Tom Hvitved
|
bd09c61504
|
Merge pull request #8786 from hvitved/ruby/dataflow/argument-tokens
Ruby: Implement `Argument[any]` and `Argument[n..]`
|
2022-04-21 16:31:24 +02:00 |
|
Michael Nebel
|
0ec5aa6095
|
Merge pull request #8675 from michaelnebel/csharp/capturemodelimprovement
C#: CaptureModel improvements
|
2022-04-21 15:16:35 +02:00 |
|
Tom Hvitved
|
addb92f13b
|
Ruby: Handle captured variables in BarrierGuard::getAGuardedNode()
|
2022-04-21 13:25:47 +02:00 |
|
Tom Hvitved
|
325b451288
|
Ruby: Add barrier guards test involving captured variables
|
2022-04-21 13:25:40 +02:00 |
|
Michael Nebel
|
6180970ae7
|
C#: Address review comments.
|
2022-04-21 13:05:32 +02:00 |
|
Mathias Vorreiter Pedersen
|
74906fcbaf
|
Add exclusion rules for internal diagnostics queries to all the suite selectors (previously it was only excluded in the Code Scanning selector).
|
2022-04-21 10:11:26 +01:00 |
|
Tom Hvitved
|
b6309c9db0
|
Merge pull request #8792 from hvitved/csharp/exclude-model-generation-from-cs-suites
C#: Exclude model generation queries from all suites
|
2022-04-21 11:06:56 +02:00 |
|
Tom Hvitved
|
f65b6ae3d1
|
C#: Exclude model generation queries from all suites
|
2022-04-21 09:51:52 +02:00 |
|
Mathias Vorreiter Pedersen
|
966c6f108b
|
Merge pull request #8720 from MathiasVP/smaller-join-in-get-root-cause
C++: Remove TC from `Element.getRootCause`
|
2022-04-21 08:23:05 +01:00 |
|
Erik Krogh Kristensen
|
c1798c4ebd
|
remove redundant extends clause
|
2022-04-21 09:13:18 +02:00 |
|
Erik Krogh Kristensen
|
6007dfa101
|
fix qldoc in StoredXssCustomizations
Co-authored-by: Asger F <asgerf@github.com>
|
2022-04-21 09:11:08 +02:00 |
|
Erik Krogh Kristensen
|
b9a7c563d1
|
fix typo in change note
Co-authored-by: Asger F <asgerf@github.com>
|
2022-04-21 09:09:56 +02:00 |
|
Asger Feldthaus
|
c6e66edb97
|
JS: Change note
|
2022-04-21 08:32:01 +02:00 |
|
Harry Maclean
|
3ea6ba5398
|
Merge pull request #8618 from hmac/hmac/qlhelp-comment-workflow
Update existing qhelp comment, if it exists
|
2022-04-21 14:01:17 +12:00 |
|
Erik Krogh Kristensen
|
9927a82520
|
Merge pull request #8789 from erik-krogh/apiIpaBranches
JS/PY: mention newtype constructors in API graph label classes
|
2022-04-20 23:39:46 +02:00 |
|
Erik Krogh Kristensen
|
7e73ecceab
|
add change-note
|
2022-04-20 23:31:42 +02:00 |
|
Porcupiney Hairs
|
06edb3f3a1
|
fix formatting issues
|
2022-04-21 00:23:49 +05:30 |
|
Erik Krogh Kristensen
|
ff5b873557
|
Merge pull request #8773 from erik-krogh/exhaustion
JS: promote `js/resource-exhaustion` out of experimental
|
2022-04-20 19:33:42 +02:00 |
|
Erik Krogh Kristensen
|
9c5f3e9406
|
remove leftover debug comments
|
2022-04-20 18:42:46 +02:00 |
|
Erik Krogh Kristensen
|
aec8413487
|
PY: mention newtype constructors in API graph label classes
|
2022-04-20 18:38:44 +02:00 |
|
Erik Krogh Kristensen
|
ef51b46795
|
JS: mention newtype constructors in API graph label classes
|
2022-04-20 18:37:19 +02:00 |
|
Erik Krogh Kristensen
|
8bd975a6ec
|
Merge pull request #8785 from hvitved/ruby/api-graph-labels
Ruby: Mention `newtype` constructors in API graph label classes
|
2022-04-20 18:32:09 +02:00 |
|
Erik Krogh Kristensen
|
06394c8dc6
|
move storedXss sources to the Customizations file
|
2022-04-20 18:17:49 +02:00 |
|
Erik Krogh Kristensen
|
58fcdbc406
|
