Jeroen Ketema
0d1fd88729
Merge pull request #14050 from jketema/inline-6
...
Consolidate all `InlineFlowTest` libraries in the dataflow qlpack
2023-08-29 09:30:35 +02:00
Dave Bartolomeo
3343b78015
Merge pull request #14074 from github/post-release-prep/codeql-cli-2.14.3
...
Post-release preparation for codeql-cli-2.14.3
2023-08-28 13:34:10 -04:00
github-actions[bot]
3eba77421a
Post-release preparation for codeql-cli-2.14.3
2023-08-28 15:53:49 +00:00
Asger F
d4cfa8c2b8
Java: autoformatting changes
2023-08-28 15:35:06 +02:00
Asger F
d2fe4d235a
Java: Inline VariableWrite.getSource()
2023-08-28 15:34:48 +02:00
Tony Torralba
6573b1f772
Merge pull request #14056 from atorralba/atorralba/java/jenkins-stapler-regenerate
...
Java: Re-generate Jenkins and Stapler models
2023-08-25 13:15:21 +02:00
Ian Lynagh
a7de0f96e2
Merge pull request #14049 from igfoo/igfoo/kot1.9.10
...
Kotlin: We now support 1.9.10
2023-08-25 11:11:14 +01:00
Tony Torralba
5367fb99d9
Manually update a couple of models affected by the nested name change
2023-08-25 11:25:40 +02:00
Tony Torralba
25ac87279e
Add change note
2023-08-25 11:17:54 +02:00
Tony Torralba
2448bc8ce2
Java: Add new Apache CXF models
2023-08-25 11:17:51 +02:00
Tony Torralba
2ed01d06b4
Java: Re-generate Jenkins and Stapler models
...
Re-generated the Jenkins and Stapler models to pick up the changes from github/codeql#14032
2023-08-25 10:01:28 +02:00
github-actions[bot]
c9d64b6b4f
Add changed framework coverage reports
2023-08-25 00:14:40 +00:00
Jeroen Ketema
b550c067a1
Java: Remove redundant inline expectation test imports
2023-08-25 00:18:55 +02:00
Jeroen Ketema
9d573e5544
Consolidate all InlineFlowTest libraries in the dataflow qlpack
2023-08-24 21:38:46 +02:00
Ian Lynagh
5dff1852e1
Kotlin: We now support 1.9.10
2023-08-24 17:36:45 +01:00
Asger F
6c664e93ef
Merge pull request #14035 from asgerf/shared/variable-capture-nested
...
Variable capture: synchronize with aliases in nested scopes
2023-08-24 15:39:34 +02:00
Asger F
f17518ace2
Java: update to reflect changes in VariableCapture.qll
2023-08-24 14:06:44 +02:00
Anders Schack-Mulligen
7af1e96943
Merge pull request #14032 from aschackmull/java/mad-nestednames
...
Java: Use nested names in MaD signatures.
2023-08-24 13:53:55 +02:00
Tony Torralba
6b58d11eeb
Merge pull request #13900 from atorralba/atorralba/java/jaxws-getaremotemethod-improv
...
Java: Improve `JaxWsEndpoint::getARemoteMethod`
2023-08-24 13:37:15 +02:00
Tony Torralba
8c32919381
Merge pull request #13903 from atorralba/atorralba/jaxrs-mad-models
...
Java: New models for JAX-RS
2023-08-24 11:43:13 +02:00
Tony Torralba
3f9701cea7
Two fixes:
...
* Consider that the @WebService annotation (et al) can be in a supertype or interface
* getARemoteMethod should only return public methods, since protected, package-private, and private methods are not exposed
2023-08-24 11:35:52 +02:00
Anders Schack-Mulligen
ebe3f61ef6
Java: Fix models in qltest.
2023-08-24 09:44:43 +02:00
Asger F
ee1b3fd7e9
Java: update test after VariableCapture.qll change
2023-08-23 14:57:26 +02:00
Tony Torralba
0f3918af16
Merge pull request #13773 from atorralba/atorralba/java/mdht-xxe-sink
...
