hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2025-12-17 01:03:14 +01:00
Code Issues Packages Projects Releases Wiki Activity

Commit Graph

  • 9e2bf76a7f Rust: Add XSS sinks for Actix and Warp Simon Friis Vindum 2025-11-24 15:41:17 +01:00
  • ae9c753371 Rust: Add XSS query Simon Friis Vindum 2025-11-24 15:22:42 +01:00
  • 0f4561efc3 Rust: Add XSS examples Simon Friis Vindum 2025-11-24 15:10:51 +01:00
  • 555301cec7 Merge pull request #20874 from igfoo/igfoo/overlay Ian Lynagh 2025-11-24 14:11:09 +00:00
  • 1a59839f3c Range library recognises long literals now Owen Mansel-Chan 2025-11-24 14:10:54 +00:00
  • e37336d550 No need for getUnderlyingExpr to look through casts Owen Mansel-Chan 2025-11-24 14:10:20 +00:00
  • 0487e0622a C++: Accept test changes from tests that use getAQlClass. Mathias Vorreiter Pedersen 2025-11-24 14:04:35 +00:00
  • dada49f402 Fix qldoc and tests Joe Farebrother 2025-11-24 13:57:43 +00:00
  • 551e7ada5c Rust: Refine Self resolution inside impl blocks Tom Hvitved 2025-11-12 13:40:54 +01:00
  • 17c3ee1745 Rust: More path resolution tests Tom Hvitved 2025-11-12 13:40:39 +01:00
  • 6bae58e29c C++: Accept more test changes. Mathias Vorreiter Pedersen 2025-11-24 12:35:19 +00:00
  • ecb80cb4fc C++: Represent field content using a column that is shared by all template instantiations. Mathias Vorreiter Pedersen 2025-11-20 19:57:18 +00:00
  • fd566780a6 Update cpp/ql/lib/semmle/code/cpp/dataflow/ExternalFlow.qll Mathias Vorreiter Pedersen 2025-11-24 12:17:06 +00:00
  • 43111b8eaa Merge pull request #20716 from hvitved/rust/path-resolution-variable-impl Tom Hvitved 2025-11-24 13:08:53 +01:00
  • 98879d0f1a C++: Accept test changes. Mathias Vorreiter Pedersen 2025-11-24 12:06:38 +00:00
  • 732e55df11 C++: Ignore template non-type parameters in MaD signature matching. Mathias Vorreiter Pedersen 2025-11-24 12:06:24 +00:00
  • ac644b257a Merge pull request #20848 from hvitved/rust/ranked-forex-rename Tom Hvitved 2025-11-24 13:05:58 +01:00
  • c7a0411c55 Merge pull request #20892 from hvitved/rust/builtin-mut-placeholders Tom Hvitved 2025-11-24 13:05:15 +01:00
  • c9e9322143 C++: Add an example of missing MaD supporrt for non-type template parameters. Mathias Vorreiter Pedersen 2025-11-24 12:02:54 +00:00
  • a83c70f99d Add tests Joe Farebrother 2025-11-24 11:03:16 +00:00
  • 192f254b41 Merge branch 'main' into 20823-globalVarRef-document-defaultView Eliav2 2025-11-23 22:03:30 +02:00
  • 17e1e1713e Rust: Add placeholder declarations for &mut and *mut Tom Hvitved 2025-11-23 20:24:05 +01:00
  • b16f8c20a9 Update rust/ql/lib/codeql/rust/internal/PathResolution.qll Tom Hvitved 2025-11-23 19:05:24 +01:00
  • b62968fa0f Rust: Spelling. Geoffrey White 2025-11-22 09:22:33 +00:00
  • 993154ed57 Rust: Avoid duplicating sinks. Geoffrey White 2025-11-21 19:33:40 +00:00
  • 0ea28b4026 Rust: Test .expected changes. Geoffrey White 2025-11-21 18:56:53 +00:00
  • ff8032a4ec Rust: Fix after merge. Geoffrey White 2025-11-21 18:53:57 +00:00
  • eb674d08d6 Rust: Reinstate the original function names model but call it a heuristic now. Geoffrey White 2025-11-21 18:45:47 +00:00
  • 2ce4c47646 Rust: More sinks from the MRVA-1000. Geoffrey White 2025-11-21 18:43:35 +00:00
  • 80615056c0 Merge remote-tracking branch 'upstream/main' into cert-checks Geoffrey White 2025-11-21 18:40:40 +00:00
  • 9b65a33b4a Add ECB and CBC block mode test cases copilot-swe-agent[bot] 2025-11-21 18:32:39 +00:00
  • 988aca1f85 Rust: Correct QLDoc comment. Geoffrey White 2025-11-21 18:13:08 +00:00
