Rasmus Wriedt Larsen
|
fba16d24de
|
Python: Bring back Path Injection query
Which was accidentially removed when resolving a merge conflict.
|
2020-12-08 11:26:04 +01:00 |
|
james
|
da16fad0f1
|
Merge branch 'rc/1.26' into 126-mergeback
|
2020-12-08 09:26:12 +00:00 |
|
James Fletcher
|
a165d2e559
|
Merge pull request #4790 from github/link-fixes
Fix links to CodeQL library pages
v1.26.0
|
2020-12-08 09:16:55 +00:00 |
|
Tom Hvitved
|
f8ad2ecc2c
|
Merge pull request #4777 from hvitved/csharp/default-to-string-join
C#: Improve join-order in `DefaultToString.qll`
|
2020-12-08 08:53:58 +01:00 |
|
Geoffrey White
|
ef131d3951
|
C++: Fix StandardDeallocationFunction.
|
2020-12-07 18:52:35 +00:00 |
|
Geoffrey White
|
281b56b2ae
|
C++: Add comments to the Allocation and Deallocation libraries indicating where the functions come from.
|
2020-12-07 18:52:03 +00:00 |
|
james
|
38085b27c3
|
evven more python link fixes
|
2020-12-07 18:14:09 +00:00 |
|
james
|
7f79b28a11
|
c++ link fixes
|
2020-12-07 18:09:10 +00:00 |
|
james
|
2c385f7121
|
java link fixes
|
2020-12-07 18:09:00 +00:00 |
|
james
|
915d640274
|
more python links
|
2020-12-07 18:05:21 +00:00 |
|
james
|
eabfeca514
|
fix python links
|
2020-12-07 18:04:51 +00:00 |
|
Rasmus Wriedt Larsen
|
e5e8ec6ecc
|
Python: Add a few test-cases for barrier guards and references
I'm not sure references is the best name, but it's the best I could come up with
jsut now
|
2020-12-07 15:27:20 +01:00 |
|
Rasmus Wriedt Larsen
|
5aa2c2f9d4
|
Python: Add command injection regex restricted FP
|
2020-12-07 15:26:56 +01:00 |
|
Rasmus Wriedt Larsen
|
32b547b3f2
|
Python: Add example of bad command injection sanitizer
|
2020-12-07 15:26:55 +01:00 |
|
Rasmus Wriedt Larsen
|
8444654117
|
Python: Adjust whitespace in command injection test
|
2020-12-07 15:26:54 +01:00 |
|
James Fletcher
|
ebdb3e25aa
|
Merge pull request #4768 from github/query-and-library-links
Update query and library links for new locations
|
2020-12-07 12:47:24 +00:00 |
|
CodeQL CI
|
8129d0c0ac
|
Merge pull request #4762 from asgerf/js/template-sinks-in-code-injection
Approved by erik-krogh, mchammer01
|
2020-12-07 04:35:11 -08:00 |
|
Cornelius Riemenschneider
|
354adf363e
|
Merge pull request #4787 from github/RasmusWL-patch-1
C++: Minor test README fixes
|
2020-12-07 12:42:55 +01:00 |
|
Asger Feldthaus
|
04f51bef5e
|
JS: Add missing qldoc
|
2020-12-07 10:52:38 +00:00 |
|
Rasmus Wriedt Larsen
|
9e7d5b3a9c
|
C++: Minor test README fixes
|
2020-12-07 11:52:18 +01:00 |
|
Asger Feldthaus
|
f96c425a72
|
JS: Deny -> block
|
2020-12-07 10:50:01 +00:00 |
|
Asger Feldthaus
|
254ac7f963
|
JS: Fix TypeofCheck
|
2020-12-07 10:46:00 +00:00 |
|
Tom Hvitved
|
6a55a22f18
|
Merge pull request #4781 from hvitved/csharp/persisten-cookie-tests
C#: Add tests for `PersistentCookie.ql`
|
2020-12-07 11:37:16 +01:00 |
|
Asger Feldthaus
|
0496642b0b
