Luke Cartey
7928a02424
Add missing full stop.
...
Co-authored-by: Marcono1234 <Marcono1234@users.noreply.github.com >
2020-08-04 09:40:51 +01:00
Luke Cartey
e0c081a2af
Add missing </p> tag
...
Co-authored-by: Felicity Chapman <felicitymay@github.com >
2020-08-04 09:40:28 +01:00
Anders Schack-Mulligen
cdea0f05b0
Merge pull request #3946 from aibaars/util-collections-2
...
Java: Clean up ContainerFlow: address outstanding comments
2020-08-04 10:27:22 +02:00
Erik Krogh Kristensen
eccfade928
rewrite parts of the DeadStoreOfProperty query
2020-08-04 10:25:05 +02:00
Erik Krogh Kristensen
e629e6bbb0
changes based on review
2020-08-04 10:25:05 +02:00
Erik Krogh Kristensen
8131618382
revert making rankedAccessPath private
2020-08-04 10:25:05 +02:00
Erik Krogh Kristensen
97aa3cc8a3
rewrite DeadStoreOfProperty to improve worst-case complexity
2020-08-04 10:25:05 +02:00
Erik Krogh Kristensen
dbeef312ca
add some TypeScript tests to DeadStoreOfProperty
2020-08-04 10:25:05 +02:00
Raul Garcia (MSFT)
c52064af78
Fixing problems based on CR feedback.
...
https://github.com/github/codeql/pull/3951#pullrequestreview-458987208
2020-08-03 16:39:41 -07:00
Tom Hvitved
71933a4d8a
Merge pull request #4009 from hvitved/csharp/extractor-pack-files
...
C#: Add CodeQL extractor pack files
2020-08-03 19:33:26 +02:00
CodeQL CI
8855ab8c8c
Merge pull request #3835 from Raz0r/js/xss-protocol-sinks
...
Approved by erik-krogh
2020-08-03 15:40:05 +01:00
CodeQL CI
a4f8b19ae4
Merge pull request #3876 from erik-krogh/CWE078-Correctness
...
Approved by esbena
2020-08-03 15:38:51 +01:00
Tom Hvitved
d1db7b350f
C#: Add CodeQL extractor pack files
2020-08-03 14:36:06 +02:00
CodeQL CI
c8e5db189a
Merge pull request #3913 from erik-krogh/topmost
...
Approved by asgerf
2020-08-03 13:18:22 +01:00
Erik Krogh Kristensen
f5cc14f980
fix typo
2020-08-03 13:49:21 +02:00
CodeQL CI
0bbdc70cdb
Merge pull request #3864 from erik-krogh/exprString
...
Approved by asgerf, esbena
2020-08-03 09:25:17 +01:00
Tamás Vajk
dd1a8e9b28
Merge pull request #3991 from tamasvajk/feature/vscode
...
Add VS Code tasks to build and test the C# bits
2020-08-03 09:52:46 +02:00
Rasmus Lerchedahl Petersen
9d09b4c811
Python: Comprehension stores
2020-08-03 08:53:22 +02:00
Rasmus Lerchedahl Petersen
f21777c6ce
Python: Simplyfy sequence stores
2020-08-03 08:16:43 +02:00
Rasmus Lerchedahl Petersen
4a8d532a71
Python: update test expectations and annotations
2020-08-03 07:25:06 +02:00
Rasmus Lerchedahl Petersen
6debc48e79
Merge branch 'master' of github.com:github/codeql into SharedDataflow_SequenceFlow
2020-08-03 07:05:34 +02:00
luchua-bc
ff0dacf1d7
Optimize the TaintTracking
2020-08-03 00:52:47 +00:00
luchua-bc
b65a033302
Shorten the regex private domain match
2020-08-01 03:42:13 +00:00
luchua-bc
ff58abb7d3
Revamp the sink code
2020-08-01 03:25:02 +00:00
Calum Grant
595ab442e6
Merge pull request #3996 from yoff/SharedDataflow_Syntax
...