  • 2c22f94852 Initial plan copilot-swe-agent[bot] 2025-11-21 18:10:43 +00:00
  • 03fc4cb0aa Merge remote-tracking branch 'upstream/main' into access-invalid-pointer-fp Geoffrey White 2025-11-21 17:39:56 +00:00
  • 9db1722060 Rust: Accept consistency check changes. Geoffrey White 2025-11-21 17:35:34 +00:00
  • e01c871b70 Rust: Accept changes to the dataflow/sources/file test. Geoffrey White 2025-11-21 17:12:23 +00:00
  • 3ad014b2f9 Rust: Additional sinks found in MRVA-1000. Geoffrey White 2025-11-21 16:33:59 +00:00
  • ace7a77fd6 Rust: Switch to MaD models. Geoffrey White 2025-11-21 16:01:59 +00:00
  • 785754ec65 Rust: Switch the query to taint flow, since some taint summaries are relevant now. Geoffrey White 2025-11-21 14:15:15 +00:00
  • 89a9c46547 Rust: Second change note. Geoffrey White 2025-11-21 14:46:26 +00:00
  • aca7877be2 Rust: Add some missing path / file metadata models. Geoffrey White 2025-11-21 13:42:22 +00:00
  • 8145264b77 Rust: Add threat model sources as additional sources for the query. Geoffrey White 2025-11-20 19:01:16 +00:00
  • 2da0814f65 Rust: Add test case involving taint. Geoffrey White 2025-11-20 19:15:33 +00:00
  • b1ed72d760 Merge pull request #20886 from aschackmull/java/rangeanalysis-longliterals Anders Schack-Mulligen 2025-11-21 13:35:14 +01:00
  • d2fc6a7b5b Merge branch 'main' into java-kotlin-sensitive-logging-substring-barriers Owen Mansel-Chan 2025-11-21 12:20:04 +00:00
  • 51e1bda608 JS: Move isTypeOnly() check into a direct check, instead of an override Asger F 2025-11-21 13:10:32 +01:00
  • 298e4cfcc5 Java: Recognize int-sized long literals. Anders Schack-Mulligen 2025-11-21 12:53:39 +01:00
  • 9c4f85f15b JS: Split getSourceNode into getDirectSourceNode and getReExportedSourceNode Asger F 2025-11-21 12:42:30 +01:00
  • 94566e5e1e JS: Remove unnecessary override in OriginalExportDeclaration Asger F 2025-11-21 12:42:10 +01:00
  • 3a393ecd54 Fixup! qldoc for reExportsAs Asger F 2025-11-21 12:41:34 +01:00
  • 60826bd18a Merge pull request #20837 from michaelnebel/csharp/dotnet10 Michael Nebel 2025-11-21 12:41:08 +01:00
  • 638c98bba3 Merge pull request #20832 from michaelnebel/csharp/dependencycaching Michael Nebel 2025-11-21 12:38:28 +01:00
  • 78c8ab11f2 JS: Split exportsAs into exportsDirectlyAs and reExportsAs Asger F 2025-11-21 12:31:34 +01:00
  • 74d725ef21 JS: Remove unnecessary override in OriginalExportDeclaration Asger F 2025-11-21 12:31:09 +01:00
  • 6c7370ea95 C++: Add up/downgrade scripts Ian Lynagh 2025-11-21 11:30:58 +00:00
  • c2f96b94e3 C++: Update stats Ian Lynagh 2025-11-21 11:28:16 +00:00
  • d5399300e9 C++: Add databaseMetadata and overlayChangedFiles tables to dbscheme Ian Lynagh 2025-11-19 15:32:38 +00:00
  • 8d72040e8f Merge pull request #20772 from aschackmull/java/ssa-deprecate Anders Schack-Mulligen 2025-11-21 12:30:31 +01:00
  • ce9986c449 JS: Change signature of isShadowedFromBulkExport Asger F 2025-11-21 12:30:31 +01:00
  • ec381e4ec5 Use range analysis and improve tests Owen Mansel-Chan 2025-11-21 10:31:50 +00:00
  • 5c454d23e8 C#: Fix typo. Michael Nebel 2025-11-21 10:18:41 +01:00
  • 138441b662 C#: Address review comments. Michael Nebel 2025-11-17 16:03:53 +01:00
  • 90dbb7a8eb C#: Add change note. Michael Nebel 2025-11-17 12:50:18 +01:00
  • 2700843a9c C#: Add an integration test for setting the dependency directory in BMN. Michael Nebel 2025-11-17 12:01:59 +01:00
  • 1256ccf2eb C#: Add extractor option for buildless dependency directory. Michael Nebel 2025-11-13 14:33:25 +01:00
  • e76e7ab26a C#: Read from dependency directory from extractor option. Michael Nebel 2025-11-13 14:31:02 +01:00
