Tom Hvitved
|
3e716bf806
|
Merge pull request #1749 from calumgrant/cs/extractor-tidy
C#: Refactor extractor trap generation code
|
2019-08-30 15:44:35 +02:00 |
Taus
|
a2841b4245
|
Merge pull request #1763 from markshannon/python-cwe-312
Python: Two new queries for CWE-312.
|
2019-08-30 15:28:56 +02:00 |
Tom Hvitved
|
c9275fdc0a
|
Merge pull request #1692 from calumgrant/cs/roslyn-3.2
C#: Upgrade to Roslyn 3.2
|
2019-08-30 15:09:11 +02:00 |
Anders Schack-Mulligen
|
8a318ce4e7
|
Java: Extend test with graph.
|
2019-08-30 14:35:21 +02:00 |
Anders Schack-Mulligen
|
455bb6cd15
|
Java/C++/C#: Add change notes.
|
2019-08-30 14:35:21 +02:00 |
Anders Schack-Mulligen
|
6582734733
|
Java: Add test.
|
2019-08-30 14:32:55 +02:00 |
Anders Schack-Mulligen
|
5e6326d1d5
|
Java/C++/C#: Add support for dataflow exploration by partial paths.
|
2019-08-30 14:32:55 +02:00 |
Anders Schack-Mulligen
|
6749f7a1b7
|
Merge pull request #1843 from lukecartey/java/add-missing-sql-apis
Java: Add missing SQL query APIs.
|
2019-08-30 14:27:40 +02:00 |
Mark Shannon
|
637677d515
|
Python: Move TaintTracking.qll from semmle.python.security to semmle.python.dataflow, for consistency with other code.
|
2019-08-30 12:57:47 +01:00 |
Mark Shannon
|
a256945938
|
Python: Add syntax example comments for document generation.
|
2019-08-30 12:46:08 +01:00 |
semmle-qlci
|
394563de43
|
Merge pull request #1807 from hvitved/csharp/dataflow/barrier-guard
Approved by calumgrant
|
2019-08-30 12:40:25 +01:00 |
Taus
|
3d3797f829
|
Merge pull request #1830 from markshannon/python-update-docs
Python: Update the documentation
|
2019-08-30 13:01:50 +02:00 |
Max Schaefer
|
b6220998d1
|
JavaScript: Restrict `setAttribute` sink to potentially dangerous attribute names.
|
2019-08-30 11:57:29 +01:00 |
Calum Grant
|
c7b685b3b8
|
C#: Fix changed qltest.
|
2019-08-30 11:47:43 +01:00 |
Calum Grant
|
611af1e2c2
|
C#: Upgrade to Roslyn 3.2.
|
2019-08-30 11:47:43 +01:00 |
Mark Shannon
|
3f740d6efe
|
Python: Update CWE-312 queries to use new taint-tracking configuration.
|
2019-08-30 11:21:04 +01:00 |
Luke Cartey
|
e118f9a5f9
|
Add change note.
|
2019-08-30 10:48:37 +01:00 |
Luke Cartey
|
dfa371c65b
|
Java: Add missing SQL query APIs.
* executeLargeUpdate
* prepareCall
|
2019-08-30 10:40:49 +01:00 |
Mark Shannon
|
811815aa4e
|
Merge branch 'master' into python-cwe-312
|
2019-08-30 10:39:04 +01:00 |
Calum Grant
|
ec61877ce8
|
Merge pull request #1805 from hvitved/csharp/dataflow/nested-fields
C#: Nested field flow
|
2019-08-30 10:26:10 +01:00 |
Calum Grant
|
0129b42c54
|
C#: Address review comments.
|
2019-08-30 10:11:01 +01:00 |
Calum Grant
|
7df90f13ed
|
C#: Address review comments. Tidy up tuple generation, consolidating code and use run-time type information instead of FirstParam/NextParam.
|
2019-08-30 10:11:01 +01:00 |
Calum Grant
|
40f56ff4b3
|
C#: Code tidy. Rename variables, delete dead code, format whitespace, improve comments.
|
2019-08-30 10:11:01 +01:00 |
Calum Grant
|
b3d5e405a6
|
C#: Fix violations
|
2019-08-30 10:11:01 +01:00 |
Calum Grant
|
97522c506e
|
C#: Add more CIL consistency tests.
|
2019-08-30 10:11:01 +01:00 |
Calum Grant
|
b776421602
|
C#: Fix up tests. Fix cil_class, and add locations for constructed methods and types.
|
2019-08-30 10:11:01 +01:00 |
Calum Grant
|
02fd51ae61
|
C#: Resolve merge conflicts.
|
2019-08-30 10:11:00 +01:00 |
Calum Grant
|
b500a02b1e
|
C#: Compare CIL entities directly by handle rather than by label.
