hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-01-29 22:32:58 +01:00
Code Issues Packages Projects Releases Wiki Activity
Files
c2b42ce0918de00a5168f9d9ae6cb4ef2d7651bc
codeql/change-notes
History
Chris Smowton c2b42ce091 Fix sanitization by strings.Replace[All] in go/unsafe-quoting and go/log-injection
2021-12-14 12:37:18 +00:00
..
1.23
Minor text changes
2019-11-25 15:48:58 +00:00
1.24
Fixed broken/moved/redirected links.
2021-10-29 17:17:17 -04:00
2020-04-30-syscall-functions.md
Add change note for github/codeql-go#125
2020-08-26 07:20:24 +01:00
2020-05-01-bad-redirect-check.md
Switch to new-style change notes.
2020-05-01 07:57:13 +01:00
2020-05-01-macaron-model.md
Switch to new-style change notes.
2020-05-01 07:57:13 +01:00
2020-05-05-clear-text-logging.md
Add change note for CleartextLogging.
2020-05-05 12:05:09 +01:00
2020-05-05-mux-model.md
Add support for Mux library
2020-05-05 03:25:08 -07:00
2020-05-07-update-data-flow.md
Add change note.
2020-05-07 11:46:31 +01:00
2020-05-11-reflected-xss.md
Add change note
2020-05-13 04:31:23 -07:00
2020-05-12-tainted-path.md
TaintedPath: Add change note for tempfiles
2020-05-12 05:44:19 -07:00
2020-05-13-io-model.md
Add change note.
2020-05-13 15:55:52 +01:00
2020-05-18-redundant-recover.md
Update change-notes/2020-05-18-redundant-recover.md
2020-05-19 06:31:47 +01:00
2020-05-20-mongodb-model.md
Add change note.
2020-05-20 10:10:28 +01:00
2020-05-20-request-forgery-sanitizers.md
Add change note for https://github.com/github/codeql-go/pull/107
2020-08-26 07:21:05 +01:00
2020-05-22-websocket-model.md
Add change note.
2020-05-22 11:11:58 +01:00
2020-05-29-open-redirect.md
Consider Request.FormValue(...) as a source for URL redirects.
2020-05-29 15:03:05 +01:00
2020-06-11-build-tracing.md
Add change note for build tracing
2020-10-14 09:42:12 -07:00
2020-06-12-more-dependency-extraction.md
Clarify change note
2020-06-24 23:29:55 -07:00
2020-06-16-email-injection.md
Add change note
2020-06-16 15:48:39 +01:00
2020-06-17-reflected-xss-refinements.md
Add change note for reflected xss regexp fixes
2020-06-17 00:28:03 -07:00
2020-06-19-call-graph.md
Add change note.
2020-06-22 09:22:47 +01:00
2020-06-19-cyclic-field-lookup.md
Fix field lookup in cyclic structs.
2020-06-19 08:16:09 +01:00
2020-06-19-switch-block-without-test.md
Add change note for https://github.com/github/codeql-go/pull/226
2020-08-26 07:46:56 +01:00
2020-06-24-clear-text-logging.md
Add change note.
2020-07-02 12:03:43 +01:00
2020-06-24-open-redirect.md
Add change note.
2020-06-25 22:23:49 +01:00
2020-06-26-taint-model-tar-zip.md
Add change note for https://github.com/github/codeql-go/pull/251
2020-08-26 07:58:19 +01:00
2020-06-26-taint-through-range.md
Add change note.