Java: Add XXE sinks for MDHT
2023-08-23 13:49:49 +02:00
Anders Schack-Mulligen
736c4beb9e
Java: Add change note.
2023-08-23 13:26:41 +02:00
Anders Schack-Mulligen
6c02e30f56
Java: Update models.
2023-08-23 13:24:55 +02:00
Anders Schack-Mulligen
4b0a1cf74b
Java: Remove old interpretation.
2023-08-23 13:19:16 +02:00
Anders Schack-Mulligen
410c09270f
Java: Use nested names in MaD signatures.
2023-08-23 13:17:52 +02:00
Ian Lynagh
deaf912cb8
Kotlin: Add an integration test for extractor information
2023-08-22 16:39:18 +01:00
Ian Lynagh
c67cc23e07
Kotlin: Write usesK2 information to the database
2023-08-22 12:37:01 +01:00
Anders Starcke Henriksen
3b8b33a94d
Released pack.
2023-08-22 09:45:52 +02:00
Anders Starcke Henriksen
3aeacf6df3
Update publish script to have right path.
2023-08-22 09:37:31 +02:00
Anders Schack-Mulligen
bdc5f9cdea
Merge pull request #14012 from knewbury01/knewbury01/add-sanitizer-command-query
...
Java: add sanitizer to command injection query
2023-08-22 08:40:49 +02:00
Michael Nebel
ce6fd8ac5f
Merge pull request #13432 from michaelnebel/updateissupported
...
Java/C#: Update telemetry queries to report callables with sink/source neutrals as being supported.
2023-08-22 08:39:38 +02:00
Kristen Newbury
5e01e1d464
Java: add sanitizer to command injection query
2023-08-21 12:33:05 -04:00
Jeroen Ketema
2d0f73d7c2
Merge pull request #13881 from jketema/shared-taint-tracking
...
Introduce shared taint tracking library
2023-08-21 12:45:49 +02:00
Jeroen Ketema
a2bb7dee18
Java: Delete copy of shared taint tracking library
2023-08-21 10:32:28 +02:00
Michael Nebel
51f166d71e
Java: Address review comments.
2023-08-21 10:22:28 +02:00
Michael Nebel
106ba11e10
Address review comments.
2023-08-21 09:59:02 +02:00
Michael Nebel
d66fe08661
Add QLDoc for the getKind predicate.
2023-08-21 09:59:02 +02:00
Michael Nebel
699ed107f3
Java: Update SupportedExternalApis expected test output.
2023-08-21 09:59:00 +02:00
Michael Nebel
5623ccf4a0
Java: Re-factor NeutralCallable to include all neutrals and introduce NeutralSummaryCallable.
2023-08-21 09:59:00 +02:00
Michael Nebel
6deeb36a97
Java: Update the comments in SupportedExternalApis to include the neutral kind and add a sink neutral example.
2023-08-21 09:58:59 +02:00
github-actions[bot]
181b3d0e33
Add changed framework coverage reports
2023-08-21 00:14:44 +00:00
github-actions[bot]
098dfb4242
Release preparation for version 2.14.3
2023-08-18 14:48:15 +00:00
Edward Minnix III
d109637e2d
Merge pull request #13413 from egregius313/egregius313/trust-boundary
...
Java: Trust Boundary Violation Query
2023-08-18 10:33:32 -04:00
Erik Krogh Kristensen
08ef31d452
Merge pull request #13916 from erik-krogh/limit-java-field-reg
...
Java: limit field flow when tracking regex strings
2023-08-18 12:14:31 +02:00
Stephan Brandauer
480e3bf506
Java: update model exclusions logic to cope with new automodel test location
2023-08-18 10:28:51 +02:00
Edward Minnix III
8d88af1af0
Apply docs review suggestions
...
Co-authored-by: Sam Browning <106113886+sabrowning1@users.noreply.github.com >
2023-08-17 13:05:38 -04:00
Ed Minnix
4eb1035dfe
Documentation fixes
2023-08-17 13:05:38 -04:00
