james
5fed92b2d0
remove new line
2020-08-12 20:30:24 +01:00
Shati Patel
78948139fd
Add metadata option missing from reference table
2020-08-12 17:25:54 +01:00
Geoffrey White
2655616a0a
C++: Autoformat.
2020-08-12 16:59:15 +01:00
Geoffrey White
9719da8643
C++: Move a class that looks like it's intended to be public (and is used outside of the library) above the 'Implementation details' threshold.
2020-08-12 16:58:50 +01:00
Geoffrey White
d444778535
C++: Make a few things in SAL.qll private where it looks like that was intended (and they're not used outside the file).
2020-08-12 16:57:43 +01:00
Geoffrey White
aa6cb51bba
C++: QLDoc SAL.qll.
2020-08-12 16:55:26 +01:00
Rasmus Lerchedahl Petersen
6dfa2ea9d5
Python: update test expectation
2020-08-12 16:59:06 +02:00
Erik Krogh Kristensen
fd9eb1d40b
use Identifier instead of just a plain string when getting tuple-element-names
2020-08-12 16:55:55 +02:00
Rasmus Lerchedahl Petersen
20ffb3fd4c
Python: tests for argument routing
...
Needs annotations
2020-08-12 15:43:07 +02:00
Tamas Vajk
def1d888c6
C#: Add body of partial methods
2020-08-12 15:22:14 +02:00
lcartey@github.com
6f83c55ebd
Java: Switch to low as a precision
...
Code Scanning doesn't support "very-low"
2020-08-12 13:48:59 +01:00
CodeQL CI
66541f260b
Merge pull request #4012 from erik-krogh/getId
...
Approved by asgerf, esbena
2020-08-12 13:28:18 +01:00
Erik Krogh Kristensen
dc55ce2bf0
add change note
2020-08-12 14:27:33 +02:00
Erik Krogh Kristensen
1d111c3e1f
expand what urls are detected by js/incomplete-url-substring-sanitization
2020-08-12 14:25:35 +02:00
Luke Cartey
56ff8cf084
Apply suggestions from code review
...
Co-authored-by: Felicity Chapman <felicitymay@github.com >
2020-08-12 13:12:06 +01:00
CodeQL CI
aa9dfa0d6f
Merge pull request #4039 from intrigus-lgtm/patch-3
...
Approved by erik-krogh
2020-08-12 13:07:22 +01:00
Geoffrey White
b99ca60154
C++: Address review comments.
2020-08-12 12:56:28 +01:00
Erik Krogh Kristensen
a7a016c5df
update expected output
2020-08-12 13:29:43 +02:00
Jonas Jensen
b4679cb8cf
C++: Autoformat fixup
2020-08-12 13:09:23 +02:00
Jonas Jensen
93d8d8eb1d
C++: Demonstrate range analysis MulExpr bugs
...
Unless these issues can be reproduced in far less contrived code, I
don't think they will cause problems in practice.
2020-08-12 12:10:23 +02:00
Erik Krogh Kristensen
0e33eae960
add dbscheme upgrade script
2020-08-12 11:50:32 +02:00
james
bc02348a83
fix up table and remove another extra space
2020-08-12 09:54:42 +01:00
James Fletcher
f9f5a69a9f
Apply suggestions from @hubwriter's code review
...
Co-authored-by: Alistair Christie <54933897+hubwriter@users.noreply.github.com >
2020-08-12 09:53:12 +01:00
james
4d723ba276
remove some spurious spaces
2020-08-12 09:48:00 +01:00
james
0dbe64eee7
address some review comments
...
stray quote
2020-08-12 09:38:00 +01:00
Erik Krogh Kristensen
26dcd2faae
add support for getting the name from named tuple elements
2020-08-12 10:33:49 +02:00
CodeQL CI
e603f5cc48
Merge pull request #4052 from github/max-schaefer-patch-2
...
Approved by shati-patel
2020-08-12 09:29:37 +01:00
lcartey@github.com
6b6172fa5b
Java: ExternalAPIs: Further review comments
...
- Extra qldoc
- Remove unnecessary module
2020-08-12 09:21:14 +01:00
Max Schaefer
6dad027eb6
Go: Claim support for 1.15
...
Go 1.15 was just released, and there are [no changes](https://golang.org/doc/go1.15#language ) to the language, so we might as well list it as supported.
2020-08-12 09:11:57 +01:00
Jonas Jensen
1ee96a4b4f
C++: SimpleRangeAnalysis: unsigned multiplication
2020-08-12 10:03:04 +02:00
Erik Krogh Kristensen
211ef61039
add change note
2020-08-12 09:29:34 +02:00
Erik Krogh Kristensen
b101305248
autoformat
2020-08-12 09:27:43 +02:00
Robert Marsh
e80cc63219
Merge pull request #3861 from dilanbhalla/privatedata
...
C++: Private Data File/Buffer Writes
2020-08-11 15:49:31 -04:00
Erik Krogh Kristensen
e1ecc4662c
fix typo
...
Co-authored-by: Asger F <asgerf@github.com >
2020-08-11 20:00:22 +02:00
james
0ff10c319d
update lots of links
2020-08-11 17:31:50 +01:00
Geoffrey White
a655124213
C++: I think this is more correct.
2020-08-11 17:28:31 +01:00
Geoffrey White
50558257fc
C++: Change note.
2020-08-11 17:05:49 +01:00
Geoffrey White
128b8328b9
C++: Autoformat.
2020-08-11 17:03:03 +01:00
Geoffrey White
f62ad75048
C++: Taint through std::string operator+=.
2020-08-11 17:03:02 +01:00
Geoffrey White
cf6f530823
C++: Taint through std::string operator+.
2020-08-11 16:58:55 +01:00
Geoffrey White
a57dfd6b67
C++: Taint through std::string append.
2020-08-11 16:54:39 +01:00
Geoffrey White
f824a893ca
C++: Add test cases for appending strings.
2020-08-11 16:50:52 +01:00
Geoffrey White
030ab4f626
C++: Add string append operators to the test (changes layout).
2020-08-11 16:47:56 +01:00
Jonas Jensen
2ea25b9d90
C++: Precise printing of integer bounds
...
The pretty-printing of a QL `float` didn't include enough digits to tell
whether a large number had accurate bounds. The `toString` value of a
float appears to be more precise.
2020-08-11 16:48:01 +02:00
lcartey@github.com
e1d4b98923
Java: Add further missing </p> to qhelp
2020-08-11 15:28:55 +01:00
lcartey@github.com
8a65dd2cd6
Java: Address review comments
2020-08-11 15:28:06 +01:00
Erik Krogh Kristensen
656ff9c441
autoformat
2020-08-11 15:40:30 +02:00
Anders Schack-Mulligen
21246624b4
Java: Add PrintWriter.format as XSS sink.
2020-08-11 15:15:39 +02:00
Erik Krogh Kristensen
a1394c363a
more consistent naming of predicates
2020-08-11 14:49:51 +02:00
Erik Krogh Kristensen
2974c4923f
introduce and use isAPropertyWrite
2020-08-11 14:43:25 +02:00
