Erik Krogh Kristensen
|
9cf34f19bb
|
Merge branch 'main' into extractBigReg
|
2021-11-03 13:08:51 +01:00 |
|
Erik Krogh Kristensen
|
264f4ab5ab
|
add js/session-fixation query
|
2021-11-03 13:04:41 +01:00 |
|
Nick Rolfe
|
dd17271ec8
|
Merge remote-tracking branch 'origin/main' into nickrolfe/regex_injection
|
2021-11-03 11:55:42 +00:00 |
|
Arthur Baars
|
aab8c64973
|
Ruby: fix compilation error
|
2021-11-03 12:32:45 +01:00 |
|
Arthur Baars
|
2c5d5ecdd8
|
Ruby: QLTest: fix pack search path for upgrades
|
2021-11-03 12:14:58 +01:00 |
|
Arthur Baars
|
32765e9bc1
|
Ruby: trigger jobs on workflow change
|
2021-11-03 12:14:58 +01:00 |
|
Mathias Vorreiter Pedersen
|
dfbfbe4953
|
Merge branch 'main' into use-shared-ssa-in-ir-dataflow
|
2021-11-03 10:39:22 +00:00 |
|
Mathias Vorreiter Pedersen
|
ad5619ff07
|
Revert "C++: Don't count write operations as uses."
This reverts commit 092beb8b73.
|
2021-11-03 10:37:32 +00:00 |
|
Tom Hvitved
|
ab37ae6613
|
Merge pull request #7036 from hvitved/ruby/truncate-get-value-text
Ruby: Truncate concatenated strings in `getValueText`
|
2021-11-03 10:57:43 +01:00 |
|
Rasmus Lerchedahl Petersen
|
05aa314ac9
|
Python: Add tests for non-async constructs
|
2021-11-03 10:54:36 +01:00 |
|
Tony Torralba
|
7d88f80fb9
|
Add tests for summaries
|
2021-11-03 10:35:38 +01:00 |
|
ihsinme
|
c175f0aa9d
|
Update IncorrectChangingWorkingDirectory.ql
|
2021-11-03 12:25:30 +03:00 |
|
Tom Hvitved
|
51f4f57617
|
C#: Use cs/ prefix in all query IDs
|
2021-11-03 10:25:21 +01:00 |
|
Anders Schack-Mulligen
|
e6145f04d2
|
Merge pull request #6966 from atorralba/atorralba/android-explicit-intent-sanitizer
Android: Add ExplicitIntentSanitizer and allowIntentExtrasImplicitRead
|
2021-11-03 10:20:09 +01:00 |
|
Erik Krogh Kristensen
|
ab4780c505
|
Merge pull request #7032 from erik-krogh/cwe497
JS: add CWE-497 to js/stack-trace-exposure
|
2021-11-03 08:55:49 +01:00 |
|
Ethan P
|
b9eb278380
|
Add new file to index
|
2021-11-02 21:55:25 -07:00 |
|
Ethan P
|
98eb848e22
|
add link to new article
|
2021-11-02 21:35:39 -07:00 |
|
Ethan P
|
06cacfdd83
|
Create extractor-options.rst
|
2021-11-02 21:21:31 -07:00 |
|
Pierre
|
cf5b317eb1
|
Add updated framework support for JS/Java
Release: https://github.com/github/releases/issues/1724
|
2021-11-02 22:02:05 +01:00 |
|
Mathias Vorreiter Pedersen
|
4a2894a707
|
Merge pull request #7025 from MathiasVP/nomagic-parameterCand
Dataflow: Replace a 'noinline' pragma with a 'nomagic' pragma
|
2021-11-02 20:40:44 +00:00 |
|
Arthur Baars
|
eb645ba963
|
Merge remote-tracking branch 'origin/rc/3.3' into 'main'
|
2021-11-02 21:10:41 +01:00 |
|
Tom Hvitved
|
8b287a7846
|
Ruby: Truncate concatenated strings in getValueText
|
2021-11-02 18:19:49 +01:00 |
|
Erik Krogh Kristensen
|
9d99ce12c4
|
add CWE-497 to js/stack-trace-exposure
|
2021-11-02 15:43:55 +01:00 |
|
Rasmus Wriedt Larsen
|
8cd9fdebf9
|
Python: Model flask_admin
|
2021-11-02 15:43:13 +01:00 |
|
Rasmus Wriedt Larsen
|
ab88d945e2
|
Python: Add flask_admin tests
|
2021-11-02 15:41:57 +01:00 |
|
Rasmus Wriedt Larsen
|
c2632cff3d
|
Python: Add RequestHandler meta query
|
2021-11-02 15:41:57 +01:00 |
|
Rasmus Lerchedahl Petersen
|
768932d7b3
|
Python: Add tainttracking step that was removed
when the correpsonding datadlow step was removed.
