Tom Hvitved
4bf124bffe
Ruby/Python: Add CallGraphConstruction module for recursive type-tracking based call graph construction
2023-06-07 09:02:03 +02:00
Arthur Baars
7324d1705e
Merge branch 'main' into amammad-ruby-YAMLunsafeLoad
2023-06-06 12:09:06 +02:00
Jami Cogswell
5a23421d9a
Shared: minor updates to comments
2023-06-05 13:46:56 -04:00
Jami Cogswell
9d5972acc2
Shared: update qldocs
2023-06-05 12:18:34 -04:00
Jami Cogswell
3f1dc8e5c7
Shared: add outdated Swift sink kinds
2023-06-05 12:18:34 -04:00
Jami Cogswell
62ac0dc471
Shared: add outdated sink kind msg to 'getInvalidModelKind' for all languages
2023-06-05 12:18:33 -04:00
Jami Cogswell
76f5dca861
Shared: move 'OutdatedSinkKind' to shared file and add outdated JS and C# sink kinds
2023-06-05 12:18:33 -04:00
Jami Cogswell
7b629f5d63
Shared: include 'qltest%' and 'test-%'
2023-06-05 12:18:33 -04:00
Jami Cogswell
254e447923
JS/Python/Ruby: update getInvalidModelKind
2023-06-05 12:18:33 -04:00
Jami Cogswell
7317c29eea
Shared: update kind information
2023-06-05 12:18:33 -04:00
Jami Cogswell
0ab1848b70
JS/Python/Ruby: use 'SharedModelValidation' file
2023-06-05 12:18:33 -04:00
Jami Cogswell
ddb5d92ef8
Shared: add source, summary, and neutral shared valid kinds
2023-06-05 12:18:33 -04:00
Jami Cogswell
869f820fcf
Shared: add 'SharedModelValidation' file as experiment
2023-06-05 12:18:33 -04:00
Jami Cogswell
e24e3a6115
JS/Python/Ruby: add getInvalidModelKind as experiment
2023-06-05 12:18:33 -04:00
Alex Ford
c95cf5ad6f
Merge pull request #13062 from maikypedia/maikypedia/sqli-sink
...
Ruby: Add MySQL as SQL Injection Sink
2023-06-02 17:06:35 +01:00
Erik Krogh Kristensen
219ec9d05d
Merge pull request #13127 from erik-krogh/polReDoS
...
ReDoS: revert new superlinear algorithm.
2023-06-02 16:10:24 +02:00
Jeroen Ketema
5f64354a70
Merge pull request #13353 from jketema/expecation
...
Fix typo in spelling of expectation
2023-06-02 12:29:49 +02:00
erik-krogh
ac9ede4ec0
add change-notes
2023-06-02 11:58:11 +02:00
erik-krogh
c3e57382f7
Ruby: fix compilation
2023-06-02 11:58:08 +02:00
erik-krogh
44b6366586
delete old deprecations
2023-06-02 11:58:08 +02:00
Jeroen Ketema
7b17b92aca
Fix typo in spelling of expectation
2023-06-02 10:36:11 +02:00
Alex Ford
6fa9e13a2e
Ruby: update TaintStep output
2023-06-01 16:27:20 +01:00
Alex Ford
606d601923
qlformat
2023-06-01 16:26:05 +01:00
Alex Ford
d09f6d318c
Merge branch 'main' into maikypedia/sqli-sink
2023-06-01 15:02:44 +01:00
Alex Ford
40cf09996a
Merge pull request #13066 from maikypedia/maikypedia/sqli-sink-2
...
Ruby: Add Sequel as SQL Injection Sink
2023-06-01 15:01:38 +01:00
Erik Krogh Kristensen
96a720cfa0
Merge pull request #13285 from erik-krogh/redoshelp
...
ReDoS: fix whitespace in the samples in ReDoS.qhelp
2023-06-01 15:53:58 +02:00
Alex Ford
b62a02f0ad
ruby: remove unused field
2023-06-01 14:01:40 +01:00
Alex Ford
23e22799a9
ruby: rack - modelling -> modeling
2023-06-01 14:01:40 +01:00
Alex Ford
24635df1a3
ruby: add some qldoc for rack
2023-06-01 14:01:40 +01:00
Alex Ford
40da7d45c2
ruby: make a predicate private
2023-06-01 14:01:40 +01:00
Alex Ford
4905a70e21
Ruby: update rack test output
2023-06-01 14:01:40 +01:00
Alex Ford
19664879c8
ruby: slightly expand a TODO
2023-06-01 14:01:40 +01:00
Alex Ford
a5a15f3804
Ruby: restructure rack model
2023-06-01 14:01:40 +01:00
Alex Ford
b2958f87b2
ruby: rack - add redirect responses
2023-06-01 14:01:40 +01:00
Alex Ford
c3ab867595
ruby: start restructuring rack
2023-06-01 14:01:40 +01:00
Alex Ford
f8d2cbbe79
ruby: rack responses implement are HTTP responses
2023-06-01 14:01:39 +01:00
Alex Ford
c87c266871
ruby: add Rack::ResponseNode#getAStatusCode
2023-06-01 14:01:39 +01:00
Alex Ford
e7e0cf5cb3
ruby: add Rack::ResponseNode class
2023-06-01 14:01:39 +01:00
Alex Ford
7d943c7621
Ruby: update test output
2023-06-01 13:50:32 +01:00
Alex Ford
4794066d3c
Merge branch 'main' into maikypedia/sqli-sink-2
2023-06-01 13:04:54 +01:00
Maiky
7579f182ad
Add requested changes
2023-06-01 11:00:35 +02:00
Michael Nebel
06b02eb3ce
Sync files.
2023-06-01 09:30:31 +02:00
Maiky
13ce6a6d8e
Update Frameworks.qll
2023-06-01 00:53:01 +02:00
Arthur Baars
e93b44670f
Ruby: printCfg: only show graph for selected CfgScope
2023-05-31 16:08:01 +02:00
Arthur Baars
c211b704f3
Merge pull request #13272 from github/post-release-prep/codeql-cli-2.13.3
...
Post-release preparation for codeql-cli-2.13.3
2023-05-31 15:33:12 +02:00
Michael Nebel
2266e28583
Merge pull request #13262 from michaelnebel/flowsummary/refactorgetcomponentstack
...
C#: Re-factor getComponent.
2023-05-31 08:22:44 +02:00
Arthur Baars
490d22d123
Merge remote-tracking branch 'upstream/main' into post-release-prep/codeql-cli-2.13.3
2023-05-30 21:31:28 +02:00
Arthur Baars
d91fa2d038
Ruby: add print-cfg query
2023-05-30 17:30:04 +02:00
Rasmus Lerchedahl Petersen
2daa9577bb
ruby/python: implement shared module
...
ruby:
- create new shared file `SummaryTypeTracker.qll`
- move much logic into the module
- instantiate the module
- remove old logic, now provided by module
python:
- clone shared file
- instantiate module
- use (some of the) steps provided by the module
2023-05-30 13:31:24 +02:00
Maiky
345f43fbae
fix concepts
2023-05-29 21:17:48 +02:00