Raul Garcia
156bc34cda
Update UnsafeUsageOfClientSideEncryptionVersion.qhelp
2022-07-11 08:41:05 -07:00
Raul Garcia
f8994d04d6
Clean up
2022-07-07 11:49:05 -07:00
Raul Garcia
97d9fd9846
Update security-validation-disabled.ql
2022-07-05 15:18:56 -07:00
Raul Garcia
56060e0610
Update csharp/ql/src/experimental/Security Features/CWE-327/Azure/UnsafeUsageOfClientSideEncryptionVersion.qhelp
...
Co-authored-by: intrigus-lgtm <60750685+intrigus-lgtm@users.noreply.github.com >
2022-07-05 13:57:28 -07:00
Raul Garcia
fcb01ef28d
Merge branch 'github:main' into Token_validation
2022-07-01 17:37:05 -07:00
Raul Garcia
62c28571c6
making changes based on feedback during PR
2022-07-01 17:35:02 -07:00
Raul Garcia
e43e5810cf
New queries to detect unsafe client side encryption in Azure Storage
2022-07-01 17:08:35 -07:00
Andrew Eisenberg
fbeecd6c08
Merge pull request #9744 from github/aeisenberg/move-contextual-queries
2022-06-29 11:44:33 -07:00
Andrew Eisenberg
ddf06f8617
Add change notes and qldoc for moved files
2022-06-29 10:03:12 -07:00
Andrew Eisenberg
a3f4d1bf66
Move contextual queries from src to lib
...
With this change, users are now able to run View AST command in
vscode within vscode workspaces that do not include the core libraries.
The relevant core library only needs to be installed in the package
cache.
2022-06-29 07:51:26 -07:00
Jeroen Ketema
55e052af26
Merge pull request #9686 from aschackmull/dataflow/no-node-scan
...
Dataflow performance: Avoid node scans
2022-06-29 10:38:56 +02:00
github-actions[bot]
d506f448ef
Post-release preparation for codeql-cli-2.10.0
2022-06-24 07:36:33 +00:00
Raul Garcia
13464e8015
Changing @Severity tag to error
2022-06-23 09:07:28 -07:00
Raul Garcia
202a0916a3
IdentityModel_tokenvalidation
2022-06-23 09:03:16 -07:00
Anders Schack-Mulligen
dc517a758e
Autoformat
2022-06-23 14:44:40 +02:00
Anders Schack-Mulligen
4a317a25d3
Dataflow: Sync.
2022-06-23 14:34:52 +02:00
github-actions[bot]
a74051c658
Release preparation for version 2.10.0
2022-06-23 11:17:46 +00:00
Michael Nebel
8899bf7f05
C#: Update tests.
2022-06-22 13:03:23 +02:00
Michael Nebel
0ef97b41c8
C#: Update .NET Runtime models and add sources and sinks.
2022-06-22 13:03:10 +02:00
Anders Schack-Mulligen
df6d68b215
Merge pull request #9618 from aschackmull/dataflow/deprecate-barrierguard-class
...
Dataflow: Deprecate BarrierGuard class
2022-06-22 10:44:08 +02:00
Michael Nebel
24ba5cc06e
Merge pull request #9025 from michaelnebel/csharp/generatedrefactor
...
C#: Provenance column in Models as Data CSV format.
2022-06-22 10:34:31 +02:00
Michael Nebel
2b892bc000
Merge pull request #9553 from michaelnebel/csharp/narrowtelemetry
...
C#/Java: Only display 1k most relevant results for ExternalApi telemetry queries.
2022-06-22 07:35:56 +02:00
Anders Schack-Mulligen
f8f9b7d3b4
Apply suggestions from code review
2022-06-21 14:11:36 +02:00
Edoardo Pirovano
70dbd92e25
Bump minor version of all regularly released packs
2022-06-21 11:22:58 +01:00
Edoardo Pirovano
ad02b85efa
Merge branch main into rc/3.6
2022-06-21 11:15:25 +01:00
Anders Schack-Mulligen
a4796e1542
Add change notes.
