Commit Graph

17948 Commits

Author SHA1 Message Date
Dave Bartolomeo
80b832eb49 Fix test expectations 2020-10-06 18:27:33 -04:00
Erik Krogh Kristensen
1ed026fcce add a RemoteFlowSource for serverless handlers 2020-10-06 22:36:21 +02:00
Erik Krogh Kristensen
050ed97d9c add node-serialize as a js/code-injection sink 2020-10-06 22:35:38 +02:00
Tom Hvitved
6ddda1fa1d Merge pull request #4330 from tamasvajk/feature/upgrade-to-dotnet31
C#: Upgrade to .net core app 3.1
2020-10-06 20:59:00 +02:00
Rasmus Wriedt Larsen
6c4fd7c1ff Python: Model Python 2 only platform.popen command execution 2020-10-06 20:25:03 +02:00
Rasmus Wriedt Larsen
12e4e07cae Python: Model Python 2 only module popen2 2020-10-06 20:25:02 +02:00
Rasmus Wriedt Larsen
8c2f55fbd0 Python: Model Python 2 only os.popen2, popen3, popen4 functions 2020-10-06 20:25:01 +02:00
Rasmus Wriedt Larsen
6ec7ab2fd9 Python: Add test of Python 2 specific SystemCommandExecution 2020-10-06 20:25:00 +02:00
Taus Brock-Nannestad
b905a3d5e3 Python: Attribute access API 2020-10-06 16:36:29 +02:00
Max Schaefer
98ab38a630 JavaScript: Add yet another API-graph test with re-exports. 2020-10-06 15:32:21 +01:00
Tamas Vajk
4f56a97244 C#: Adjust expected files for .net 3.1 upgrade 2020-10-06 16:01:14 +02:00
Tamas Vajk
56604e005a C#: Upgrade to .net core app 3.1 2020-10-06 16:01:14 +02:00
Jonas Jensen
984194d308 Merge pull request #4406 from geoffw0/set
C++: Models for std::set and std::unordered_set
2020-10-06 15:43:12 +02:00
Jonas Jensen
1d9acbfca9 C++: Demonstrate overflowing guard bounds 2020-10-06 15:31:34 +02:00
Max Schaefer
1d8051eee0 JavaScript: Further improve handling of re-exports in API graphs. 2020-10-06 14:22:55 +01:00
Max Schaefer
d054206004 JavaScript: Improve handling of re-exports in API graphs. 2020-10-06 14:22:51 +01:00
Max Schaefer
96bf82e1ca JavaScript: Make new source-node classes in API graphs more general and more useful. 2020-10-06 14:21:36 +01:00
Max Schaefer
95b6b16b57 JavaScript: Add another API-graph test with re-exports. 2020-10-06 14:20:41 +01:00
CodeQL CI
4e116ba0db Merge pull request #4419 from erik-krogh/jsxFactory
Approved by asgerf
2020-10-06 06:13:21 -07:00
CodeQL CI
0753c8a31b Merge pull request #4247 from erik-krogh/CVE760-reexport
Approved by asgerf
2020-10-06 06:10:21 -07:00
CodeQL CI
ef703e72d8 Merge pull request #4401 from asgerf/js/angular-prerequisites
Approved by erik-krogh
2020-10-06 06:09:48 -07:00
Asger Feldthaus
396f353397 JS: Reapply fixed to javadoc 2020-10-06 14:06:10 +01:00
CodeQL CI
5bc7e19c44 Merge pull request #4414 from yoff/SharedDataflow_Conditionals
Approved by RasmusWL
2020-10-06 05:46:24 -07:00
Anders Schack-Mulligen
021435292b Merge pull request #4341 from joefarebrother/location-tostring
Java: Include column numbers in Location.toString
2020-10-06 14:42:35 +02:00
Rasmus Lerchedahl Petersen
f9c5b864bb Python: Fix test of parenthesized form 2020-10-06 13:12:12 +02:00
CodeQL CI
7e6fa7b4be Merge pull request #4392 from erik-krogh/flask
Approved by asgerf
2020-10-06 03:41:36 -07:00
Arthur Baars
3c41548aa6 Merge pull request #4336 from aibaars/android-database
Java: add Android database taint and SQL injection sinks
2020-10-06 12:31:17 +02:00
Erik Krogh Kristensen
f7f82ffe4e Merge branch 'main' into CVE760-reexport 2020-10-06 12:28:44 +02:00
CodeQL CI
bc1d3de8fe Merge pull request #4376 from erik-krogh/simpParam
Approved by asgerf
2020-10-06 03:24:43 -07:00
Erik Krogh Kristensen
99213b94f5 detect uses of jsxFactory and jsxFragmentFactory in js/unused-local-variable 2020-10-06 12:23:15 +02:00
Joe
8e82687ab6 Java: Include column numbers in Location.toString 2020-10-06 11:16:06 +01:00
CodeQL CI
75d55c87b3 Merge pull request #4412 from RasmusWL/python-typetracking-across-modules
Approved by yoff
2020-10-06 03:15:12 -07:00
Asger Feldthaus
5374b66029 JS: Make CachedOperation private 2020-10-06 11:13:04 +01:00
Asger F
433e3e7e4e JS: Expand doc string in installFromTarballurl
Co-authored-by: Erik Krogh Kristensen <erik-krogh@github.com>
2020-10-06 11:13:04 +01:00
Asger F
4e2b990d14 Add doc string to semVerToken
Co-authored-by: Erik Krogh Kristensen <erik-krogh@github.com>
2020-10-06 11:13:04 +01:00
Asger Feldthaus
0ddd825ea6 JS: Address some more review comments 2020-10-06 11:13:04 +01:00
Asger Feldthaus
b1bd612232 JS: Undo unused export 2020-10-06 11:13:04 +01:00
Asger Feldthaus
26b7d57a94 JS: Parse preferred version directly 2020-10-06 11:13:04 +01:00
Asger Feldthaus
85224aad34 JS: Address some review comments 2020-10-06 11:13:04 +01:00
Asger Feldthaus
57a588ceb6 JS: Share extraction results via symlinks 2020-10-06 11:13:03 +01:00
Asger Feldthaus
c84e43d95b JS: Replace yarn with manual dependency resolution 2020-10-06 11:13:03 +01:00
Asger Feldthaus
f5c3aa3d39 JS: Handle types/typings fields in package.json 2020-10-06 11:13:03 +01:00
Asger Feldthaus
0220ab6784 JS: Move some TypeScript classes into .ts.extractor 2020-10-06 11:13:03 +01:00
Tamás Vajk
8d09885ae6 Merge pull request #4378 from tamasvajk/feature/flow-summary-nullable
Flow summary nullable
2020-10-06 11:45:41 +02:00
Tom Hvitved
e15758ba7f C#: Add test for named tuple types 2020-10-06 11:42:11 +02:00
Tamas Vajk
36ddbcdd71 C#: Reenable disabled test on OSX 2020-10-06 11:41:48 +02:00
Rasmus Wriedt Larsen
d26a89b95e Python: Fix QLDoc for RouteSetup 2020-10-06 11:35:18 +02:00
Rasmus Wriedt Larsen
b82727d0b8 Python: Consider routed parameter if URL pattern unknown 2020-10-06 11:03:25 +02:00
Asger Feldthaus
a962a8a3bd JS: Autoformat 2020-10-06 10:01:36 +01:00
Asger Feldthaus
c31cdaacb2 JS: Add test for getFieldTypeAnnotation 2020-10-06 10:01:04 +01:00