Tom Hvitved
05307b8757
C#: Remove more FPs in cs/dereferenced-value-may-be-null
2020-07-30 12:16:59 +02:00
Tom Hvitved
4f4d9d35be
C#: Add more nullness tests
2020-07-30 12:15:49 +02:00
Shati Patel
4da74dea28
Update C# example
2020-07-30 10:57:17 +01:00
Shati Patel
0a4b828432
Update docs/language/learn-ql/java/basic-query-java.rst
...
Co-authored-by: Marcono1234 <Marcono1234@users.noreply.github.com >
2020-07-30 11:55:28 +02:00
Shati Patel
9aaf20e6f2
Update docs/language/learn-ql/java/basic-query-java.rst
...
Co-authored-by: Marcono1234 <Marcono1234@users.noreply.github.com >
2020-07-30 11:55:14 +02:00
Raul Garcia (MSFT)
6f845b0044
Using CodeQL AutoFormat
2020-07-29 18:01:46 -07:00
Raul Garcia (MSFT)
7923c480af
Fixing queries based on suggestions/comments.
...
TODO: Auto-formatting is still pending (need guidance on how to enable it on my environment). Thanks
2020-07-29 17:14:37 -07:00
Raul Garcia
83e9d052d9
Update csharp/ql/src/experimental/Security Features/Serialization/DataSetSerialization.qll
...
Co-authored-by: Jaroslav Lobačevski <novaisas@gmail.com >
2020-07-29 16:24:13 -07:00
Robert Marsh
ddbec50c07
Merge pull request #3990 from MathiasVP/mathiasvp/fix-qldoc-SemanticStackVariable
...
C++: Fix QLDoc for `SemanticStackVariable`
2020-07-29 12:27:29 -07:00
Tom Hvitved
bec415c5c1
Merge pull request #3988 from hvitved/csharp/collection-flow-change-note
...
C#: Add change note
2020-07-29 19:58:54 +02:00
Arthur Baars
5bad003c0c
Add qlpack.yml files for example queries
2020-07-29 16:57:04 +02:00
Mathias Vorreiter Pedersen
978bf3aefc
C++: Make QLDoc comment represent a valid C++ template
2020-07-29 15:59:19 +02:00
Rasmus Lerchedahl Petersen
d32e2772a0
Python: some doc, a generator, and a corotuine
2020-07-29 15:52:56 +02:00
Tom Hvitved
f91043e08e
C#: Add change note
2020-07-29 10:27:40 +02:00
Tom Hvitved
4345b167ec
Merge pull request #3935 from github/henrymercer/fix-broken-doc-link
...
C#: Fix broken link to ECMA-335
2020-07-29 10:04:08 +02:00
Marcono1234
5942bc6a43
Improve InsecureJavaMail.qhelp references
2020-07-29 01:45:27 +02:00
Rasmus Lerchedahl Petersen
488a7f4d01
Python: update test expectations
2020-07-28 21:46:45 +02:00
Arthur Baars
c4041e55ba
CodeQL: complete LGTM suites
2020-07-28 20:40:44 +02:00
Rasmus Lerchedahl Petersen
eab64f125b
Python: Dataflow, start on test for classes
2020-07-28 20:32:12 +02:00
luchua-bc
5520504658
Update expected results
2020-07-28 15:41:23 +00:00
luchua-bc
a91cc9b7ec
Convert the query to path-problem
2020-07-28 15:36:12 +00:00
Tom Hvitved
d39a33655f
C#: Fix false-positives in cs/dereferenced-value-may-be-null
...
Dereferencing an expression of a nullable type should only be reported when
the expression is not clearly non-null.
2020-07-28 16:27:36 +02:00
Shati Patel
a79f09f1de
Add basic query for Go
2020-07-28 15:25:59 +02:00
Shati Patel
8e8c43a25b
Add basic query for JavaScript
2020-07-28 13:54:06 +02:00
luchua-bc
7f911f00ee
Rename to insecure basic auth
2020-07-28 11:40:21 +00:00
Shati Patel
9edf1646c9
Add basic queries for C#, Java, and Python
2020-07-28 12:18:45 +02:00
Shati Patel
0f3599039f
Update docs/language/learn-ql/cpp/basic-query-cpp.rst
...
