luciaromeroML
1fc58e51a3
adding suggestion that removes sanitizer for unknown base urls
2021-09-27 17:37:36 -03:00
luciaromeroML
1f2618b893
new test case for unknown base url
2021-09-27 17:37:11 -03:00
shati-patel
64fcbe05c3
Docs: Fix inconsistencies in sphinx config files
2021-09-27 18:54:23 +01:00
luchua-bc
378db7de87
Remove local user input and use fluent model
2021-09-27 17:33:04 +00:00
shati-patel
31c34870ef
Fix warning about "Anonymous hyperlink mismatch"
2021-09-27 18:27:57 +01:00
shati-patel
3c17ac424d
Docs: Fix some broken/redirected links
2021-09-27 18:27:30 +01:00
Calum Grant
64ae42014c
Update README.md
2021-09-27 17:46:15 +01:00
Felicity Chapman
bb6c079e5a
Merge pull request #6762 from github/felicitymay-patch-1
...
Update links to match those on the staging site
2021-09-27 16:49:58 +01:00
Felicity Chapman
a3c1975a84
Update links to match those on the staging site
2021-09-27 16:35:22 +01:00
Owen Mansel-Chan
bdd78d2bc7
Fix stub
2021-09-27 16:24:41 +01:00
Owen Mansel-Chan
29db42c3cd
Generate stubs
2021-09-27 16:24:40 +01:00
Owen Mansel-Chan
e6df8164cf
Fix up old tests for new helper functions
2021-09-27 16:24:39 +01:00
Owen Mansel-Chan
cf03bd8bd1
Merge new and old tests
...
# Conflicts:
# java/ql/test/library-tests/frameworks/apache-collections/TestNew.java
2021-09-27 16:24:38 +01:00
Owen Mansel-Chan
342c14887b
Fix existing models for MapUtils
2021-09-27 16:24:37 +01:00
Owen Mansel-Chan
e1101e582e
Minor improvement to existing tests
2021-09-27 16:24:37 +01:00
Owen Mansel-Chan
768203bd36
Remove redundant casts
2021-09-27 16:24:36 +01:00
Owen Mansel-Chan
c51fb00082
Add tests for non-public abstract classes
2021-09-27 16:24:35 +01:00
Owen Mansel-Chan
0a92b04c8b
Fix up automatically generated tests
2021-09-27 16:24:34 +01:00
Owen Mansel-Chan
15161d8867
Make concrete subclasses of abstract classes
2021-09-27 16:24:33 +01:00
Owen Mansel-Chan
53ee465726
Fix errors in generated tests that stop compilation
2021-09-27 16:24:32 +01:00
Owen Mansel-Chan
a20acfee25
Add automatically generated tests
...
Also update test.ql to use the new InlineFlowTest.
2021-09-27 16:24:31 +01:00
Owen Mansel-Chan
f69787afd0
Miscellaneous model fixes
2021-09-27 16:24:30 +01:00
Owen Mansel-Chan
9b12980688
Do not model some protected methods
2021-09-27 16:24:29 +01:00
Owen Mansel-Chan
cb0f82c36e
Do not modelled protected static inner classes
2021-09-27 16:24:29 +01:00
Owen Mansel-Chan
3b678bfbc5
Address review comments
2021-09-27 16:24:28 +01:00
Owen Mansel-Chan
e1750adc38
Address problems highlighted by generating tests
2021-09-27 16:24:27 +01:00
Owen Mansel-Chan
fd0fb9483e
Model the remaining subpackages in Apache Commons Collections
2021-09-27 16:24:26 +01:00
Owen Mansel-Chan
3d1d491e6b
Model java.lang.Object.clone() better for access paths.
...
Model value flow for Element, MapKey and MapValue. This assumes
that clone() is a shallow copy.
2021-09-27 16:24:25 +01:00
Edoardo Pirovano
18020707b8
QL Language Spec: Trailing comma in set literal
2021-09-27 15:57:39 +01:00
Rasmus Lerchedahl Petersen
3c1206f873
Python: Model more awaiting construcs
...
in API graphs.
Some unsatisfactory lack of understanding here.
2021-09-27 16:41:01 +02:00
Tom Hvitved
5219b1a8b9
Merge pull request #310 from github/hvitved/more-instanceof
...
More uses of `instanceof` in the external/internal AST layer
2021-09-27 16:11:04 +02:00
Harry Maclean
ca1fc44f21
Model the HTTPClient http client
2021-09-27 14:44:25 +01:00
Harry Maclean
3a4ddc4b4e
Model the HTTParty http client
...
We currently model direct calls like
HTTParty.get("http://example.com ")
but we don't yet handle calls on other classes that have included the
`HTTParty` module, like
class MyClient
include HTTParty
end
MyClient.get("http://example.com ")
2021-09-27 14:44:04 +01:00
Tom Hvitved
8018c1525d
Merge pull request #314 from github/hvitved/setter-method-call-base
...
Strengthen the type of `SetterMethodCall`
2021-09-27 15:29:07 +02:00
Nick Rolfe
79c2f09585
Merge pull request #302 from github/rm_tokeninfo_idx
...
Remove unused columns from tokeninfo tables
2021-09-27 14:19:38 +01:00
Nick Rolfe
b2c4daecd5
Merge pull request #303 from github/nickrolfe/node_kind_id
...
Use integer comparisons instead of strings when scanning ERB files
2021-09-27 14:18:10 +01:00
Rasmus Lerchedahl Petersen
f6311bf051
Python: model other awaiting constructs
2021-09-27 14:32:55 +02:00
Rasmus Lerchedahl Petersen
15b07bfcc0
Python: Model sql executions
2021-09-27 14:15:58 +02:00
Tom Hvitved
317303cdad
Strengthen the type of SetterMethodCall
2021-09-27 14:05:28 +02:00
Anders Schack-Mulligen
cfa0d46b73
Merge pull request #6097 from atorralba/atorralba/promote-xslt-injection
...
Java: Promote XSLT Injection from experimental
2021-09-27 13:14:57 +02:00
Anders Schack-Mulligen
e027d514f1
Merge pull request #6037 from atorralba/atorralba/promote-spel-injection
...
Java: Promote SpEL Injection query from experimental
2021-09-27 13:13:35 +02:00
Tony Torralba
d5f675c2dc
Fix unbound field
...
Add tests for non-exported providers
2021-09-27 12:58:28 +02:00
Arthur Baars
2a4747b27e
Merge pull request #313 from github/hmac-remove-unicode-char
...
Remove unicode character from doc string
2021-09-27 12:57:21 +02:00
Harry Maclean
3e100bc2a9
Remove unicode character from doc string
...
We require that all source code is in ASCII.
2021-09-27 11:40:04 +01:00
Rasmus Wriedt Larsen
ded3088529
Python/JS: Recognize SHA-3 hash functions
...
Official names are SHA3-224, SHA3-256, SHA3-384, SHA3-512 as per
https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.202.pdf
2021-09-27 12:08:40 +02:00
Tony Torralba
78c12dc505
Move to lib
2021-09-27 12:04:14 +02:00
Tony Torralba
ad08ccb50b
Apply suggestion from code review
2021-09-27 12:00:21 +02:00
mc
95751fcc21
Update XsltInjection.qhelp
...
Made a few minor tweaks during editorial review
2021-09-27 12:00:21 +02:00
Tony Torralba
13417dbf14
Remove DataFlow references from XsltInjection.qll
2021-09-27 12:00:20 +02:00
Tony Torralba
ff21662b23
Refactor XsltInjection.qll
2021-09-27 12:00:18 +02:00
