Nick Rolfe
|
9c17e00645
|
Merge pull request #256 from github/syncRedos
sync ReDoSUtil.qll with python/JS
|
2021-08-23 10:11:16 +01:00 |
|
Erik Krogh Kristensen
|
5fe6671cc5
|
making it more explicit what character class matching is used for
|
2021-08-23 08:30:50 +02:00 |
|
Erik Krogh Kristensen
|
5d232bbfce
|
recognize more src folders when "main" in package.json points to a compiled output
|
2021-08-23 08:09:01 +02:00 |
|
Erik Krogh Kristensen
|
32ac8778bd
|
add the cwd option to shell executions as a sink to js/path-injection
|
2021-08-23 07:32:05 +02:00 |
|
github-actions[bot]
|
7d9f06fb63
|
Add changed framework coverage reports
|
2021-08-23 00:08:11 +00:00 |
|
Andrew Eisenberg
|
2042cc7871
|
Packaging: Migrate default.qll
|
2021-08-20 20:01:29 -07:00 |
|
Andrew Eisenberg
|
eda7616a23
|
Merge pull request #6514 from github/aeisenberg/pack/java
Packaging: Refactor java and C#
|
2021-08-20 15:24:13 -07:00 |
|
Andrew Eisenberg
|
8e75fef923
|
Fix identical files script
|
2021-08-19 14:55:54 -07:00 |
|
Andrew Eisenberg
|
c9f1c98390
|
Packaging: C# refactoring
Split c# pack into `codeql/csharp-all` and `codeql/csharp-queries`.
|
2021-08-19 14:09:35 -07:00 |
|
Andrew Eisenberg
|
8e750f18ad
|
Packaging: Java refactoring
Split java pack into `codeql/java-all` and `codeql/java-queries`.
|
2021-08-19 14:09:35 -07:00 |
|
Andrew Eisenberg
|
39533317ff
|
Merge pull request #6524 from github/aeisenberg/cpp/move-file
C++: Move file from src to lib
|
2021-08-19 13:46:31 -07:00 |
|
Andrew Eisenberg
|
2b36378917
|
C++: Move file from src to lib
Neglected to do this one earlier.
|
2021-08-19 13:12:42 -07:00 |
|
shati-patel
|
03953ef32d
|
Update default query history format
|
2021-08-19 19:07:47 +01:00 |
|
shati-patel
|
58073ceeb1
|
Docs: Update options for viewing results in VS Code
|
2021-08-19 19:07:29 +01:00 |
|
Owen Mansel-Chan
|
714e126088
|
Merge pull request #6370 from owen-mc/java/model/apache-collections
Java: Model more of Apache Commons Collections
|
2021-08-19 15:09:06 +01:00 |
|
Asger Feldthaus
|
2553338bce
|
JS: Autoformat {AST,HTML}Extractor.java
|
2021-08-19 14:54:05 +02:00 |
|
Asger Feldthaus
|
bac212c610
|
JS: Fix typo: instantiaton -> instantiation
|
2021-08-19 14:41:18 +02:00 |
|
Asger Feldthaus
|
a1819a54f2
|
JS: Remove unused isInPlainCodeContext
|
2021-08-19 14:22:05 +02:00 |
|
Asger Feldthaus
|
bef222dfcc
|
JS: Add placeholder in attribute to trap test
|
2021-08-19 14:19:25 +02:00 |
|
CodeQL CI
|
1e1ee55ade
|
Merge pull request #6511 from asgerf/js/vue-component-renaming
Approved by erik-krogh
|
2021-08-19 12:57:15 +01:00 |
|
Mathias Vorreiter Pedersen
|
207dcb08a7
|
C++: Make it clear that 'getAnAssignment' also gets the expression from the initializer.
|
2021-08-19 13:38:32 +02:00 |
|
Alexandre Boulgakov
|
297ae91e3b
|
Merge pull request #6516 from sashabu/sashabu/elements
C++: Move element tests to internal repo.
|
2021-08-19 11:28:43 +01:00 |
|
Mathias Vorreiter Pedersen
|
586c5b90c1
|
C++: Mention Variable.getAnAssignedValue() in the QLDoc for getAnAssignment.
|
2021-08-19 12:27:03 +02:00 |
|
Joe Farebrother
|
9dc28eb9b5
|
Merge pull request #6387 from joefarebrother/guava-cache
Java: Model guava cache package
|
2021-08-19 10:53:48 +01:00 |
|
Tamás Vajk
|
763de4fff9
|
Merge pull request #6425 from raulgarciamsft/insecureRandom_potential_fix
C#: Adding Membership.GeneratePassword() as a bad source of random data
|
2021-08-19 11:16:26 +02:00 |
|
Alexandre Boulgakov
|
89e52bf500
|
C++: Move element tests to internal repo.
