Geoffrey White
|
07adf6f201
|
CPP: Handle array accesses.
|
2019-01-30 18:36:32 +00:00 |
|
Geoffrey White
|
4685f193f5
|
CPP: Widen varMaybeStackAllocated.
|
2019-01-30 18:36:32 +00:00 |
|
Geoffrey White
|
c87036f2fd
|
CPP: Simplify.
|
2019-01-30 18:36:32 +00:00 |
|
Geoffrey White
|
276738a435
|
CPP: Auto-format the query.
|
2019-01-30 18:36:32 +00:00 |
|
Geoffrey White
|
25e11512db
|
CPP: Add a test of ReturnStackAllocatedMemory.
|
2019-01-30 18:36:31 +00:00 |
|
Asger F
|
720f442ea5
|
JS: Rename to StaticClassMemberAsPropWrite
|
2019-01-30 15:49:21 +00:00 |
|
semmle-qlci
|
fc5b9dd55e
|
Merge pull request #837 from asger-semmle/hardcoded-empty-string
Approved by esben-semmle
|
2019-01-30 13:40:39 +00:00 |
|
semmle-qlci
|
24c8a47bb1
|
Merge pull request #841 from asger-semmle/private-higher-order-call
Approved by esben-semmle
|
2019-01-30 13:34:04 +00:00 |
|
Max Schaefer
|
17ce21c481
|
JavaScript: Remove an unused import in TrapTests.java.
|
2019-01-30 12:29:20 +00:00 |
|
Max Schaefer
|
5eba486d34
|
JavaScript: Clear per-function CFG caches after each function.
|
2019-01-30 12:29:20 +00:00 |
|
Esben Sparre Andreasen
|
cfc53ade69
|
JS: add more tests for js/incomplete-url-substring-sanitization
|
2019-01-30 12:57:03 +01:00 |
|
Joshua Hale
|
707f75f7ba
|
doc: remove - from command arguments
|
2019-01-30 11:36:48 +00:00 |
|
Felicity Chapman
|
54242f4009
|
Merge pull request #849 from jf205/locations
Update links to QL help topics in GH repo files (SD-2999)
|
2019-01-30 11:06:22 +00:00 |
|
Max Schaefer
|
769e407c24
|
JavaScript: Add new query PostMessageStar.
|
2019-01-30 10:26:43 +00:00 |
|
Calum Grant
|
9b7f4a8ce5
|
Merge pull request #845 from hvitved/csharp/get-type-non-null
C#: Teach guards library about `object.GetType()`
|
2019-01-30 10:08:05 +00:00 |
|
Calum Grant
|
722402fc89
|
Merge pull request #825 from hvitved/csharp/cfg/splitting-performance
C#: Improve performance of CFG split set computation
|
2019-01-30 10:05:25 +00:00 |
|
james
|
7cc1442ecb
|
Update link text
|
2019-01-30 09:44:07 +00:00 |
|
Mark Shannon
|
50a75d2b4f
|
Python: Fully module state of module using global variables and '$' pseudo-variable.
|
2019-01-30 09:34:17 +00:00 |
|
Esben Sparre Andreasen
|
321b3f1ab5
|
JS: use ports to sharpen js/incomplete-url-substring-sanitization
|
2019-01-30 10:18:00 +01:00 |
|
james
|
a98aae0a24
|
update links to lgtm.com/docs
|
2019-01-30 08:02:03 +00:00 |
|
james
|
81137aa7b4
|
update links to locations in .ql files
|
2019-01-30 08:02:02 +00:00 |
|
james
|
9d1a050f35
|
update links to locations in .qll files
|
2019-01-30 08:01:49 +00:00 |
|
calum
|
f39daaeeab
|
C#: Suppress cs/catch-of-all-exceptions
|
2019-01-29 18:22:12 +00:00 |
|
calum
|
d63df71a8a
|
C#: Fix merge conflict.
|
2019-01-29 18:15:33 +00:00 |
|
calum
|
423513169f
|
C#: Address review comments. Introduce Member::isEffectivelyPublic() because isEffectivelyPrivate and isEffectivelyInternal are almost always used together.
|
2019-01-29 18:05:29 +00:00 |
|
calum
|
26365c82f7
|
C#: Update change notes.