Python: Test all expressions that incur dataflow
2020-07-31 17:45:00 +01:00
Rasmus Lerchedahl Petersen
3e13056140
Python: Address most review comments
2020-07-31 17:20:58 +02:00
Tamás Vajk
c8dc2ee611
Merge pull request #3993 from tamasvajk/remove-noise
...
Turn off C# auto-compile on topmost folder
2020-07-31 16:59:36 +02:00
Tamas Vajk
17e256b2c7
C#: Add VS Code tasks to build and test the C# bits
2020-07-31 16:56:51 +02:00
Rasmus Lerchedahl Petersen
b21da86ac1
Python: Field flow for sequence elements
...
only from displays so far
2020-07-31 15:45:20 +02:00
Rasmus Lerchedahl Petersen
e8ce62e211
Python: Fix missing flow annotation
2020-07-31 15:28:27 +02:00
Rasmus Lerchedahl Petersen
e13cf2e126
Python: fix formatting
2020-07-31 14:25:09 +02:00
Tom Hvitved
54ce73b40e
Merge pull request #3995 from hvitved/csharp/fix-alerts
...
C#: Fix a few alerts
2020-07-31 14:07:35 +02:00
Rasmus Lerchedahl Petersen
29493f5bd7
Python: Make the coverage test a path query
2020-07-31 12:38:57 +02:00
CodeQL CI
18fa6b613d
Merge pull request #3998 from ceh-forks/ceh-fix-typos
...
Approved by shati-patel
2020-07-31 11:08:58 +01:00
Mathias Vorreiter Pedersen
4990d00498
C++: Add taint tests demonstrating lack of taint through range based for loops
2020-07-31 09:57:35 +02:00
Mathias Vorreiter Pedersen
b88ef56cb4
C++: Add basic iterator definition that matches STL
2020-07-31 09:45:32 +02:00
Emil Hessman
246ae575be
Fix typos
2020-07-31 06:59:55 +02:00
Raul Garcia (MSFT)
a5dab4e768
removing a redundant line
2020-07-30 17:05:42 -07:00
luchua-bc
81de1b14d9
Revamp the source of path query
2020-07-30 19:16:48 +00:00
Raul Garcia (MSFT)
64f4613a3f
Removing the options file as requested
2020-07-30 10:25:15 -07:00
Raul Garcia (MSFT)
9e74c183fe
Fixing expected results after adding comments to the unit test .cs file
2020-07-30 10:24:24 -07:00
Arthur Baars
7e72ef350e
Merge pull request #3975 from aibaars/lgtm-suites
...
CodeQL: complete LGTM suites
2020-07-30 18:39:01 +02:00
Rasmus Lerchedahl Petersen
133e18edd9
Python: Annotate missing flow
2020-07-30 18:13:39 +02:00
Rasmus Lerchedahl Petersen
1467d6b419
Python: Test all expressions that incur dataflow
2020-07-30 17:51:17 +02:00
semmle-qlci
5b1d25591e
Merge pull request #3979 from max-schaefer/js/more-comand-injection-models
...
Approved by asgerf
2020-07-30 15:10:46 +01:00
Tom Hvitved
e08e7cdf34
C#: Fix a few alerts
2020-07-30 16:03:36 +02:00
Tom Hvitved
07f1e133f3
C#: More type-based adjustment of library-flow access paths
...
This change removes the restriction that only access paths of length 1 can
have the head adjusted, based on type information from the call to the relevant
library-code callable.
2020-07-30 15:48:41 +02:00
Shati Patel
437baf160e
Merge pull request #3973 from shati-patel/sd-189
...
Add basic LGTM tutorials to CodeQL sphinx project
2020-07-30 14:37:48 +01:00
Tamas Vajk
0ea5f347f7
Turn off C# auto-compile on topmost folder
...
If the C# extension is installed, then it reports 25k+ errors on the C# extractor until it is properly built. This is pure noise because the solution would be opened and built from the correct subdirectory. This commit disables the C# compilation altogether.
2020-07-30 15:26:16 +02:00
Tom Hvitved
632713c475
Merge pull request #3986 from hvitved/csharp/null-maybe-null-coalescing-assignment
...
C#: Fix false-positives in `cs/dereferenced-value-may-be-null`
2020-07-30 14:20:00 +02:00
