
453cdfa513
|
C++: Add change note
|
2024-03-22 15:52:52 +01:00 |
|
Joe Farebrother
|
a6ee19ca2d
|
Fix query id
|
2024-03-22 14:36:47 +00:00 |
|
Ian Lynagh
|
63e34c4dec
|
Kotlin 2: Accept more location changes
|
2024-03-22 14:09:20 +00:00 |
|
Joe Farebrother
|
01f712476b
|
Add change note and update severity
|
2024-03-22 14:07:11 +00:00 |
|
Joe Farebrother
|
b74145349b
|
Add test cases
|
2024-03-22 14:07:11 +00:00 |
|
Joe Farebrother
|
507a6102a2
|
Reorganise into Custimizations file + add some more sinks on ActiveRecord methods
|
2024-03-22 14:07:04 +00:00 |
|
Joe Farebrother
|
a8aac318d0
|
Add qhelp
|
2024-03-22 14:04:52 +00:00 |
|
Joe Farebrother
|
89838981b7
|
Add test cases
|
2024-03-22 14:04:52 +00:00 |
|
Joe Farebrother
|
0f45a53adc
|
Add mass assignment query
|
2024-03-22 14:04:52 +00:00 |
|
Edward Minnix III
|
1785086ccb
|
Merge pull request #15784 from egregius313/egregius313/csharp/dataflow/sources/file
C#: Add source models for `file` threat model/source kind for .NET standard library
|
2024-03-22 09:50:30 -04:00 |
|
Michael Nebel
|
a07ee8e961
|
C#: Update the AsList model to a value flow model.
|
2024-03-22 14:40:25 +01:00 |
|
Tamas Vajk
|
178a45af25
|
C#: Add high level diagnostic messages for buildless extraction (start, success)
|
2024-03-22 14:27:36 +01:00 |
|
Max Schaefer
|
bc9396e0e6
|
Address suggestions from review.
|
2024-03-22 13:19:36 +00:00 |
|
Michael B. Gale
|
f48e295f4a
|
Merge pull request #16019 from p-/p--weak-enc-ecb-qhelp
C#: add hint regarding ECB to weak encryption QHelp
|
2024-03-22 13:09:08 +00:00 |
|
Michael Nebel
|
ca72b0583d
|
C#: Update source and sink expected test output.
|
2024-03-22 13:59:47 +01:00 |
|
Erik Krogh Kristensen
|
7d968184fd
|
improve the change-note
Co-authored-by: Asger F <asgerf@github.com>
|
2024-03-22 13:58:34 +01:00 |
|
Ed Minnix
|
4b13ad1310
|
Fix flow summary tests
|
2024-03-22 13:46:20 +01:00 |
|
Ed Minnix
|
9ed8ca27a1
|
Fix test and model
|
2024-03-22 13:46:19 +01:00 |
|
Ed Minnix
|
1f04229def
|
Fix typo
|
2024-03-22 13:46:19 +01:00 |
|
Ed Minnix
|
73b4e8fe6a
|
Add WithElement identifier to AsList method
|
2024-03-22 13:46:19 +01:00 |
|
Ed Minnix
|
9b23bfa038
|
Execute methods which return objects
The `Execute` method returns `int` for "number of rows affected". But
some of the other `Execute*` methods return objects.
|
2024-03-22 13:46:19 +01:00 |
|
Ed Minnix
|
5885938eaf
|
Use wildcard signatures for Query methods
|
2024-03-22 13:46:19 +01:00 |
|
Ed Minnix
|
8223781978
|
Fix FlowSummaries tests
|
2024-03-22 13:46:19 +01:00 |
|
Ed Minnix
|
5ca6b40c34
|
Change note
|
2024-03-22 13:46:18 +01:00 |
|
Ed Minnix
|
23aeb1d878
|
Add tests
|
2024-03-22 13:46:18 +01:00 |
|
Ed Minnix
|
98285b5171
|
Add AsList summary
|
2024-03-22 13:46:18 +01:00 |
|
Ed Minnix
|
87ad170067
|
Dapper source models
|
2024-03-22 13:46:18 +01:00 |
|
Ian Lynagh
|
01475fd8ba
|
Merge pull request #16011 from igfoo/igfoo/legacy_vars
Java/Kotlin: Remove references to legacy ODASA_SNAPSHOT env var
|
2024-03-22 12:38:37 +00:00 |
|
Max Schaefer
|
4e4cd52f63
|
Go: Update query help for go/path-injection to include example fixes.
