12735 Commits

Author	SHA1	Message	Date
Ian Lynagh	04a7ff7f76	Merge pull request #13477 from igfoo/igfoo/diags_classes ... Kotlin: Remove diags.ql from classes test	2023-06-16 17:07:38 +01:00
Ian Lynagh	096e9a4ba4	Kotlin: Avoid another cause of ConcurrentModificationException with 1.9	2023-06-16 17:06:54 +01:00
Jean Helie	baf6b74945	use new sink mad kinds and simplify isKnownKind predicate	2023-06-16 13:58:23 +02:00
Jean Helie	daf2743143	only use neutral models of kind "sink"	2023-06-16 13:58:23 +02:00
Ian Lynagh	a8acf16088	Kotlin: Remove diags.ql from classes test ... The diags consistency test already handles this for us.	2023-06-16 12:57:19 +01:00
Tony Torralba	c97868f774	Add change notes	2023-06-16 09:01:02 +02:00
Tony Torralba	3e96fe60c5	Go/Java/JS/Python/Ruby: Update the description and qhelp of the ZipSlip query ... All filesystem operations, not just writes, with paths built from untrusted archive entry names are dangerous	2023-06-16 08:52:44 +02:00
Tony Torralba	1b39faaded	QLDoc correction	2023-06-15 16:20:39 +02:00
Tony Torralba	7cbc13db40	Update java/ql/lib/change-notes/2023-06-08-new-models.md	2023-06-15 15:14:12 +02:00
Tony Torralba	dcd180f3f6	Remove model	2023-06-15 12:00:46 +02:00
Tony Torralba	af240ff533	Apply suggestions from code review	2023-06-15 11:58:53 +02:00
Ian Lynagh	b7e9915151	Merge pull request #13463 from igfoo/igfoo/AccessControlException ... Kotlin: Remove use of AccessControlException	2023-06-15 10:53:28 +01:00
Jeroen Ketema	742eb8dd12	Java: Rewrite InlineFlowTest as a parameterized module	2023-06-15 10:52:10 +02:00
github-actions[bot]	e6160b8e49	Add changed framework coverage reports	2023-06-15 00:18:04 +00:00
Ian Lynagh	0419b6e505	Kotlin: Remove use of AccessControlException ... We were getting warnings about it being deprecated, and it was all dead code anyway.	2023-06-14 17:45:58 +01:00
Owen Mansel-Chan	3ff6d033d3	Rename to neverSkipInPathGraph	2023-06-14 15:29:54 +01:00
Tony Torralba	37a62d3021	Merge pull request #13227 from atorralba/atorralba/java/jenkins-generated-models ... Java: Add autogenerated models for frameworks related to Jenkins	2023-06-14 15:59:28 +02:00
Owen Mansel-Chan	5f72ce0935	Add stub implementations of flowCheckNodeSpecific	2023-06-14 14:46:35 +01:00
Owen Mansel-Chan	e0f7437d40	Sync dataflow library	2023-06-14 14:29:56 +01:00
Tony Torralba	7c4cdbf0d6	Remove badly generated models	2023-06-14 14:20:16 +02:00
Jami	35591113c2	Merge branch 'main' into jcogs33/shared-sink-kind-validation	2023-06-14 08:06:34 -04:00
Michael Nebel	afec9b05e9	Merge pull request #13147 from michaelnebel/csharp/entityframeworkrefactor ... C#: Use synthetic global in the EntityFramework code instead of jump steps.	2023-06-14 13:47:56 +02:00
Tony Torralba	5e3d9d8136	Java: Model the Stapler framework	2023-06-14 12:34:52 +02:00
Tony Torralba	182513a981	Merge pull request #13235 from atorralba/atorralba/java/hudson-models ... Java: Add Hudson models	2023-06-14 12:33:18 +02:00
Taus	e5b17af9b5	Java: Fix bad tool output	2023-06-14 12:16:44 +02:00
