From 42ecc9b1c79bd2aa919478a521d41340aa080db7 Mon Sep 17 00:00:00 2001 From: Dave Bartolomeo Date: Tue, 14 Dec 2021 12:46:19 -0500 Subject: [PATCH 1/4] Move new change notes to appropriate pack --- .../2021-11-02-incorrect-integer-conversion-updated.md | 4 ---- change-notes/2021-11-19-log-injection-query.md | 2 -- ql/src/change-notes/2021-11-19-log-injection-query.md | 5 +++++ 3 files changed, 5 insertions(+), 6 deletions(-) delete mode 100644 change-notes/2021-11-02-incorrect-integer-conversion-updated.md delete mode 100644 change-notes/2021-11-19-log-injection-query.md create mode 100644 ql/src/change-notes/2021-11-19-log-injection-query.md diff --git a/change-notes/2021-11-02-incorrect-integer-conversion-updated.md b/change-notes/2021-11-02-incorrect-integer-conversion-updated.md deleted file mode 100644 index 3075f44118f..00000000000 --- a/change-notes/2021-11-02-incorrect-integer-conversion-updated.md +++ /dev/null @@ -1,4 +0,0 @@ -lgtm,codescanning -* The query "Incorrect conversion between integer types" has been improved to - treat `math.MaxUint` and `math.MaxInt` as the values they would be on a - 32-bit architecture. This should lead to fewer false positive results. diff --git a/change-notes/2021-11-19-log-injection-query.md b/change-notes/2021-11-19-log-injection-query.md deleted file mode 100644 index 8ac6a4d4440..00000000000 --- a/change-notes/2021-11-19-log-injection-query.md +++ /dev/null @@ -1,2 +0,0 @@ -lgtm,codescanning -* A new query "Log entries created from user input" (`go/log-injection`) has been added. The query reports user-provided data reaching calls to logging methods. diff --git a/ql/src/change-notes/2021-11-19-log-injection-query.md b/ql/src/change-notes/2021-11-19-log-injection-query.md new file mode 100644 index 00000000000..8f12b920dc2 --- /dev/null +++ b/ql/src/change-notes/2021-11-19-log-injection-query.md @@ -0,0 +1,5 @@ +--- +category: newQuery +tags: [lgtm,codescanning] +--- +* A new query _Log entries created from user input_ (`go/log-injection`) has been added. The query reports user-provided data reaching calls to logging methods. From a3e5b4c99ca034f21aa0882867fc7dc46305accd Mon Sep 17 00:00:00 2001 From: Dave Bartolomeo Date: Tue, 14 Dec 2021 12:46:56 -0500 Subject: [PATCH 2/4] Move pre-packaging change notes to `old-change-notes` directory --- {change-notes => old-change-notes}/1.23/analysis-go.md | 0 {change-notes => old-change-notes}/1.24/analysis-go.md | 0 {change-notes => old-change-notes}/1.24/extractor-go.md | 0 .../2020-04-30-syscall-functions.md | 0 .../2020-05-01-bad-redirect-check.md | 0 {change-notes => old-change-notes}/2020-05-01-macaron-model.md | 0 .../2020-05-05-clear-text-logging.md | 0 {change-notes => old-change-notes}/2020-05-05-mux-model.md | 0 {change-notes => old-change-notes}/2020-05-07-update-data-flow.md | 0 {change-notes => old-change-notes}/2020-05-11-reflected-xss.md | 0 {change-notes => old-change-notes}/2020-05-12-tainted-path.md | 0 {change-notes => old-change-notes}/2020-05-13-io-model.md | 0 .../2020-05-18-redundant-recover.md | 0 {change-notes => old-change-notes}/2020-05-20-mongodb-model.md | 0 .../2020-05-20-request-forgery-sanitizers.md | 0 {change-notes => old-change-notes}/2020-05-22-websocket-model.md | 0 {change-notes => old-change-notes}/2020-05-29-open-redirect.md | 0 {change-notes => old-change-notes}/2020-06-11-build-tracing.md | 0 .../2020-06-12-more-dependency-extraction.md | 0 {change-notes => old-change-notes}/2020-06-16-email-injection.md | 0 .../2020-06-17-reflected-xss-refinements.md | 0 {change-notes => old-change-notes}/2020-06-19-call-graph.md | 0 .../2020-06-19-cyclic-field-lookup.md | 0 .../2020-06-19-switch-block-without-test.md | 0 .../2020-06-24-clear-text-logging.md | 0 {change-notes => old-change-notes}/2020-06-24-open-redirect.md | 0 .../2020-06-26-taint-model-tar-zip.md | 0 .../2020-06-26-taint-through-range.md | 0 .../2020-07-06-repo-with-file-url-origin.md | 0 .../2020-07-06-tolerate-more-unreachable-returns.md | 0 .../2020-07-07-missing-error-check.md | 0 {change-notes => old-change-notes}/2020-07-15-insecure-tls.md | 0 .../2020-07-22-ssh-host-checking.md | 0 {change-notes => old-change-notes}/2020-07-28-library-models.md | 0 .../2020-08-05-incorrect-integer-conversion.md | 0 .../2020-08-07-negative-length-check.md | 0 {change-notes => old-change-notes}/2020-08-18-oauth2.md | 0 {change-notes => old-change-notes}/2020-08-19-gin-model.md | 0 {change-notes => old-change-notes}/2020-08-27-protobufs.md | 0 .../2020-08-28-allocation-size-overflow-sanitizers.md | 0 .../2020-09-10-gorm-model-improved.md | 0 .../2020-09-10-xss-false-positives.md | 0 .../2020-09-14-split-string-sanitizer.md | 0 {change-notes => old-change-notes}/2020-09-15-chi.md | 0 {change-notes => old-change-notes}/2020-09-17-echo.md | 0 .../2020-09-22-suspicious-character-in-regexp.md | 0 {change-notes => old-change-notes}/2020-09-23-stdlib.md | 0 {change-notes => old-change-notes}/2020-10-01-gomod-extraction.md | 0 .../2020-10-01-stack-trace-exposure.md | 0 .../2020-10-12-old-context-package.md | 0 {change-notes => old-change-notes}/2020-10-12-x-net-html.md | 0 .../2020-10-14-allocation-overflow-accuracy.md | 0 {change-notes => old-change-notes}/2020-10-14-spew.md | 0 {change-notes => old-change-notes}/2020-10-19-revel.md | 0 .../2020-11-03-underscore-assigns.md | 0 .../2020-11-04-unsafe-unzip-symlink.md | 0 .../2020-11-09-suspicious-character-in-regexp-improvement.md | 0 {change-notes => old-change-notes}/2020-11-11-stored-command.md | 0 {change-notes => old-change-notes}/2020-11-11-stored-xss.md | 0 .../2020-11-12-zipslip-sanitizers.md | 0 {change-notes => old-change-notes}/2020-11-19-dataflow-edges.md | 0 {change-notes => old-change-notes}/2020-11-27-external-api.md | 0 .../2020-11-27-guarding-functions.md | 0 .../2020-11-30-evanphx-json-patch.md | 0 {change-notes => old-change-notes}/2020-12-01-fmt-errorf.md | 0 {change-notes => old-change-notes}/2020-12-08-beego.md | 0 .../2020-12-08-k8s-io-apimachinery-pkg-runtime.md | 0 .../2020-12-09-clear-text-logging-source.md | 0 .../2020-12-14-insecure-randomness.md | 0 {change-notes => old-change-notes}/2020-12-15-beego-orm.md | 0 {change-notes => old-change-notes}/2020-12-18-goproxy.md | 0 {change-notes => old-change-notes}/2020-12-23-regexp-anchors.md | 0 {change-notes => old-change-notes}/2021-01-07-gokit-sources.md | 0 .../2021-01-08-git-as-interpreter.md | 0 {change-notes => old-change-notes}/2021-01-12-model-couchbase.md | 0 .../2021-01-21-default-sanitizer-guard.md | 0 .../2021-02-02-constant-comparison-sanitizer-guard.md | 0 {change-notes => old-change-notes}/2021-02-09-html-templates.md | 0 .../2021-02-10-cfg-equality-panic-edges.md | 0 {change-notes => old-change-notes}/2021-02-10-yaml.md | 0 {change-notes => old-change-notes}/2021-02-11-zap.md | 0 {change-notes => old-change-notes}/2021-02-15-logrus-updated.md | 0 {change-notes => old-change-notes}/2021-02-18-go-116.md | 0 .../2021-03-05-dataflow-promoted-fields.md | 0 {change-notes => old-change-notes}/2021-03-16-html-tracing.md | 0 {change-notes => old-change-notes}/2021-03-16-nethttp-updated.md | 0 .../2021-04-19-http-request-taint-flow.md | 0 {change-notes => old-change-notes}/2021-04-20-tuple-types.md | 0 {change-notes => old-change-notes}/2021-05-06-xorm.md | 0 .../2021-07-28-insufficient-key-size.md | 0 {change-notes => old-change-notes}/2021-08-17-go-117.md | 0 .../2021-08-23-getPrimaryQlClasses.md | 0 .../2021-10-27-insufficient-key-size-sanitizer.md | 0 93 files changed, 0 insertions(+), 0 deletions(-) rename {change-notes => old-change-notes}/1.23/analysis-go.md (100%) rename {change-notes => old-change-notes}/1.24/analysis-go.md (100%) rename {change-notes => old-change-notes}/1.24/extractor-go.md (100%) rename {change-notes => old-change-notes}/2020-04-30-syscall-functions.md (100%) rename {change-notes => old-change-notes}/2020-05-01-bad-redirect-check.md (100%) rename {change-notes => old-change-notes}/2020-05-01-macaron-model.md (100%) rename {change-notes => old-change-notes}/2020-05-05-clear-text-logging.md (100%) rename {change-notes => old-change-notes}/2020-05-05-mux-model.md (100%) rename {change-notes => old-change-notes}/2020-05-07-update-data-flow.md (100%) rename {change-notes => old-change-notes}/2020-05-11-reflected-xss.md (100%) rename {change-notes => old-change-notes}/2020-05-12-tainted-path.md (100%) rename {change-notes => old-change-notes}/2020-05-13-io-model.md (100%) rename {change-notes => old-change-notes}/2020-05-18-redundant-recover.md (100%) rename {change-notes => old-change-notes}/2020-05-20-mongodb-model.md (100%) rename {change-notes => old-change-notes}/2020-05-20-request-forgery-sanitizers.md (100%) rename {change-notes => old-change-notes}/2020-05-22-websocket-model.md (100%) rename {change-notes => old-change-notes}/2020-05-29-open-redirect.md (100%) rename {change-notes => old-change-notes}/2020-06-11-build-tracing.md (100%) rename {change-notes => old-change-notes}/2020-06-12-more-dependency-extraction.md (100%) rename {change-notes => old-change-notes}/2020-06-16-email-injection.md (100%) rename {change-notes => old-change-notes}/2020-06-17-reflected-xss-refinements.md (100%) rename {change-notes => old-change-notes}/2020-06-19-call-graph.md (100%) rename {change-notes => old-change-notes}/2020-06-19-cyclic-field-lookup.md (100%) rename {change-notes => old-change-notes}/2020-06-19-switch-block-without-test.md (100%) rename {change-notes => old-change-notes}/2020-06-24-clear-text-logging.md (100%) rename {change-notes => old-change-notes}/2020-06-24-open-redirect.md (100%) rename {change-notes => old-change-notes}/2020-06-26-taint-model-tar-zip.md (100%) rename {change-notes => old-change-notes}/2020-06-26-taint-through-range.md (100%) rename {change-notes => old-change-notes}/2020-07-06-repo-with-file-url-origin.md (100%) rename {change-notes => old-change-notes}/2020-07-06-tolerate-more-unreachable-returns.md (100%) rename {change-notes => old-change-notes}/2020-07-07-missing-error-check.md (100%) rename {change-notes => old-change-notes}/2020-07-15-insecure-tls.md (100%) rename {change-notes => old-change-notes}/2020-07-22-ssh-host-checking.md (100%) rename {change-notes => old-change-notes}/2020-07-28-library-models.md (100%) rename {change-notes => old-change-notes}/2020-08-05-incorrect-integer-conversion.md (100%) rename {change-notes => old-change-notes}/2020-08-07-negative-length-check.md (100%) rename {change-notes => old-change-notes}/2020-08-18-oauth2.md (100%) rename {change-notes => old-change-notes}/2020-08-19-gin-model.md (100%) rename {change-notes => old-change-notes}/2020-08-27-protobufs.md (100%) rename {change-notes => old-change-notes}/2020-08-28-allocation-size-overflow-sanitizers.md (100%) rename {change-notes => old-change-notes}/2020-09-10-gorm-model-improved.md (100%) rename {change-notes => old-change-notes}/2020-09-10-xss-false-positives.md (100%) rename {change-notes => old-change-notes}/2020-09-14-split-string-sanitizer.md (100%) rename {change-notes => old-change-notes}/2020-09-15-chi.md (100%) rename {change-notes => old-change-notes}/2020-09-17-echo.md (100%) rename {change-notes => old-change-notes}/2020-09-22-suspicious-character-in-regexp.md (100%) rename {change-notes => old-change-notes}/2020-09-23-stdlib.md (100%) rename {change-notes => old-change-notes}/2020-10-01-gomod-extraction.md (100%) rename {change-notes => old-change-notes}/2020-10-01-stack-trace-exposure.md (100%) rename {change-notes => old-change-notes}/2020-10-12-old-context-package.md (100%) rename {change-notes => old-change-notes}/2020-10-12-x-net-html.md (100%) rename {change-notes => old-change-notes}/2020-10-14-allocation-overflow-accuracy.md (100%) rename {change-notes => old-change-notes}/2020-10-14-spew.md (100%) rename {change-notes => old-change-notes}/2020-10-19-revel.md (100%) rename {change-notes => old-change-notes}/2020-11-03-underscore-assigns.md (100%) rename {change-notes => old-change-notes}/2020-11-04-unsafe-unzip-symlink.md (100%) rename {change-notes => old-change-notes}/2020-11-09-suspicious-character-in-regexp-improvement.md (100%) rename {change-notes => old-change-notes}/2020-11-11-stored-command.md (100%) rename {change-notes => old-change-notes}/2020-11-11-stored-xss.md (100%) rename {change-notes => old-change-notes}/2020-11-12-zipslip-sanitizers.md (100%) rename {change-notes => old-change-notes}/2020-11-19-dataflow-edges.md (100%) rename {change-notes => old-change-notes}/2020-11-27-external-api.md (100%) rename {change-notes => old-change-notes}/2020-11-27-guarding-functions.md (100%) rename {change-notes => old-change-notes}/2020-11-30-evanphx-json-patch.md (100%) rename {change-notes => old-change-notes}/2020-12-01-fmt-errorf.md (100%) rename {change-notes => old-change-notes}/2020-12-08-beego.md (100%) rename {change-notes => old-change-notes}/2020-12-08-k8s-io-apimachinery-pkg-runtime.md (100%) rename {change-notes => old-change-notes}/2020-12-09-clear-text-logging-source.md (100%) rename {change-notes => old-change-notes}/2020-12-14-insecure-randomness.md (100%) rename {change-notes => old-change-notes}/2020-12-15-beego-orm.md (100%) rename {change-notes => old-change-notes}/2020-12-18-goproxy.md (100%) rename {change-notes => old-change-notes}/2020-12-23-regexp-anchors.md (100%) rename {change-notes => old-change-notes}/2021-01-07-gokit-sources.md (100%) rename {change-notes => old-change-notes}/2021-01-08-git-as-interpreter.md (100%) rename {change-notes => old-change-notes}/2021-01-12-model-couchbase.md (100%) rename {change-notes => old-change-notes}/2021-01-21-default-sanitizer-guard.md (100%) rename {change-notes => old-change-notes}/2021-02-02-constant-comparison-sanitizer-guard.md (100%) rename {change-notes => old-change-notes}/2021-02-09-html-templates.md (100%) rename {change-notes => old-change-notes}/2021-02-10-cfg-equality-panic-edges.md (100%) rename {change-notes => old-change-notes}/2021-02-10-yaml.md (100%) rename {change-notes => old-change-notes}/2021-02-11-zap.md (100%) rename {change-notes => old-change-notes}/2021-02-15-logrus-updated.md (100%) rename {change-notes => old-change-notes}/2021-02-18-go-116.md (100%) rename {change-notes => old-change-notes}/2021-03-05-dataflow-promoted-fields.md (100%) rename {change-notes => old-change-notes}/2021-03-16-html-tracing.md (100%) rename {change-notes => old-change-notes}/2021-03-16-nethttp-updated.md (100%) rename {change-notes => old-change-notes}/2021-04-19-http-request-taint-flow.md (100%) rename {change-notes => old-change-notes}/2021-04-20-tuple-types.md (100%) rename {change-notes => old-change-notes}/2021-05-06-xorm.md (100%) rename {change-notes => old-change-notes}/2021-07-28-insufficient-key-size.md (100%) rename {change-notes => old-change-notes}/2021-08-17-go-117.md (100%) rename {change-notes => old-change-notes}/2021-08-23-getPrimaryQlClasses.md (100%) rename {change-notes => old-change-notes}/2021-10-27-insufficient-key-size-sanitizer.md (100%) diff --git a/change-notes/1.23/analysis-go.md b/old-change-notes/1.23/analysis-go.md similarity index 100% rename from change-notes/1.23/analysis-go.md rename to old-change-notes/1.23/analysis-go.md diff --git a/change-notes/1.24/analysis-go.md b/old-change-notes/1.24/analysis-go.md similarity index 100% rename from change-notes/1.24/analysis-go.md rename to old-change-notes/1.24/analysis-go.md diff --git a/change-notes/1.24/extractor-go.md b/old-change-notes/1.24/extractor-go.md similarity index 100% rename from change-notes/1.24/extractor-go.md rename to old-change-notes/1.24/extractor-go.md diff --git a/change-notes/2020-04-30-syscall-functions.md b/old-change-notes/2020-04-30-syscall-functions.md similarity index 100% rename from change-notes/2020-04-30-syscall-functions.md rename to old-change-notes/2020-04-30-syscall-functions.md diff --git a/change-notes/2020-05-01-bad-redirect-check.md b/old-change-notes/2020-05-01-bad-redirect-check.md similarity index 100% rename from change-notes/2020-05-01-bad-redirect-check.md rename to old-change-notes/2020-05-01-bad-redirect-check.md diff --git a/change-notes/2020-05-01-macaron-model.md