hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-01-29 14:23:03 +01:00
Code Issues Packages Projects Releases Wiki Activity
Files
0eb7ac94cc6af1a522374e2fc7e6949d19c8fc33
codeql/change-notes
History
Chris Smowton 0eb7ac94cc Add stack-trace exposure query 
This is a port of `java/stack-trace-exposure`, and does the same job: warn that a stack dump is written to an HTTP response.
2020-10-06 14:42:59 +01:00
..
1.23
Minor text changes
2019-11-25 15:48:58 +00:00
1.24
Minor editorial changes
2020-04-17 13:19:11 +01:00
2020-04-30-syscall-functions.md
Add change note for github/codeql-go#125
2020-08-26 07:20:24 +01:00
2020-05-01-bad-redirect-check.md
Switch to new-style change notes.
2020-05-01 07:57:13 +01:00
2020-05-01-macaron-model.md
Switch to new-style change notes.
2020-05-01 07:57:13 +01:00
2020-05-05-clear-text-logging.md
Add change note for CleartextLogging.
2020-05-05 12:05:09 +01:00
2020-05-05-mux-model.md
Add support for Mux library
2020-05-05 03:25:08 -07:00
2020-05-07-update-data-flow.md
Add change note.
2020-05-07 11:46:31 +01:00
2020-05-11-reflected-xss.md
Add change note
2020-05-13 04:31:23 -07:00
2020-05-12-tainted-path.md
TaintedPath: Add change note for tempfiles
2020-05-12 05:44:19 -07:00
2020-05-13-io-model.md
Add change note.
2020-05-13 15:55:52 +01:00
2020-05-18-redundant-recover.md
Update change-notes/2020-05-18-redundant-recover.md
2020-05-19 06:31:47 +01:00
2020-05-20-mongodb-model.md
Add change note.
2020-05-20 10:10:28 +01:00
2020-05-20-request-forgery-sanitizers.md
Add change note for https://github.com/github/codeql-go/pull/107
2020-08-26 07:21:05 +01:00
2020-05-22-websocket-model.md
Add change note.
2020-05-22 11:11:58 +01:00
2020-05-29-open-redirect.md
Consider Request.FormValue(...) as a source for URL redirects.
2020-05-29 15:03:05 +01:00
2020-06-12-more-dependency-extraction.md
Clarify change note
2020-06-24 23:29:55 -07:00
2020-06-16-email-injection.md
Add change note
2020-06-16 15:48:39 +01:00
2020-06-17-reflected-xss-refinements.md
Add change note for reflected xss regexp fixes
2020-06-17 00:28:03 -07:00
2020-06-19-call-graph.md
Add change note.
2020-06-22 09:22:47 +01:00
2020-06-19-cyclic-field-lookup.md
Fix field lookup in cyclic structs.
2020-06-19 08:16:09 +01:00
2020-06-19-switch-block-without-test.md
Add change note for https://github.com/github/codeql-go/pull/226
2020-08-26 07:46:56 +01:00
2020-06-24-clear-text-logging.md
Add change note.
2020-07-02 12:03:43 +01:00
2020-06-24-open-redirect.md
Add change note.
2020-06-25 22:23:49 +01:00
2020-06-26-taint-model-tar-zip.md
Add change note for https://github.com/github/codeql-go/pull/251
2020-08-26 07:58:19 +01:00
2020-06-26-taint-through-range.md
Add change note.
2020-06-26 11:20:45 +01:00
2020-07-06-repo-with-file-url-origin.md
Add change note for https://github.com/github/codeql-go/pull/277
2020-08-26 10:54:18 +01:00
2020-07-06-tolerate-more-unreachable-returns.md
UnreachableStatement: tolerate more harmless unreachable return statements
2020-07-06 17:02:26 +01:00
2020-07-07-missing-error-check.md
Add query searching for missing error checks on functions that return a (pointer, error) pair
2020-07-09 13:06:31 +01:00
2020-07-15-insecure-tls.md
Add change note for insecure-TLS query
2020-07-28 11:55:58 +01:00
2020-07-22-ssh-host-checking.md
Promote CWE-322 out of experimental status
2020-07-29 14:43:47 +01:00
2020-07-28-library-models.md
Remove blank lines from changenote
2020-08-20 11:45:29 +01:00
2020-08-05-incorrect-integer-conversion.md
Add change note
2020-08-10 11:04:25 +01:00
2020-08-07-negative-length-check.md
Extend negativeLengthCheck query to unsigned integers
2020-08-11 10:48:03 +01:00
2020-08-18-oauth2.md
Promote OAuth2 constant-state query to mainline
2020-09-02 15:05:22 +01:00
2020-08-19-gin-model.md
Add change note for Gin framework
2020-08-25 10:29:42 +01:00
2020-08-28-allocation-size-overflow-sanitizers.md
Add change note for #296
2020-09-08 16:32:12 +01:00
2020-09-10-gorm-model-improved.md
Add change note
2020-09-10 17:29:06 +01:00
2020-09-10-xss-false-positives.md
Reflected XSS query: exclude more uses of encoding/json.Marshal
2020-09-10 16:52:06 +01:00
2020-09-15-chi.md
Add models for the Chi web framework
2020-09-16 09:14:23 +01:00
2020-09-17-echo.md
Add models for the Echo framework
2020-09-21 17:35:40 +01:00
2020-09-22-suspicious-character-in-regexp.md
Add query spotting probably-bad escapes in regular expressions.
2020-09-23 15:07:22 +01:00
2020-10-01-stack-trace-exposure.md
Add stack-trace exposure query
2020-10-06 14:42:59 +01:00