33884 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
Asger Feldthaus	87aa39cef2	JS: Limited tracking of object literals with methods	2021-11-09 11:06:41 +01:00
Asger F	0c6680b2c0	Revert "JS: Skip files with unsupported file encoding"	2021-11-09 09:07:54 +00:00
ihsinme	55fe01018f	Update InsecureTemporaryFile.ql	2021-11-09 09:33:33 +03:00
ihsinme	8ddfea1dee	Update cpp/ql/src/experimental/Security/CWE/CWE-200/ExposureSensitiveInformationUnauthorizedActor.qhelp ... Co-authored-by: Geoffrey White <40627776+geoffw0@users.noreply.github.com>	2021-11-09 09:20:39 +03:00
Asger Feldthaus	f14f9449ee	JS: Use getAMatchedString instead of getConstantString	2021-11-08 15:35:35 +01:00
Asger Feldthaus	b3e64f1669	JS: Add test	2021-11-08 15:32:43 +01:00
Erik Krogh Kristensen	330c2c42b5	Merge pull request #7075 from erik-krogh/cwe297 ... JS: add cwe-297 to `js/disabling-certificate-validation`	2021-11-08 14:35:58 +01:00
Erik Krogh Kristensen	5cafb86c88	Merge pull request #7074 from erik-krogh/cwe942 ... JS: add cwe-942 to `js/cors-misconfiguration-for-credentials`	2021-11-08 14:35:53 +01:00
Rasmus Lerchedahl Petersen	3f4c2ba24e	Python: Support debugging inline taint tests ... The module `Conf` is created so that it can be imported without importing the query predicates from the same file.	2021-11-08 14:08:11 +01:00
Anders Schack-Mulligen	1e0eb2f6e4	Merge pull request #7072 from aschackmull/java/nomagic-synchsetunsynchget ... Java: Fix bad magic in SynchSetUnsynchGet.	2021-11-08 13:48:22 +01:00
Alex Ford	2581efc18a	ruby: downgrade rb/hardcoded-credentials precision from high to medium	2021-11-08 12:32:38 +00:00
Erik Krogh Kristensen	a2175a3207	add cwe-297 to js/disabling-certificate-validation	2021-11-08 13:26:53 +01:00
Erik Krogh Kristensen	507c8addb2	add cwe-942 to js/cors-misconfiguration-for-credentials	2021-11-08 13:12:19 +01:00
Cornelius Riemenschneider	76d2665132	Merge pull request #7071 from github/criemen/simplify-csharp-tracing-config ... C#: Remove macos compatibility stanzas from tracing config.	2021-11-08 13:11:44 +01:00
james	96ff2f5125	use correct type of link	2021-11-08 12:06:20 +00:00
james	dfe77f844f	fix errors in debugging-data-flow-queries-using-partial-flow.rst	2021-11-08 11:59:53 +00:00
Erik Krogh Kristensen	0ab510f543	add test that requires flowToExpr	2021-11-08 12:25:45 +01:00
james	c94bfc306a	improve links	2021-11-08 11:18:41 +00:00
Erik Krogh Kristensen	3d6a5263e0	improve qhelp ... Co-authored-by: Esben Sparre Andreasen <esbena@github.com>	2021-11-08 12:02:39 +01:00
Mathias Vorreiter Pedersen	8e496f7121	C++: Pull in the latest changes to 'SsaImplCommon'.	2021-11-08 10:46:54 +00:00
Mathias Vorreiter Pedersen	fff5d293ff	Merge branch 'main' into use-shared-ssa-in-ir-dataflow	2021-11-08 10:44:36 +00:00
Anders Schack-Mulligen	92fb7f555c	Java: Fix bad magic in SynchSetUnsynchGet.	2021-11-08 11:42:20 +01:00
Cornelius Riemenschneider	03ff2c622a	Remove macos compatibility stanzas from tracing config.	2021-11-08 11:30:31 +01:00
