Commit Graph

82643 Commits

Author SHA1 Message Date
Jami Cogswell
e17486a9d8 Java: rename springframework stubs directory from 5.3.8 to 5.8.x 2025-03-11 15:20:58 -04:00
REDMOND\brodes
8a7671dc2a Adding block mode models to openssl. 2025-03-11 15:20:05 -04:00
REDMOND\brodes
71eae39feb Adding missing block modes. 2025-03-11 15:19:42 -04:00
REDMOND\brodes
c98e6d7c56 Adding a stub EVP_CIpher_Operation for EVP_PKEY, this probably should be made into it's own class, hence it is a stub with comments. 2025-03-11 14:49:07 -04:00
REDMOND\brodes
a9458ba762 Formatting, removing dead comments, 2025-03-11 14:48:38 -04:00
REDMOND\brodes
d988afd4a4 Adding an EVP_AASYM_CIPHER_fetch getter. 2025-03-11 14:47:10 -04:00
REDMOND\brodes
7757279908 Adding a KDF algorithm getter. 2025-03-11 14:46:36 -04:00
Jami
ea9b0462bf Merge pull request #18793 from jcogs33/jcogs33/java/spring-boot-actuators-promo
Java: Promote Spring Boot Actuators query from experimental
2025-03-11 14:42:14 -04:00
REDMOND\brodes
44b1e921d6 commenting out hash size for now, TODO 2025-03-11 14:10:04 -04:00
REDMOND\brodes
085e8d40fd Hash nodes have instances. 2025-03-11 14:06:36 -04:00
REDMOND\brodes
f69b057893 Updating OpenSSLKnownAlgorithmConstants.qll (a few bugs) and also enforcing that known key sizes are on the normalized name (need to re-visit for GOST). 2025-03-11 13:35:44 -04:00
REDMOND\brodes
ae574f7cf2 Resolving hash and cipher types for openssl not using literals but KnownOpenSSLAlgorithmConstant. 2025-03-11 13:35:02 -04:00
Remco Vermeulen
da720b8b6e Merge pull request #18966 from github/rvermeulen/add-missing-dependency
Add missing dependency
2025-03-11 09:43:45 -07:00
Geoffrey White
daa57a9cb5 Merge pull request #18952 from geoffw0/unusedvarfix
Rust: Improve rust/unused-variable and rust/unused-value
2025-03-11 15:52:42 +00:00
Asger F
356b9e68c3 JS: Change note 2025-03-11 16:51:51 +01:00
Asger F
8599ab2503 JS: Fix attributes nodes missing an enclosing callable 2025-03-11 16:47:48 +01:00
Geoffrey White
044d0a13f0 Rust: Include WeakSensitiveDataHashing sinks as well. 2025-03-11 15:41:38 +00:00
Geoffrey White
4924a0faf3 Rust: Introduce a QuerySink class, common to all query sinks. 2025-03-11 15:41:37 +00:00
Geoffrey White
dc7d7f121e Rust: Clarify doc on FlowSink, FlowSource. 2025-03-11 15:41:35 +00:00
Michael Nebel
371a72ecec C#: Move Bad test into other file to avoid sync-files breakage. 2025-03-11 14:54:13 +01:00
Michael Nebel
1286420d39 C#: Add change-note. 2025-03-11 14:42:51 +01:00
Michael Nebel
120af3611a C#: Update test expected output. 2025-03-11 14:39:09 +01:00
Michael Nebel
150aa5d1cf C#: Include normal switch/case statements in the white list and allow the use of wildcards when there is a condition. 2025-03-11 14:37:56 +01:00
Michael Nebel
c15137e992 C#: Update test expected output. 2025-03-11 14:36:34 +01:00
Michael Nebel
f42ae48ffa C#: Add some switch case examples. 2025-03-11 14:35:04 +01:00
Asger F
087c555796 Merge pull request #18670 from asgerf/js/test-suite
JS: Update test suite to use post-processed inline expectations
2025-03-11 13:58:01 +01:00
Michael Nebel
4451e55bba C#: Convert cs/constant-condition tests to inline expectation tests. 2025-03-11 13:35:05 +01:00
Asger F
6499e5458b JS: Restore line lost in merge
'Accept incoming changes' in vscode somehow deleted this line.
