github
/
codeql
зеркало из https://github.com/github/codeql.git
1
0
Форкнуть 0
Код Задачи Пакеты Проекты Релизы Вики Активность
68 714 коммитов 1 541 ветка 130 Теги 483 MiB
Граф коммитов

98 Коммитов

Автор SHA1 Сообщение Дата
Felicity Chapman 4d512a5b01 Remove non-LGTM query (see following PR) 2018-09-11 22:54:37 +01:00
Felicity Chapman 7dd891d908 Further updates and addition of query @ids 2018-09-11 22:51:14 +01:00
Felicity Chapman 223bf6cf56 Updates for consistency 2018-09-11 22:31:32 +01:00
semmle-qlci b17aeb689c
Merge pull request #118 from esben-semmle/js/request-forgery 
Approved by asger-semmle
 2018-09-11 16:28:59 +01:00
Felicity Chapman f48317f381 Minor updates to prepare for publication 2018-09-11 08:27:20 +01:00
Felicity Chapman 620f99c5a3 Remove template text 2018-09-11 08:14:17 +01:00
Esben Sparre Andreasen aaf1ac770d JS: reduce declared precision of js/request-forgery 2018-09-09 21:30:43 +02:00
Jonas Jensen 4051e348eb
Merge pull request #169 from felicity-semmle/1.18/cpp-finalize-change-notes 
LGTM 1.18: finalize change notes for C/C++
 2018-09-09 15:39:40 +02:00
Felicity Chapman a08177f16b Address initial feebback 2018-09-09 11:52:35 +01:00
Tom Hvitved f3eed4aec7
Merge pull request #163 from calumgrant/cs/extractor-fixes 
C#: Add tests for extractor fixes, and improve CFG for ConstCases
 2018-09-07 17:37:40 +02:00
Felicity Chapman 3eab1de2f5 Remove non-LGTM queries from notes (will move to 'studio-cpp.md') 2018-09-07 13:56:55 +01:00
Felicity Chapman 2e0818d8e6 Text changes for consistency and clarity 2018-09-07 13:55:24 +01:00
Felicity Chapman e7116f57a0 Add query identifiers 2018-09-07 13:24:41 +01:00
Felicity Chapman 6aa6b64b81 Remove placeholders and sort table 2018-09-07 12:05:40 +01:00
semmle-qlci 62e9946fe2
Merge pull request #150 from asger-semmle/ts-asi-bug 
Approved by xiemaisi
 2018-09-05 21:22:29 +01:00
calum c2f3cb6a2a C#: Update analysis change notes. 2018-09-05 17:48:45 +01:00
Tom Hvitved 061b3d40ea C#: Fix typos in change note 2018-09-05 14:20:27 +02:00
Tom Hvitved 82b2c00c19 C#: Add change note 2018-09-05 14:20:27 +02:00
semmle-qlci 50b5a3bd71
Merge pull request #151 from asger-semmle/ts-ambient-toplevel 
Approved by xiemaisi
 2018-09-05 10:52:08 +01:00
Jonas Jensen 1bcae97447
Merge pull request #114 from geoffw0/samate-realloc 
CPP: Handle 'realloc' better in MemoryMayNotBeFreed.ql
 2018-09-05 08:35:13 +02:00
Asger F 4e9c52a3c3 TypeScript: add change note 2018-09-04 15:20:16 +01:00
Asger F 6ceb10371a TypeScript: rephrase change note 2018-09-04 15:06:04 +01:00
Asger F f7827b72ab TypeScript: update change note to mention TypeScript 3.0 support 2018-09-04 14:30:16 +01:00
Asger F 2b8bc63b01 TypeScript: add change note 2018-09-04 14:23:37 +01:00
Esben Sparre Andreasen 68b7a8b57e JS: change notes for `UrlRequest` libraries and `js/request-forgery` 2018-09-04 09:26:45 +02:00
semmle-qlci 4dec7c5036
Merge pull request #127 from xiemaisi/js/incomplete-sanitisation-doc-improvement 
Approved by esben-semmle
 2018-09-03 16:25:44 +01:00
Jonas Jensen 2fd73f2171 C++: getEnclosingElement-without-macros changenote 2018-09-03 11:29:03 +02:00
Jonas Jensen b34dbfa68b C++: Correct change note formatting 
In Markdown, nested bullet lists are formatted with indented asterisks
rather than double asterisks.