QL: remove some benign results from ql/abstract-class-import
|
2022-04-20 18:17:08 +02:00 |
|
Erik Krogh Kristensen
|
81ce8ac715
|
ATM: fix compiler warnings about unused variables
|
2022-04-20 18:10:59 +02:00 |
|
Erik Krogh Kristensen
|
4bc36d82f6
|
update expected output for ATM
|
2022-04-20 18:10:56 +02:00 |
|
Erik Krogh Kristensen
|
c1c66a0200
|
refactor CountAlertAndEndpoints to not refer to deprecated files
|
2022-04-20 18:10:56 +02:00 |
|
Erik Krogh Kristensen
|
c5f7df17ee
|
add .actual files to .gitignore for ATM tests
|
2022-04-20 18:10:56 +02:00 |
|
Erik Krogh Kristensen
|
1c5d59f885
|
fix an instance of ql/acronyms-should-be-pascal-case
|
2022-04-20 18:10:53 +02:00 |
|
Erik Krogh Kristensen
|
ea6b68fc59
|
add missing qldoc
|
2022-04-20 18:10:53 +02:00 |
|
Erik Krogh Kristensen
|
12e60c7a06
|
move TypeTestGuard to the Query.qll file
|
2022-04-20 18:10:53 +02:00 |
|
Erik Krogh Kristensen
|
b1bad271d5
|
only activate the PrefixString label in Query.qll files
|
2022-04-20 18:10:53 +02:00 |
|
Erik Krogh Kristensen
|
8a5b1668f9
|
move initialization of sanitizer-guards to Query.qll files
|
2022-04-20 18:10:53 +02:00 |
|
Erik Krogh Kristensen
|
73dbe44824
|
remove dead import
|
2022-04-20 18:10:53 +02:00 |
|
Erik Krogh Kristensen
|
8d3bd9d7cd
|
move the ExceptionXss sources into the Customizations file
|
2022-04-20 18:10:53 +02:00 |
|
Erik Krogh Kristensen
|
25708c5091
|
move the XssThroughDom sources into the Customizations file
|
2022-04-20 18:10:53 +02:00 |
|
Erik Krogh Kristensen
|
ad14bbae90
|
create a customizations file for StoredXss
|
2022-04-20 18:10:53 +02:00 |
|
Erik Krogh Kristensen
|
162a4992a5
|
move the ReflectedXss sources/sinks into the Customizations file
|
2022-04-20 18:10:53 +02:00 |
|
Erik Krogh Kristensen
|
173e1d0262
|
move the DomBasedXss sources/sinks into the Customizations file
|
2022-04-20 18:10:53 +02:00 |
|
Erik Krogh Kristensen
|
9631b68de9
|
move LocalUrlSanitizingGuard out of the customizations file
|
2022-04-20 18:10:52 +02:00 |
|
Arthur Baars
|
040dd09c5a
|
Merge pull request #8718 from github/sj/codeowners-pms
Update CODEOWNERS for documentation and license changes
|
2022-04-20 18:08:43 +02:00 |
|
Arthur Baars
|
98df392b4f
|
Merge pull request #8719 from github/sj/update-readme-license-explanation
Update README to clarify license explanation
|
2022-04-20 18:07:00 +02:00 |
|
AlexDenisov
|
a187939424
|
Merge pull request #8784 from AlexDenisov/alexdenisov/swift-package-test-sdk
Swift: package test SDK
|
2022-04-20 16:07:40 +02:00 |
|
Bas van Schaik
|
732a2c32a8
|
Update README.md
|
2022-04-20 15:03:49 +01:00 |
|
Anders Schack-Mulligen
|
677c436e99
|
Merge pull request #8703 from aschackmull/dataflow/revert-state-in-out-barriers
Dataflow: Revert support for flow-state based in-/out-barriers
|
2022-04-20 14:54:02 +02:00 |
|
Tom Hvitved
|
ea229d361c
|
Sync files
|
2022-04-20 13:55:18 +02:00 |
|
Tom Hvitved
|
b4542c58c2
|
Ruby: Implement Argument[any] and Argument[n..]
|
2022-04-20 13:55:18 +02:00 |
|
Rasmus Wriedt Larsen
|
bb6969a175
|
Merge branch 'main' into promote-xxe
|
2022-04-20 13:42:02 +02:00 |
|
Tom Hvitved
|
501b03149f
|
Ruby: Mention newtype constructors in API graph label classes
|
2022-04-20 13:37:55 +02:00 |
|
Nick Rolfe
|
9b2a98326c
|
Ruby: update use of PostUpdateNode now that it's public
|
2022-04-20 12:08:41 +01:00 |
|