2025-03-11 13:19:29 +01:00
Asger F
e8c5e4d006 Merge branch 'main' into js/test-suite 2025-03-11 13:17:08 +01:00
Arthur Baars
3991dc3aa3 Rust: improve performance of Crate::toString 2025-03-11 12:57:16 +01:00
Napalys Klicius
a4f2264f17 Merge pull request #18899 from Napalys/js/ecma-2024-regex
JS: Add ECMAScript 2024 `v` Flag Operators for Regex Parsing
2025-03-11 12:50:44 +01:00
Simon Friis Vindum
1e0b78ebd3 Rust: Update regex injection description
Co-authored-by: Geoffrey White <40627776+geoffw0@users.noreply.github.com>
2025-03-11 12:47:12 +01:00
Michael Nebel
744936fbd7 C#: Add cs/local-not-disposed to the CCR suite. 2025-03-11 12:46:16 +01:00
Arthur Baars
66ab3a8002 Rust: add Locatable::fromSource 2025-03-11 12:32:56 +01:00
Napalys
c001435258 Refactor Angular2 API to use httpClientApiNode for HttpClient method calls 2025-03-11 12:32:24 +01:00
Owen Mansel-Chan
22b36a86ce Merge pull request #18940 from owen-mc/go/unhandled-close-writable-handle
Go: Add test for FP in `go/unhandled-writable-file-close`
2025-03-11 11:13:36 +00:00
Napalys Klicius
a900f2cea4 Update javascript/ql/lib/change-notes/2025-03-03-regex-v.md
Co-authored-by: Asger F <asgerf@github.com>
2025-03-11 11:57:28 +01:00
Óscar San José
8b33dcd018 Merge branch 'main' into oscarsj/add-actions-analysis 2025-03-11 11:51:24 +01:00
Geoffrey White
a0f4fa28b2 Rust: hardcoded -> hard-coded. 2025-03-11 09:40:47 +00:00
Geoffrey White
5c394a9371 Correct modelgenerator exclusion for the security-experimental-selectors.yml suite helper. 2025-03-11 08:53:47 +00:00
Napalys Klicius
3191b2c6fc Update javascript/extractor/src/com/semmle/js/parser/RegExpParser.java
Co-authored-by: Erik Krogh Kristensen <erik-krogh@github.com>
2025-03-11 09:40:24 +01:00
Napalys Klicius
7c9edff33c Merge pull request #18964 from Napalys/js/mark_down_table
JS: Refactor `markdown-table` library modeling
2025-03-11 09:02:56 +01:00
Asger F
b583e52a87 Merge pull request #18962 from asgerf/js/local-type-indirection
JS: Unfold local type aliases in getAnUnderlyingType
2025-03-11 08:54:03 +01:00
Napalys
08c07f815f Improved documentation, removed union fram change note. 2025-03-11 08:30:17 +01:00
Napalys Klicius
1ad8b4677d Update javascript/ql/lib/change-notes/2025-03-10-js-refactor-markdown-table.md
Co-authored-by: Asger F <asgerf@github.com>
2025-03-11 08:07:49 +01:00
Remco Vermeulen
8f603251d7 Add missing dependency
The query pack has suites that rely on the `codeql/suite-helpers` pack, but doesn't include it as a dependency.
This will cause error when resolving suites referring the Actions query pack.
2025-03-10 18:31:01 -07:00
Jami Cogswell
41aeb874f1 Java: add change note 2025-03-10 18:56:13 -04:00
Jami Cogswell
76433a31f7 Java: generalize sanitizer and add tests 2025-03-10 18:56:01 -04:00
Jami Cogswell
ab3690f666 Java: initial sanitizer 2025-03-10 18:55:56 -04:00
Jami Cogswell
94080a6e47 Java: initial tests 2025-03-10 18:55:54 -04:00