Philip Ginsbach
748d01f888
Merge pull request #1 from shati-patel/typeunions-edits
...
Editorial suggestions for "type unions"
2020-05-27 12:01:28 +01:00
Shati Patel
6c9c803d94
update wording
2020-05-27 12:00:17 +01:00
Shati Patel
5cf2e3ed8c
Editorial suggestions for "type unions"
2020-05-27 11:33:39 +01:00
semmle-qlci
fd05314b2c
Merge pull request #3531 from asger-semmle/js/node-version-check-notimeout
...
Approved by esbena
2020-05-27 11:13:22 +01:00
Erik Krogh Kristensen
3ae4e90902
change note
2020-05-27 09:45:49 +00:00
Philip Ginsbach
460b64cfd9
noted that type unions are enabled from 2.2.0
2020-05-27 10:13:00 +01:00
Anders Schack-Mulligen
a858a8cd42
Java: Fix for private interface methods.
2020-05-27 11:05:41 +02:00
Anders Schack-Mulligen
796eac108f
Java: Autoformat
2020-05-27 09:19:59 +02:00
Mathias Vorreiter Pedersen
db557a45e7
Merge pull request #3570 from geoffw0/mysprintftest
...
C++: Fix mysprintf in taint test
2020-05-27 09:19:54 +02:00
Mathias Vorreiter Pedersen
97edd97778
C++: Add getLocation to TNode IPA type in testcase
2020-05-27 08:28:18 +02:00
Robert Marsh
b45473ec4c
C++: more specific type in IndirectParameterAlloc
2020-05-26 14:07:26 -07:00
Robert Marsh
70f62538af
C++: autoformat
2020-05-26 14:06:22 -07:00
Robert Marsh
fb46002332
C++: Fix ThisParameterNode after IR changes
2020-05-26 13:35:08 -07:00
Erik Krogh Kristensen
dbc25ca3fb
cache Expr::getStringValue
2020-05-26 22:17:00 +02:00
Philip Ginsbach
c8ed08f14c
introduce type unions in the handbook
2020-05-26 19:46:58 +01:00
Robert Marsh
7ad45d50c0
C++: add test case from issue
2020-05-26 11:38:14 -07:00
yo-h
f952293ba0
Merge pull request #3526 from aschackmull/java/qltest-fps-nullness-rangeanalyis
...
Java: Add a few qltest cases for nullness and range analysis FPs.
2020-05-26 14:09:27 -04:00
Geoffrey White
95537ed26f
C++: Fix mysprintf in test.
2020-05-26 18:06:14 +01:00
Geoffrey White
d96bf797ef
C++: Test layout.
2020-05-26 18:06:06 +01:00
Erik Krogh Kristensen
319363f56c
update expected output
2020-05-26 18:47:37 +02:00
Robert Marsh
43520b8f9b
C++/C#: Fix copy/pasted qldoc
2020-05-26 09:47:30 -07:00
Geoffrey White
1baf14461d
C++: Add a definition of taint to the models library.
2020-05-26 17:44:17 +01:00
Robert Marsh
2429e22709
Merge pull request #3548 from dbartol/github/codeql-c-analysis-team/69
...
C++: Fix duplicate result types
2020-05-26 09:44:12 -07:00
Geoffrey White
965d4829b5
C++: Consistency.
2020-05-26 17:43:40 +01:00
Erik Krogh Kristensen
63a14d1b96
use HtmlConcatenationLeaf
2020-05-26 18:33:29 +02:00
Shati Patel
9afbd5b5eb
Merge pull request #3565 from shati-patel/53-style-guides
...
Docs: Update markdown files with 1.24 title changes
2020-05-26 15:58:04 +01:00
Rasmus Wriedt Larsen
6cba2fe4f8
Python: Model Django response sinks that are not vuln to XSS
...
Since HttpResponse is not *only* used for XSS, it is still valuable to know the
content is send as part of the response.
