Rasmus Wriedt Larsen
|
a15833d194
|
Python: DB upgrade script for default-indexing change
Follow this excellent guide:
https://github.com/github/codeql-c-extractor-team/blob/master/docs/db-upgrade.md
|
2020-05-06 09:56:53 +02:00 |
|
Tom Hvitved
|
0466e36985
|
C#: Teach Implements.qll about nested types
|
2020-05-06 09:25:40 +02:00 |
|
Tom Hvitved
|
f9ece0aefb
|
C#: Add implements test for nested types
|
2020-05-06 09:25:40 +02:00 |
|
Tom Hvitved
|
4c1a9b25c1
|
C#: Teach unification library about nested types
|
2020-05-06 09:25:40 +02:00 |
|
Tom Hvitved
|
851fc98b01
|
C#: Add type unification tests for nested types
|
2020-05-06 09:25:40 +02:00 |
|
Anders Schack-Mulligen
|
3b3ca6d41e
|
Merge pull request #3214 from aibaars/base64
Java: Add org.apache.commons.codec.(De|En)coder to TaintTrackingUtil
|
2020-05-06 09:21:18 +02:00 |
|
Jonas Jensen
|
63f04afa8d
|
Merge pull request #3312 from hvitved/dataflow/impl-no-postupdate
Data flow: Support stores into nodes that are not `PostUpdateNode`s
|
2020-05-06 09:09:31 +02:00 |
|
semmle-qlci
|
9210660ea0
|
Merge pull request #3401 from erik-krogh/jsonLike
Approved by esbena
|
2020-05-06 08:00:44 +01:00 |
|
Asger F
|
b2da4fe491
|
Update javascript/ql/src/semmle/javascript/internal/StmtContainers.qll
Co-authored-by: Erik Krogh Kristensen <erik-krogh@github.com>
|
2020-05-06 07:59:04 +01:00 |
|
Asger Feldthaus
|
926e79d272
|
JS: Autoformat
|
2020-05-06 07:59:04 +01:00 |
|
Asger Feldthaus
|
f51e846439
|
JS: Fix ClosureModule implementation
|
2020-05-06 07:59:04 +01:00 |
|
Asger Feldthaus
|
0f870a4992
|
JS: Use TCapturedVariableNode as starting point of callInputStep
|
2020-05-06 07:59:04 +01:00 |
|
Asger Feldthaus
|
4d6da19173
|
JS: Improve performance of getExceptionTarget
|
2020-05-06 07:59:04 +01:00 |
|
Asger Feldthaus
|
639f04386c
|
JS: Avoid bad join ordering in ClosureModule
|
2020-05-06 07:59:04 +01:00 |
|
Asger Feldthaus
|
e52e1b26c6
|
JS: Upgrade script
|
2020-05-06 07:59:04 +01:00 |
|
Asger Feldthaus
|
5f710bc881
|
JS: Move definition of getContainer() to a single rootdef
|
2020-05-06 07:59:04 +01:00 |
|
semmle-qlci
|
86c5b38d62
|
Merge pull request #3341 from hvitved/csharp/generics-nested-types
Approved by calumgrant
|
2020-05-06 07:16:37 +01:00 |
|
Raul Garcia (MSFT)
|
f051f46ee9
|
Merge branch 'master' of https://github.com/semmle/ql
|
2020-05-05 13:37:03 -07:00 |
|
Erik Krogh Kristensen
|
52392f2a6d
|
autoformat
|
2020-05-05 22:33:53 +02:00 |
|
Robert Marsh
|
78d2ac1ff4
|
Merge pull request #3368 from Cornelius-Riemenschneider/local-ala
C++: Add experimental Array Length Tracking library
|
2020-05-05 13:05:52 -07:00 |
|
Felicity Chapman
|
0e0d0499bb
|
Merge pull request #3413 from felicitymay/update-docs-reviews
Update requirements for docs review
|
2020-05-05 19:05:57 +01:00 |
|
Mathias Vorreiter Pedersen
|
114310700a
|
Merge pull request #3414 from geoffw0/issue3356
C++: Fix error in QLDoc.
|
2020-05-05 18:07:49 +02:00 |
|
Geoffrey White
|
3e2e69c06a
|
C++: Autoformat.
|
2020-05-05 16:55:15 +01:00 |
|
Jason Reed
|
c759e891d0
|
Python: Exclude additional tag from LGTM suites
|
2020-05-05 09:43:40 -04:00 |
|
jcreedcmu
|
6cf30ef87a
|
Update python/ql/src/analysis/DefinitionTracking.qll
Co-authored-by: Rasmus Wriedt Larsen <rasmuswriedtlarsen@gmail.com>
|
2020-05-05 09:40:54 -04:00 |
|
Anders Schack-Mulligen
|
11ffcc4378
|
Merge pull request #2912 from Mithrilwoodrat/master
Add check for disabled HTTPOnly setting in Tomcat
|
2020-05-05 14:39:32 +02:00 |
|
Geoffrey White
|
27490a35ae
|
C++: Fix error in QLDoc.
