jf205
1f67d71f5f
Update docs/language/learn-ql/ql-training.rst
...
Co-Authored-By: shati-semmle <42641846+shati-semmle@users.noreply.github.com >
2019-09-05 14:29:11 +01:00
jf205
4ec828a719
Update docs/language/learn-ql/ql-training.rst
...
Co-Authored-By: shati-semmle <42641846+shati-semmle@users.noreply.github.com >
2019-09-05 14:24:36 +01:00
semmle-qlci
fd2e8486e4
Merge pull request #1862 from asger-semmle/prototype-pollution-angular-merge
...
Approved by esben-semmle
2019-09-05 12:50:58 +01:00
semmle-qlci
e6bfe2bd5d
Merge pull request #1873 from asger-semmle/type-inf-consistency
...
Approved by xiemaisi
2019-09-05 12:46:59 +01:00
james
1a7c79bd7c
docs: update layout.html
2019-09-05 12:33:55 +01:00
james
99614d98e1
docs: specify sphinx 1.7.9 in readme
2019-09-05 12:33:55 +01:00
james
16aaa95566
docs: fix a couple of links
2019-09-05 12:33:54 +01:00
james
6f9d4c8562
docs: remove VA section from writing-queries.rst
2019-09-05 12:33:49 +01:00
james
49955c56be
docs: rework ql-training.rst
2019-09-05 12:33:42 +01:00
james
593818b71a
docs: reorganize and add some ref bookmarks to learn-ql index
2019-09-05 12:33:33 +01:00
Taus Brock-Nannestad
2d45c23d19
Comment out diverging example for now.
...
Otherwise it'll keep timing out until the fix has been pushed to LGTM.com
2019-09-05 13:18:01 +02:00
Asger F
61c4d30dd6
JS: Use express module instead
2019-09-05 12:09:24 +01:00
Ian Lynagh
99dd8d0c51
C++: Add an upgrade script
2019-09-05 12:01:02 +01:00
Ian Lynagh
acc1d664f6
C++: Updates stats to include mangled_name table
2019-09-05 12:01:02 +01:00
Ian Lynagh
0c09af977c
C++: Use mangled_name in ResolveClass.qll
...
The old code is still around to handle upgraded databases.
2019-09-05 12:01:02 +01:00
Taus Brock-Nannestad
d336140c19
Python: Modernise the py/non-iterable-in-for-loop query.
...
Also adds a small test case exhibiting the same false positive seen in
ODASA-8042.
2019-09-05 12:24:51 +02:00
Esben Sparre Andreasen
a9665f53b8
JS: whitelist quote stripping for js/incomplete-sanitization
2019-09-05 09:47:49 +01:00
james
65573492e7
docs: rename ql-training-rst > ql-training
2019-09-05 08:40:36 +01:00
james
c8dd5e620c
docs: add ql-training page to learn-ql project
2019-09-05 08:40:33 +01:00
Jonas Jensen
79c713bd87
C++: Remark in DefinitionByReference charpred
2019-09-05 09:36:46 +02:00
Jonas Jensen
114c2fe0d4
Merge remote-tracking branch 'upstream/master' into ast-field-flow-defbyref
2019-09-05 09:33:45 +02:00
Robert Marsh
1bb57daf6f
Merge pull request #1866 from jbj/dataflow-test-alias-nested
...
C++: Tests for aliasing of nested structs
2019-09-04 10:48:20 -07:00
Robert Marsh
a3290503ec
Merge pull request #1806 from jbj/localExprFlow
...
C++: Add localExprFlow and localExprTaint
2019-09-04 10:38:46 -07:00
Asger F
0e4c34bd81
JS: Add deprecated predicate alias
2019-09-04 16:14:51 +01:00
Asger F
93a3f571ec
JS: Add change note
2019-09-04 16:14:51 +01:00
Asger F
27567e41c5
JS: Add angular.fromJson as JSON parser
2019-09-04 16:14:51 +01:00
Asger F
5aa948cd17
JS: Add angular.merge sink to prototype pollution query
2019-09-04 16:14:51 +01:00
Felicity Chapman
ef7984d1cb
Merge pull request #1842 from jf205/add-java-slides/sd-3762
...
docs: add rst versions of java training slides
2019-09-04 13:53:13 +01:00
jf205
64c4548aca
Update docs/language/ql-training-rst/slide-snippets/local-data-flow.rst
...
Co-Authored-By: Luke Cartey <5377966+lukecartey@users.noreply.github.com >
2019-09-04 12:53:51 +01:00
james
f0e2a2ea71
docs: update images
2019-09-04 12:51:14 +01:00
Taus Brock-Nannestad
4440e02fa5
Add test case for divergence.
2019-09-04 13:23:06 +02:00
Jonas Jensen
cdcc716675
Merge pull request #1867 from geoffw0/erafix9
...
CPP: Add date to JapaneseEraDate.ql
2019-09-04 13:16:04 +02:00
Jonas Jensen
bd32931f45
Merge pull request #1868 from geoffw0/tinyfix
...
CPP: Tiny fixes
2019-09-04 13:15:38 +02:00
Asger F
9f8bf90424
JS: Update Express test
2019-09-04 11:43:21 +01:00
Asger F
744f0b1aa3
JS: Use type info to recognize routers
2019-09-04 11:43:21 +01:00
Asger F
c06fd451d6
JS: Handle router chaining in type tracking predicate
2019-09-04 11:43:21 +01:00
Asger F
f3aea0706a
JS: Use type info in Express Request/Response
2019-09-04 11:43:21 +01:00
Geoffrey White
707f95c829
CPP: Alignment.
2019-09-04 09:59:21 +01:00
Geoffrey White
13e2109a38
CPP: Remove an unnecessary include.
2019-09-04 09:42:07 +01:00
Jonas Jensen
8579d7d1cf
C++: Tests for aliasing of nested structs
...
This test shows that local pointers into structs do propagate data flow
like pass-by-reference does in calls.
2019-09-04 10:26:49 +02:00
Jonas Jensen
3ba650911c
Merge pull request #1847 from geoffw0/erafix8
...
CPP: Deal with two very similar Japanese era queries
2019-09-04 09:57:10 +02:00
Jonas Jensen
0e54709d47
Merge pull request #1859 from geoffw0/qldocpartialdef
...
CPP: Document PartialDefinitions
2019-09-04 09:54:55 +02:00
Jonas Jensen
067c55adb9
C++: Fix ConditionDeclExpr data flow
...
Data flow probably never worked when a variable declared in a
`ConditionDeclExpr` was modeled with `BlockVar`. That combination did
not come up in testing before the last commit.
2019-09-04 09:33:00 +02:00
Geoffrey White
84112d3630
CPP: Change note.
2019-09-03 18:30:24 +01:00
Geoffrey White
3a3bef3a03
CPP: Add the new Japanese era.
2019-09-03 18:28:24 +01:00
Geoffrey White
bac39e6288
CPP: Add test cases.
2019-09-03 17:46:30 +01:00
Taus Brock-Nannestad
1b432076c4
Python: Prevent divergence in type-hint analysis. (ODASA-8075)
2019-09-03 13:38:46 +02:00
james
acb3e742e6
docs: toctree path
2019-09-03 12:34:58 +01:00
Nick Rolfe
641232a9d7
Merge pull request #1855 from mgrettondann/cpp-343-lambda-names-simplification
...
C++: Update tests for lambda description changes
2019-09-03 11:45:50 +01:00
james
8c88cbba3a
docs: address review comments
2019-09-03 11:16:45 +01:00
