Tom Hvitved
|
bd6c23d165
|
Merge pull request #3020 from aschackmull/dataflow/type-pruning-bigstep
Dataflow: Fix bug in type pruning.
|
2020-03-10 14:21:21 +01:00 |
|
Erik Krogh Kristensen
|
62ae484545
|
autoformat and update expected output
|
2020-03-10 14:01:40 +01:00 |
|
Rasmus Wriedt Larsen
|
5439059b0d
|
Python: Minor cleanup in regex.qll
|
2020-03-10 14:00:30 +01:00 |
|
semmle-qlci
|
570f095ae3
|
Merge pull request #2998 from asger-semmle/js/typescript-memory
Approved by erik-krogh
|
2020-03-10 12:24:52 +00:00 |
|
Felicity Chapman
|
7d0911d20f
|
Merge pull request #3033 from felicitymay/merge-123-master
Merge rc/1.23 back into master
|
2020-03-10 12:22:47 +00:00 |
|
Esben Sparre Andreasen
|
5c8800a1c7
|
JS: make autoformatter happy
|
2020-03-10 13:11:31 +01:00 |
|
james
|
f9cfa0cb25
|
Merge branch 'master' into merge-master-docs-preparation
|
2020-03-10 11:53:38 +00:00 |
|
James Fletcher
|
b1a24705ad
|
Apply suggestions from code review
Co-Authored-By: Felicity Chapman <felicitymay@github.com>
Co-Authored-By: Shati Patel <42641846+shati-patel@users.noreply.github.com>
|
2020-03-10 11:39:41 +00:00 |
|
Erik Krogh Kristensen
|
066568ea60
|
add promise tracking to Files.qll
|
2020-03-10 12:36:42 +01:00 |
|
Erik Krogh Kristensen
|
a24bc564a4
|
add extra tests for file-name with promises
|
2020-03-10 12:35:34 +01:00 |
|
Erik Krogh Kristensen
|
97f2760583
|
refactor Files.qll to use type-tracking (without tracking anything)
|
2020-03-10 12:34:20 +01:00 |
|
Erik Krogh Kristensen
|
6110f85748
|
refactor chrome-remote-interface to use type-tracking promise steps
|
2020-03-10 12:27:21 +01:00 |
|
Esben Sparre Andreasen
|
5b1b945c35
|
JS: distinguishes escapes in strings and regular expression literals
|
2020-03-10 12:26:20 +01:00 |
|
Erik Krogh Kristensen
|
3ddfd7ba73
|
add extra promise test for chrome-remote-interface
|
2020-03-10 12:24:16 +01:00 |
|
Erik Krogh Kristensen
|
69d8cf643d
|
add type tracking predicates for promises
|
2020-03-10 12:23:23 +01:00 |
|
Taus
|
e3160f966f
|
Merge pull request #2932 from RasmusWL/python-re.compile-missing-points-to
Python: Add example of re.compile missing points-to
|
2020-03-10 11:55:23 +01:00 |
|
Anders Schack-Mulligen
|
e97c72cd5d
|
Dataflow: Adjust imports.
|
2020-03-10 11:34:09 +01:00 |
|
Jonas Jensen
|
28a9baba36
|
Merge pull request #3026 from MathiasVP/simplerangeanalysis-const-var-access
C++: Handle constant variable accesses in SimpleRangeAnalysis.qll
|
2020-03-10 11:22:33 +01:00 |
|
Anders Schack-Mulligen
|
fc87f1eb1b
|
C#: Fix tests.
