Commits

Breadcrumbs

History for

onfeece6f

User selector

All users

All time

Commit History

Commits on Oct 24, 2022

• Merge pull request #10883 from erik-krogh/codeSink

  Show description for ef5132b
  erik-krogh

  authored
  ef5132b

  Copy full SHA for ef5132b

• Merge pull request #10888 from erik-krogh/glob

  Show description for 5ff98cd
  erik-krogh

  authored
  5ff98cd

  Copy full SHA for 5ff98cd

• Merge pull request #10918 from asgerf/rb/constant-compound-assignment

  Show description for bcfe4ec
  asgerf

  authored
  bcfe4ec

  Copy full SHA for bcfe4ec

• Merge pull request #10928 from asgerf/rb/assumed-global-const

  Show description for cac2e2e
  asgerf

  authored
  cac2e2e

  Copy full SHA for cac2e2e

• Ruby: constant lookup is unaffected by blocks

  asgerf

  committed
  0ffb0f6

  Copy full SHA for 0ffb0f6

• use instanceof in DirPathAccess

  erik-krogh

  committed
  07d90b3

  Copy full SHA for 07d90b3

• fix qldoc

  Show description for 669b0c3
  

  erik-krogh

  and

  nickrolfe

  committed
  669b0c3

  Copy full SHA for 669b0c3

• add model for Dir.glob and other Dir methods

  erik-krogh

  committed
  85cd7f9

  Copy full SHA for 85cd7f9

Commits on Oct 22, 2022

• Ruby: some more tests

  aibaars

  committed
  b3855b0

  Copy full SHA for b3855b0

Commits on Oct 21, 2022

• Ruby: desugar compound constant-assignments

  aibaars

  committed
  ccaa129

  Copy full SHA for ccaa129

• Ruby: add change note for localTaintStep fix

  nickrolfe

  committed
  9fb436e

  Copy full SHA for 9fb436e

• Ruby: include value-preserving flow in localTaintStep

  nickrolfe

  committed
  269c277

  Copy full SHA for 269c277

• Ruby: add test of TaintTracking::localFlowStep

  nickrolfe

  committed
  5319216

  Copy full SHA for 5319216

• Ruby: ensure Object is a transitive superclass

  asgerf

  committed
  84ae17d

  Copy full SHA for 84ae17d

• Merge pull request #10920 from github/post-release-prep/codeql-cli-2.11.2

  Show description for a56ed88
  aibaars

  authored
  a56ed88

  Copy full SHA for a56ed88

• Ruby: add a comment

  Show description for 3fd2b9a
  asgerf

  committed
  3fd2b9a

  Copy full SHA for 3fd2b9a

• Ruby: treat String as a builtin

  asgerf

  committed
  ee7970a

  Copy full SHA for ee7970a

• Ruby: allow speculative container qname resolution

  asgerf

  committed
  db58e33

  Copy full SHA for db58e33

• Post-release preparation for codeql-cli-2.11.2

  

  github-actions[bot]

  committed
  be76932

  Copy full SHA for be76932

• Ruby: also add an AST test

  asgerf

  committed
  d26b089

  Copy full SHA for d26b089

• Ruby: add test with compound assignment to a constant

  asgerf

  committed
  038bdec

  Copy full SHA for 038bdec

• Ruby: Refactor call graph logic for singleton methods

  hvitved

  committed
  db699ae

  Copy full SHA for db699ae

Commits on Oct 20, 2022

• Ruby: add test showing missing superclass edge

  asgerf

  committed
  8c2c28d

  Copy full SHA for 8c2c28d

• Merge pull request #10902 from github/release-prep/2.11.2

  Show description for a520de3
  aibaars

  authored
  a520de3

  Copy full SHA for a520de3

• Apply suggestions from code review

  Show description for 45c9a0d
  

  aibaars

  and

  jketema

  authored
  45c9a0d

  Copy full SHA for 45c9a0d

• Release preparation for version 2.11.2

  

  github-actions[bot]

  committed
  9a0848b

  Copy full SHA for 9a0848b

• Ruby: Block for steps into `self` parameters in `trackModuleAccess`

  hvitved

  committed
  faaead6

  Copy full SHA for faaead6

• Ruby: Add more call graph tests

  hvitved

  committed
  bda9826

  Copy full SHA for bda9826

• fix typo

  erik-krogh

  committed
  bb8bcd4

  Copy full SHA for bb8bcd4

• rename `runsImmediately` to `runsArbitraryCode`

  erik-krogh

  committed
  24916f8

  Copy full SHA for 24916f8

Commits on Oct 19, 2022

• remove duplicate alerts due to multiple states reaching the same sink

  erik-krogh

  committed
  3dd89bb

  Copy full SHA for 3dd89bb

• add flow-state support to sanitizers in code-execution, and use that to refactor the string-concatenation-sanitizer

  erik-krogh

  committed
  226bd1f

  Copy full SHA for 226bd1f

• use flow-states to remove FPs related to an attacker only controlling a substring in code-injection

  erik-krogh

  committed
  3e51f6f

  Copy full SHA for 3e51f6f

• add a runsImmediately predicate to CodeExecution (name chosen by Copilot)

  erik-krogh

  committed
  2a72e89

  Copy full SHA for 2a72e89

• add failing test for safe-ish uses of Object.send

  erik-krogh

  committed
  d77b316

  Copy full SHA for d77b316