12771 Commits

Author	SHA1	Message	Date
Jeroen Ketema	bff11c3d23	Apply suggestions from code review	2023-06-08 22:33:50 +02:00
github-actions[bot]	e4be303a23	Release preparation for version 2.13.4	2023-06-08 19:57:37 +00:00
Tony Torralba	abb775c616	Merge pull request #13409 from atorralba/atorralba/java/fix-gson-models ... Java: Fix more problems in the Gson models	2023-06-08 17:36:40 +02:00
Ian Lynagh	22fe055e53	Kotlin: Tweak our JSON escaping ... We were escaping '/', but I don't think there is any need to do so. It just happens to have a nice escape in the spec. Escaping it might filenames annoying to work with. I've also added escaping for the other control characters that we're meant to escape.	2023-06-08 15:20:30 +01:00
Tony Torralba	0e242cba7e	Update java/ql/lib/ext/retrofit2.model.yml	2023-06-08 14:59:10 +02:00
Tony Torralba	4608481d7b	Java: Fix more problems in the Gson models ... Found during type strengthening work by @aschackmull	2023-06-08 14:53:09 +02:00
Anders Schack-Mulligen	5a2ac1b5ca	Java: Add more negation context to reduce string ops and improve perf.	2023-06-08 14:04:57 +02:00
Anders Schack-Mulligen	dabb4dd643	Java: Improve join-order for FunctionalInterface.	2023-06-08 13:02:54 +02:00
Stephan Brandauer	8f697ac1ee	Java: fix broken MaD export format	2023-06-08 12:02:50 +02:00
Stephan Brandauer	c6f10519fa	Merge branch 'main' into java/update-mad-decls-after-triage-2023-06-08T08-51-47	2023-06-08 12:00:07 +02:00
Anders Schack-Mulligen	cc45db7c76	Merge pull request #13394 from atorralba/atorralba/java/fix-gson-jsonarray-models ... Java: Fix Gson's JsonArray.add models	2023-06-08 11:05:40 +02:00
Stephan Brandauer	bda938c544	Update MaD Declarations after Triage	2023-06-08 10:51:48 +02:00
github-actions[bot]	cbbd885e22	Add changed framework coverage reports	2023-06-08 00:17:14 +00:00
Ian Lynagh	1b83aeb25d	Merge pull request #13393 from igfoo/igfoo/remove_explorer ... Kotlin: Remove kotlin-explorer	2023-06-07 16:32:00 +01:00
Ian Lynagh	c4e829f1d4	Merge pull request #13385 from igfoo/igfoo/kotlin_version_relax ... Kotlin: Relax version requirements	2023-06-07 16:31:49 +01:00
Tony Torralba	c0135673fa	Fix JsonArray.addAll model ... Properly test JsonArray.add(String) and JsonArray.addAll(JsonArray) as well	2023-06-07 16:18:32 +02:00
Stephan Brandauer	2921df41da	Java: fix import	2023-06-07 15:22:59 +02:00
Stephan Brandauer	ec3a7e39ad	Java: qldoc style	2023-06-07 14:57:38 +02:00
Stephan Brandauer	715b1351f3	Java: share considerSubtypes predicate between Java modes	2023-06-07 14:55:00 +02:00
Stephan Brandauer	7e77e2ea82	Java: comment why we're using erased types in MaD	2023-06-07 14:42:20 +02:00
Stephan Brandauer	a8799fe981	Java: share getCallable interface between automodel extraction modes	2023-06-07 14:38:52 +02:00
Tony Torralba	6d7234f8ed	Merge pull request #13225 from atorralba/atorralba/java/path-injection-mad-sinks-2 ... Java: Migrate path injection sinks to models-as-data (simplified)	2023-06-07 14:27:36 +02:00
Tony Torralba	35b4c438ff	Fix Gson's JsonArray.add models ... When the type of the argument isn't JsonElement, the summary must be taint flow instead of value flow	2023-06-07 14:12:20 +02:00
yoff	911835c30e	Merge pull request #13392 from yoff/java/test-type-tracking-through-flow-summaries ... java: test type tracking through flow summaries	2023-06-07 14:10:23 +02:00