b/old-change-notes/2020-05-01-macaron-model.md similarity index 100% rename from change-notes/2020-05-01-macaron-model.md rename to old-change-notes/2020-05-01-macaron-model.md diff --git a/change-notes/2020-05-05-clear-text-logging.md b/old-change-notes/2020-05-05-clear-text-logging.md similarity index 100% rename from change-notes/2020-05-05-clear-text-logging.md rename to old-change-notes/2020-05-05-clear-text-logging.md diff --git a/change-notes/2020-05-05-mux-model.md b/old-change-notes/2020-05-05-mux-model.md similarity index 100% rename from change-notes/2020-05-05-mux-model.md rename to old-change-notes/2020-05-05-mux-model.md diff --git a/change-notes/2020-05-07-update-data-flow.md b/old-change-notes/2020-05-07-update-data-flow.md similarity index 100% rename from change-notes/2020-05-07-update-data-flow.md rename to old-change-notes/2020-05-07-update-data-flow.md diff --git a/change-notes/2020-05-11-reflected-xss.md b/old-change-notes/2020-05-11-reflected-xss.md similarity index 100% rename from change-notes/2020-05-11-reflected-xss.md rename to old-change-notes/2020-05-11-reflected-xss.md diff --git a/change-notes/2020-05-12-tainted-path.md b/old-change-notes/2020-05-12-tainted-path.md similarity index 100% rename from change-notes/2020-05-12-tainted-path.md rename to old-change-notes/2020-05-12-tainted-path.md diff --git a/change-notes/2020-05-13-io-model.md b/old-change-notes/2020-05-13-io-model.md similarity index 100% rename from change-notes/2020-05-13-io-model.md rename to old-change-notes/2020-05-13-io-model.md diff --git a/change-notes/2020-05-18-redundant-recover.md b/old-change-notes/2020-05-18-redundant-recover.md similarity index 100% rename from change-notes/2020-05-18-redundant-recover.md rename to old-change-notes/2020-05-18-redundant-recover.md diff --git a/change-notes/2020-05-20-mongodb-model.md b/old-change-notes/2020-05-20-mongodb-model.md similarity index 100% rename from change-notes/2020-05-20-mongodb-model.md rename to old-change-notes/2020-05-20-mongodb-model.md diff --git a/change-notes/2020-05-20-request-forgery-sanitizers.md b/old-change-notes/2020-05-20-request-forgery-sanitizers.md similarity index 100% rename from change-notes/2020-05-20-request-forgery-sanitizers.md rename to old-change-notes/2020-05-20-request-forgery-sanitizers.md diff --git a/change-notes/2020-05-22-websocket-model.md b/old-change-notes/2020-05-22-websocket-model.md similarity index 100% rename from change-notes/2020-05-22-websocket-model.md rename to old-change-notes/2020-05-22-websocket-model.md diff --git a/change-notes/2020-05-29-open-redirect.md b/old-change-notes/2020-05-29-open-redirect.md similarity index 100% rename from change-notes/2020-05-29-open-redirect.md rename to old-change-notes/2020-05-29-open-redirect.md diff --git a/change-notes/2020-06-11-build-tracing.md b/old-change-notes/2020-06-11-build-tracing.md similarity index 100% rename from change-notes/2020-06-11-build-tracing.md rename to old-change-notes/2020-06-11-build-tracing.md diff --git a/change-notes/2020-06-12-more-dependency-extraction.md b/old-change-notes/2020-06-12-more-dependency-extraction.md similarity index 100% rename from change-notes/2020-06-12-more-dependency-extraction.md rename to old-change-notes/2020-06-12-more-dependency-extraction.md diff --git a/change-notes/2020-06-16-email-injection.md b/old-change-notes/2020-06-16-email-injection.md similarity index 100% rename from change-notes/2020-06-16-email-injection.md rename to old-change-notes/2020-06-16-email-injection.md diff --git a/change-notes/2020-06-17-reflected-xss-refinements.md b/old-change-notes/2020-06-17-reflected-xss-refinements.md similarity index 100% rename from change-notes/2020-06-17-reflected-xss-refinements.md rename to old-change-notes/2020-06-17-reflected-xss-refinements.md diff --git a/change-notes/2020-06-19-call-graph.md b/old-change-notes/2020-06-19-call-graph.md similarity index 100% rename from change-notes/2020-06-19-call-graph.md rename to old-change-notes/2020-06-19-call-graph.md diff --git a/change-notes/2020-06-19-cyclic-field-lookup.md b/old-change-notes/2020-06-19-cyclic-field-lookup.md similarity index 100% rename from change-notes/2020-06-19-cyclic-field-lookup.md rename to old-change-notes/2020-06-19-cyclic-field-lookup.md diff --git a/change-notes/2020-06-19-switch-block-without-test.md b/old-change-notes/2020-06-19-switch-block-without-test.md similarity index 100% rename from change-notes/2020-06-19-switch-block-without-test.md rename to old-change-notes/2020-06-19-switch-block-without-test.md diff --git a/change-notes/2020-06-24-clear-text-logging.md b/old-change-notes/2020-06-24-clear-text-logging.md similarity index 100% rename from change-notes/2020-06-24-clear-text-logging.md rename to old-change-notes/2020-06-24-clear-text-logging.md diff --git a/change-notes/2020-06-24-open-redirect.md b/old-change-notes/2020-06-24-open-redirect.md similarity index 100% rename from change-notes/2020-06-24-open-redirect.md rename to old-change-notes/2020-06-24-open-redirect.md diff --git a/change-notes/2020-06-26-taint-model-tar-zip.md b/old-change-notes/2020-06-26-taint-model-tar-zip.md similarity index 100% rename from change-notes/2020-06-26-taint-model-tar-zip.md rename to old-change-notes/2020-06-26-taint-model-tar-zip.md diff --git a/change-notes/2020-06-26-taint-through-range.md