Rasmus Lerchedahl Petersen
f9c5b864bb
Python: Fix test of parenthesized form
2020-10-06 13:12:12 +02:00
CodeQL CI
7e6fa7b4be
Merge pull request #4392 from erik-krogh/flask
...
Approved by asgerf
2020-10-06 03:41:36 -07:00
Arthur Baars
3c41548aa6
Merge pull request #4336 from aibaars/android-database
...
Java: add Android database taint and SQL injection sinks
2020-10-06 12:31:17 +02:00
Erik Krogh Kristensen
f7f82ffe4e
Merge branch 'main' into CVE760-reexport
2020-10-06 12:28:44 +02:00
CodeQL CI
bc1d3de8fe
Merge pull request #4376 from erik-krogh/simpParam
...
Approved by asgerf
2020-10-06 03:24:43 -07:00
Erik Krogh Kristensen
99213b94f5
detect uses of jsxFactory and jsxFragmentFactory in js/unused-local-variable
2020-10-06 12:23:15 +02:00
Joe
8e82687ab6
Java: Include column numbers in Location.toString
2020-10-06 11:16:06 +01:00
CodeQL CI
75d55c87b3
Merge pull request #4412 from RasmusWL/python-typetracking-across-modules
...
Approved by yoff
2020-10-06 03:15:12 -07:00
Asger Feldthaus
5374b66029
JS: Make CachedOperation private
2020-10-06 11:13:04 +01:00
Asger F
433e3e7e4e
JS: Expand doc string in installFromTarballurl
...
Co-authored-by: Erik Krogh Kristensen <erik-krogh@github.com >
2020-10-06 11:13:04 +01:00
Asger F
4e2b990d14
Add doc string to semVerToken
...
Co-authored-by: Erik Krogh Kristensen <erik-krogh@github.com >
2020-10-06 11:13:04 +01:00
Asger Feldthaus
0ddd825ea6
JS: Address some more review comments
2020-10-06 11:13:04 +01:00
Asger Feldthaus
b1bd612232
JS: Undo unused export
2020-10-06 11:13:04 +01:00
Asger Feldthaus
26b7d57a94
JS: Parse preferred version directly
2020-10-06 11:13:04 +01:00
Asger Feldthaus
85224aad34
JS: Address some review comments
2020-10-06 11:13:04 +01:00
Asger Feldthaus
57a588ceb6
JS: Share extraction results via symlinks
2020-10-06 11:13:03 +01:00
Asger Feldthaus
c84e43d95b
JS: Replace yarn with manual dependency resolution
2020-10-06 11:13:03 +01:00
Asger Feldthaus
f5c3aa3d39
JS: Handle types/typings fields in package.json
2020-10-06 11:13:03 +01:00
Asger Feldthaus
0220ab6784
JS: Move some TypeScript classes into .ts.extractor
2020-10-06 11:13:03 +01:00
Tamás Vajk
8d09885ae6
Merge pull request #4378 from tamasvajk/feature/flow-summary-nullable
...
Flow summary nullable
2020-10-06 11:45:41 +02:00
Tom Hvitved
e15758ba7f
C#: Add test for named tuple types
2020-10-06 11:42:11 +02:00
Tamas Vajk
36ddbcdd71
C#: Reenable disabled test on OSX
2020-10-06 11:41:48 +02:00
Rasmus Wriedt Larsen
d26a89b95e
Python: Fix QLDoc for RouteSetup
2020-10-06 11:35:18 +02:00
Rasmus Wriedt Larsen
b82727d0b8
Python: Consider routed parameter if URL pattern unknown
2020-10-06 11:03:25 +02:00
Asger Feldthaus
a962a8a3bd
JS: Autoformat
2020-10-06 10:01:36 +01:00
Asger Feldthaus
c31cdaacb2
JS: Add test for getFieldTypeAnnotation
2020-10-06 10:01:04 +01:00
Rasmus Wriedt Larsen
16bad003a0
Python: Add test for routed params with unknown url pattern
2020-10-06 10:58:46 +02:00
Rasmus Lerchedahl Petersen
0f077f5d7d
Python: Add flow inside IfExprNodes
2020-10-06 10:54:23 +02:00
Rasmus Lerchedahl Petersen
8f13d586b7
Python: More tests of conditonals
...