|
2019-01-29 18:04:52 +00:00 |
|
calum
|
931b6b4ee5
|
C#: Exclude interfaces and abstract classes from cs/call-to-object-tostring
|
2019-01-29 18:04:26 +00:00 |
|
Taus
|
83e2689645
|
Merge pull request #844 from markshannon/python-hide-magic-variables-in-test
Python tests: Further hiding of special ESSA variables in tests
|
2019-01-29 18:51:06 +01:00 |
|
Mark Shannon
|
4c0f123748
|
Python: switch from '*' to '$' pseudo variable to track module state.
|
2019-01-29 17:04:08 +00:00 |
|
Taus
|
08fcb984a8
|
Implement getACall suggestion.
|
2019-01-29 17:59:45 +01:00 |
|
Taus
|
3d7821c83a
|
Merge pull request #820 from markshannon/python-incomplete-url-sanitize
Python: Two new queries for URL and hostname sanitization (CWE-020).
|
2019-01-29 17:48:42 +01:00 |
|
Taus Brock-Nannestad
|
edd4468d08
|
Fix tests by stubbing relevant os functions.
|
2019-01-29 17:27:14 +01:00 |
|
Tom Hvitved
|
16d3399039
|
C#: Teach guards library about object.GetType()
|
2019-01-29 16:40:36 +01:00 |
|
Tom Hvitved
|
87bb4a1d56
|
C#: Add null guard test involving GetType()
|
2019-01-29 16:32:13 +01:00 |
|
Taus
|
6f7c96db54
|
Merge branch 'master' into python-unsafe-use-of-mktemp
|
2019-01-29 16:12:53 +01:00 |
|
Taus Brock-Nannestad
|
de63f01f67
|
Update change note.
|
2019-01-29 16:10:46 +01:00 |
|
Taus Brock-Nannestad
|
9a9d902cfb
|
Add support for os.tempnam and os.tmpnam.
|
2019-01-29 16:08:32 +01:00 |
|
Mark Shannon
|
9820249c71
|
Python tests: Further hiding of special ESSA variables in tests, to ease transition from '*' to '$' variable.
|
2019-01-29 15:06:47 +00:00 |
|
Mark Shannon
|
7fe3c3d516
|
Merge branch 'master' into python-mutating-descriptor
|
2019-01-29 14:46:33 +00:00 |
|
Taus
|
9adb19f3a9
|
Merge branch 'master' into python-incomplete-url-sanitize
|
2019-01-29 14:17:37 +01:00 |
|
Max Schaefer
|
e9500e8b75
|
JavaScript: Update trap tests.
|
2019-01-29 13:01:03 +00:00 |
|
Max Schaefer
|
6013b918fc
|
JavaScript: Extract tokens and comments before AST.
This allows us to discard token/comment information sooner, thereby reducing heap pressure for very large files.
|
2019-01-29 13:00:17 +00:00 |
|
Max Schaefer
|
aa54d67301
|
JavaScript: Update trap tests.
|
2019-01-29 12:59:42 +00:00 |
|
Max Schaefer
|
99a4f34b7a
|
JavaScript: Omit numlines for functions.
|
2019-01-29 12:59:33 +00:00 |
|
Max Schaefer
|
a480c6ecaa
|
JavaScript: Implement LoC counting for functions in QL.
|
2019-01-29 12:58:44 +00:00 |
|
Max Schaefer
|
c09c35a737
|
JavaScript: Update trap tests.
|
2019-01-29 12:58:41 +00:00 |
|
Max Schaefer
|
d6c3ae2fb4
|
JavaScript: Fix bug in extraction of next_token.
|
2019-01-29 12:58:32 +00:00 |
|
Max Schaefer
|
ea429f4fbe
|
JavaScript: Add test case exposing bug in getNextToken.
|
2019-01-29 12:50:31 +00:00 |
|
Jonas Jensen
|
d776d9f903
|
Merge pull request #821 from geoffw0/query-tags-case
CPP: Improve ArrayArgSizeMismatch.ql
|
2019-01-29 03:52:52 -08:00 |
|
Asger F
|
9e87bf37ea
|
JS: make higherOrderCall private
|
2019-01-29 11:50:46 +00:00 |
|