2020-06-26 11:20:45 +01:00
2020-07-06-repo-with-file-url-origin.md
Add change note for https://github.com/github/codeql-go/pull/277
2020-08-26 10:54:18 +01:00
2020-07-06-tolerate-more-unreachable-returns.md
UnreachableStatement: tolerate more harmless unreachable return statements
2020-07-06 17:02:26 +01:00
2020-07-07-missing-error-check.md
Add query searching for missing error checks on functions that return a (pointer, error) pair
2020-07-09 13:06:31 +01:00
2020-07-15-insecure-tls.md
Add change note for insecure-TLS query
2020-07-28 11:55:58 +01:00
2020-07-22-ssh-host-checking.md
Promote CWE-322 out of experimental status
2020-07-29 14:43:47 +01:00
2020-07-28-library-models.md
Remove blank lines from changenote
2020-08-20 11:45:29 +01:00
2020-08-05-incorrect-integer-conversion.md
Add change note
2020-08-10 11:04:25 +01:00
2020-08-07-negative-length-check.md
Extend negativeLengthCheck query to unsigned integers
2020-08-11 10:48:03 +01:00
2020-08-18-oauth2.md
Promote OAuth2 constant-state query to mainline
2020-09-02 15:05:22 +01:00
2020-08-19-gin-model.md
Add change note for Gin framework
2020-08-25 10:29:42 +01:00
2020-08-27-protobufs.md
Add change notes for PRs that omitted them
2020-11-20 16:15:12 +00:00
2020-08-28-allocation-size-overflow-sanitizers.md
Add change note for #296
2020-09-08 16:32:12 +01:00
2020-09-10-gorm-model-improved.md
Add change note
2020-09-10 17:29:06 +01:00
2020-09-10-xss-false-positives.md
Reflected XSS query: exclude more uses of encoding/json.Marshal
2020-09-10 16:52:06 +01:00
2020-09-14-split-string-sanitizer.md
Add change notes for PRs that omitted them
2020-11-20 16:15:12 +00:00
2020-09-15-chi.md
Add models for the Chi web framework
2020-09-16 09:14:23 +01:00
2020-09-17-echo.md
Add models for the Echo framework
2020-09-21 17:35:40 +01:00
2020-09-22-suspicious-character-in-regexp.md
Add query spotting probably-bad escapes in regular expressions.
2020-09-23 15:07:22 +01:00
2020-09-23-stdlib.md
Fix package count
2020-09-24 12:41:14 +02:00
2020-10-01-gomod-extraction.md
Add change note for go.mod extraction change
2020-10-14 09:25:39 -07:00
2020-10-01-stack-trace-exposure.md
Add stack-trace exposure query
2020-10-06 14:42:59 +01:00
2020-10-12-old-context-package.md
Extend context models to cover its old golang.org/x/net/context home.
2020-10-12 12:27:19 +01:00
2020-10-12-x-net-html.md
Add support for html.Render method.
2020-11-06 11:04:53 +00:00
2020-10-14-allocation-overflow-accuracy.md
Fix changenote typo
2020-10-14 13:32:26 +01:00
2020-10-14-spew.md
Update change-notes/2020-10-14-spew.md
2020-10-16 10:56:27 +01:00
2020-10-19-revel.md
Revel: add support and tests for Render and Redirect sinks.
2020-10-20 10:00:05 +01:00
2020-11-03-underscore-assigns.md
Add change-notes for recent PRs that were missing them
2021-01-05 11:39:26 +00:00
2020-11-04-unsafe-unzip-symlink.md
Add query checking for unpacking of symlinks without using EvalSymlinks to spot existing ones.
2020-11-16 09:57:26 +00:00
2020-11-09-suspicious-character-in-regexp-improvement.md
SuspiciousCharacterInRegexp: Add fix for raw string literals
2020-11-30 19:15:17 +00:00
2020-11-11-stored-command.md
Add StoredCommand query
2020-11-23 02:11:44 -08:00
2020-11-11-stored-xss.md
Apply suggestions from code review
2020-11-12 21:26:53 -08:00
2020-11-12-zipslip-sanitizers.md
ZipSlip: redefine sources closer to their origin, and make sanitizers more generous.