Also use better formatter
(better because comments are close to what they comment)
2020-10-06 10:49:15 +02:00
Arthur Baars
89710928c8
Merge branch 'main' into android-database
2020-10-06 10:48:22 +02:00
CodeQL CI
eece3ad352
Merge pull request #4411 from github/asgerf/exclude-js-tests
...
Approved by esbena
2020-10-06 01:48:21 -07:00
Tom Hvitved
6bd355784a
Merge pull request #4353 from hvitved/csharp/dataflow/task-precise
...
C#: Precise data-flow for `System.Threading.Tasks`
2020-10-06 10:45:19 +02:00
Max Schaefer
0109805ab0
JavaScript: Use new API in NoSQL models.
2020-10-06 09:45:03 +01:00
Max Schaefer
8277d5c08f
JavaScript: Introduce convenience predicate for working with typed API-graph nodes.
2020-10-06 09:25:35 +01:00
Max Schaefer
9206549a38
JavaScript: Make integration of TypeScript canonical names with modules in API graphs more consistent.
...
Previously, canonical names were direct successors of module definitions/uses, now they are successors of exports/imports.
2020-10-06 09:25:35 +01:00
Asger F
dd5fb6ce12
Exclude JS tests from code scanning
2020-10-06 08:46:43 +01:00
Tamas Vajk
576085af50
Add extra information to nullable conversion test file
2020-10-06 09:03:49 +02:00
Tamas Vajk
faf663a334
C#: Flow summary for Nullable<T>
2020-10-06 09:03:49 +02:00
Tamás Vajk
77abff7c90
Merge pull request #4405 from tamasvajk/feature/lazy-flow
...
C#: Improve data flow summary for System.Lazy<>
2020-10-06 09:01:48 +02:00
Rasmus Wriedt Larsen
fbe115c046
Python: Show TypeTracking doesn't work for module members
2020-10-06 03:12:39 +02:00
Rasmus Wriedt Larsen
f03a8a838b
Python: Make any routed parameter a RemoteFlowSource
...
I'm not 100% sure whether this approach makes everything too magic, but I like
the fact that you can't _forget_ to make routed params remove-flow sources.
2020-10-06 03:03:14 +02:00
Rasmus Wriedt Larsen
b78c665f34
Python: Model RouteSetup for flask
2020-10-06 03:03:13 +02:00
Rasmus Wriedt Larsen
d27e6955b4
Python: Add test setup for HTTP::Server::RouteSetup
2020-10-06 03:03:06 +02:00
Rasmus Wriedt Larsen
ebc3d32ff1
Python: Add concept for HTTP server modeling
...
If we want to separate out into a file, we can always do this with
```
import experimental.semmle.python.HTTP as HTTP
```
2020-10-06 03:02:32 +02:00
Rasmus Wriedt Larsen
9f1aa8ca0c
Python: Expose getParameter on ParameterNode
2020-10-06 03:02:31 +02:00
Rasmus Wriedt Larsen
d7526c40ba
Python: Copy old flask tests to new dataflow setup
2020-10-06 03:02:30 +02:00
Dave Bartolomeo
badb11750a
AST and IR support for TemporaryObjectExpr
2020-10-05 17:53:35 -04:00
Erik Krogh Kristensen
d6dc4bb655
allow flask url_for urls in TargetBlank.ql
2020-10-05 21:40:24 +02:00
Erik Krogh Kristensen
7d8bb339b6
add support for destructuring object exports in getAnExportedValue
2020-10-05 21:38:31 +02:00
CodeQL CI
339c0721c5
Merge pull request #4344 from esbena/js/fixup-cwe-20-to-cwe-020
...
Approved by erik-krogh
2020-10-05 12:30:53 -07:00