b/old-change-notes/2020-06-26-taint-through-range.md similarity index 100% rename from change-notes/2020-06-26-taint-through-range.md rename to old-change-notes/2020-06-26-taint-through-range.md diff --git a/change-notes/2020-07-06-repo-with-file-url-origin.md b/old-change-notes/2020-07-06-repo-with-file-url-origin.md similarity index 100% rename from change-notes/2020-07-06-repo-with-file-url-origin.md rename to old-change-notes/2020-07-06-repo-with-file-url-origin.md diff --git a/change-notes/2020-07-06-tolerate-more-unreachable-returns.md b/old-change-notes/2020-07-06-tolerate-more-unreachable-returns.md similarity index 100% rename from change-notes/2020-07-06-tolerate-more-unreachable-returns.md rename to old-change-notes/2020-07-06-tolerate-more-unreachable-returns.md diff --git a/change-notes/2020-07-07-missing-error-check.md b/old-change-notes/2020-07-07-missing-error-check.md similarity index 100% rename from change-notes/2020-07-07-missing-error-check.md rename to old-change-notes/2020-07-07-missing-error-check.md diff --git a/change-notes/2020-07-15-insecure-tls.md b/old-change-notes/2020-07-15-insecure-tls.md similarity index 100% rename from change-notes/2020-07-15-insecure-tls.md rename to old-change-notes/2020-07-15-insecure-tls.md diff --git a/change-notes/2020-07-22-ssh-host-checking.md b/old-change-notes/2020-07-22-ssh-host-checking.md similarity index 100% rename from change-notes/2020-07-22-ssh-host-checking.md rename to old-change-notes/2020-07-22-ssh-host-checking.md diff --git a/change-notes/2020-07-28-library-models.md b/old-change-notes/2020-07-28-library-models.md similarity index 100% rename from change-notes/2020-07-28-library-models.md rename to old-change-notes/2020-07-28-library-models.md diff --git a/change-notes/2020-08-05-incorrect-integer-conversion.md b/old-change-notes/2020-08-05-incorrect-integer-conversion.md similarity index 100% rename from change-notes/2020-08-05-incorrect-integer-conversion.md rename to old-change-notes/2020-08-05-incorrect-integer-conversion.md diff --git a/change-notes/2020-08-07-negative-length-check.md b/old-change-notes/2020-08-07-negative-length-check.md similarity index 100% rename from change-notes/2020-08-07-negative-length-check.md rename to old-change-notes/2020-08-07-negative-length-check.md diff --git a/change-notes/2020-08-18-oauth2.md b/old-change-notes/2020-08-18-oauth2.md similarity index 100% rename from change-notes/2020-08-18-oauth2.md rename to old-change-notes/2020-08-18-oauth2.md diff --git a/change-notes/2020-08-19-gin-model.md b/old-change-notes/2020-08-19-gin-model.md similarity index 100% rename from change-notes/2020-08-19-gin-model.md rename to old-change-notes/2020-08-19-gin-model.md diff --git a/change-notes/2020-08-27-protobufs.md b/old-change-notes/2020-08-27-protobufs.md similarity index 100% rename from change-notes/2020-08-27-protobufs.md rename to old-change-notes/2020-08-27-protobufs.md diff --git a/change-notes/2020-08-28-allocation-size-overflow-sanitizers.md b/old-change-notes/2020-08-28-allocation-size-overflow-sanitizers.md similarity index 100% rename from change-notes/2020-08-28-allocation-size-overflow-sanitizers.md rename to old-change-notes/2020-08-28-allocation-size-overflow-sanitizers.md diff --git a/change-notes/2020-09-10-gorm-model-improved.md b/old-change-notes/2020-09-10-gorm-model-improved.md similarity index 100% rename from change-notes/2020-09-10-gorm-model-improved.md rename to old-change-notes/2020-09-10-gorm-model-improved.md diff --git a/change-notes/2020-09-10-xss-false-positives.md b/old-change-notes/2020-09-10-xss-false-positives.md similarity index 100% rename from change-notes/2020-09-10-xss-false-positives.md rename to old-change-notes/2020-09-10-xss-false-positives.md diff --git a/change-notes/2020-09-14-split-string-sanitizer.md b/old-change-notes/2020-09-14-split-string-sanitizer.md similarity index 100% rename from change-notes/2020-09-14-split-string-sanitizer.md rename to old-change-notes/2020-09-14-split-string-sanitizer.md diff --git a/change-notes/2020-09-15-chi.md b/old-change-notes/2020-09-15-chi.md similarity index 100% rename from change-notes/2020-09-15-chi.md rename to old-change-notes/2020-09-15-chi.md diff --git a/change-notes/2020-09-17-echo.md b/old-change-notes/2020-09-17-echo.md similarity index 100% rename from change-notes/2020-09-17-echo.md rename to old-change-notes/2020-09-17-echo.md diff --git a/change-notes/2020-09-22-suspicious-character-in-regexp.md b/old-change-notes/2020-09-22-suspicious-character-in-regexp.md similarity index 100% rename from change-notes/2020-09-22-suspicious-character-in-regexp.md rename to old-change-notes/2020-09-22-suspicious-character-in-regexp.md diff --git a/change-notes/2020-09-23-stdlib.md b/old-change-notes/2020-09-23-stdlib.md similarity index 100% rename from change-notes/2020-09-23-stdlib.md rename to old-change-notes/2020-09-23-stdlib.md diff --git a/change-notes/2020-10-01-gomod-extraction.md b/old-change-notes/2020-10-01-gomod-extraction.md similarity index 100% rename from change-notes/2020-10-01-gomod-extraction.md rename to old-change-notes/2020-10-01-gomod-extraction.md diff --git a/change-notes/2020-10-01-stack-trace-exposure.md b/old-change-notes/2020-10-01-stack-trace-exposure.md similarity index 100% rename from change-notes/2020-10-01-stack-trace-exposure.md rename to old-change-notes/2020-10-01-stack-trace-exposure.md