82643 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
Napalys Klicius	a5521b90fc	Update ql/ql/src/queries/style/ValidatePredicateGetReturns.ql ... Co-authored-by: Anders Schack-Mulligen <aschackmull@users.noreply.github.com>	2024-11-29 15:18:06 +01:00
Tamas Vajk	5d79ed6a9e	C#: WIP: Fix calls with no target in DB quality query	2024-11-29 15:08:33 +01:00
Owen Mansel-Chan	5c99c8cc37	Improve suggestion for ECB	2024-11-29 14:05:07 +00:00
Napalys	a763dd7267	Fixed github-advanced-security bot warning	2024-11-29 14:58:22 +01:00
Paolo Tranquilli	9cf2420c3b	Rust: restrict canonical path calculations	2024-11-29 14:43:51 +01:00
Napalys	986e1cb597	Add ValidatePredicateGetReturns query and tests	2024-11-29 14:33:40 +01:00
Asger F	cab8a40d00	JS: Fix accidental recursion	2024-11-29 14:23:57 +01:00
Asger F	9c6b6981e2	JS: Add test to restrict dependencies	2024-11-29 14:23:56 +01:00
Asger F	2f0c80a98b	JS: Include summary steps in type tracking	2024-11-29 14:23:55 +01:00
Asger F	440cbb7f0a	JS: Add inline-expectation test for type tracking	2024-11-29 14:23:54 +01:00
Asger F	6349903110	JS: Move FlowSummary/Summaries.qll into testUtilities	2024-11-29 14:23:52 +01:00
Asger F	e34064e3b5	JS: Initial instantiation of sumamry type tracking ... Instantiates the library without using it yet.	2024-11-29 14:23:50 +01:00
Asger F	df12f255ac	JS: Rename propagatesFlowExt -> propagatesFlow	2024-11-29 14:23:49 +01:00
Michael Nebel	a09262b4c6	C#: Update expected test output.	2024-11-29 13:49:25 +01:00
Michael Nebel	f7874c37c4	C#: Only extract Public and Protected members from reference assemblies.	2024-11-29 13:49:23 +01:00
Simon Friis Vindum	5b6a4e616c	Rust: Update stats queries to use shared data flow consistency module	2024-11-29 13:42:30 +01:00
Alexander Eyers-Taylor	f63f80ab68	Merge pull request #18157 from github/post-release-prep/codeql-cli-2.19.4 ... Post-release preparation for codeql-cli-2.19.4	2024-11-29 12:40:12 +00:00
Michael Nebel	5020e36d0a	C#: Add launch task for debugging the tracing extractor.	2024-11-29 13:06:20 +01:00
Óscar San José	647515bd84	Merge pull request #18138 from github/oscarsj/compile-queries-paths ... Include paths on pull_request event trigger for compile-queries.yml workflow	2024-11-29 13:02:03 +01:00
Óscar San José	e93ce7c7d5	Add .devcontainer folder to CODEOWNERS	2024-11-29 12:55:11 +01:00
Owen Mansel-Chan	95d26d96d2	Add change note	2024-11-29 11:54:30 +00:00
Owen Mansel-Chan	09240e46f2	Refactor: use concat instead of hand-written version ... This changes the order of the algorithms in the regex, but I don't think that makes any difference.	2024-11-29 11:54:29 +00:00
Owen Mansel-Chan	e6409e159f	Give reason why crypto algorithm is insecure	2024-11-29 11:54:27 +00:00
Paolo Tranquilli	7e0e5a3f4e	Rust: move rust_sysroot_src to its own session fixture	2024-11-29 12:01:50 +01:00
Paolo Tranquilli	4bcc4254c6	Merge branch 'main' into redsun82/rust-perf-measures	2024-11-29 11:59:22 +01:00
Geoffrey White	f8af648524	Merge pull request #18097 from geoffw0/ctor ... Rust: New query for bad 'ctor' initialization	2024-11-29 10:57:54 +00:00