|
2021-11-02 15:01:47 +01:00 |
|
Rasmus Lerchedahl Petersen
|
07d5086b07
|
Python: support user defined taint source
|
2021-11-02 15:00:23 +01:00 |
|
Dave Bartolomeo
|
d828ab7fd2
|
Merge pull request #6955 from github/codeql-ruby-3.3
RC 3.3: merge codeql-ruby repository into github/codeql
|
2021-11-02 09:57:49 -04:00 |
|
Erik Krogh Kristensen
|
5975e19f53
|
sync identical files
|
2021-11-02 14:45:33 +01:00 |
|
Erik Krogh Kristensen
|
2a8807efe4
|
add change note
|
2021-11-02 14:45:33 +01:00 |
|
Erik Krogh Kristensen
|
076a3dca1f
|
add qhelp
|
2021-11-02 14:45:33 +01:00 |
|
Erik Krogh Kristensen
|
d9a214767b
|
add support for node-rsa
|
2021-11-02 14:45:33 +01:00 |
|
Erik Krogh Kristensen
|
49ea53f32b
|
move ExpressJwt that was inside the Hasha module
|
2021-11-02 14:45:33 +01:00 |
|
Erik Krogh Kristensen
|
2c013214f7
|
add Diffie-Hellman from the crypto library
|
2021-11-02 14:45:33 +01:00 |
|
Erik Krogh Kristensen
|
1df8ec2cae
|
add insufficient key size model for node-forge
|
2021-11-02 14:45:33 +01:00 |
|
Erik Krogh Kristensen
|
62039b866c
|
add cryptographic key model to the crypto-js library
|
2021-11-02 14:45:33 +01:00 |
|
Erik Krogh Kristensen
|
028799deb6
|
implement a simple InsufficientKeySize query
|
2021-11-02 14:45:30 +01:00 |
|
Erik Krogh Kristensen
|
7a9315f146
|
use set literal
|
2021-11-02 14:45:14 +01:00 |
|
yoff
|
97625d7c2c
|
Merge pull request #7023 from RasmusWL/toml
Python: Add modeling of `toml`
|
2021-11-02 14:42:06 +01:00 |
|
Rasmus Wriedt Larsen
|
cb6bcada4c
|
Merge branch 'main' into django-rest-framework
|
2021-11-02 14:33:16 +01:00 |
|
ihsinme
|
62b3c3c9a0
|
Update IncorrectChangingWorkingDirectory.ql
|
2021-11-02 16:16:17 +03:00 |
|
yoff
|
0240631510
|
Merge pull request #6782 from RasmusWL/fastapi
Python: Model FastAPI
|
2021-11-02 14:16:12 +01:00 |
|
ihsinme
|
738354b8e7
|
Update cpp/ql/src/experimental/Security/CWE/CWE-243/IncorrectChangingWorkingDirectory.ql
Co-authored-by: Mathias Vorreiter Pedersen <mathiasvp@github.com>
|
2021-11-02 16:13:34 +03:00 |
|
Asger Feldthaus
|
971f032b5f
|
JS: Autoformat
|
2021-11-02 14:12:05 +01:00 |
|
Asger Feldthaus
|
46bd3e58a3
|
JS: Switch to instanceof base type
|
2021-11-02 14:12:05 +01:00 |
|
Asger Feldthaus
|
5f4c1dd19b
|
JS: Support regexp-based path traversal check
|
2021-11-02 14:12:05 +01:00 |
|
Asger Feldthaus
|
83edcf515b
|
JS: Add test for regexp-based sanitizer
|
2021-11-02 14:12:04 +01:00 |
|
Mathias Vorreiter Pedersen
|
3e6ac74d73
|
C++: Add 'InheritanceConversionInstruction' to the list of instructions that set 'certain = false' in 'explicitWrite'.
|
2021-11-02 13:02:46 +00:00 |
|
Mathias Vorreiter Pedersen
|
56cabb8f46
|
C++: Add comments to some of the disjuncts in 'addressFlow'.
|
2021-11-02 12:52:11 +00:00 |
|