|
2020-03-10 10:54:48 +01:00 |
|
Rasmus Wriedt Larsen
|
5e62f54094
|
Merge pull request #3030 from BekaValentine/python-objectapi-to-valueapi-useimplicitnonereturnvalue
Python: ObjectAPI to ValueAPI: UseImplicitNoneReturnValue
|
2020-03-10 10:38:06 +01:00 |
|
Rasmus Wriedt Larsen
|
1b8154c139
|
Merge pull request #2925 from BekaValentine/python-objectapi-to-valueapi-callargs
Python: ObjectAPI to ValueAPI: CallArgs
|
2020-03-10 10:26:21 +01:00 |
|
Esben Sparre Andreasen
|
3bfda6cd38
|
JS: refactoring: make separate modules for mongoose Model and Query
|
2020-03-10 09:57:45 +01:00 |
|
Esben Sparre Andreasen
|
480be06d86
|
JS: replace Model class with opaque type tracking predicate
|
2020-03-10 09:57:45 +01:00 |
|
Esben Sparre Andreasen
|
dbeb216af0
|
JS: make use of TypeScript types for mongoose Model and Query
|
2020-03-10 09:57:45 +01:00 |
|
Esben Sparre Andreasen
|
0c46e4d1af
|
JS: fixup typetracking usage: t2 -> t2.continue()
|
2020-03-10 09:57:45 +01:00 |
|
Esben Sparre Andreasen
|
aae92ad795
|
JS: add test for DatabaseAccess
|
2020-03-10 09:57:45 +01:00 |
|
Esben Sparre Andreasen
|
6b9bd8bd97
|
JS: adjust tests slightly to also support DatabaseAccess testing
|
2020-03-10 09:57:45 +01:00 |
|
Esben Sparre Andreasen
|
7a2faa0b6b
|
JS: add additional mongoose and mongodb js/nosql-injection sinks
|
2020-03-10 09:57:45 +01:00 |
|
Esben Sparre Andreasen
|
b6c616efd3
|
JS: support optional options argument to MongoClient.connect
|
2020-03-10 09:57:45 +01:00 |
|
Esben Sparre Andreasen
|
f24f03e1f8
|
JS: add mongodb .connect tests
|
2020-03-10 09:57:45 +01:00 |
|
Esben Sparre Andreasen
|
e61f522f30
|
JS: bump change notes for mongodb
|
2020-03-10 09:57:45 +01:00 |
|
Esben Sparre Andreasen
|
21e6e69f22
|
JS: support mongodb v3 (minimally)
https://github.com/github/codeql-javascript-team/issues/79
|
2020-03-10 09:57:45 +01:00 |
|
Mathias Vorreiter Pedersen
|
8b467eb9a7
|
C++: Allow multiple results in getValue
|
2020-03-10 09:50:28 +01:00 |
|
Felicity Chapman
|
d54a9c9630
|
Merge branch 'rc/1.23' into merge-123-master
|
2020-03-10 08:45:22 +00:00 |
|
Rebecca Valentine
|
7ce905a310
|
Python: Adds preliminary modernization
|
2020-03-09 19:29:47 -07:00 |
|
Rebecca Valentine
|
bbeefd5747
|
Python: Modernizes query
|
2020-03-09 19:21:31 -07:00 |
|
Rebecca Valentine
|
047c328c58
|
Update python/ql/src/semmle/python/objects/ObjectAPI.qll
Co-Authored-By: Rasmus Wriedt Larsen <rasmuswriedtlarsen@gmail.com>
|
2020-03-09 19:20:08 -07:00 |
|
Rebecca Valentine
|
e8708a083f
|
Python: Modernizes query and expecteds
|
2020-03-09 19:13:54 -07:00 |
|
Rebecca Valentine
|
48e67bca51
|
Python: Modernizes query
|
2020-03-09 18:57:42 -07:00 |
|
Rebecca Valentine
|
810efc5ca2
|
Python: Adds Rasmus's suggestion
Co-Authored-By: Rasmus Wriedt Larsen <rasmuswriedtlarsen@gmail.com>
|
2020-03-09 16:21:34 -07:00 |
|
Rebecca Valentine
|
f4f8c6e1e5
|
Python: Swaps out element_from_tuple
|
2020-03-09 16:20:22 -07:00 |
|
Taus
|
be09c17367
|
Merge pull request #2990 from BekaValentine/python-objectapi-to-valueapi-raisingtuple
Python: ObjectAPI to ValueAPI: RaisingTuple
|
2020-03-10 00:16:12 +01:00 |
|
Taus
|
96e99f55ad
|
Merge pull request #2976 from BekaValentine/python-objectapi-to-valueapi-emptyexcept
Python: ObjectAPI to ValueAPI: EmptyExcept
|
2020-03-09 23:56:27 +01:00 |
|
Taus
|
b51e2a9e80
|
Merge pull request #2977 from BekaValentine/python-objectapi-to-valueapi-catchingbaseexception
Python: ObjectAPI to ValueAPI: CatchingBaseException
|
2020-03-09 22:54:50 +01:00 |
|
Mathias Vorreiter Pedersen
|
1a5282ae21
|
C++: Add testcase that previously resulted in a false positive
|
2020-03-09 22:33:59 +01:00 |
|
Mathias Vorreiter Pedersen
|
525a00098e
|
C++: Address review comments
|
2020-03-09 22:16:05 +01:00 |
|
Dave Bartolomeo
|
9fae2faaeb
|
Merge pull request #2994 from jbj/IRSanity-separate-file
C++: Move InstructionSanity out of Instruction.qll
|
2020-03-09 16:34:36 -04:00 |
|
Rebecca Valentine
|
c9c469b201
|
Python: Modernizes queries
|
2020-03-09 12:52:33 -07:00 |
|
Rebecca Valentine
|
6a1203a60f
|
Python: Adds modernized predicates
|
2020-03-09 12:52:15 -07:00 |
|
Rebecca Valentine
|
6636f72e07
|
Python: Moves more predicates over to suffixed form
|
2020-03-09 11:59:44 -07:00 |
|