Paolo Tranquilli	bd56a3564a	Merge pull request #18147 from github/redsun82/rust-windows-semantics ... Rust: add diagnostics queries to integration tests	2024-11-29 11:45:48 +01:00
Napalys	9d4e737bc2	JS: follow proper code standards for get predicates ... Co-authored-by: asgerf <asgerf@github.com>	2024-11-29 11:32:10 +01:00
Napalys	3171f38cdd	JS: fixed bad alert messages when it came to incomplete sanitization for new RegExp objects	2024-11-29 11:14:45 +01:00
Simon Friis Vindum	06746e540f	Merge pull request #18140 from paldepind/rust-get-target ... Rust: Add `getStaticTarget` to `CallExprBase`	2024-11-29 11:02:15 +01:00
Owen Mansel-Chan	2c061b0d56	Add QLDoc for HostnameSanitizingPrefix	2024-11-29 09:46:44 +00:00
Owen Mansel-Chan	7f8a1ae941	Add change note	2024-11-29 09:46:42 +00:00
Owen Mansel-Chan	7648d397f8	Improve model to remove some false positives	2024-11-29 09:46:41 +00:00
Owen Mansel-Chan	617f4f140e	Make HostnameSanitizingPrefix public	2024-11-29 09:46:39 +00:00
Owen Mansel-Chan	ba3f9d6134	Convert model to QL	2024-11-29 09:46:38 +00:00
Jeroen Ketema	bcb7901758	Merge pull request #18111 from jketema/guarded-free ... C++: Promote `cpp/guarded-free` out of experimental	2024-11-29 10:43:02 +01:00
Geoffrey White	49b569cc4b	Rust: Update for changes on main.	2024-11-29 09:37:32 +00:00
Geoffrey White	0f3469313f	Merge branch 'main' into ctor	2024-11-29 09:37:23 +00:00
Michael Nebel	47487cca0e	Merge pull request #18158 from github/workflow/coverage/update ... Update CSV framework coverage reports	2024-11-29 10:21:09 +01:00
Geoffrey White	a6f20a6ac1	Apply suggestions from code review ... Co-authored-by: mc <42146119+mchammer01@users.noreply.github.com>	2024-11-29 09:09:59 +00:00
Simon Friis Vindum	b8d60cbb13	Rust: Implement predicates for lambdas/closures in the data flow library	2024-11-29 09:32:04 +01:00
Simon Friis Vindum	ad7480591b	Rust: Add data flow tests involving closures	2024-11-29 09:30:26 +01:00
Tamás Vajk	5f41b6d3f2	Merge pull request #18141 from tamasvajk/fix/db-quality-query ... C#: Exclude `get`-only property accesses from `CallTargetStats`	2024-11-29 08:49:55 +01:00
Napalys Klicius	13afd6310b	Update javascript/ql/lib/change-notes/2024-11-28-regexp-unknown-flags.md ... Co-authored-by: Erik Krogh Kristensen <erik-krogh@github.com>	2024-11-29 08:26:04 +01:00
github-actions[bot]	8feca3d532	Add changed framework coverage reports	2024-11-29 00:21:55 +00:00
github-actions[bot]	32bfaa8569	Post-release preparation for codeql-cli-2.19.4	2024-11-28 19:40:05 +00:00
Alexander Eyers-Taylor	de325133c7	Merge pull request #18156 from github/release-prep/2.19.4 ... Release preparation for version 2.19.4 codeql-cli/v2.19.4	2024-11-28 19:32:51 +00:00
Alex Eyers-Taylor	dbe9f22034	Fix broken changelog.	2024-11-28 19:31:25 +00:00
github-actions[bot]	b36f3f97ee	Release preparation for version 2.19.4	2024-11-28 19:28:05 +00:00
Alexander Eyers-Taylor	f7896b4c2b	Merge pull request #18155 from github/revert-18065-release-prep/2.19.4 ... Revert "Release preparation for version 2.19.4"	2024-11-28 19:22:36 +00:00