github
/
codeql
зеркало из https://github.com/github/codeql.git
1
0
Форкнуть 0
Код Задачи Пакеты Проекты Релизы Вики Активность
47 603 коммитов 1 541 ветка 130 Теги 483 MiB
Граф коммитов

47603 Коммитов

Автор SHA1 Сообщение Дата
Erik Krogh Kristensen 7049532227
Merge pull request #11364 from github/redsun82/swift-ci-cache 
Swift: cache more aggressively in CI
 2022-11-28 14:34:43 +01:00
Geoffrey White 30468dd419 Swift: Implement field content as well. 2022-11-28 12:27:33 +00:00
Geoffrey White ffbd201450 Swift: Implement basic model of WKUserScript. 2022-11-28 12:20:29 +00:00
Geoffrey White 116d9667e7 Swift: Remove special case from query. 2022-11-28 12:15:38 +00:00
Ian Lynagh a32363de79 Kotlin: Avoid giving a single class 2 compiler-generated kinds 2022-11-28 12:14:50 +00:00
Ian Lynagh 7863bc2c99 Kotlin: Accept test output 2022-11-28 12:14:36 +00:00
Tom Hvitved 1e63893411 C#: Add integration test that checks whether env vars are passed through autobuilder 2022-11-28 13:12:24 +01:00
Geoffrey White 3971cbf294 Swift: Extend the taint test with WKUserScript. 2022-11-28 12:11:38 +00:00
Erik Krogh Kristensen 477a32831b
Merge pull request #11448 from github/erik-krogh/lgtm-codeql-js-extractor 
JS: update `javascript/extractor/README.md` to mention CodeQL instead of LGTM
 2022-11-28 13:10:25 +01:00
Arthur Baars a879fd519a
Merge pull request #11295 from github/aibaars-patch-2 
"CodeQL False positive" -> "CodeQL false positive"
 2022-11-28 13:06:39 +01:00
Michael Nebel d7e656a32a Java: Add change note. 2022-11-28 12:30:36 +01:00
Michael Nebel 43a63d6373 Java: Convert all models to data extensions in testcases. 2022-11-28 12:30:36 +01:00
Michael Nebel 74f02cf855 Java: Allow empty package name in model definitions. 2022-11-28 12:30:35 +01:00
Michael Nebel b96540c937 Java: Convert permissve-dot-regex-query to data extensions. 2022-11-28 12:30:35 +01:00
Michael Nebel 91840c613e Java: Convert unsafe-url-forward to data extensions. 2022-11-28 12:30:35 +01:00
Michael Nebel aed5ee4edc Java: Convert thread-resource-abuse to data extensions. 2022-11-28 12:30:35 +01:00
Michael Nebel 07578f11d4 Java: Convert hardcoded-jwt-key models to data extensions. 2022-11-28 12:30:35 +01:00
Michael Nebel ab12b6cc2b Java: Convert android-web-resource-response to data extensions. 2022-11-28 12:30:35 +01:00
Michael Nebel 5c15ad412c Java: Convert log4j-injection to data extensions. 2022-11-28 12:30:35 +01:00
Michael Nebel 665d40dc4b Java: Convert file-path-injection to data extensions. 2022-11-28 12:30:35 +01:00
Michael Nebel b61f515af2 Jave: Make support for query specific models. 2022-11-28 12:30:35 +01:00
Michael Nebel 805430983c Java: Convert commons-io to data extensions. 2022-11-28 12:30:35 +01:00
Michael Nebel d7aafbfe64 Java: Add model generator script that emits data extensions. 2022-11-28 12:30:35 +01:00
Michael Nebel 9c93402b26 Java: Convert integration test to use data extensions instead of inlined models. 2022-11-28 12:30:35 +01:00
Michael Nebel 157a228088 Java: Add query packs with names to enable dependency resolution. 2022-11-28 12:30:35 +01:00
Michael Nebel 2d309bb8f8 Java: Include the library query pack to get the data extensions included. 2022-11-28 12:30:35 +01:00
Michael Nebel b3a3b676ba Java: Remove manual models from QL code. 2022-11-28 12:30:34 +01:00
Michael Nebel f4e1867d28 Java: Define extensible predicates to at least be empty. 2022-11-28 12:30:34 +01:00
Michael Nebel 0abeb831c7 Java: Move summaryModel predicate, which constructs a CSV row to the testcode where it is used. 2022-11-28 12:30:34 +01:00
Michael Nebel 663d091776 Java: Invert dependencies and use the extensible predicates. 2022-11-28 12:30:34 +01:00
Michael Nebel 9cb5ff1cdc Java: Add data extensions for all manual models. 2022-11-28 12:30:34 +01:00
Michael Nebel 8e25cac653 Java: Add extensible predicates. 2022-11-28 12:30:34 +01:00
Michael Nebel 7b6f202f23 Java: Renaming. 2022-11-28 12:30:34 +01:00
Michael Nebel 63e2206d16 Java: Prepare QL pack for data extensions. 2022-11-28 12:30:34 +01:00
Michael Nebel fc4b9827b9 Java: Add script for converting extensions. 2022-11-28 12:30:34 +01:00
Michael Nebel 9f7103c4fb Java: Add queries for extracting sources, sinks and summaries. 2022-11-28 12:30:34 +01:00
Michael Nebel a8ee878356 Java: Add bi-directional import of FragmentInjection. 2022-11-28 12:30:33 +01:00
Michael Nebel 663112576a Java: Update commons-io models. 2022-11-28 12:30:33 +01:00
Erik Krogh Kristensen 7a3898168f
Update README.md 2022-11-28 12:12:36 +01:00
Tom Hvitved cde05e1190 Data flow: Sync files 2022-11-28 12:11:38 +01:00
Tom Hvitved c65780ee99 Data flow: Inline `revFlowInNotToReturn` 2022-11-28 12:11:18 +01:00
Tom Hvitved bdb205a318 Data flow: Track return kind instead of return position in pruning stages 2-4 2022-11-28 12:11:18 +01:00
Tom Hvitved 4346a7f426 Data flow: Inline `fwdFlowOutNotFromArg` 2022-11-28 12:11:18 +01:00
Tom Hvitved 70d2a0df8a Data flow: Track parameter position instead of parameter in pruning stages 2-4 2022-11-28 12:11:12 +01:00
Taus 530b795eaa
Merge pull request #11402 from yoff/python/port-super-not-enclosing-class 
Python: port `py/super-not-enclosing-class`
 2022-11-28 11:52:57 +01:00
Nick Rolfe 8a94cabdbf
Merge pull request #11250 from github/nickrolfe/stack-trace-exposure 
Ruby: add stack-trace exposure query
 2022-11-28 10:45:59 +00:00
Geoffrey White b3d2e759a6 Swift: Update swift/sql-injection to include local flow sources. 2022-11-28 10:11:44 +00:00
Geoffrey White a5a459fe0a Swift: Update swift/unsafe-js-eval to include local flow sources. 2022-11-28 10:11:44 +00:00
Michael Nebel 7456f3750d
Merge pull request #11432 from michaelnebel/java/flowtestgeneratortools 
Java: Flow test case generator
 2022-11-28 10:41:42 +01:00
erik-krogh 0c2ff98dc2
add flow from the first splat argument to the first splat parameter 2022-11-28 09:54:05 +01:00