2020-11-27 13:57:25 +00:00
2020-11-19-dataflow-edges.md
Add change-notes for recent PRs that were missing them
2021-01-05 11:39:26 +00:00
2020-11-27-external-api.md
Apply suggestions from code review
2020-11-27 16:17:54 +00:00
2020-11-27-guarding-functions.md
Add change-notes for recent PRs that were missing them
2021-01-05 11:39:26 +00:00
2020-11-30-evanphx-json-patch.md
Add change note
2020-12-08 16:15:01 +00:00
2020-12-01-fmt-errorf.md
Add change-notes for recent PRs that were missing them
2021-01-05 11:39:26 +00:00
2020-12-08-beego.md
Model Beego web framework
2020-12-15 14:04:36 +00:00
2020-12-08-k8s-io-apimachinery-pkg-runtime.md
Fixed broken/moved/redirected links.
2021-10-29 17:17:17 -04:00
2020-12-09-clear-text-logging-source.md
Add SecretInterface as source for cleartext logging query
2020-12-15 16:00:58 +00:00
2020-12-14-insecure-randomness.md
Polish insecure randomness query
2021-02-02 08:04:11 +00:00
2020-12-15-beego-orm.md
Model the Beego ORM subpackage
2020-12-16 14:39:58 +00:00
2020-12-18-goproxy.md
Add change note for goproxy modeling
2021-01-27 17:38:23 +00:00
2020-12-23-regexp-anchors.md
Add change-notes for recent PRs that were missing them
2021-01-05 11:39:26 +00:00
2021-01-07-gokit-sources.md
Add gokit models
2021-01-25 08:15:14 -08:00
2021-01-08-git-as-interpreter.md
Add change-note for addition of git to the list of known interpreters for the go/command-injection query.
2021-01-11 18:48:54 +00:00
2021-01-12-model-couchbase.md
Add change note
2021-01-13 09:18:54 +00:00
2021-01-21-default-sanitizer-guard.md
Add change note
2021-01-22 17:38:26 +00:00
2021-02-02-constant-comparison-sanitizer-guard.md
Add change note
2021-02-02 16:27:44 +00:00
2021-02-09-html-templates.md
Update change-notes/2021-02-09-html-templates.md
2021-02-15 14:39:24 +00:00
2021-02-10-cfg-equality-panic-edges.md
Add missing change notes
2021-02-15 14:07:10 +00:00
2021-02-10-yaml.md
Add models for gopkg.in/yaml
2021-02-15 18:27:09 +00:00
2021-02-11-zap.md
Model zap
2021-02-11 14:35:36 +00:00
2021-02-15-logrus-updated.md
Add change note
2021-02-15 13:51:01 +00:00
2021-02-18-go-116.md
Add change note for go 1.16
2021-02-18 11:49:00 -08:00
2021-03-05-dataflow-promoted-fields.md
Add change note
2021-03-30 10:13:22 +01:00
2021-03-16-html-tracing.md
Add change note
2021-03-18 10:54:33 -07:00
2021-03-16-nethttp-updated.md
Update change-notes/2021-03-16-nethttp-updated.md
2021-03-18 23:32:23 +08:00
2021-04-19-http-request-taint-flow.md
Add change note
2021-04-19 16:13:16 +01:00
2021-04-20-tuple-types.md
Reword change note
2021-04-21 15:28:28 +01:00
2021-05-06-xorm.md
Add change note
2021-08-23 08:15:56 -07:00
2021-07-28-insufficient-key-size.md
Add change note
2021-08-18 11:54:05 +01:00
2021-08-17-go-117.md
Add change note for 1.17
2021-08-19 14:02:29 -07:00
2021-08-23-getPrimaryQlClasses.md
Add getPrimaryQlClasses()
2021-08-24 13:03:24 +01:00
2021-10-27-insufficient-key-size-sanitizer.md
Add change note
2021-10-28 10:10:39 +01:00
2021-11-02-incorrect-integer-conversion-updated.md
Add change note
2021-11-02 15:09:43 +00:00
2021-11-19-log-injection-query.md
Add Log Injection query
2021-11-19 17:55:34 +01:00
2021-12-14-strings-replace-sanitizers.md
Fix sanitization by strings.Replace[All] in go/unsafe-quoting and go/log-injection
2021-12-14 12:37:18 +00:00