hvitved
Follow
Popular repositories
-
-
-
machinelearning Public
Forked from dotnet/machinelearning
ML.NET is an open source and cross-platform machine learning framework for .NET.
C# 1
-
-
vscode-codeql-starter Public
Forked from github/vscode-codeql-starter
Starter workspace to use with the CodeQL extension for Visual Studio Code.
CodeQL 1
-
vscode-codeql Public
Forked from github/vscode-codeql
An extension for Visual Studio Code that adds rich language support for CodeQL
TypeScript 1
1,310 contributions in the last year
Contribution activity
October 2022
Created 61 commits in 1 repository
Created a pull request in github/codeql that received 3 comments
Ruby: Restrict regexp taint flow to String summaries
Allowing arbitrary taint flow when figuring out which string literals may flow to a Regexp.compile (et al) call seems a bit too general, so this PR…
Opened 24 other pull requests in 1 repository
github/codeql
5
open
18
merged
1
closed
- Ruby: Refactor call graph logic for singleton methods
-
Data flow: Add
TNodeReturn -
Ruby: Block for steps into
selfparameters intrackModuleAccess -
Ruby: Ignore overrides of singleton methods on
selfinside blocks - Ruby: Fix syntax error in a test
-
Ruby: Remove redundant additional flow step from
OrmTracking::Configuration -
Ruby: Fix bad join-order in
BarrierGuard::getABarrierNode - Ruby: Content flow through captured variables
- Ruby: Call graph performance improvements
-
Ruby: Make
localFieldStepa jump step instead of a level step -
C#: Deprecate
AssignableRead::getAReachableRead -
C#: Include CIL SSA definitions in
DataFlow::Node -
Ruby: Move
SummarizedCallableFromModelintoModelsAsData.qll -
Type tracking: Split up
levelStepintolevelStepCallandlevelStepNoCall -
Data flow: Improve
fastTCbound inPathNodeImpl::getANonHiddenSuccessor -
Ruby: Cache use of
DataFlowImplFor(Pathname|HttpClientLibraries) -
Data flow: Avoid call to
pathSuccPlusinConfiguration::hasFlowTo(Expr) -
Ruby: Avoid computing full
fastTCforAstNode::getParent -
Ruby: Model flow through
initializeconstructors - Ruby: Take overrides into account for singleton methods defined on modules
-
Data flow: Take conjunctive
With(out)Contentsinto account inprohibitsUseUseFlow -
Ruby: Remove
PairValueContent -
C#: Recognize options to
dotnet runin tracer when injecting-p:UseSharedCompilation=false - Ruby/Python: Cache more type tracking predicates
Reviewed 28 pull requests in 1 repository
github/codeql
25 pull requests
- Dataflow: Fix a couple of join-orders.
- Ruby: Model some ActiveSupport methods
- Spelling csharp
- Dataflow: Add support for synthetic global fields in MaD.
- Ruby: fix self variables in blocks
- Ruby: Call graph performance improvements
- Java: Add support for synthetic callables with flow summaries and model Stream.collect
-
C#: Include CIL SSA definitions in
DataFlow::Node - C#/Java: Limit telemetry results.
- C#: Count unsupported external library generics.
- RB: add an unsafe-shell-command-construction query
- Ruby: bugfix in type-tracking singleton class resolution
- Ruby: summarize unary splat operators and add local field step
- Ruby: also treat included/prepended modules as subclasses
- Spelling
- Ruby: fix use of deprecated class
- C#: fix some more style-guide violations in the alert-messages
- Ruby: Take overrides into account for singleton methods defined on modules
- RB: add some more meta queries for Ruby evaluations
- Tag successfully extracted files queries
- Ruby: more type-tracking steps
- Ruby: fix CFG and toString for anonymous '*' and '**'
- Ruby: some improvements
- Java: Add jump steps for summarized callables
- Ruby/Python: Cache more type tracking predicates
- Some pull request reviews not shown.
Created an issue in github/vscode-codeql that received 4 comments
Database import fails when folder is prefixed with db-
Describe the bug It is not a big problem, except the DBs we download from DCA all contain this prefix.