Commits

Breadcrumbs

History for

on9211d75

User selector

All users

All time

Commit History

Commits on Jun 16, 2022

• C#: Add change note.

  michaelnebel

  committed
  9211d75

  Copy full SHA for 9211d75

• C#: Update testcases with examples.

  michaelnebel

  committed
  1f2f2ff

  Copy full SHA for 1f2f2ff

• C#: Only consider directly public auto implemented properties with public getters and setters as being tainted.

  michaelnebel

  committed
  e1c7003

  Copy full SHA for e1c7003

• C#: Add testcase for controller parameter types tainted members.

  michaelnebel

  committed
  ef0a3d0

  Copy full SHA for ef0a3d0

• C#: Move ASP Net Core stubs into stubs folder.

  michaelnebel

  committed
  93007f8

  Copy full SHA for 93007f8

Commits on Jun 15, 2022

• C#: Consider all properties of ASP.NET Core like objects to also be sources of tainted data.

  michaelnebel

  committed
  9639dca

  Copy full SHA for 9639dca

Commits on Jun 1, 2022

• Merge pull request #9316 from hvitved/dataflow/edges-get-a-successor-consistency

  Show description for 4f3751d
  aschackmull

  authored
  4f3751d

  Copy full SHA for 4f3751d

Commits on May 31, 2022

• Merge pull request #9332 from github/post-release-prep/codeql-cli-2.9.3

  Show description for f417c12
  nickrolfe

  authored
  f417c12

  Copy full SHA for f417c12

• Post-release preparation for codeql-cli-2.9.3

  

  github-actions[bot]

  committed
  ed2f340

  Copy full SHA for ed2f340

Commits on May 29, 2022

• Add changed framework coverage reports

  github-actions[bot]

  committed
  31c91a6

  Copy full SHA for 31c91a6

Commits on May 25, 2022

• Data flow: Sync files

  hvitved

  committed
  bcdef98

  Copy full SHA for bcdef98

• Data flow: Make `PathGraph::edges/2` and `PathNode::getASuccessor/1` consistent

  hvitved

  committed
  a4023b8

  Copy full SHA for a4023b8

• Data flow: Sync files

  hvitved

  committed
  42f05da

  Copy full SHA for 42f05da

• Release preparation for version 2.9.3

  

  github-actions[bot]

  committed
  1f1b364

  Copy full SHA for 1f1b364

• C#: Update flow summaries test after rebase. The rebase included a fix to the isAutoGenerated predicate, which means that a summary is only considered autogenerated, if no hand-written version exis…

  Show description for 9cab92b
  michaelnebel

  committed
  9cab92b

  Copy full SHA for 9cab92b

• C#: Update FlowSummaries test with generated printing (needed due to rebase).

  michaelnebel

  committed
  5b405bb

  Copy full SHA for 5b405bb

• C#: Update XML Injectiont test output after rebase (query has been turned into a path-problem and the output is now affected by the added summaries for NameValueCollection).

  michaelnebel

  committed
  ba7238d

  Copy full SHA for ba7238d

• C#: Update flow summaries test (note that the test doesn't correctly print the generated flag at the moment).

  michaelnebel

  committed
  7553243

  Copy full SHA for 7553243

• C#: Flow summaries has now been added for Exception stack trace, but not for ToString. The latter will be encoded as an extra taintstep in the analysis. To reduce noise for all uses of an exception…

  Show description for c8ede58
  michaelnebel

  committed
  c8ede58

  Copy full SHA for c8ede58

• C#: Since NameValueCollection now has a flow summary for the string indexer it is no longer consider an unsafe external api, which is why it has disappared from the result.

  michaelnebel

  committed
  4d6d1c8

  Copy full SHA for 4d6d1c8

• C#: Since NameValueCollection now has a flow summary for the indexer it is considered a SafeExternalApiCallable and will thus not be included in the result of the test.

  michaelnebel

  committed
  ee027f8

  Copy full SHA for ee027f8

• C#: Add QlDoc to the Generated file.

  michaelnebel

  committed
  268230e

  Copy full SHA for 268230e

• C#: Update tests due to new summaries for ProcessStartInfo.

  michaelnebel

  committed
  e2d6cd2

  Copy full SHA for e2d6cd2

• C#: Update test because we now have a flow summary the string indexer for NameValueCollection.

  michaelnebel

  committed
  9b8636a

  Copy full SHA for 9b8636a

• C#: Update taint steps test as the generated models now include a model for the getters for KeyValuePair (we only had manual summaries for the constructor).

  michaelnebel

  committed
  d9c7ba4

  Copy full SHA for d9c7ba4

• C#: Add generated Dotnet Runtime summary models that allows to up two reads and two stores and update flow summaries test.

  michaelnebel

  committed
  f8e7290

  Copy full SHA for f8e7290

• C#: Add generated framework models to ExternalFlow.

  michaelnebel

  committed
  3b62b45

  Copy full SHA for 3b62b45

Commits on May 24, 2022

• Merge pull request #9270 from michaelnebel/csharp/summarized-callable-fix

  Show description for daace0f
  michaelnebel

  authored
  daace0f

  Copy full SHA for daace0f

• Merge pull request #9024 from hvitved/dataflow/content-flow-lib

  Show description for 728ccaf
  hvitved

  authored
  728ccaf

  Copy full SHA for 728ccaf

• Rework `ContentDataFlow` implementation

  hvitved

  committed
  6345816

  Copy full SHA for 6345816

• C#: Address codereview comments.

  michaelnebel

  committed
  42be60e

  Copy full SHA for 42be60e

• C#: Fix issue with isAutoGenerated predicate and make sure that data flow only use relevant summaries.

  michaelnebel

  committed
  eed02a2

  Copy full SHA for eed02a2

Commits on May 23, 2022

• C#: Update `ContentDataFlow` test

  Show description for 9cc9991
  hvitved

  committed
  9cc9991

  Copy full SHA for 9cc9991

• Merge pull request #9255 from michaelnebel/csharp/test-clearscontent

  Show description for bf958ff
  michaelnebel

  authored
  bf958ff

  Copy full SHA for bf958ff

• Merge pull request #9256 from michaelnebel/csharp/test-ranking

  Show description for c82ab68
  michaelnebel

  authored
  c82ab68

  Copy full SHA for c82ab68