Commits

Breadcrumbs

History for

onba7238d

User selector

All users

All time

Commit History

Commits on May 25, 2022

• C#: Update XML Injectiont test output after rebase (query has been turned into a path-problem and the output is now affected by the added summaries for NameValueCollection).

  michaelnebel

  committed
  ba7238d

  Copy full SHA for ba7238d

• C#: Flow summaries has now been added for Exception stack trace, but not for ToString. The latter will be encoded as an extra taintstep in the analysis. To reduce noise for all uses of an exception…

  Show description for c8ede58
  michaelnebel

  committed
  c8ede58

  Copy full SHA for c8ede58

• C#: Since NameValueCollection now has a flow summary for the string indexer it is no longer consider an unsafe external api, which is why it has disappared from the result.

  michaelnebel

  committed
  4d6d1c8

  Copy full SHA for 4d6d1c8

• C#: Since NameValueCollection now has a flow summary for the indexer it is considered a SafeExternalApiCallable and will thus not be included in the result of the test.

  michaelnebel

  committed
  ee027f8

  Copy full SHA for ee027f8

• C#: Update tests due to new summaries for ProcessStartInfo.

  michaelnebel

  committed
  e2d6cd2

  Copy full SHA for e2d6cd2

• C#: Update test because we now have a flow summary the string indexer for NameValueCollection.

  michaelnebel

  committed
  9b8636a

  Copy full SHA for 9b8636a

Commits on May 5, 2022

• C#: Update test output to reflect that the query is now a path-problem query.

  michaelnebel

  committed
  3c347ca

  Copy full SHA for 3c347ca

Commits on Jan 5, 2022

• C#: Update the XSS expected file.

  michaelnebel

  committed
  53000cf

  Copy full SHA for 53000cf

• C#: Only use stubs for XSS test.

  michaelnebel

  committed
  7e6d88d

  Copy full SHA for 7e6d88d

• C#: Update the UrlRedirect expected file.

  michaelnebel

  committed
  24543a2

  Copy full SHA for 24543a2

• C#: Replace StringValues stub from stubs.cs with the stub in Microsoft.Extensions.Primitives.

  michaelnebel

  committed
  47ab206

  Copy full SHA for 47ab206

Commits on Nov 30, 2021

• C#: Use stubs for the CWE-601 testcase.

  michaelnebel

  committed
  59b71df

  Copy full SHA for 59b71df

• C#: Use stubs for the CWE-838 testcase

  michaelnebel

  committed
  0b4d0d2

  Copy full SHA for 0b4d0d2

Commits on Sep 20, 2021

• C#: Add `subpaths` predicate to XSS queries

  hvitved

  committed
  6d315a5

  Copy full SHA for 6d315a5

Commits on Sep 7, 2021

• Dataflow: Update test expected outputs.

  aschackmull

  committed
  f30dad7

  Copy full SHA for f30dad7

Commits on Aug 26, 2021

• C#: Fix test for `InsecureSQLConnection.ql`

  hvitved

  committed
  592a422

  Copy full SHA for 592a422

Commits on Aug 19, 2021

• Merge pull request #6425 from raulgarciamsft/insecureRandom_potential_fix

  Show description for 763de4f
  tamasvajk

  authored
  763de4f

  Copy full SHA for 763de4f

Commits on Aug 17, 2021

• Merge pull request #5508 from edvraa/deserializers

  Show description for 44ff623
  hvitved

  authored
  44ff623

  Copy full SHA for 44ff623

Commits on Aug 5, 2021

• Update csharp/ql/test/query-tests/Security Features/CWE-338/InsecureRandomness.cs

  Show description for 2708326
  

  raulgarciamsft

  and

  intrigus-lgtm

  authored
  2708326

  Copy full SHA for 2708326

• C#: Add missing `nodes` predicate to XSS queries

  hvitved

  committed
  9eb3f28

  Copy full SHA for 9eb3f28

• Fixing query & test

  raulgarciamsft

  committed
  7340a12

  Copy full SHA for 7340a12

Commits on Aug 4, 2021

• Merge with main

  

  edvraa

  committed
  d1e4168

  Copy full SHA for d1e4168

Commits on Jul 12, 2021

• Merge with Main

  

  edvraa

  committed
  1682e99

  Copy full SHA for 1682e99

Commits on Jul 4, 2021

• C#: Remove `Query.qll` top-level modules

  hvitved

  committed
  4de4753

  Copy full SHA for 4de4753

• C#: Add `Query` suffix to libraries that should only be imported by queries

  hvitved

  committed
  c812d4e

  Copy full SHA for c812d4e

Commits on Jul 1, 2021

• Add adjusted expected files

  tamasvajk

  committed
  5e27703

  Copy full SHA for 5e27703

• Trim test files + remove duplicate newlines

  tamasvajk

  committed
  03d1a3e

  Copy full SHA for 03d1a3e

• Manual fixes

  tamasvajk

  committed
  4900ecf

  Copy full SHA for 4900ecf

• C#: Start using 'options' files in tests

  tamasvajk

  committed
  c29d110

  Copy full SHA for c29d110

Commits on Jun 23, 2021

• C#: Change Dapper stub to nuget-based one (stub also System.Data.SqlClient)

  tamasvajk

  committed
  b044708

  Copy full SHA for b044708

Commits on Apr 22, 2021

• Make similarly named files in tests and qhelp in sync

  

  edvraa

  committed
  c9c9758

  Copy full SHA for c9c9758

Commits on Apr 16, 2021

• Charpred for InstanceMethodSink

  

  edvraa

  committed
  c3deb48

  Copy full SHA for c3deb48

Commits on Apr 15, 2021

• Use TaintTracking2

  

  edvraa

  committed
  3aedd2c

  Copy full SHA for 3aedd2c

Commits on Apr 12, 2021

• C#: Add Console.Read* to local flow sources

  tamasvajk

  committed
  b4d35b5

  Copy full SHA for b4d35b5

Commits on Apr 6, 2021

• C#: Add Dapper support to SQL injection queries

  tamasvajk

  committed
  ffcb345

  Copy full SHA for ffcb345