|
2020-05-05 13:37:14 +01:00 |
|
monkey-junkie
|
560674b670
|
Update javascript/ql/src/experimental/Security/CWE-94/ServerSideTemplateInjection.ql
Co-authored-by: Erik Krogh Kristensen <erik-krogh@github.com>
|
2020-05-05 15:36:11 +03:00 |
|
monkey-junkie
|
758e85dd3e
|
Update javascript/ql/src/experimental/Security/CWE-94/ServerSideTemplateInjection.ql
Co-authored-by: Erik Krogh Kristensen <erik-krogh@github.com>
|
2020-05-05 15:34:57 +03:00 |
|
Tom Hvitved
|
e8e27e0e00
|
C#: Address review comments
|
2020-05-05 14:28:13 +02:00 |
|
Tom Hvitved
|
3d37a49ccd
|
C#: Add change note
|
2020-05-05 14:28:13 +02:00 |
|
Tom Hvitved
|
19c3e6a58d
|
C#: Add DB upgrade script
|
2020-05-05 14:28:13 +02:00 |
|
Tom Hvitved
|
c324c388d0
|
C#: Refine UnboundGeneric and ConstructedGeneric
|
2020-05-05 14:28:13 +02:00 |
|
Tom Hvitved
|
8a01023dee
|
C#: Add more generics tests
|
2020-05-05 14:28:13 +02:00 |
|
Tom Hvitved
|
4f7743058a
|
C#: Restructure existing generics tests
|
2020-05-05 14:28:13 +02:00 |
|
Felicity Chapman
|
c0ebf12ab0
|
Update requirements for docs review
|
2020-05-05 13:25:19 +01:00 |
|
monkey-junkie
|
a8019705b5
|
Update javascript/ql/src/experimental/Security/CWE-94/ServerSideTemplateInjection.qhelp
Co-authored-by: Erik Krogh Kristensen <erik-krogh@github.com>
|
2020-05-05 15:24:24 +03:00 |
|
monkey-junkie
|
0aaa8af3bd
|
Update javascript/ql/src/experimental/Security/CWE-94/ServerSideTemplateInjection.qhelp
Co-authored-by: Erik Krogh Kristensen <erik-krogh@github.com>
|
2020-05-05 15:24:10 +03:00 |
|
Geoffrey White
|
2940f4794e
|
C++: Fix isfromtemplateinstantiation test.
|
2020-05-05 13:12:44 +01:00 |
|
Esben Sparre Andreasen
|
99e5db407f
|
JS: address review comments
|
2020-05-05 14:04:05 +02:00 |
|
Erik Krogh Kristensen
|
a4eee7e88e
|
more -> additional
Co-authored-by: Esben Sparre Andreasen <esbena@github.com>
|
2020-05-05 14:01:39 +02:00 |
|
Tom Hvitved
|
e95cc24b3f
|
Data flow: Support stores into nodes that are not PostUpdateNodes
|
2020-05-05 14:01:04 +02:00 |
|
Geoffrey White
|
0b381b9ba7
|
C++: Autoformat.
|
2020-05-05 12:58:54 +01:00 |
|
Erik Krogh Kristensen
|
bffb12725b
|
add test and change-note to prototype-polution
|
2020-05-05 13:49:11 +02:00 |
|
Erik Krogh Kristensen
|
38db731e0b
|
add change note and new test for js/incomplete-url-scheme-check
|
2020-05-05 13:38:27 +02:00 |
|
Erik Krogh Kristensen
|
f56915d99f
|
add change note for js/xss
|
2020-05-05 13:36:50 +02:00 |
|
Erik Krogh Kristensen
|
3568439769
|
change getAnElementRead to getASubstringRead
|
2020-05-05 13:33:21 +02:00 |
|
Erik Krogh Kristensen
|
8711a8744c
|
update expected output
|
2020-05-05 13:27:32 +02:00 |
|
Erik Krogh Kristensen
|
fe02137d0b
|
change naming of StringSplitCall methods
|
2020-05-05 13:27:14 +02:00 |
|
Anders Schack-Mulligen
|
b7458091a9
|
Merge pull request #3110 from hvitved/dataflow/no-more-summaries
Data flow: No more flow summaries
|
2020-05-05 13:27:07 +02:00 |
|