|
2024-03-22 11:45:59 +00:00 |
|
Peter Stöckli
|
d62d68a40b
|
C#: add hint regarding ECB to weak encryption QHelp
|
2024-03-22 12:08:30 +01:00 |
|
Rasmus Wriedt Larsen
|
69f6e1e263
|
Merge pull request #16010 from RasmusWL/perf
Python: Two small join-order fixes
|
2024-03-22 11:36:17 +01:00 |
|
Jeroen Ketema
|
adfb3c3d50
|
C++: Simplify cpp/boost/tls-settings-misconfiguration
|
2024-03-22 11:22:11 +01:00 |
|
yoff
|
c520cb6d58
|
Merge branch 'main' into python/test-MaD-keyword-argument
|
2024-03-22 10:56:08 +01:00 |
|
Rasmus Lerchedahl Petersen
|
eef60c9ad2
|
python: add test for "ReturnValue.TupleElement[0,1]"
also synchronise files
|
2024-03-22 10:54:12 +01:00 |
|
Jeroen Ketema
|
fb4ed39d89
|
Merge pull request #16017 from jketema/destructors21
C++: Add destructor test cases for AV Rule 114
|
2024-03-22 10:50:27 +01:00 |
|
Jeroen Ketema
|
a770bddff0
|
C++: Add precision to cpp/boost/tls-settings-misconfiguration and cpp/boost/use-of-deprecated-hardcoded-security-protocol
Also clean up the names of the queries while here.
|
2024-03-22 10:48:18 +01:00 |
|
Jeroen Ketema
|
3f0ce98ccb
|
C++: Add destructor test cases for AV Rule 114
|
2024-03-22 10:25:47 +01:00 |
|
Tom Hvitved
|
9d124197e8
|
C#: Remove support for legacy LGTM options in autobuilder
|
2024-03-22 10:09:24 +01:00 |
|
Tamas Vajk
|
205d6a3bc5
|
Extract total number of diagnostic per ID and compilation
|
2024-03-22 08:55:41 +01:00 |
|
Tamas Vajk
|
fa7f437e71
|
Code quality improvement
|
2024-03-22 08:16:11 +01:00 |
|
Jeroen Ketema
|
eca6c00003
|
Merge pull request #16014 from jketema/destructors20
C++: Handle destructors of range-based for-loop, if, and switch initializer statements
|
2024-03-21 21:04:23 +01:00 |
|
Ed Minnix
|
c7a746e3dc
|
Flow summary tests
|
2024-03-21 13:15:45 -04:00 |
|
Ed Minnix
|
3e3eceea5f
|
Typo
|
2024-03-21 13:06:34 -04:00 |
|
Ed Minnix
|
e2c2d574f8
|
Add FileInfo::OpenText
|
2024-03-21 13:06:33 -04:00 |
|
Ed Minnix
|
46a9bb9804
|
Change note
|
2024-03-21 13:06:31 -04:00 |
|
Ed Minnix
|
08611f0c9c
|
Fix flow summary tests
|
2024-03-21 13:06:30 -04:00 |
|
Ed Minnix
|
e14e47cd73
|
Fix Stream::Read(Span<byte>) model
|
2024-03-21 13:06:28 -04:00 |
|
Ed Minnix
|
d6f085373e
|
System.IO.Stream::ReadExactly models
|
2024-03-21 13:06:27 -04:00 |
|
Ed Minnix
|
2a73677fd2
|
Missing Stream::ReadAsync overload
|
2024-03-21 13:06:26 -04:00 |
|