Commit Graph

17948 Commits

Author SHA1 Message Date
Erik Krogh Kristensen
cc2e61531e update expected output 2020-06-25 23:00:52 +02:00
Erik Krogh Kristensen
f7c42ca1b5 autoformat 2020-06-25 23:00:52 +02:00
Erik Krogh Kristensen
252f805db4 performance improvement 2020-06-25 23:00:52 +02:00
Erik Krogh Kristensen
21e5a522b0 give the same rank to all expressions inside a single stmt 2020-06-25 23:00:52 +02:00
Erik Krogh Kristensen
e467d3ccbf use dominating write check in js/path-injection 2020-06-25 23:00:52 +02:00
Erik Krogh Kristensen
6bc821b1ab add tests for dominating writes 2020-06-25 23:00:52 +02:00
Erik Krogh Kristensen
2b2d691e45 don't treated a property from a tainted object as tainted when there exists a dominating write 2020-06-25 23:00:52 +02:00
Erik Krogh Kristensen
5e4acfbe19 implement predicate for finding dominating writes to an access-path 2020-06-25 23:00:52 +02:00
Jonas Jensen
d4c5887122 Merge pull request #3807 from geoffw0/qldoc3
C++: Even more QLDoc
2020-06-25 19:29:35 +02:00
Geoffrey White
168f9404f0 Merge branch 'master' into models5 2020-06-25 17:42:08 +01:00
semmle-qlci
056e1a8c4b Merge pull request #3599 from asger-semmle/js/nameditem
Approved by esbena
2020-06-25 17:34:14 +01:00
Geoffrey White
488d41f797 C++: QLDoc Cast.qll. 2020-06-25 17:30:45 +01:00
Geoffrey White
6639d6de83 C++: QLDoc exprs\ObjectiveC.qll (deprecated). 2020-06-25 17:30:45 +01:00
Geoffrey White
1df843c8f6 C++: QLDoc multiple files in the exprs directory. 2020-06-25 17:30:44 +01:00
Geoffrey White
b7730fb1ad C++: QLDoc PrintfLike.qll. 2020-06-25 17:30:44 +01:00
Robert Marsh
9a1f909129 C++: Fix QLDoc for PrintAST.qll nodes/edges 2020-06-25 09:07:20 -07:00
Robert Marsh
b3072b9544 Apply suggestions from code review
Co-authored-by: Dave Bartolomeo <dbartol@github.com>
2020-06-25 08:54:17 -07:00
Calum Grant
b759856ccb Merge pull request #3792 from calumgrant/cs/qldoc-coverage1
C#: Improve qldoc coverage
2020-06-25 16:34:52 +01:00
Erik Krogh Kristensen
690bde47aa remove a .getALocalSource() that isn't needed 2020-06-25 16:51:10 +02:00
Asger Feldthaus
e28284bd01 JS: Fix javadoc 2020-06-25 15:39:00 +01:00
Asger Feldthaus
ad48c4e54d JS: Always prepare package.json files 2020-06-25 15:38:20 +01:00
Asger Feldthaus
675c64d9d4 JS: Prefer extracting file with tsconfig that included it 2020-06-25 15:38:19 +01:00
Asger Feldthaus
4c4acd50bd JS: Factor out loading of tsconfig files 2020-06-25 15:38:19 +01:00
Asger Feldthaus
cc3e62f535 JS: Move stack trace limit to top of file 2020-06-25 15:38:19 +01:00
Asger Feldthaus
cf78475799 JS: Only extract included files with a given tsconfig 2020-06-25 15:38:19 +01:00
Asger Feldthaus
6ff81377d5 JS: Also sort files in legacy extractor 2020-06-25 15:38:18 +01:00
Asger Feldthaus
6d15397fdc JS: Ensure we never write outside the scratch dir 2020-06-25 15:38:18 +01:00
Asger Feldthaus
ba5d6bb2e9 JS: Actually set fields 2020-06-25 15:38:18 +01:00
Asger Feldthaus
dceb211021 JS: Pass source root to Node.js process 2020-06-25 15:38:18 +01:00
Asger Feldthaus
aaf141782f JS: Fix source root 2020-06-25 15:38:17 +01:00
Asger Feldthaus
cb0a2498b0 JS: Sort files 2020-06-25 15:38:17 +01:00
Calum Grant
c4d43bafa4 Merge pull request #3797 from hvitved/csharp/dataflow/more-collection-tests
C#: More data-flow collection tests
2020-06-25 15:38:04 +01:00
Rasmus Lerchedahl Petersen
c5c1c4c0af Python: started adding some coverage tests 2020-06-25 16:29:41 +02:00
semmle-qlci
cf0cd00458 Merge pull request #3627 from asger-semmle/js/unneeded-defensive-return
Approved by erik-krogh
2020-06-25 15:28:57 +01:00
Geoffrey White
d526a10981 C++: QLDoc TestFile.qll, StringAnalysis.qll. 2020-06-25 15:20:18 +01:00
semmle-qlci
c39dce4d66 Merge pull request #3781 from asger-semmle/js/deprecate-type-member-lookup
Approved by erik-krogh
2020-06-25 14:56:17 +01:00
Erik Krogh Kristensen
c3b52fadcc add missing qldoc 2020-06-25 15:54:36 +02:00
Geoffrey White
7aa44fd357 C++: QLDoc Parameter.qll, Specifier.qll, commons/File.qll. 2020-06-25 14:42:44 +01:00
Geoffrey White
a722bd4bd0 C++: QLDoc UserType.qll. 2020-06-25 14:39:11 +01:00
Geoffrey White
c8fc8af340 C++: QLDoc Struct.qll, TypedefType.qll, Union.qll, Variable.qll. 2020-06-25 14:39:10 +01:00
Geoffrey White
908c3b4005 C++: QLDoc SecurityOptions.qll. 2020-06-25 14:39:10 +01:00
Dave Bartolomeo
b889d3687e C++: Fix QLDoc review feedback 2020-06-25 09:33:43 -04:00
Erik Krogh Kristensen
09d969a8ad recognize sensitive files by file-system writes 2020-06-25 15:19:42 +02:00
Erik Krogh Kristensen
8f5a3e9f4f add support for getASavePath() to js/insecure-download 2020-06-25 15:18:31 +02:00
Erik Krogh Kristensen
dafca8fd81 introduce flow-labels to js/insecure-download 2020-06-25 15:17:57 +02:00
Erik Krogh Kristensen
9bdedb3f48 introduce getASavePath to ClientRequest 2020-06-25 15:17:19 +02:00
Dave Bartolomeo
3b4cd700c2 Remove accidentally added file 2020-06-25 09:08:30 -04:00
Anders Schack-Mulligen
6c679c328d Dataflow: Refactor dispatch with call context. 2020-06-25 14:28:35 +02:00
Taus Brock-Nannestad
4dbc8e515a Python: Address a few more review comments. 2020-06-25 14:19:18 +02:00
Taus
1608758219 Python: Apply suggestions from documentation review.
Co-authored-by: Felicity Chapman <felicitymay@github.com>
Co-authored-by: Rasmus Wriedt Larsen <rasmuswriedtlarsen@gmail.com>
2020-06-25 14:16:44 +02:00