Mathias Vorreiter Pedersen
|
b13123e66e
|
Merge pull request #9128 from github/release-prep/2.9.2
Release preparation for version 2.9.2
codeql-cli/v2.9.2
|
2022-05-12 13:04:08 +01:00 |
|
Mathias Vorreiter Pedersen
|
46f237efcb
|
Update ruby/ql/lib/change-notes/released/0.2.1.md
|
2022-05-12 11:47:26 +01:00 |
|
Mathias Vorreiter Pedersen
|
103c589c1d
|
Update python/ql/lib/change-notes/released/0.3.0.md
|
2022-05-12 11:47:19 +01:00 |
|
Mathias Vorreiter Pedersen
|
7b8c3bdcf9
|
Update ruby/ql/lib/CHANGELOG.md
|
2022-05-12 11:47:13 +01:00 |
|
Mathias Vorreiter Pedersen
|
499878a44d
|
Update python/ql/lib/CHANGELOG.md
|
2022-05-12 11:47:08 +01:00 |
|
Mathias Vorreiter Pedersen
|
f76d52407d
|
Update java/ql/lib/change-notes/released/0.2.1.md
|
2022-05-12 11:47:01 +01:00 |
|
Mathias Vorreiter Pedersen
|
1143b48338
|
Update java/ql/lib/CHANGELOG.md
|
2022-05-12 11:46:53 +01:00 |
|
Mathias Vorreiter Pedersen
|
55ce069e30
|
Update java/ql/lib/change-notes/released/0.2.1.md
|
2022-05-12 11:43:55 +01:00 |
|
Mathias Vorreiter Pedersen
|
43265c4133
|
Update python/ql/lib/change-notes/released/0.3.0.md
|
2022-05-12 11:43:39 +01:00 |
|
Mathias Vorreiter Pedersen
|
b069d1bd17
|
Update python/ql/lib/CHANGELOG.md
|
2022-05-12 11:43:33 +01:00 |
|
Mathias Vorreiter Pedersen
|
eb3a35eaea
|
Update java/ql/src/change-notes/released/0.1.2.md
|
2022-05-12 11:43:27 +01:00 |
|
Mathias Vorreiter Pedersen
|
11707f8522
|
Update java/ql/src/CHANGELOG.md
|
2022-05-12 11:43:19 +01:00 |
|
Mathias Vorreiter Pedersen
|
2ef976a152
|
Update java/ql/src/CHANGELOG.md
|
2022-05-12 11:43:08 +01:00 |
|
Mathias Vorreiter Pedersen
|
22bdde6eaa
|
Update java/ql/lib/change-notes/released/0.2.1.md
|
2022-05-12 11:43:01 +01:00 |
|
Mathias Vorreiter Pedersen
|
e9e8f3810b
|
Update java/ql/lib/CHANGELOG.md
|
2022-05-12 11:41:20 +01:00 |
|
Mathias Vorreiter Pedersen
|
1f7eefe95c
|
Update java/ql/lib/CHANGELOG.md
|
2022-05-12 11:41:13 +01:00 |
|
github-actions[bot]
|
ee9980b31c
|
Release preparation for version 2.9.2
|
2022-05-12 10:17:28 +00:00 |
|
Anders Schack-Mulligen
|
e0c74d4390
|
Merge pull request #9124 from github/workflow/coverage/update
Update CSV framework coverage reports
|
2022-05-12 09:06:07 +02:00 |
|
Anders Schack-Mulligen
|
fad7d9ae72
|
Merge pull request #9120 from igfoo/igfoo/fixes
Kotlin: Fix some alerts
|
2022-05-12 08:29:34 +02:00 |
|
Erik Krogh Kristensen
|
6014614a31
|
Merge pull request #9103 from erik-krogh/nextParam
JS: add support for typed NextJS route-handlers
|
2022-05-12 08:18:26 +02:00 |
|
github-actions[bot]
|
acaf4517c0
|
Add changed framework coverage reports
|
2022-05-12 00:17:30 +00:00 |
|
Chris Smowton
|
85dc1090fe
|
Merge pull request #9116 from smowton/smowton/feature/accept-conditional-cookie-security
Java: tolerate `cookie.setSecure(request.isSecure())`
|
2022-05-11 21:29:14 +01:00 |
|
Tom Hvitved
|
46ab25b61e
|
Merge pull request #9098 from aschackmull/dataflow/perf
Dataflow: Performance fixes
|
2022-05-11 20:41:48 +02:00 |
|
Ian Lynagh
|
33e17f1665
|
Kotlin: Fix some alerts
|
2022-05-11 17:58:50 +01:00 |
|
Ian Lynagh
|
cfde0a1491
|
Merge pull request #9109 from igfoo/igfoo/kotlin_merge
Initial Kotlin support
|
2022-05-11 16:16:22 +01:00 |
|
Tony Torralba
|
5be30209c1
|
Merge pull request #9036 from luchua-bc/java/hardcoded-jwt-key
Java: CWE-321 Query to detect hardcoded JWT secret keys
|
2022-05-11 16:31:34 +02:00 |
|
Henry Mercer
|
6ecc542ca3
|
Merge pull request #9117 from github/henrymercer/java/tag-telemetry
Java: Tag telemetry queries with `telemetry`
|
2022-05-11 15:13:35 +01:00 |
|
Henry Mercer
|
a626078423
|
Merge pull request #9118 from github/henrymercer/csharp/tag-telemetry
C#: Tag telemetry queries with `telemetry`
|
2022-05-11 15:13:29 +01:00 |
|
Anders Schack-Mulligen
|
4884520ee1
|
Dataflow: Review fix.