  • 30d68d8906 Java: Add missing deprecated annotations. Anders Schack-Mulligen 2025-11-07 11:33:52 +01:00
  • ce136684e6 Fixed formatting aegilops 2025-11-20 17:39:32 +00:00
  • e904520779 Fixed formatting aegilops 2025-11-20 17:34:42 +00:00
  • 29a5b27b13 Removed bounds checking and only using literals - bounded() predicate did not work aegilops 2025-11-20 17:31:56 +00:00
  • 794b328802 Bazel: remove unneeded file from registry Paolo Tranquilli 2025-11-20 17:07:09 +01:00
  • 195a7234d3 Merge branch 'main' into redsun82/update-fmt Paolo Tranquilli 2025-11-20 17:06:24 +01:00
  • 132f02c51b Update rust/ql/lib/codeql/rust/internal/PathResolution.qll Tom Hvitved 2025-11-20 14:34:02 +01:00
  • 6df789d114 Merge branch 'main' into 20823-globalVarRef-document-defaultView Eliav2 2025-11-20 15:18:15 +02:00
  • 91451b73ef javascript: Update expected results for global variable references eliav 2025-11-20 15:15:06 +02:00
  • 14f9997eb3 Merge pull request #20862 from MathiasVP/union-content-field-content-common-base-class Mathias Vorreiter Pedersen 2025-11-20 13:14:29 +00:00
  • 801cd72965 Merge branch 'main' into java-kotlin-sensitive-logging-substring-barriers Paul Hodgkinson 2025-11-20 12:24:22 +00:00
  • 1e67907516 Merge commit aegilops 2025-11-20 12:22:39 +00:00
  • 62ee6d3a33 Made changes requested by reviewers - bounded() for range checking, style and better comments aegilops 2025-11-20 11:46:42 +00:00
  • 240c637e7a Merge pull request #20868 from github/redsun82/java-doc Paolo Tranquilli 2025-11-20 12:08:16 +01:00
  • 05085a8e82 Merge pull request #20666 from owen-mc/go/promote-weak-crypto-algorithm Owen Mansel-Chan 2025-11-20 11:03:05 +00:00
  • 9c3f4e2bfb Add changenote Joe Farebrother 2025-11-20 10:59:05 +00:00
  • 0f40b3ccb8 Merge pull request #20842 from hvitved/rust/path-resolution-extern-crate-visibility Tom Hvitved 2025-11-20 11:59:05 +01:00
  • cdc44c3267 Model tornado websockets Joe Farebrother 2025-11-14 09:58:52 +00:00
  • ba06990290 Add socketio models Joe Farebrother 2025-11-20 10:47:41 +00:00
  • 4d4a677da0 Merge pull request #20869 from hvitved/rust/dataflow-ast Tom Hvitved 2025-11-20 11:34:40 +01:00
  • 613895e0c0 Merge pull request #20424 from asgerf/js/overlay-manual-v4 Asger F 2025-11-20 11:10:46 +01:00
  • d4fdf956a0 Address review comments Tom Hvitved 2025-11-20 11:03:53 +01:00
  • b54abc7a6d C++: move -DFMT_UNICODE into a module patch Paolo Tranquilli 2025-11-20 10:47:54 +01:00
  • 08dfb95155 javascript: Add change note for document.defaultView aliasing window eliav 2025-11-20 00:17:14 +02:00
  • b293dfe3a6 C++: Fix CWE-119 memcpy tests Mingjie Shen 2025-11-19 22:06:06 +00:00
  • e4853ab060 Add change note Tom Hvitved 2025-11-19 13:18:13 +01:00
  • d2bb53a81e Rust: Run codegen Tom Hvitved 2025-11-19 13:31:24 +01:00
  • 489fff9572 Rust: Base DataFlow::Node on AST instead of CFG Tom Hvitved 2025-11-19 11:55:22 +01:00
  • 42f0ce74ca C++: Enable overlay compilation Ian Lynagh 2025-11-14 17:34:12 +00:00
  • 6c4def13b4 C++: Add change note. Mathias Vorreiter Pedersen 2025-11-19 17:23:39 +00:00
  • 4c09e554fc Merge branch 'main' into union-content-field-content-common-base-class Mathias Vorreiter Pedersen 2025-11-19 17:17:45 +00:00
  • 0c43f2c4f0 Merge pull request #20870 from jketema/exp-arg-fix Jeroen Ketema 2025-11-19 17:10:56 +01:00
  • a70d74220f Add test for good password hashing Owen Mansel-Chan 2025-11-18 22:56:49 +00:00
  • f562b3d26e Make line differences in test comments relative Owen Mansel-Chan 2025-11-18 22:51:26 +00:00