Anders Schack-Mulligen	613e971987	Merge pull request #7039 from github/turbo-js-java-lib-modeling-ghes-3-3-p-1 ... Add updated framework support for JS/Java	2021-11-08 11:08:34 +01:00
CodeQL CI	6f80387ac1	Merge pull request #6993 from asgerf/js/tainted-path-regexp-contains-check ... Approved by erik-krogh	2021-11-08 01:52:28 -08:00
CodeQL CI	618d135b0a	Merge pull request #7060 from RasmusWL/hashlib-new-type-tracker ... Approved by yoff	2021-11-08 01:31:40 -08:00
Tom Hvitved	77aca0a365	Merge pull request #7041 from hvitved/csharp/consistent-ids ... C#: Use `cs/` prefix in all query IDs	2021-11-08 09:55:11 +01:00
Anders Schack-Mulligen	85fdbda16f	Merge pull request #7002 from aschackmull/java/field-node ... Java: Add FieldValueNode to break up cartesian step relation.	2021-11-08 09:31:42 +01:00
Mathias Vorreiter Pedersen	021d9415b8	Merge branch 'main' into use-range-analysis-in-buffer-write	2021-11-08 08:22:49 +00:00
Anders Schack-Mulligen	e0b121cd90	Merge pull request #7047 from hvitved/csharp/ssa/dominance-frontier ... Shared SSA: Improved dominance frontier calculation	2021-11-08 08:50:46 +01:00
Pierre	4af3775b72	Add requirements for Apple Silicon	2021-11-08 01:37:31 +01:00
Chris Smowton	b639e82d79	Merge pull request #7064 from github/workflow/coverage/update ... Update CSV framework coverage reports	2021-11-05 09:27:25 +00:00
ihsinme	cedc5fd743	Update InsecureTemporaryFile.ql	2021-11-05 09:42:06 +03:00
github-actions[bot]	d7bfaec0f5	Add changed framework coverage reports	2021-11-05 00:09:28 +00:00
Mathias Vorreiter Pedersen	34aa4981be	Merge pull request #7018 from geoffw0/nullterm3 ... C++: Further performance improvement for the null termination queries	2021-11-04 21:37:58 +00:00
Mathias Vorreiter Pedersen	a9b7fed537	C++: Accept test changes.	2021-11-04 21:25:37 +00:00
Mathias Vorreiter Pedersen	ac90259906	C++: Teach 'getMaxConvertedLength' to use 'SimpleRangeAnalysis'.	2021-11-04 21:25:28 +00:00
Mathias Vorreiter Pedersen	693baae1ba	C++: Add test cases with false positives due to missing range analysis in 'cpp/overrunning-write'.	2021-11-04 21:13:28 +00:00
Alex Ford	5f78bbbf52	add missing documentation	2021-11-04 21:07:54 +00:00
Ethan Palm	f1ac23eff5	Merge pull request #7040 from ethanpalm/extractor-options-docs ... New docs for extractor options	2021-11-04 13:53:22 -07:00
Ethan P	fab3479f68	Fix numbered lists	2021-11-04 13:41:59 -07:00
Ethan P	457ece152a	Fix list formatting	2021-11-04 13:31:52 -07:00
Ethan P	5bfe0fff89	Test using dash for LIs	2021-11-04 13:20:00 -07:00
Ethan P	10e5a8b3e5	Adjust spacing	2021-11-04 13:18:37 -07:00
Alex Ford	543bd28b03	add a change note for rb/csrf-protection-disabled	2021-11-04 20:14:54 +00:00
Ethan P	ad2b068429	fix list formatting	2021-11-04 13:05:22 -07:00
Alex Ford	d324f9397c	qhelp for rb/csrf-protection-disabled	2021-11-04 19:56:56 +00:00
Alex Ford	25da904314	test cases for rb/csrf-protection-disabled	2021-11-04 19:56:56 +00:00
Alex Ford	4666024419	model some ways to configure Rails	2021-11-04 19:56:56 +00:00
Alex Ford	91f99ed2a1	model skip_forgery_protection calls in ActionController classes	2021-11-04 19:56:56 +00:00