Mathias Vorreiter Pedersen
|
114310700a
|
Merge pull request #3414 from geoffw0/issue3356
C++: Fix error in QLDoc.
|
2020-05-05 18:07:49 +02:00 |
|
Geoffrey White
|
3e2e69c06a
|
C++: Autoformat.
|
2020-05-05 16:55:15 +01:00 |
|
Jason Reed
|
c759e891d0
|
Python: Exclude additional tag from LGTM suites
|
2020-05-05 09:43:40 -04:00 |
|
jcreedcmu
|
6cf30ef87a
|
Update python/ql/src/analysis/DefinitionTracking.qll
Co-authored-by: Rasmus Wriedt Larsen <rasmuswriedtlarsen@gmail.com>
|
2020-05-05 09:40:54 -04:00 |
|
Anders Schack-Mulligen
|
11ffcc4378
|
Merge pull request #2912 from Mithrilwoodrat/master
Add check for disabled HTTPOnly setting in Tomcat
|
2020-05-05 14:39:32 +02:00 |
|
Geoffrey White
|
27490a35ae
|
C++: Fix error in QLDoc.
|
2020-05-05 13:37:14 +01:00 |
|
monkey-junkie
|
560674b670
|
Update javascript/ql/src/experimental/Security/CWE-94/ServerSideTemplateInjection.ql
Co-authored-by: Erik Krogh Kristensen <erik-krogh@github.com>
|
2020-05-05 15:36:11 +03:00 |
|
monkey-junkie
|
758e85dd3e
|
Update javascript/ql/src/experimental/Security/CWE-94/ServerSideTemplateInjection.ql
Co-authored-by: Erik Krogh Kristensen <erik-krogh@github.com>
|
2020-05-05 15:34:57 +03:00 |
|
Tom Hvitved
|
e8e27e0e00
|
C#: Address review comments
|
2020-05-05 14:28:13 +02:00 |
|
Tom Hvitved
|
3d37a49ccd
|
C#: Add change note
|
2020-05-05 14:28:13 +02:00 |
|
Tom Hvitved
|
19c3e6a58d
|
C#: Add DB upgrade script
|
2020-05-05 14:28:13 +02:00 |
|
Tom Hvitved
|
c324c388d0
|
C#: Refine UnboundGeneric and ConstructedGeneric
|
2020-05-05 14:28:13 +02:00 |
|
Tom Hvitved
|
8a01023dee
|
C#: Add more generics tests
|
2020-05-05 14:28:13 +02:00 |
|
Tom Hvitved
|
4f7743058a
|
C#: Restructure existing generics tests
|
2020-05-05 14:28:13 +02:00 |
|
Felicity Chapman
|
c0ebf12ab0
|
Update requirements for docs review
|
2020-05-05 13:25:19 +01:00 |
|
monkey-junkie
|
a8019705b5
|
Update javascript/ql/src/experimental/Security/CWE-94/ServerSideTemplateInjection.qhelp
Co-authored-by: Erik Krogh Kristensen <erik-krogh@github.com>
|
2020-05-05 15:24:24 +03:00 |
|
monkey-junkie
|
0aaa8af3bd
|
Update javascript/ql/src/experimental/Security/CWE-94/ServerSideTemplateInjection.qhelp
Co-authored-by: Erik Krogh Kristensen <erik-krogh@github.com>
|
2020-05-05 15:24:10 +03:00 |
|
Geoffrey White
|
2940f4794e
|
C++: Fix isfromtemplateinstantiation test.
|
2020-05-05 13:12:44 +01:00 |
|
Esben Sparre Andreasen
|
99e5db407f
|
JS: address review comments
|
2020-05-05 14:04:05 +02:00 |
|
Erik Krogh Kristensen
|
a4eee7e88e
|
more -> additional
Co-authored-by: Esben Sparre Andreasen <esbena@github.com>
|
2020-05-05 14:01:39 +02:00 |
|
Tom Hvitved
|
e95cc24b3f
|
Data flow: Support stores into nodes that are not PostUpdateNodes
|
2020-05-05 14:01:04 +02:00 |
|
Geoffrey White
|
0b381b9ba7
|
C++: Autoformat.
