Skip to content
Permalink
main
Switch branches/tags

Name already in use

A tag already exists with the provided branch name. Many Git commands accept both tag and branch names, so creating this branch may cause unexpected behavior. Are you sure you want to create this branch?

Commits on Apr 14, 2023

  1. Merge pull request #12824 from geoffw0/modernsec4 

    Swift: Add CryptoSwift sinks in swift/weak-sensitive-data-hashing
    @geoffw0
    geoffw0 committed Apr 14, 2023
    d94ed1b

  2. Merge pull request #12751 from egregius313/egregius313/dataflow-refac… 

    …tor-cleanup

Java: Finish dataflow refactor
    @egregius313
    egregius313 committed Apr 14, 2023
    38826c9

  3. Merge pull request #12752 from gsingh93/buffer-access-array-expr 

    C++: Consider ArrayExpr with non-constant size expressions as a BufferAccess
    @geoffw0
    geoffw0 committed Apr 14, 2023
    ba982e2

  4. Merge pull request #12803 from michaelnebel/csharp/refactordataflow3 

    C#: Re-factor dataflow queries to use the new API.
    @michaelnebel
    michaelnebel committed Apr 14, 2023
    4bca951

  5. Merge pull request #10026 from pwntester/patch-2 

    Go: Partial URLs should not sanitize against SSRF
    @owen-mc
    owen-mc committed Apr 14, 2023
    8a4ca7f

  6. Merge pull request #12802 from erik-krogh/history-xss 

    JS: add browser history as XSS sink
    @erik-krogh
    erik-krogh committed Apr 14, 2023
    cece307

  7. Merge pull request #12823 from alexet/alexet/bump-version 

    Bump all qlpacks major versions
    @alexrford
    alexrford committed Apr 14, 2023
    9169ddb

  8. Add change note

    @owen-mc
    owen-mc committed Apr 14, 2023
    352866b

  9. Fix formatting again

    @owen-mc
    owen-mc committed Apr 14, 2023
    a42dbc5

  10. Fix formatting by deleting spaces no blank line

    @owen-mc
    owen-mc committed Apr 14, 2023
    d407a68

  11. Fix formatting by deleting blank line

    @owen-mc
    owen-mc committed Apr 14, 2023
    169bde8

  12. Partial URLs should not sanitize against SSRF 

    As an example:

```go
	urlPath := ctx.Req.URL.Path
	hash := urlPath[strings.LastIndex(urlPath, "/")+1:]
        req, _ := http.NewRequest("GET", source+hash, nil)
```
    @pwntester @owen-mc
    pwntester authored and owen-mc committed Apr 14, 2023
    8bf4b55

  13. SensitiveResultReceiverFlow needs to be public

    @atorralba
    atorralba committed Apr 14, 2023
    f106783

  14. Make SensitiveResultReceiver modules private

    @egregius313
    egregius313 committed Apr 14, 2023
    7b56383

  15. Re-Add SensitiveResultReceiverConf as deprecated

    @egregius313
    egregius313 committed Apr 14, 2023
    0a26916

  16. Fix typo 

    Co-authored-by: Tony Torralba <atorralba@users.noreply.github.com>
    @egregius313 @atorralba
    egregius313 and atorralba committed Apr 14, 2023
    77b67cb

  17. Fix SensitiveResultReceiver test case

    @egregius313
    egregius313 committed Apr 14, 2023
    0fc7750

  18. Re-add allowImplicitRead

    @egregius313
    egregius313 committed Apr 14, 2023
    3826b9b

  19. Replace allowImplicitRead with default implementation

    @egregius313
    egregius313 committed Apr 14, 2023
    74b71ff

  20. Deprecate sensitiveResultReceiver

    @egregius313
    egregius313 committed Apr 14, 2023
    ea54ea4

  21. flow(_, sink) to flowTo(sink) 

    Co-authored-by: Tony Torralba <atorralba@users.noreply.github.com>
    @egregius313 @atorralba
    egregius313 and atorralba committed Apr 14, 2023
    3e55c47

  22. Refactor ratpack framework test

    @egregius313
    egregius313 committed Apr 14, 2023
    5ed1868

  23. Refactor taintedString.ql test

    @egregius313
    egregius313 committed Apr 14, 2023
    88eb023

  24. Refactor SensitiveResultReceiver

    @egregius313
    egregius313 committed Apr 14, 2023
    cd661f1

  25. Refactor HardcodedCredentialsSourceCall

    @egregius313
    egregius313 committed Apr 14, 2023
    735a738

Commits on Apr 13, 2023

  1. Merge pull request #12822 from MathiasVP/promote-redundant-null-check… 

    …-simple

C++: Promote `cpp/redundant-null-check-simple` to Code Scanning
    @MathiasVP
    MathiasVP committed Apr 13, 2023
    15d5ad7

  2. Merge pull request #12794 from geoffw0/modernsec2 

    Swift: Add CSV extension points to the encryption queries.
    @geoffw0
    geoffw0 committed Apr 13, 2023
    3f8ac1a

  3. Bump all qlpacks major versions

    @alexet
    alexet committed Apr 13, 2023
    c6a4828

  4. Update cpp/ql/src/Likely Bugs/RedundantNullCheckSimple.ql 

    Co-authored-by: Geoffrey White <40627776+geoffw0@users.noreply.github.com>
    @MathiasVP @geoffw0
    MathiasVP and geoffw0 committed Apr 13, 2023
    b7bbdb7

  5. Swift: getName() -> getFullName().

    @geoffw0
    geoffw0 committed Apr 13, 2023
    8c415f3

  6. C++: Add change note.

    @MathiasVP
    MathiasVP committed Apr 13, 2023
    f1a7b1a

  7. C++: Accept test changes.

    @MathiasVP
    MathiasVP committed Apr 13, 2023
    c230de8

  8. C++: Convert 'cpp/redundant-null-check-simple' to a path-problem quer… 

    …y and assigned it precision high.
    @MathiasVP
    MathiasVP committed Apr 13, 2023
    b8d2896

  9. Merge pull request #12820 from jcogs33/jcogs33/update-hq-manual-prove… 

    …nance

Java: update provenance of `Connection#nativeSQL` sink to "hq-manual"
    @jcogs33
    jcogs33 committed Apr 13, 2023
    0442072

  10. Merge pull request #12808 from egregius313/egregius313/java/dataflow/… 

    …refactor-experimental

Java: Refactor experimental queries to new DataFlow API
    @egregius313
    egregius313 committed Apr 13, 2023
    aeff6d3
Older