17948 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
Jonas Jensen	1018eaff09	Merge remote-tracking branch 'upstream/master' into dataflow-indirect-args ... Conflicts: cpp/ql/test/library-tests/dataflow/fields/ir-flow.expected	2020-05-13 12:05:58 +02:00
Esben Sparre Andreasen	7305a873b1	JS: formatting	2020-05-13 11:28:48 +02:00
Esben Sparre Andreasen	fedd32fc2b	JS: address review comment	2020-05-13 09:57:02 +02:00
Esben Sparre Andreasen	91f43a7dae	JS: address review comments	2020-05-13 09:52:01 +02:00
Jonas Jensen	038bea2f52	C++: Add type check to prevent field conflation	2020-05-13 09:25:24 +02:00
Jonas Jensen	250e12a323	C++: Demonstrate new field conflation	2020-05-13 09:24:36 +02:00
Esben Sparre Andreasen	7722d77c86	JS: add the NoSQL $where as a sink for js/code-injection	2020-05-13 08:30:22 +02:00
Esben Sparre Andreasen	20cf04442c	JS: model marsdb and minimongo	2020-05-13 08:28:59 +02:00
Anders Schack-Mulligen	f5e491caf0	Merge pull request #3448 from yo-h/java-qldoc-add ... Java: improve QLDoc completeness	2020-05-13 08:26:02 +02:00
Dave Bartolomeo	5d3f25211d	C++/C#: Remove UnmodeledUse instruction	2020-05-13 01:06:40 -04:00
Dave Bartolomeo	7f2c6dd9f9	C++/C#: Remove UnmodeledUseOperand	2020-05-13 01:05:27 -04:00
Bt2018	ffd442a17a	Fine tuning criteria ... 1. Change the regex pattern from variable contains "url" to variable starts with "url" 2. Add the logging trace method to sink	2020-05-12 23:24:55 -04:00
Bt2018	491b67e658	Change string concatenation in the source to TaintTracking::Configuration	2020-05-12 22:57:07 -04:00
Bt2018	106c181ab1	Formatting with auto-format	2020-05-12 15:53:29 -04:00
yo-h	a884538238	Update java/ql/src/semmle/code/java/frameworks/javaee/ejb/EJBRestrictions.qll ... Co-authored-by: Anders Schack-Mulligen <aschackmull@users.noreply.github.com>	2020-05-12 14:14:26 -04:00
yo-h	facd429d0a	Update java/ql/src/semmle/code/java/frameworks/javaee/ejb/EJBJarXML.qll ... Co-authored-by: Anders Schack-Mulligen <aschackmull@users.noreply.github.com>	2020-05-12 14:14:14 -04:00
Bt2018	d75841d6a7	Add sample usage and remove unused imports	2020-05-12 13:42:17 -04:00
jcreedcmu	3c233c762c	Merge pull request #3431 from jcreedcmu/jcreed/jump-to-def-langs ... Java, Javascript, Csharp: Add jump-to-definition queries	2020-05-12 10:54:11 -04:00
Tom Hvitved	d0c607c83f	Address review comments	2020-05-12 16:13:02 +02:00
semmle-qlci	6fb047aef6	Merge pull request #3451 from erik-krogh/fstreamWrite ... Approved by esbena	2020-05-12 14:58:02 +01:00
semmle-qlci	ee848328ab	Merge pull request #3442 from erik-krogh/SmallPerfs ... Approved by esbena	2020-05-12 14:36:34 +01:00
Rasmus Lerchedahl Petersen	6a35c6b4d4	Test: __bool__ does not raise TypeError by default	2020-05-12 15:28:12 +02:00
Rasmus Wriedt Larsen	8150c78ae0	Python: In flask, taint routed prameters for variable rules ... Fixes https://github.com/github/codeql-python-team/issues/79	2020-05-12 15:02:32 +02:00
Jason Reed	569083d6d1	Csharp: Make Use class public, since definitions query needs it	2020-05-12 08:52:02 -04:00