|
2020-05-05 12:58:54 +01:00 |
|
Erik Krogh Kristensen
|
bffb12725b
|
add test and change-note to prototype-polution
|
2020-05-05 13:49:11 +02:00 |
|
Erik Krogh Kristensen
|
38db731e0b
|
add change note and new test for js/incomplete-url-scheme-check
|
2020-05-05 13:38:27 +02:00 |
|
Erik Krogh Kristensen
|
f56915d99f
|
add change note for js/xss
|
2020-05-05 13:36:50 +02:00 |
|
Erik Krogh Kristensen
|
3568439769
|
change getAnElementRead to getASubstringRead
|
2020-05-05 13:33:21 +02:00 |
|
Erik Krogh Kristensen
|
8711a8744c
|
update expected output
|
2020-05-05 13:27:32 +02:00 |
|
Erik Krogh Kristensen
|
fe02137d0b
|
change naming of StringSplitCall methods
|
2020-05-05 13:27:14 +02:00 |
|
Anders Schack-Mulligen
|
b7458091a9
|
Merge pull request #3110 from hvitved/dataflow/no-more-summaries
Data flow: No more flow summaries
|
2020-05-05 13:27:07 +02:00 |
|
Erik Krogh Kristensen
|
4a26c293c1
|
fix number of arguments for String.prototype.split
|
2020-05-05 13:22:35 +02:00 |
|
Erik Krogh Kristensen
|
f586639703
|
change getSplitAt to getSeparator
Co-authored-by: Esben Sparre Andreasen <esbena@github.com>
|
2020-05-05 13:22:21 +02:00 |
|
Matthew Gretton-Dann
|
52d8acc1a1
|
Merge pull request #3404 from nickrolfe/field_attrs
C++: add test for attributes on fields
|
2020-05-05 12:12:28 +01:00 |
|
Rasmus Wriedt Larsen
|
6488714758
|
Python: Autoformat
|
2020-05-05 11:38:17 +02:00 |
|
Rasmus Wriedt Larsen
|
07ae40206f
|
Python: Don't allow getParameter(-1) for BoundMethodValue
As per discussion in the PR
|
2020-05-05 11:37:10 +02:00 |
|
Rasmus Wriedt Larsen
|
5d5d412b78
|
Python: Add test of safe methods for py/modification-of-default-value
|
2020-05-05 11:14:37 +02:00 |
|
james
|
28f51d9d9c
|
fix js reusable
|
2020-05-05 10:13:55 +01:00 |
|
Rasmus Wriedt Larsen
|
4da5222255
|
Python: More safe methods for py/modification-of-default-value
Fixes https://github.com/github/codeql/issues/3397
|
2020-05-05 11:09:05 +02:00 |
|
Geoffrey White
|
31a7e2c34e
|
C++: Make getAnonymousParameterDescription private.
|
2020-05-05 10:05:18 +01:00 |
|
monkey-junkie
|
056566ecc1
|
Update javascript/ql/src/experimental/Security/CWE-94/ServerSideTemplateInjection.ql
Co-authored-by: Erik Krogh Kristensen <erik-krogh@github.com>
|
2020-05-05 12:05:01 +03:00 |
|
monkey-junkie
|
3a4ea82ae2
|
Update javascript/ql/src/experimental/Security/CWE-94/ServerSideTemplateInjection.ql
Co-authored-by: Erik Krogh Kristensen <erik-krogh@github.com>
|
2020-05-05 12:02:46 +03:00 |
|
james
|
292f07d1fd
|
docs: update further reading sections
|
2020-05-05 09:59:25 +01:00 |
|
monkey-junkie
|
8310c96b97
|
Update javascript/ql/src/experimental/Security/CWE-94/ServerSideTemplateInjection.qhelp
Co-authored-by: Erik Krogh Kristensen <erik-krogh@github.com>
|
2020-05-05 11:59:06 +03:00 |
|
james
|
49280ed893
|
docs: add further reading reusables
|
2020-05-05 09:59:02 +01:00 |
|
monkey-junkie
|
25df6e1664
|
Update javascript/ql/src/experimental/Security/CWE-94/ServerSideTemplateInjection.qhelp
Co-authored-by: Erik Krogh Kristensen <erik-krogh@github.com>
|
2020-05-05 11:58:49 +03:00 |
|
monkey-junkie
|
700a070a15
|
Update javascript/ql/src/experimental/Security/CWE-94/examples/ServerSideTemplateInjection.js
Co-authored-by: Erik Krogh Kristensen <erik-krogh@github.com>
|
2020-05-05 11:58:40 +03:00 |
|
monkey-junkie
|
d8fb552097
|
Update javascript/ql/src/experimental/Security/CWE-94/examples/ServerSideTemplateInjectionSafe.js
Co-authored-by: Erik Krogh Kristensen <erik-krogh@github.com>
|
2020-05-05 11:58:28 +03:00 |
|
Esben Sparre Andreasen
|
304b013f88
|
JS: query and tests for unsafe HTML expansion
|
2020-05-05 10:32:16 +02:00 |
|
Rasmus Wriedt Larsen
|
affca1a728
|
Python: Add test-cases using keyword arguments for builtin function
|
2020-05-05 10:26:25 +02:00 |
|
Geoffrey White
|
a70f534458
|
Sync identical files.
|
2020-05-05 09:18:05 +01:00 |
|
Rasmus Wriedt Larsen
|
dfe7c8270b
|
Python: Clean up trailing whitespace
|
2020-05-05 09:55:09 +02:00 |
|