|
JS: Add test for captured flow into callback
|
2020-12-07 10:34:27 +00:00 |
|
Asger Feldthaus
|
355cfaaf42
|
JS: Autoformat
|
2020-12-07 10:16:39 +00:00 |
|
Asger Feldthaus
|
1b0bec9143
|
JS: Remove magic from barrier guard predicates
|
2020-12-07 10:16:39 +00:00 |
|
Asger Feldthaus
|
fe86465a0b
|
JS: Refactor store/load flow a bit
|
2020-12-07 10:16:38 +00:00 |
|
Asger Feldthaus
|
f132b4a279
|
JS: Add type confusion sink for prototype pollution checks
|
2020-12-07 10:16:38 +00:00 |
|
Asger Feldthaus
|
e10a22ec26
|
JS: Restrict size of some predicates
|
2020-12-07 10:16:38 +00:00 |
|
Asger Feldthaus
|
daab3c1437
|
JS: Add tests and fix some bugs
|
2020-12-07 10:16:38 +00:00 |
|
Asger Feldthaus
|
0a7513fdfb
|
JS: Move and rename test cases as well
|
2020-12-07 10:16:38 +00:00 |
|
Asger Feldthaus
|
479dcf56ad
|
JS: Update to use more inclusive language
|
2020-12-07 10:16:38 +00:00 |
|
Asger Feldthaus
|
544b3d9631
|
JS: Change note
|
2020-12-07 10:16:38 +00:00 |
|
Asger Feldthaus
|
e42ca881a3
|
JS: Update security suite after move to CWE-915
|
2020-12-07 10:16:38 +00:00 |
|
Asger Feldthaus
|
ca38a1c8b9
|
JS: Update CWE tags
|
2020-12-07 10:16:38 +00:00 |
|
Asger Feldthaus
|
25161ed338
|
JS: Move all prototype pollution queries to CWE-915
|
2020-12-07 10:16:38 +00:00 |
|
Asger Feldthaus
|
877b4b0752
|
JS: Move and rename other prototype pollution queries
|
2020-12-07 10:16:38 +00:00 |
|
Asger Feldthaus
|
972c4d61e5
|
JS: Add PrototypePollutingAssignment
|
2020-12-07 10:16:38 +00:00 |
|
Asger Feldthaus
|
ef52c46aed
|
JS: Add spread step in TaintedObject
|
2020-12-07 10:16:37 +00:00 |
|
Sauyon Lee
|
b5ec26d935
|
Merge pull request #4744 from github/sauyon/html-refactor
JavaScript: Factor out HTML extractor
|
2020-12-07 02:06:42 -08:00 |
|
Sauyon Lee
|
17e450f227
|
JavaScript: Factor out HTML extractor
|
2020-12-06 05:04:10 -08:00 |
|
Tom Hvitved
|
3531dde032
|
C#: Simplify FinallySplit::toString()
|
2020-12-05 20:16:11 +01:00 |
|
Tom Hvitved
|
2f1057383e
|
C#: Add missing CFG edges for nested finally blocks
|
2020-12-05 20:12:11 +01:00 |
|
Geoffrey White
|
998eaf90ee
|
C++: Run through updated autoformat.
|
2020-12-04 18:53:24 +00:00 |
|
James Fletcher
|
45a4d5beb9
|
Update docs/codeql/codeql-language-guides/abstract-syntax-tree-classes-for-working-with-go-programs.rst
|
2020-12-04 17:15:51 +00:00 |
|
james
|
d0a2582673
|
remove mention of odasa from javascript article
|
2020-12-04 17:15:51 +00:00 |
|
james
|
d19d23cc5e
|
typo on landing page
|
2020-12-04 17:15:51 +00:00 |
|
james
|
f3642fcec2
|
fix indentation in cpp table
|
2020-12-04 17:15:51 +00:00 |
|
James Fletcher
|
1486aef5e1
|
Update docs/codeql/_templates/layout.html
Co-authored-by: Felicity Chapman <felicitymay@github.com>
|
2020-12-04 17:15:50 +00:00 |
|
james
|
0316c673f8
|
add docs landing page to sphinx project
|
2020-12-04 17:09:21 +00:00 |
|