diff --git a/change-notes/2020-10-12-old-context-package.md b/old-change-notes/2020-10-12-old-context-package.md similarity index 100% rename from change-notes/2020-10-12-old-context-package.md rename to old-change-notes/2020-10-12-old-context-package.md diff --git a/change-notes/2020-10-12-x-net-html.md b/old-change-notes/2020-10-12-x-net-html.md similarity index 100% rename from change-notes/2020-10-12-x-net-html.md rename to old-change-notes/2020-10-12-x-net-html.md diff --git a/change-notes/2020-10-14-allocation-overflow-accuracy.md b/old-change-notes/2020-10-14-allocation-overflow-accuracy.md similarity index 100% rename from change-notes/2020-10-14-allocation-overflow-accuracy.md rename to old-change-notes/2020-10-14-allocation-overflow-accuracy.md diff --git a/change-notes/2020-10-14-spew.md b/old-change-notes/2020-10-14-spew.md similarity index 100% rename from change-notes/2020-10-14-spew.md rename to old-change-notes/2020-10-14-spew.md diff --git a/change-notes/2020-10-19-revel.md b/old-change-notes/2020-10-19-revel.md similarity index 100% rename from change-notes/2020-10-19-revel.md rename to old-change-notes/2020-10-19-revel.md diff --git a/change-notes/2020-11-03-underscore-assigns.md b/old-change-notes/2020-11-03-underscore-assigns.md similarity index 100% rename from change-notes/2020-11-03-underscore-assigns.md rename to old-change-notes/2020-11-03-underscore-assigns.md diff --git a/change-notes/2020-11-04-unsafe-unzip-symlink.md b/old-change-notes/2020-11-04-unsafe-unzip-symlink.md similarity index 100% rename from change-notes/2020-11-04-unsafe-unzip-symlink.md rename to old-change-notes/2020-11-04-unsafe-unzip-symlink.md diff --git a/change-notes/2020-11-09-suspicious-character-in-regexp-improvement.md b/old-change-notes/2020-11-09-suspicious-character-in-regexp-improvement.md similarity index 100% rename from change-notes/2020-11-09-suspicious-character-in-regexp-improvement.md rename to old-change-notes/2020-11-09-suspicious-character-in-regexp-improvement.md diff --git a/change-notes/2020-11-11-stored-command.md b/old-change-notes/2020-11-11-stored-command.md similarity index 100% rename from change-notes/2020-11-11-stored-command.md rename to old-change-notes/2020-11-11-stored-command.md diff --git a/change-notes/2020-11-11-stored-xss.md b/old-change-notes/2020-11-11-stored-xss.md similarity index 100% rename from change-notes/2020-11-11-stored-xss.md rename to old-change-notes/2020-11-11-stored-xss.md diff --git a/change-notes/2020-11-12-zipslip-sanitizers.md b/old-change-notes/2020-11-12-zipslip-sanitizers.md similarity index 100% rename from change-notes/2020-11-12-zipslip-sanitizers.md rename to old-change-notes/2020-11-12-zipslip-sanitizers.md diff --git a/change-notes/2020-11-19-dataflow-edges.md b/old-change-notes/2020-11-19-dataflow-edges.md similarity index 100% rename from change-notes/2020-11-19-dataflow-edges.md rename to old-change-notes/2020-11-19-dataflow-edges.md diff --git a/change-notes/2020-11-27-external-api.md b/old-change-notes/2020-11-27-external-api.md similarity index 100% rename from change-notes/2020-11-27-external-api.md rename to old-change-notes/2020-11-27-external-api.md diff --git a/change-notes/2020-11-27-guarding-functions.md b/old-change-notes/2020-11-27-guarding-functions.md similarity index 100% rename from change-notes/2020-11-27-guarding-functions.md rename to old-change-notes/2020-11-27-guarding-functions.md diff --git a/change-notes/2020-11-30-evanphx-json-patch.md b/old-change-notes/2020-11-30-evanphx-json-patch.md similarity index 100% rename from change-notes/2020-11-30-evanphx-json-patch.md rename to old-change-notes/2020-11-30-evanphx-json-patch.md diff --git a/change-notes/2020-12-01-fmt-errorf.md b/old-change-notes/2020-12-01-fmt-errorf.md similarity index 100% rename from change-notes/2020-12-01-fmt-errorf.md rename to old-change-notes/2020-12-01-fmt-errorf.md diff --git a/change-notes/2020-12-08-beego.md b/old-change-notes/2020-12-08-beego.md similarity index 100% rename from change-notes/2020-12-08-beego.md rename to old-change-notes/2020-12-08-beego.md diff --git a/change-notes/2020-12-08-k8s-io-apimachinery-pkg-runtime.md b/old-change-notes/2020-12-08-k8s-io-apimachinery-pkg-runtime.md similarity index 100% rename from change-notes/2020-12-08-k8s-io-apimachinery-pkg-runtime.md rename to old-change-notes/2020-12-08-k8s-io-apimachinery-pkg-runtime.md diff --git a/change-notes/2020-12-09-clear-text-logging-source.md b/old-change-notes/2020-12-09-clear-text-logging-source.md similarity index 100% rename from change-notes/2020-12-09-clear-text-logging-source.md rename to old-change-notes/2020-12-09-clear-text-logging-source.md diff --git a/change-notes/2020-12-14-insecure-randomness.md b/old-change-notes/2020-12-14-insecure-randomness.md similarity index 100% rename from change-notes/2020-12-14-insecure-randomness.md rename to old-change-notes/2020-12-14-insecure-randomness.md diff --git a/change-notes/2020-12-15-beego-orm.md b/old-change-notes/2020-12-15-beego-orm.md similarity index 100% rename from change-notes/2020-12-15-beego-orm.md rename to old-change-notes/2020-12-15-beego-orm.md diff --git a/change-notes/2020-12-18-goproxy.md b/old-change-notes/2020-12-18-goproxy.md similarity index 100% rename from change-notes/2020-12-18-goproxy.md rename to old-change-notes/2020-12-18-goproxy.md