Co-authored-by: James Fletcher <42464962+jf205@users.noreply.github.com >
2020-07-28 11:49:17 +02:00
Tom Hvitved
ce2368de96
C#: Add tests for null-coalescing assignment
2020-07-28 11:07:47 +02:00
luchua-bc
248628b11e
Enhance basic auth string search with a recursive method
2020-07-27 20:31:07 +00:00
luchua-bc
3a23451395
Enhance the query
2020-07-27 18:50:47 +00:00
Rasmus Lerchedahl Petersen
38acea633f
Python: Dataflow, expand callable to classes
2020-07-27 17:58:21 +02:00
Tom Hvitved
c5a4a6be05
Merge pull request #3871 from hvitved/csharp/autobuilder/dotnet-delegate
...
C#: Introduce delegate type in autobuilder
2020-07-27 16:51:24 +02:00
Taus
f40242dc3f
Merge pull request #3396 from porcupineyhairs/python-ssti
...
Python : Add query to detect Server Side Template Injection
2020-07-27 14:43:39 +02:00
Max Schaefer
91762ec274
JavaScript: Add partial model for opener.
...
3.5M weekly downloads.
Note that we do not treat the first argument as a command-injection sink. While it is possible to inject commands that way, it is more likely to cause false positives where the user input is concatenated with some prefix that makes the opening heuristic decide to treat it as a URL.
2020-07-27 11:42:32 +01:00
Max Schaefer
9aa26fa4bc
JavaScript: Add model for foreground-child.
...
>1M weekly downloads, so seems worth doing.
2020-07-27 11:37:06 +01:00
Max Schaefer
2f842042ea
JavaScript: Model another execa function relevant for command injection.
2020-07-27 11:34:04 +01:00
Tom Hvitved
f5c1de8a17
Merge pull request #3960 from calumgrant/cs/tag-inefficient-containskey
...
C#: Fix tags typo
2020-07-27 11:44:58 +02:00
Calum Grant
09f45ac9fe
Merge pull request #3877 from calumgrant/cs/autobuilder-alerts
...
C#: Make fields readonly
2020-07-27 10:43:04 +01:00
Shati Patel
db09ca7b68
Update queries + outdated note
2020-07-27 11:42:10 +02:00
Owen Mansel-Chan
6dbed5e848
Address review comments
2020-07-27 10:19:48 +01:00
Owen Mansel-Chan
4094fa9db3
Docs: Query classification and display
...
Converted from Semmle wiki
2020-07-27 10:06:16 +01:00
ubuntu
8dee3da4fe
Update .qhelp
2020-07-26 23:50:22 +02:00
ubuntu
ac7c511d86
Update .qhelp
2020-07-26 23:47:53 +02:00
ubuntu
2cec8f7e9d
Update .qhelp
2020-07-26 23:23:56 +02:00
ubuntu
c469f71957
Add Codeql query to detect if cookies are sent without the flag being set
2020-07-26 22:56:36 +02:00
luchua-bc
01fb51829c
Unsecure basic authentication
2020-07-24 20:35:09 +00:00
Rasmus Wriedt Larsen
e0016f6c52
Python: CG trace: Mention adding projects in README
2020-07-24 20:08:39 +02:00
Rasmus Wriedt Larsen
aca703e131
Python: CG trace: Add support for flask
2020-07-24 20:06:53 +02:00
Rasmus Wriedt Larsen
bb80635dc3
Python: CG trace: Updated README
2020-07-24 19:35:06 +02:00
Rasmus Wriedt Larsen
ecafc760e8
Python: CG trace: Improved debugging queries a bit
2020-07-24 19:34:51 +02:00