C#: Remove IDs from the CIL extractor and make consistent with C# extractor.
C#: Fix method collisions.
|
2019-08-30 10:11:00 +01:00 |
Calum Grant
|
685c494bcb
|
C#: Make the trap compression algorithm configurable.
|
2019-08-30 10:11:00 +01:00 |
Calum Grant
|
fe7e90e25a
|
C#: Remove the tuples from the C# extractor.
|
2019-08-30 10:11:00 +01:00 |
Calum Grant
|
486c192dda
|
C#: Refactoring expression and statement population.
|
2019-08-30 10:11:00 +01:00 |
Calum Grant
|
e41e8d6547
|
C#: Remove ITrapBuilder in favour of TextWriter.
|
2019-08-30 10:00:06 +01:00 |
Calum Grant
|
aeb38a1757
|
C#: Refactoring tuple writing to remove Tuple intermediate object and write straight to trap file.
|
2019-08-30 10:00:06 +01:00 |
Calum Grant
|
bd1b0018b0
|
C#: Rename some methods.
|
2019-08-30 10:00:06 +01:00 |
Calum Grant
|
58e6d236ff
|
C#: Tidy up CommentProcessing.
|
2019-08-30 10:00:06 +01:00 |
Taus
|
4f26b58a1a
|
Merge pull request #1747 from markshannon/python-extend-taint-tracking-config
Python: Extend taint-tracking configuration to match API of Javascript implementation.
|
2019-08-30 10:39:53 +02:00 |
Tom Hvitved
|
75eb7f92a2
|
C++: Sync identical files
|
2019-08-30 09:54:05 +02:00 |
Tom Hvitved
|
9f59e385d1
|
C#: Autoformat
|
2019-08-30 09:53:50 +02:00 |
Tom Hvitved
|
6e7ef66642
|
C#: Revert to using `GuardedDataFlowNode` in `TaintedPath.qll`
|
2019-08-30 09:37:23 +02:00 |
Tom Hvitved
|
751985dcf2
|
C#: Address review comments
|
2019-08-30 09:37:23 +02:00 |
Tom Hvitved
|
ae5fb7f330
|
C#: Introduce `BarrierGuard`s
|
2019-08-30 09:37:16 +02:00 |
Tom Hvitved
|
c642e726c6
|
Merge pull request #1555 from calumgrant/cs/typemention-fixes
C#: Fix various extraction errors
|
2019-08-30 09:34:18 +02:00 |
zlaski-semmle
|
f2025116d5
|
Merge pull request #1771 from geoffw0/qldoceg8
CPP: Add syntax examples to QLDoc in NameQualifiers.qll
|
2019-08-29 15:16:37 -07:00 |
Geoffrey White
|
b254e1f48e
|
CPP: Change note.
|
2019-08-29 18:24:29 +01:00 |
Calum Grant
|
4dd4167a5a
|
C#: Update test output (following merge).
|
2019-08-29 18:22:37 +01:00 |
Geoffrey White
|
2b1871fd2b
|
CPP: Remove the old test. I don't think preserving a duplicate test of deprecated queries is helpful.
|
2019-08-29 18:18:23 +01:00 |
Geoffrey White
|
ed7586d829
|
CPP: Add a combined test for the combined query.
|
2019-08-29 18:18:22 +01:00 |
Calum Grant
|
424ab3ed6a
|
C#: Analysis change notes.
|
2019-08-29 18:12:58 +01:00 |
Calum Grant
|
83d1e0eaa6
|
C#: Name DotNet::Namespace a declaration.
|
2019-08-29 18:12:58 +01:00 |
Calum Grant
|
83ab044a73
|
C#: Update expected test output.
|
2019-08-29 18:12:58 +01:00 |