Ian Lynagh	36e8441ed7	Merge pull request #13427 from igfoo/igfoo/references ... Kotlin: Avoid using deprecated APIs	2023-06-14 11:15:35 +01:00
Jean Helie	209f3e26d4	Merge pull request #13239 from github/tausbn/automodel-application-mode ... Java: Add QL support for automodel application mode	2023-06-14 11:42:26 +02:00
Tony Torralba	8bafc22add	Replace open-url sink kinds with request-forgery	2023-06-14 09:59:59 +02:00
Tony Torralba	73d2ab7d66	Add change note	2023-06-14 09:58:30 +02:00
Tony Torralba	686c35e210	Add autogenerated models	2023-06-14 09:58:30 +02:00
Anders Schack-Mulligen	1a4fca334f	Merge pull request #13273 from aschackmull/dataflow/summarynode-refactor ... Dataflow: Refactor FlowSummaryImpl to synthesize nodes independently from DataFlow::Node.	2023-06-14 09:38:36 +02:00
Taus	b860b21ced	Update MaD Declarations after Triage	2023-06-13 16:50:58 +02:00
Anders Schack-Mulligen	2d616d494e	C#/Ruby: Add fields as per review comments.	2023-06-13 11:26:30 +02:00
Jeroen Ketema	c3ba206b6a	Merge pull request #13346 from jketema/inline-2 ... Update inline expectation tests to use parameterized module	2023-06-13 10:10:55 +02:00
Tony Torralba	ffe67689ec	Merge branch 'main' into atorralba/java/command-injection-mad-sinks	2023-06-13 09:27:33 +02:00
Tony Torralba	29d4b6fadc	Re-add public classes that shouldn't be removed yet	2023-06-13 09:24:27 +02:00
Tony Torralba	2fd2c434f2	Apply suggestions from code review ... Co-authored-by: Jami <57204504+jcogs33@users.noreply.github.com>	2023-06-13 09:24:15 +02:00
Anders Schack-Mulligen	eec012d308	Java: Fix test	2023-06-12 13:18:13 +02:00
github-actions[bot]	a628384d83	Add changed framework coverage reports	2023-06-12 00:18:38 +00:00
Jami Cogswell	9abe3e3da4	Shared: use a module as input to 'KindValidation'	2023-06-09 14:35:37 -04:00
Ian Lynagh	d3941ae935	Kotlin: Avoid using deprecated APIs	2023-06-09 18:14:09 +01:00
Anders Schack-Mulligen	97b2bdaa9f	Java: Fix types of summary parameter nodes.	2023-06-09 15:39:28 +02:00
Anders Schack-Mulligen	254d60c826	Dataflow: Refactor FlowSummaryImpl to synthesize nodes independently from DataFlow::Node.	2023-06-09 15:27:17 +02:00
Anders Schack-Mulligen	59636c43ca	Dataflow: Rename two private predicates.	2023-06-09 15:27:17 +02:00
Stephan Brandauer	b38bc52019	Java: fix bug in ExcludedFromModeling Characteristic	2023-06-09 14:57:56 +02:00
Stephan Brandauer	1ae2fee309	Java: Update java/ql/lib/ext/okhttp3.model.yml ... Co-authored-by: Tony Torralba <atorralba@users.noreply.github.com>	2023-06-09 13:48:16 +02:00
Stephan Brandauer	44785b72ce	Java: Update java/ql/lib/ext/okhttp3.model.yml ... Co-authored-by: Tony Torralba <atorralba@users.noreply.github.com>	2023-06-09 13:46:09 +02:00
Anders Schack-Mulligen	1b7bbf6320	Merge pull request #13083 from aschackmull/dataflow/typestrengthen ... Dataflow: Strengthen tracked types.	2023-06-09 13:23:30 +02:00
Jeroen Ketema	49993b023e	Java: Rewrite inline expectation tests to use parameterized module	2023-06-09 10:42:17 +02:00
Tony Torralba	0cef5651e2	Merge pull request #13417 from github/workflow/coverage/update ... Update CSV framework coverage reports	2023-06-09 09:27:03 +02:00