Erik Krogh Kristensen	83d34b939c	change note	2020-05-12 14:24:04 +02:00
Erik Krogh Kristensen	d46148c045	add test case	2020-05-12 14:23:28 +02:00
Rasmus Wriedt Larsen	7d5e35a7aa	Python: Expand flask tests to use "variable rules" ... which is what flask calls them. wildcard rules in bottle, django doesn't even give them a proper term :(	2020-05-12 14:23:24 +02:00
Erik Krogh Kristensen	3707792cfd	recognize reading/wrinting calls to fstream methods	2020-05-12 14:18:07 +02:00
James Fletcher	a6c03a4350	Merge pull request #3449 from jf205/sd-38 ... CodeQL docs: remove information about metric queries	2020-05-12 12:21:09 +01:00
James Fletcher	85ebe04a1c	Update docs/language/learn-ql/writing-queries/query-metadata.rst ... Co-authored-by: Shati Patel <42641846+shati-patel@users.noreply.github.com>	2020-05-12 12:11:22 +01:00
james	cf03e61e3a	docs remove info about metrics from codeql docs	2020-05-12 11:33:22 +01:00
Jonas Jensen	451ae7b762	Merge pull request #3444 from dbartol/codeql-c-analysis-team/68 ... Rename `sanity` -> `consistency`	2020-05-12 12:33:08 +02:00
Erik Krogh Kristensen	bd768cbd7e	autoformat	2020-05-12 12:28:02 +02:00
Erik Krogh Kristensen	2fbdeceae7	add getContainedNode constraint to charpred of IndirectInclusionTest, and refactor two getEnclosingExpr()	2020-05-12 10:19:06 +02:00
semmle-qlci	8ce9c9d57e	Merge pull request #3441 from erik-krogh/BabelDirectives ... Approved by esbena	2020-05-12 08:57:20 +01:00
Mathias Vorreiter Pedersen	73882c9f90	Merge pull request #3439 from jbj/passesByReference-qualifier ... C++: Call qualifiers are passed by reference	2020-05-12 08:31:57 +02:00
Mathias Vorreiter Pedersen	df6abdc074	Merge pull request #3389 from jbj/dataflow-defbyref-to-field ... C++: Post-update flow through &, *, +, ...	2020-05-12 08:30:33 +02:00
yo-h	1d55dffb98	Java: add missing QLDoc for J2ObjC.qll	2020-05-11 20:01:48 -04:00
yo-h	c55d01318c	Java: add missing QLDoc for JavaServerFaces.qll and JSFAnnotations.qll	2020-05-11 20:01:48 -04:00
yo-h	53ccbeed6d	Java: add missing QLDoc for JavadocCommon.qll	2020-05-11 20:01:47 -04:00
yo-h	e33ebdc803	Java: add missing QLDoc for NamingConventionsCommon.qll	2020-05-11 20:01:47 -04:00
yo-h	0e1ca44dfd	Java: add missing QLDoc for UnusedMavenDependencies.qll	2020-05-11 20:01:46 -04:00
yo-h	1c9c87241f	Java: add missing QLDoc for JdkInternals*.qll	2020-05-11 20:01:46 -04:00
yo-h	20a8438109	Java: add missing QLDoc for default.qll	2020-05-11 20:01:46 -04:00
yo-h	6c8a016ca6	Java: add missing QLDoc for JacksonSerializability.qll	2020-05-11 20:01:45 -04:00
yo-h	45b502a82f	Java: add missing QLDoc for GWT.qll, GwtUiBinder.qll, GwtXml.qll	2020-05-11 20:01:45 -04:00
yo-h	0d8d5773b7	Java: add missing QLDoc for Clover.qll	2020-05-11 20:01:44 -04:00
yo-h	6e64f3dd05	Java: add missing QLDoc for JavaxAnnotations.qll	2020-05-11 20:01:44 -04:00
yo-h	537c657b19	Java: add missing QLDoc for EJBRestrictions.qll	2020-05-11 20:01:44 -04:00
yo-h	4594b51dfc	Java: add missing QLDoc for EJB.qll	2020-05-11 20:01:43 -04:00