diff --git a/change-notes/2020-12-23-regexp-anchors.md b/old-change-notes/2020-12-23-regexp-anchors.md similarity index 100% rename from change-notes/2020-12-23-regexp-anchors.md rename to old-change-notes/2020-12-23-regexp-anchors.md diff --git a/change-notes/2021-01-07-gokit-sources.md b/old-change-notes/2021-01-07-gokit-sources.md similarity index 100% rename from change-notes/2021-01-07-gokit-sources.md rename to old-change-notes/2021-01-07-gokit-sources.md diff --git a/change-notes/2021-01-08-git-as-interpreter.md b/old-change-notes/2021-01-08-git-as-interpreter.md similarity index 100% rename from change-notes/2021-01-08-git-as-interpreter.md rename to old-change-notes/2021-01-08-git-as-interpreter.md diff --git a/change-notes/2021-01-12-model-couchbase.md b/old-change-notes/2021-01-12-model-couchbase.md similarity index 100% rename from change-notes/2021-01-12-model-couchbase.md rename to old-change-notes/2021-01-12-model-couchbase.md diff --git a/change-notes/2021-01-21-default-sanitizer-guard.md b/old-change-notes/2021-01-21-default-sanitizer-guard.md similarity index 100% rename from change-notes/2021-01-21-default-sanitizer-guard.md rename to old-change-notes/2021-01-21-default-sanitizer-guard.md diff --git a/change-notes/2021-02-02-constant-comparison-sanitizer-guard.md b/old-change-notes/2021-02-02-constant-comparison-sanitizer-guard.md similarity index 100% rename from change-notes/2021-02-02-constant-comparison-sanitizer-guard.md rename to old-change-notes/2021-02-02-constant-comparison-sanitizer-guard.md diff --git a/change-notes/2021-02-09-html-templates.md b/old-change-notes/2021-02-09-html-templates.md similarity index 100% rename from change-notes/2021-02-09-html-templates.md rename to old-change-notes/2021-02-09-html-templates.md diff --git a/change-notes/2021-02-10-cfg-equality-panic-edges.md b/old-change-notes/2021-02-10-cfg-equality-panic-edges.md similarity index 100% rename from change-notes/2021-02-10-cfg-equality-panic-edges.md rename to old-change-notes/2021-02-10-cfg-equality-panic-edges.md diff --git a/change-notes/2021-02-10-yaml.md b/old-change-notes/2021-02-10-yaml.md similarity index 100% rename from change-notes/2021-02-10-yaml.md rename to old-change-notes/2021-02-10-yaml.md diff --git a/change-notes/2021-02-11-zap.md b/old-change-notes/2021-02-11-zap.md similarity index 100% rename from change-notes/2021-02-11-zap.md rename to old-change-notes/2021-02-11-zap.md diff --git a/change-notes/2021-02-15-logrus-updated.md b/old-change-notes/2021-02-15-logrus-updated.md similarity index 100% rename from change-notes/2021-02-15-logrus-updated.md rename to old-change-notes/2021-02-15-logrus-updated.md diff --git a/change-notes/2021-02-18-go-116.md b/old-change-notes/2021-02-18-go-116.md similarity index 100% rename from change-notes/2021-02-18-go-116.md rename to old-change-notes/2021-02-18-go-116.md diff --git a/change-notes/2021-03-05-dataflow-promoted-fields.md b/old-change-notes/2021-03-05-dataflow-promoted-fields.md similarity index 100% rename from change-notes/2021-03-05-dataflow-promoted-fields.md rename to old-change-notes/2021-03-05-dataflow-promoted-fields.md diff --git a/change-notes/2021-03-16-html-tracing.md b/old-change-notes/2021-03-16-html-tracing.md similarity index 100% rename from change-notes/2021-03-16-html-tracing.md rename to old-change-notes/2021-03-16-html-tracing.md diff --git a/change-notes/2021-03-16-nethttp-updated.md b/old-change-notes/2021-03-16-nethttp-updated.md similarity index 100% rename from change-notes/2021-03-16-nethttp-updated.md rename to old-change-notes/2021-03-16-nethttp-updated.md diff --git a/change-notes/2021-04-19-http-request-taint-flow.md b/old-change-notes/2021-04-19-http-request-taint-flow.md similarity index 100% rename from change-notes/2021-04-19-http-request-taint-flow.md rename to old-change-notes/2021-04-19-http-request-taint-flow.md diff --git a/change-notes/2021-04-20-tuple-types.md b/old-change-notes/2021-04-20-tuple-types.md similarity index 100% rename from change-notes/2021-04-20-tuple-types.md rename to old-change-notes/2021-04-20-tuple-types.md diff --git a/change-notes/2021-05-06-xorm.md b/old-change-notes/2021-05-06-xorm.md similarity index 100% rename from change-notes/2021-05-06-xorm.md rename to old-change-notes/2021-05-06-xorm.md diff --git a/change-notes/2021-07-28-insufficient-key-size.md b/old-change-notes/2021-07-28-insufficient-key-size.md similarity index 100% rename from change-notes/2021-07-28-insufficient-key-size.md rename to old-change-notes/2021-07-28-insufficient-key-size.md diff --git a/change-notes/2021-08-17-go-117.md b/old-change-notes/2021-08-17-go-117.md similarity index 100% rename from change-notes/2021-08-17-go-117.md rename to old-change-notes/2021-08-17-go-117.md diff --git a/change-notes/2021-08-23-getPrimaryQlClasses.md b/old-change-notes/2021-08-23-getPrimaryQlClasses.md similarity index 100% rename from change-notes/2021-08-23-getPrimaryQlClasses.md rename to old-change-notes/2021-08-23-getPrimaryQlClasses.md diff --git a/change-notes/2021-10-27-insufficient-key-size-sanitizer.md b/old-change-notes/2021-10-27-insufficient-key-size-sanitizer.md similarity index 100% rename from change-notes/2021-10-27-insufficient-key-size-sanitizer.md rename to old-change-notes/2021-10-27-insufficient-key-size-sanitizer.md From ee6ea0f8cb699036a2a2cdae5713cb3241e3992e