2022-06-21 11:17:47 +02:00
Michael Nebel
dc02a6e1a7
C#: Apply autoformatting.
2022-06-21 08:34:43 +02:00
Mathias Vorreiter Pedersen
35c8ca15f5
Merge pull request #8912 from rdmarsh2/rdmarsh2/fix-ir-globals
...
C++: Fix IR variable reuse for global var inits
2022-06-20 16:45:39 +01:00
Michael Nebel
b4457de58c
C#/Java: Fix typo in the QL doc comment.
2022-06-20 16:26:07 +02:00
Michael Nebel
c9c981d03a
C#: Add release note for the CSV DSL change.
2022-06-20 16:20:02 +02:00
Michael Nebel
38c6bf55b9
C#: Make CSV model validation of the provenance column.
2022-06-20 16:20:01 +02:00
Michael Nebel
5e3bb8297a
C#: Make the model predicates emmit the provenance directly to enable testing.
2022-06-20 16:20:01 +02:00
Michael Nebel
cf3cb292b7
C#: Update the model generator to use provenance column printing.
2022-06-20 16:20:01 +02:00
Michael Nebel
e0a96e16c3
C#: Update entity framework flow summaries test.
2022-06-20 16:20:01 +02:00
Michael Nebel
da0b9db57f
C#: Update flow summary printing in test cases to reflect provenance.
2022-06-20 16:20:01 +02:00
Michael Nebel
2975e51652
C#: Update existing production models with provenance information.
2022-06-20 16:20:01 +02:00
Michael Nebel
32b69d3e0c
C#: Update external models tests.
2022-06-20 16:20:01 +02:00
Michael Nebel
d6fa7db9f2
C#: Update CSV validation to the new format and improve test failure printing.
2022-06-20 16:20:01 +02:00
Michael Nebel
e3a5f7b8a3
C#: Introduce provenance column in CSV format for Models as data summaries, sources and sinks.
2022-06-20 16:20:01 +02:00
Michael Nebel
169ef55890
Update csharp/ql/src/Telemetry/ExternalLibraryUsage.ql
...
Co-authored-by: Anders Schack-Mulligen <aschackmull@users.noreply.github.com >
2022-06-20 16:14:44 +02:00
Tamás Vajk
f737804035
Merge pull request #9610 from tamasvajk/fix/global-statements
...
C#: Fix global statement extraction
2022-06-20 12:54:36 +02:00
Michael Nebel
70203633a1
Merge pull request #9393 from michaelnebel/csharp/asptaintedmember
...
C#: ASP.NET Core like members are tainted
2022-06-20 12:11:16 +02:00
Tamas Vajk
51f0a928dc
C#: Fix global statement extraction by extracting statements inside the implicit main method context
2022-06-20 10:09:11 +02:00
Rasmus Wriedt Larsen
ae44a941f9
Merge pull request #9421 from RasmusWL/inline-brackets
...
Inline Expectation Tests: Allow `tag[foo bar]`
2022-06-20 10:01:19 +02:00
Tamas Vajk
c460e5757b
C#: Add extractor error test for global statement extraction
2022-06-20 09:42:18 +02:00
Tamás Vajk
be2dfffb76
Merge pull request #9564 from tamasvajk/fix/diagnostic-query-metadata
...
C#: Change `kind` query metadata to `diagnostic` for compiler/extractor errors and messages
2022-06-20 09:02:35 +02:00
Rasmus Wriedt Larsen
b65a10d1ef
Inline Expectation Tests: sync
2022-06-17 17:38:19 +02:00
Anders Schack-Mulligen
1b374e262f
C#: Replace deprecated barrier guards.
2022-06-16 11:25:29 +02:00
Anders Schack-Mulligen
456f02fd82
C#: Add BarrierGuard parameterised module.
2022-06-16 11:25:29 +02:00
Anders Schack-Mulligen
6518a01ded
Dataflow: Sync.
2022-06-16 11:25:28 +02:00