 2018-09-03 11:29:02 +02:00
Jonas Jensen 18dc1d0af0
Merge pull request #129 from Semmle/changenote-desig-init 
cherry-pick onto rc/1.18: C++: change note for designated intializer fixes
 2018-09-03 11:28:20 +02:00
Max Schaefer 759d98661c
Merge pull request #117 from esben-semmle/js/push-sort-taint-steps 
JS: support `push` and `sort` taint steps for arrays
 2018-09-03 09:20:35 +01:00
Geoffrey White 8e5c170af6 CPP: Change note. 2018-09-03 08:30:05 +01:00
Max Schaefer 58e384558c JavaScript: Improve query name and help for `js/incomplete-sanitization`. 
The query applies more generally to all kinds of string escaping and encoding, not just sanitization.
 2018-09-03 08:20:01 +01:00
Max Schaefer 20bff709b1
Merge pull request #136 from esben-semmle/js/composed-function-taint 
JS: model composed functions (RC)
 2018-09-03 08:18:20 +01:00
Max Schaefer 7e3adec789
Merge pull request #135 from esben-semmle/js/pick-get-taint-steps 
JS: model property projection calls (RC)
 2018-09-03 08:17:42 +01:00
Nick Rolfe f6e5be0af8
cherry-pick 35d31aee onto 1.18 branch 
This changenote was committed after the `rc/1.18 branch` was taken.
 2018-08-31 18:09:39 +01:00
Max Schaefer fabd6c0864
Merge pull request #119 from esben-semmle/js/fix-change-note-libs 
JS: use https- and repo-links in change notes
 2018-08-30 14:23:34 +01:00
Esben Sparre Andreasen b7fd1e7a74 JS: use https- and repo-links in change notes 2018-08-30 14:54:15 +02:00
Esben Sparre Andreasen 6ee8f71d09 JS: add change notes for property projection libraries 2018-08-30 09:39:02 +02:00
Esben Sparre Andreasen c1e6280a0e JS: generalize change notes for improved array operation taint steps 2018-08-30 09:18:48 +02:00
Esben Sparre Andreasen dc72788746 JS: add a model of some function composition libraries 2018-08-30 08:17:01 +02:00
shati-semmle be254ef39a Update analysis-csharp.md 2018-08-29 11:06:27 +01:00
Geoffrey White c82ab3866f CPP: Extend change note. 2018-08-28 16:39:10 +01:00
Geoffrey White 0bd8d9a113 CPP: Spell out increment / decrement in change note. 2018-08-28 16:39:10 +01:00
Geoffrey White eaf4c6e319 CPP: Change notes. 2018-08-28 16:39:10 +01:00
Tom Hvitved d4551e5897
Merge pull request #81 from lukecartey/csharp/zipslip-reformat 
C#: ZipSlip - Rearrange query, add help and update doc
 2018-08-24 09:40:20 +02:00
Luke Cartey 86a7df0ef5 C#: ZipSlip - Address doc team comments. 2018-08-23 15:57:00 +01:00
Max Schaefer 2187b0c245
Merge pull request #89 from esben-semmle/js/sharpen-type-confusion 
JS: remove emptiness checks from the type confusion `x.length` sinks
 2018-08-23 08:04:09 +01:00
calumgrant 7c521708ac
Merge pull request #76 from hvitved/csharp/cfg/generic-splitting 
C#: Generic control flow graph splitting
 2018-08-22 18:18:33 +01:00
Esben Sparre Andreasen fef257b1ec JS: remove emptiness checks from the type confusion `x.length` sinks 2018-08-22 13:25:22 +02:00
semmle-qlci 7e7e30c01c
Merge pull request #73 from esben-semmle/js/cleartext-logging-query 
Approved by xiemaisi
 2018-08-22 08:04:36 +01:00