Mon Sep 17 00:00:00 2001 From: "github-actions[bot]" Date: Tue, 14 Dec 2021 21:34:55 +0000 Subject: [PATCH 3/4] Release preparation for version 2.7.4 --- ql/lib/CHANGELOG.md | 2 ++ ql/lib/change-notes/released/0.0.4.md | 1 + ql/lib/codeql-pack.release.yml | 2 +- ql/lib/qlpack.yml | 2 +- ql/src/CHANGELOG.md | 6 ++++++ .../0.0.4.md} | 8 ++++---- ql/src/codeql-pack.release.yml | 2 +- ql/src/qlpack.yml | 2 +- upgrades/CHANGELOG.md | 2 ++ upgrades/change-notes/released/0.0.4.md | 1 + upgrades/codeql-pack.release.yml | 2 +- upgrades/qlpack.yml | 2 +- 12 files changed, 22 insertions(+), 10 deletions(-) create mode 100644 ql/lib/change-notes/released/0.0.4.md rename ql/src/change-notes/{2021-11-19-log-injection-query.md => released/0.0.4.md} (75%) create mode 100644 upgrades/change-notes/released/0.0.4.md diff --git a/ql/lib/CHANGELOG.md b/ql/lib/CHANGELOG.md index e47c9f5700e..3b82f06d3de 100644 --- a/ql/lib/CHANGELOG.md +++ b/ql/lib/CHANGELOG.md @@ -1 +1,3 @@ +## 0.0.4 + ## 0.0.3 diff --git a/ql/lib/change-notes/released/0.0.4.md b/ql/lib/change-notes/released/0.0.4.md new file mode 100644 index 00000000000..3268fefb272 --- /dev/null +++ b/ql/lib/change-notes/released/0.0.4.md @@ -0,0 +1 @@ +## 0.0.4 diff --git a/ql/lib/codeql-pack.release.yml b/ql/lib/codeql-pack.release.yml index a24b693d1e7..ec411a674bc 100644 --- a/ql/lib/codeql-pack.release.yml +++ b/ql/lib/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 0.0.3 +lastReleaseVersion: 0.0.4 diff --git a/ql/lib/qlpack.yml b/ql/lib/qlpack.yml index b5d746fbfa7..ad84bf6a05e 100644 --- a/ql/lib/qlpack.yml +++ b/ql/lib/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/go-all -version: 0.0.4-dev +version: 0.0.4 groups: go dbscheme: go.dbscheme extractor: go diff --git a/ql/src/CHANGELOG.md b/ql/src/CHANGELOG.md index 10b325caa46..83d4f0e45a8 100644 --- a/ql/src/CHANGELOG.md +++ b/ql/src/CHANGELOG.md @@ -1,3 +1,9 @@ +## 0.0.4 + +### New Queries + +* A new query _Log entries created from user input_ (`go/log-injection`) has been added. The query reports user-provided data reaching calls to logging methods. + ## 0.0.3 ### New Queries diff --git a/ql/src/change-notes/2021-11-19-log-injection-query.md b/ql/src/change-notes/released/0.0.4.md similarity index 75% rename from ql/src/change-notes/2021-11-19-log-injection-query.md rename to ql/src/change-notes/released/0.0.4.md index 8f12b920dc2..d5af7f84015 100644 --- a/ql/src/change-notes/2021-11-19-log-injection-query.md +++ b/ql/src/change-notes/released/0.0.4.md @@ -1,5 +1,5 @@ ---- -category: newQuery -tags: [lgtm,codescanning] ---- +## 0.0.4 + +### New Queries + * A new query _Log entries created from user input_ (`go/log-injection`) has been added. The query reports user-provided data reaching calls to logging methods. diff --git a/ql/src/codeql-pack.release.yml b/ql/src/codeql-pack.release.yml index a24b693d1e7..ec411a674bc 100644 --- a/ql/src/codeql-pack.release.yml +++ b/ql/src/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 0.0.3 +lastReleaseVersion: 0.0.4 diff --git a/ql/src/qlpack.yml b/ql/src/qlpack.yml index a5e8769426b..cd8a24e1814 100644 --- a/ql/src/qlpack.yml +++ b/ql/src/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/go-queries -version: 0.0.4-dev +version: 0.0.4 groups: go suites: codeql-suites extractor: go diff --git a/upgrades/CHANGELOG.md b/upgrades/CHANGELOG.md index e47c9f5700e..3b82f06d3de 100644 --- a/upgrades/CHANGELOG.md +++ b/upgrades/CHANGELOG.md @@ -1 +1,3 @@ +## 0.0.4 + ## 0.0.3 diff --git a/upgrades/change-notes/released/0.0.4.md b/upgrades/change-notes/released/0.0.4.md new file mode 100644 index 00000000000..3268fefb272 --- /dev/null +++ b/upgrades/change-notes/released/0.0.4.md @@ -0,0 +1 @@ +## 0.0.4 diff --git a/upgrades/codeql-pack.release.yml b/upgrades/codeql-pack.release.yml index a24b693d1e7..ec411a674bc 100644 --- a/upgrades/codeql-pack.release.yml +++ b/upgrades/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 0.0.3 +lastReleaseVersion: 0.0.4 diff --git a/upgrades/qlpack.yml b/upgrades/qlpack.yml index a43167296d7..4c8e287d108 100644 --- a/upgrades/qlpack.yml +++ b/upgrades/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/go-upgrades -version: 0.0.4-dev +version: 0.0.4 groups: go upgrades: . library: true From 00aae7cba52f17819c7e701478faa0966d445bbd Mon Sep 17 00:00:00 2001 From: "github-actions[bot]" Date: Mon, 3 Jan 2022 20:10:43 +0000 Subject: [PATCH 4/4] Post-release version bumps --- ql/lib/qlpack.yml | 2 +- ql/src/qlpack.yml | 2 +- upgrades/qlpack.yml | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-) diff --git a/ql/lib/qlpack.yml b/ql/lib/qlpack.yml index ad84bf6a05e..48cebfaff12 100644 --- a/ql/lib/qlpack.yml +++ b/ql/lib/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/go-all -version: 0.0.4 +version: 0.0.5-dev groups: go dbscheme: go.dbscheme extractor: go diff --git a/ql/src/qlpack.yml b/ql/src/qlpack.yml index cd8a24e1814..68bf335a99a 100644 --- a/ql/src/qlpack.yml +++ b/ql/src/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/go-queries -version: 0.0.4 +version: 0.0.5-dev groups: go suites: codeql-suites extractor: go diff --git a/upgrades/qlpack.yml b/upgrades/qlpack.yml index 4c8e287d108..0fbe8a7e195 100644 --- a/upgrades/qlpack.yml +++ b/upgrades/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/go-upgrades -version: 0.0.4 +version: 0.0.5-dev groups: go upgrades: . library: true