|
2022-05-11 15:40:49 +02:00 |
|
Chris Smowton
|
f7e1f3e1a5
|
Remove URL fragment from Google search
|
2022-05-11 14:38:09 +01:00 |
|
Tom Hvitved
|
333780e635
|
Merge pull request #8898 from hvitved/dataflow/clear-expect-summary-components
Data flow: Introduce 'with/without content' summary components
|
2022-05-11 15:16:42 +02:00 |
|
Ian Lynagh
|
c0a755e061
|
Merge remote-tracking branch 'upstream/main' into igfoo/kotlin_merge
Resolving conflicts:
java/ql/lib/semmle/code/java/Expr.qll
|
2022-05-11 14:13:09 +01:00 |
|
Rasmus Wriedt Larsen
|
46f309c373
|
Merge pull request #6360 from jorgectf/jorgectf/python/insecure-cookie
Python: Add cookie security-related queries
|
2022-05-11 14:47:11 +02:00 |
|
Henry Mercer
|
b6f1ddcdab
|
Java: Tag telemetry queries with telemetry
This will exclude the results of these queries from the summary tables
produced by `codeql database analyze` in a future version of the CodeQL
CLI.
|
2022-05-11 13:29:25 +01:00 |
|
Henry Mercer
|
cdd6e0e104
|
C#: Tag telemetry queries with telemetry
This will exclude the results of these queries from the summary tables
produced by `codeql database analyze` in a future version of the CodeQL
CLI.
|
2022-05-11 13:27:49 +01:00 |
|
Rasmus Wriedt Larsen
|
cff950f5f7
|
Python: Fix select of py/insecure-cookie
|
2022-05-11 14:06:30 +02:00 |
|
Anders Schack-Mulligen
|
9a4d86e9b4
|
Merge pull request #8571 from Marcono1234/marcono1234/statement-expression
Java: Add `ValueDiscardingExpr`
|
2022-05-11 13:37:24 +02:00 |
|
Rasmus Wriedt Larsen
|
fc8633cc01
|
Python: Fix select for py/cookie-injection
|
2022-05-11 13:18:14 +02:00 |
|
Chris Smowton
|
0044326884
|
Add change note
|
2022-05-11 12:06:27 +01:00 |
|
Chris Smowton
|
c17ef42cc7
|
Insecure cookie query: accept ServletRequest.isSecure(), and allow more than one possible input to a setSecure(...) call.
|
2022-05-11 11:59:37 +01:00 |
|
luchua-bc
|
f85c01c975
|
Correct string source
|
2022-05-11 10:37:22 +00:00 |
|
Chris Smowton
|
1af0e9b619
|
Servlets.qll: don't use deprecated library visiblity modifier.
|
2022-05-11 11:31:14 +01:00 |
|
Arthur Baars
|
a47e429945
|
Merge pull request #8909 from aibaars/tree-sitter-update
Tree sitter update
|
2022-05-11 12:02:14 +02:00 |
|
Rasmus Wriedt Larsen
|
add6579385
|
Merge pull request #9022 from RasmusWL/ruby-fix
Ruby: Fix `isLocalSourceNode` implementation
|
2022-05-11 11:52:44 +02:00 |
|
Rasmus Wriedt Larsen
|
27b99c51e9
|
Python: Add placeholder precision for py/insecure-cookie
|
2022-05-11 11:36:06 +02:00 |
|
Rasmus Wriedt Larsen
|
a902d3d8f0
|
Python: Add security-severity for py/insecure-cookie
Matching the Java query
7d4767a4f5/java/ql/src/Security/CWE/CWE-614/InsecureCookie.ql (L7)
|
2022-05-11 11:34:16 +02:00 |
|
Rasmus Wriedt Larsen
|
84ad45c665
|
Python: Fix Django import
|
2022-05-11 11:33:35 +02:00 |
|
Rasmus Wriedt Larsen
|
d127d2164a
|
Merge branch 'main' into jorgectf/python/insecure-cookie
|
2022-05-11 11:13:47 +02:00 |
|
Anders Schack-Mulligen
|
25336df302
|
Merge pull request #8873 from atorralba/atorralba/android-startactivity-flowstep
Java: Add flow step from startActivity to getIntent
|
2022-05-11 11:08:08 +02:00 |
|
Anders Schack-Mulligen
|
c217a1e502
|
Update java/ql/lib/semmle/code/java/Expr.qll
|
2022-05-11 11:03:13 +02:00 |
|