Stephan Brandauer	92ad02a752	Java: update getRelatedLocation qldoc	2023-06-07 14:09:07 +02:00
Stephan Brandauer	be6b1d8aaf	Java: remove SkipFrameworkModeling characteristic in favour of later evaluation	2023-06-07 13:58:56 +02:00
Stephan Brandauer	2e16b71215	Java: update qldoc of ClassQualifierCharacteristic	2023-06-07 13:52:57 +02:00
Stephan Brandauer	1bfbfec1bc	Java: use problem.severity in automodel extraction queries	2023-06-07 13:44:52 +02:00
Ian Lynagh	d6ac5cdc94	Kotlin: Remove kotlin-explorer ... This was an exploration tool that I don't think has been used for some time.	2023-06-07 12:39:00 +01:00
Erik Krogh Kristensen	6ba7f9a238	Merge pull request #13352 from erik-krogh/once-again-deps-not-py-cpp ... delete old deprecations	2023-06-07 13:00:57 +02:00
Tony Torralba	46b30453e3	Merge pull request #13386 from github/java/update-mad-decls-after-triage-2023-06-06T14-38-29 ... Java: Update MaD Declarations after Triage	2023-06-07 12:33:26 +02:00
Rasmus Lerchedahl Petersen	aec1e4a713	java: address ql alert	2023-06-07 11:40:50 +02:00
Rasmus Lerchedahl Petersen	76e1c6f76f	java: test type tracking through flow summaries	2023-06-07 11:18:53 +02:00
Tony Torralba	416d3d587d	Accept test changes ... An uncovered test case is now correctly covered	2023-06-07 10:33:17 +02:00
Tony Torralba	27763d6bbe	Improve ZipSlip exclusion to take varargs into account	2023-06-07 09:25:56 +02:00
Tony Torralba	8001ae9669	Update java/ql/lib/semmle/code/java/security/ZipSlipQuery.qll ... Co-authored-by: Jami <57204504+jcogs33@users.noreply.github.com>	2023-06-07 09:08:24 +02:00
Tony Torralba	60725e9580	Update java/ql/lib/ext/org.springframework.core.io.model.yml	2023-06-07 09:07:22 +02:00
Tony Torralba	2f12ae2e0d	Update java/ql/lib/ext/okhttp3.model.yml	2023-06-07 08:57:12 +02:00
github-actions[bot]	a14e7fa694	Add changed framework coverage reports	2023-06-07 00:16:58 +00:00
Stephan Brandauer	b31131d33a	Merge pull request #13344 from github/java/update-mad-decls-after-triage-2023-06-01T12-58-13 ... Java: Update MaD Declarations after Triage	2023-06-06 17:08:50 +02:00
Stephan Brandauer	75cbcdd72e	Update MaD Declarations after Triage	2023-06-06 16:38:31 +02:00
Ian Lynagh	ca63122ce4	Kotlin: Relax version requirements ... If the latest version we know about is 1.9, and we are faced with 1.10, then we try 1.9 rather than failing with an exception.	2023-06-06 14:09:55 +01:00
Tony Torralba	49c6ea27a0	Merge pull request #13379 from atorralba/atorralba/kotlin/use-with-flow ... Kotlin: Add flow through kotlin.io.use and kotlin.with	2023-06-06 13:44:14 +02:00
Taus	f4fd908f7f	Java: Comment out sinks for which no query exists	2023-06-06 13:01:59 +02:00
Ian Lynagh	f690d150b0	Merge pull request #13373 from igfoo/igfoo/kotlin-loc ... Java/Kotlin: Split lines of code by language	2023-06-06 11:49:18 +01:00
Tony Torralba	1d8ca88aca	Add change note	2023-06-06 11:25:07 +02:00
Tony Torralba	72af634575	Kotlin: Add flow through use and with	2023-06-06 11:22:16 +02:00
Nick Rolfe	6c5c338e6b	Merge pull request #13348 from github/nickrolfe/java-location-tostring ... Java: avoid call to `Location.toString()`	2023-06-06 09:55:42 +01:00
Tony Torralba	1601846478	Add exclusion to the ZipSlip query to avoid FPs	2023-06-06 10:28:49 +02:00
Tony Torralba	0065e6e1d6	Apply suggestions from code review ... Fix incorrect models-as-data rows	2023-06-06 10:04:22 +02:00