Repository navigation

Master-to-next merge - #482

Closed

semmle-qlci wants to merge 89 commits into

nextfrom

qlucie/master

Closed

Master-to-next merge#482
semmle-qlci wants to merge 89 commits into
nextfrom
qlucie/master

Commits on Nov 7, 2018
- JavaScript: Teach type inference about AMD imports.
  Max Schaefer
  committed
  b058854
Commits on Nov 8, 2018
- Update qhelp with content and remove autogenerated qhelp files
  Felicity Chapman
  committed
  8a444b6
- Bring qhelp inline with current guidelines
  Felicity Chapman
  committed
  3d779dd
- Fix tag error spotted by PR check
  Felicity Chapman
  committed
  48a7565
- C#: Add assertion guard tests
  hvitved
  committed
  0fb7ddc
- C#: Teach guards library about assertions
  hvitved
  committed
  5921a9e
- C#: Add tests for custom null guards
  hvitved
  committed
  a5dfc10
- C#: Teach guards library about custom null guards
  hvitved
  committed
  e4aa196
- C#: Fix guards implications logic
  hvitved
  committed
  29f163f
Commits on Nov 12, 2018
- JavaScript: Port regular expression parser to Java.
  Max Schaefer
  committed
  c14ebac
- JavaScript: Port JSDoc parser to Java.
  Max Schaefer
  committed
  f06cef5
- JavaScript: Bump extractor version.
  Max Schaefer
  committed
  f26d47a
- JavaScript: Use in-dist trap cache when extracting externs.
  Max Schaefer
  committed
  032ed12
- JavaScript: Make in-dist trap cache read-only.
  Max Schaefer
  committed
  01b43df
- Fix typos
  Felicity Chapman
  committed
  72ac2e5
- Fix syntax errors in qhelp files
  Felicity Chapman
  committed
  978fc49
- Update to bring into line with current guidelines
  Felicity Chapman
  committed
  2e8f51a
- Update for feedback
  Felicity Chapman
  committed
  0593081
- Replace '&' symbols in URL
  Felicity Chapman
  committed
  2847d5e
Commits on Nov 13, 2018
- JavaScript: Extract auxiliary method.
  Max Schaefer
  committed
  d9d4051
- JavaScript: Warn about externs trap cache absence/miss.
  Max Schaefer
  committed
  851e71c
- C#: Handle `in` arguments, and add `AssignableAccess::isInArgument()` predicate.
  calumgrant
  committed
  a5d50fc
- C#: Update change notes.
  calumgrant
  committed
  9f04ace
- Java: Don't inherit methods from co-/contra-variant supertypes.
  aschackmull
  committed
  411891c
- Java: Add some this-qualifiers.
  aschackmull
  committed
  fe8dfee
- Update for feedback
  Felicity Chapman
  committed
  c6af799
Commits on Nov 14, 2018
- JavaScript: Remove a few unnecessary imports.
  Max Schaefer
  committed
  c51cd50
- JavaScript: Refactor `HostHeaderPoisoningInEmailGeneration` query.
  Max Schaefer
  committed
  9b4ae9e
- JavaScript: Refactor security queries for uniformity.
  Max Schaefer
  committed
  65bcf0f
- JavaScript: Make all taint-based security queries have `@kind path-problem`.
  Max Schaefer
  committed
  60a1357
- JavaScript: Add explicit `nodes` query predicate in `PathGraph`.
  Max Schaefer
  committed
  4860364
- JavaScript: Add `import DataFlow::PathGraph`.
  Max Schaefer
  committed
  8d87f55
- JavaScript: Move from `Node` to `PathNode`.
  Max Schaefer
  committed
  11d6259
- JavaScript: Adjust `ConditionalBypass` query.
  Max Schaefer
  committed
  d5af008
- JavaScript: Select `source` and `sink` in all path queries.
  Max Schaefer
  committed
  e365b72
- JavaScript: Select `Node`s (instead of `PathNode`s) everywhere.
  Max Schaefer
  committed
  52ae757
- JavaScript: Remove `ReflectdXssPath.ql`, which is now spurious.
  Max Schaefer
  committed
  d57b5d9
- JavaScript: Update expectd test output for security path queries to include `nodes` and `edges` query predicates.
  Max Schaefer
  committed
  9221b62
- JavaScript: Introduce two more short-circuiting conjuncts.
  Max Schaefer
  committed
  d6198fc
- JavaScript: Add change note.
  Max Schaefer
  committed
  4112af5
- JavaScript: Rename `hasPathFlow` to `hasFlowPath` for consistency with other languages.
  Max Schaefer
  committed
  3fcd02a