|
2021-08-19 09:48:13 +01:00 |
|
Mathias Vorreiter Pedersen
|
01dfab2aec
|
Update cpp/ql/lib/semmle/code/cpp/exprs/Assignment.qll
Co-authored-by: Matan Merom <1010225+matan7890@users.noreply.github.com>
|
2021-08-19 10:32:46 +02:00 |
|
Rasmus Lerchedahl Petersen
|
c4554836ca
|
Python: merge test.py into unittests.py
|
2021-08-19 10:24:32 +02:00 |
|
Rasmus Lerchedahl Petersen
|
3c647c65bf
|
Python: update comment
|
2021-08-19 10:21:19 +02:00 |
|
Tamas Vajk
|
d97525e21e
|
Fix minor quality issues in comment and change note
|
2021-08-19 09:30:23 +02:00 |
|
Mathias Vorreiter Pedersen
|
f5c23c9c52
|
C++: Clarify the difference between 'Initializer' and 'Assignment' in the QLDoc for these classes.
|
2021-08-19 08:33:27 +02:00 |
|
Erik Krogh Kristensen
|
ba40a99ef8
|
Merge pull request #38 from github/rankOne
add a query for finding rank[1]
|
2021-08-18 23:23:00 +02:00 |
|
Erik Krogh Kristensen
|
b8a368a47f
|
QL: Merge pull request #38 from github/rankOne
add a query for finding rank[1]
|
2021-08-18 23:23:00 +02:00 |
|
Alexandre Boulgakov
|
1eb804a072
|
Merge pull request #6496 from sashabu/sashabu/c_linkage
C++: Allow querying for "C" language linkage on routine types.
|
2021-08-18 17:46:44 +01:00 |
|
Chris Smowton
|
48818ebd6d
|
Merge pull request #6434 from smowton/smowton/admin/jodd-unsafe-deserialization
Java: Unsafe deserialization: add support for Jodd JSON library
|
2021-08-18 17:26:02 +01:00 |
|
Mathias Vorreiter Pedersen
|
24638418f1
|
Merge pull request #6503 from andersfugmann/model_strdupa_functions
C++: Model strdupa and strndupa
|
2021-08-18 17:48:04 +02:00 |
|
Shati Patel
|
089077ed60
|
Merge pull request #6322 from shati-patel/shati-patel/docs-multi-dbs-vscode
Docs: Running query on multiple DBs in CodeQL for VS Code
|
2021-08-18 16:41:10 +01:00 |
|
Rasmus Lerchedahl Petersen
|
21f683d531
|
Python: clean up stray coments
|
2021-08-18 16:59:35 +02:00 |
|
Daniel Santos
|
5644514606
|
Update javascript/ql/src/experimental/Security/CWE-079/ClipboardXss.ql
Co-authored-by: Asger F <asgerf@github.com>
|
2021-08-18 09:52:55 -05:00 |
|
Alexandre Boulgakov
|
3ba308a69f
|
C++: Allow querying for "C" language linkage on routine types.
|
2021-08-18 15:35:30 +01:00 |
|
Taus
|
021e5ff510
|
Python: Autoformat
|
2021-08-18 14:27:54 +00:00 |
|
Rasmus Wriedt Larsen
|
60eb81106a
|
Python: Update comment for RegExpTreeView isExcluded
I noticed after reading https://github.com/github/codeql/pull/6507, but didn't want to overload that PR.
|
2021-08-18 16:16:26 +02:00 |
|
Chris Smowton
|
cc4fe7375c
|
Merge pull request #5953 from github/sauyon/java/spring-webutil
Java: Add models for the Spring `web.util` package
|
2021-08-18 15:07:28 +01:00 |
|
Mathias Vorreiter Pedersen
|
27df2727e9
|
Merge pull request #6501 from erik-krogh/rank
CPP/C#: use min() instead of rank[1]()
|
2021-08-18 15:47:08 +02:00 |
|
Asger Feldthaus
|
eef7f559c6
|
JS: Change note
|
2021-08-18 15:36:41 +02:00 |
|
Asger Feldthaus
|
cde8059960
|
JS: Update some comments referring to Vue instances
|
2021-08-18 15:36:41 +02:00 |
|
Asger Feldthaus
|
165f6c6935
|
JS: Add a deprecated forwarder for Vue::Instance
|
2021-08-18 15:36:41 +02:00 |
|
Asger Feldthaus
|
7b6485c32a
|
JS: Rename some test predicates to match class name
|
2021-08-18 15:36:41 +02:00 |
|
Asger Feldthaus
|
b21071923e
|
JS: Rename variables to match new class name
|
2021-08-18 15:36:41 +02:00 |
|
Asger Feldthaus
|
0a98679f74
|
JS: Rename Vue::Instance to Vue::Component
|
2021-08-18 15:36:41 +02:00 |
|