The *proper* solution to this problem of not all HttpResponses being vulnerable
to XSS is probably to define a new abstract class in Http.qll called
HttpResponseXSSVulnerableSink (or similar). I would like to model a few more
libraries/frameworks before fully comitting to an approach though.
2020-05-26 16:45:46 +02:00
Geoffrey White
dea7be0884
Merge pull request #3557 from jbj/qldoc-external
...
C++: QLDoc for legacy libraries in `external` dir
2020-05-26 15:01:03 +01:00
Erik Krogh Kristensen
9b047f6f03
use the DOTALL flag
2020-05-26 14:53:33 +02:00
Erik Krogh Kristensen
fd561d1ce2
remove temporary comment
...
Co-authored-by: Asger F <asgerf@github.com >
2020-05-26 14:37:02 +02:00
Erik Krogh Kristensen
0c00331527
less -> fewer
...
Co-authored-by: Asger F <asgerf@github.com >
2020-05-26 14:30:29 +02:00
Mathias Vorreiter Pedersen
08fa3141cd
C++: Fix accidential removal of private annotations
2020-05-26 14:15:46 +02:00
Erik Krogh Kristensen
124c4cb15e
Merge branch 'master' of github.com:github/codeql into OptionalSanitizer
2020-05-26 13:59:57 +02:00
Erik Krogh Kristensen
e5afdc53be
use HtmlSanitizerCall to recognize sanitizers
2020-05-26 13:34:49 +02:00
Erik Krogh Kristensen
3e3372be4b
recognize DOMPurify.sanitize as a HTML sanitizer
2020-05-26 13:34:33 +02:00
Jonas Jensen
5deeda0337
Merge pull request #3387 from geoffw0/tostringperf
...
C++: Eliminate recursion from toString().
2020-05-26 13:24:43 +02:00
Calum Grant
f0499451d3
Merge pull request #3513 from hvitved/csharp/deprecate-override
...
C#: Remove two deprecated predicates
2020-05-26 12:22:41 +01:00
Mathias Vorreiter Pedersen
251240376b
C++: Fix asPartialDefinition for IR dataflow nodes and accept testcases
2020-05-26 13:14:38 +02:00
Mathias Vorreiter Pedersen
c5c3ffaef0
C++: Add asPartialDefinition testcases
2020-05-26 13:14:11 +02:00
semmle-qlci
be5b343a0c
Merge pull request #3564 from max-schaefer/js/reflective-argument-access
...
Approved by asgerf
2020-05-26 12:09:13 +01:00
Asger Feldthaus
75fee22f1e
JS: Avoid string coercion in JSXName.getValue
2020-05-26 12:03:02 +01:00
Erik Krogh Kristensen
ad40c4b0f2
add a sanitizer guard for safe attribute string concatenations
2020-05-26 12:36:47 +02:00
Erik Krogh Kristensen
a9bea63019
recognize more HTML attribute concatenations
2020-05-26 12:36:24 +02:00
Shati Patel
bdecda22f7
Merge pull request #3538 from shati-patel/sd-86
...
QL language: Clarify use of query modules
2020-05-26 11:30:17 +01:00
Shati Patel
c12fd6fba6
Add links to Go queries
2020-05-26 11:08:11 +01:00
Shati Patel
495c6715cd
Update contributing guide with premigration changes
2020-05-26 11:08:11 +01:00
Shati Patel
bdfb8a337e
Update style guides with premigration changes
2020-05-26 11:08:11 +01:00
semmle-qlci
4b0354c4bc
Merge pull request #3555 from max-schaefer/js/require-flow
...
Approved by asgerf
2020-05-26 10:54:21 +01:00
Max Schaefer
5b0a3b9673
JavaScript: Change "Less results" to "Fewer results" in change notes.
2020-05-26 10:49:30 +01:00
Max Schaefer
abfcc42133
JavaScript: Re-alphabetise change notes.
2020-05-26 10:49:30 +01:00