- JavaScript: Add a convenience method to `AMDModuleDefinition`.
  Max Schaefer
  committed
  a441bfb
- JavaScript: Add a convenience method to `SourceNode` and use it in a few places.
  Max Schaefer
  committed
  6f6b3b0
- Merge pull request #464 from esben-semmle/js/fixup-suite-master
  adityasharad
  authored
  a066749
- JavaScript: Add change note.
  Max Schaefer
  committed
  19b9b85
- Merge pull request #462 from xiemaisi/js/security-paths
  semmle-qlci
  authored
  77213aa
- Merge pull request #461 from xiemaisi/js/bye-bye-rhino
  semmle-qlci
  authored
  025054e
- JavaScript: Remove `esregex`.
  Max Schaefer
  committed
  5506cec
- JavaScript: Remove `doctrine`.
  Max Schaefer
  committed
  2cd5702
- JavaScript: Remove obsolete Rhino interface classes.
  Max Schaefer
  committed
  585347f
- JavaScript: Update `.classpath`.
  Max Schaefer
  committed
  406511f
- Merge pull request #438 from felicity-semmle/cpp/SD-2777-delete-poor-qhelp
  geoffw0
  authored
  77ca0cf
- Merge pull request #459 from aschackmull/java/inherit-fix
  yh-semmle
  authored
  50a905d
- Merge pull request #466 from xiemaisi/js/more-data-flow-predicates
  semmle-qlci
  authored
  4a14bef
- Merge pull request #468 from xiemaisi/js/has{Path,Flow}+
  asger-semmle
  authored
  df202ef
- Merge pull request #453 from felicity-semmle/cpp/SD-2777-cwe-qhelp-2
  geoffw0
  authored
  01de416
- Remove the duplicate overview tag
  Felicity Chapman
  committed
  6312f31
Commits on Nov 15, 2018
- Remove stray </p> tag
  Felicity Chapman
  committed
  fbf5a05
- Fix typo in code tag
  Felicity Chapman
  committed
  1776ebd
- Merge pull request #469 from xiemaisi/js/bye-bye-rhino
  asger-semmle
  authored
  fb19084
- Merge pull request #437 from calumgrant/cs/in-parameters
  hvitved
  authored
  185700a
- C#: Fix indentation in change notes.
  calumgrant
  committed
  03b8ed6
- Merge pull request #477 from calumgrant/cs/indent-change-notes
  hvitved
  authored
  5f118d4
- Merge pull request #441 from felicity-semmle/cpp/SD-2777-cwe-qhelp
  geoffw0
  authored
  0d7c5ea
- Merge pull request #460 from xiemaisi/js/in-dist-trap-cache
  asger-semmle
  authored
  737ec70
- Merge pull request #428 from hvitved/csharp/more-guards
  semmle-qlci
  authored
  536f3f3
- C# extractor: Handle the type name of `dynamic`.
  calumgrant
  committed
  bb49fe1
- C#: Change Property TagStackBehaviour to push a tag, to give the expression body a tag stack.
  calumgrant
  committed
  090e896
- C#: Update change notes.
  calumgrant
  committed
  9eed758
Commits on Nov 16, 2018
- Merge pull request #393 from calumgrant/cs/extractor/dynamic-type-name
  hvitved
  authored
  57bbe02
- Merge pull request #467 from xiemaisi/js/amd-imports
  semmle-qlci
  authored
  0647743
- TS: do more work in parallel
  asger-semmle
  committed
  b5d3dd5
- JS: recognize sanitizing slashes in URL redirection queries
  asger-semmle
  committed
  6ec13fe
- JS: add change note
  asger-semmle
  committed
  0153a47
- JS: use original sanitizer for SSRF query
  asger-semmle
  committed
  dd5f485
- JS: fix copy pasta and test output
  asger-semmle
  committed
  c06c9a0
- Java: Cosmetic changes and missing overrides.
  aschackmull
  committed
  437b2c1
- Java: Convert security queries to path-problems.
  aschackmull
  committed
  5e03b6f
- Java: Update test output.
  aschackmull
  committed
  deb61d6
- Java: Add change note.
  aschackmull
  committed
  918fc90
- TS: refactor to fix AutoBuildTest
  asger-semmle
  committed
  d839fcd
- TS: dont create JSON nodes in convertJsxSelfClosingElement
  asger-semmle
  committed
  a35061e
- TS: fix the fix
  asger-semmle
  committed
  84c1ba0
- C#: Remove duplicate results from cs/use-of-vulnerable-package
  calumgrant
  committed
  1aa5e24
Commits on Nov 19, 2018

Commits

Commits on Nov 7, 2018

Commits on Nov 8, 2018

Commits on Nov 12, 2018

Commits on Nov 13, 2018

Commits on Nov 14, 2018

Commits on Nov 15, 2018

Commits on Nov 16, 2018

Commits on Nov 19, 2018