5453 Commits

Author	SHA1	Message	Date
Ed Minnix	b087cf9a0a	Add Arithmetic query libraries	2023-05-04 10:25:16 -04:00
Ed Minnix	b6361cdd3d	Move CWE-190/ArithmeticCommon.qll to semmle.code.java.security	2023-05-04 10:25:16 -04:00
Ed Minnix	24b00bac11	Add UnsafeHostnameVerificationQuery	2023-05-04 10:25:16 -04:00
Ed Minnix	f4a6f555b4	Add NumericCastTaintedQuery	2023-05-04 10:25:13 -04:00
Ed Minnix	e65a54b85f	Add BrokenCryptoAlgorithmQuery	2023-05-04 10:19:12 -04:00
Ed Minnix	4b76564911	Add MaybeBrokenCryptoAlgorithmQuery	2023-05-04 10:15:00 -04:00
Ed Minnix	e4f47ece43	Add ResponseSplittingLocalQuery	2023-05-04 10:15:00 -04:00
Ed Minnix	91b3533035	Add SqlTaintedLocalQuery	2023-05-04 10:14:59 -04:00
Ed Minnix	a0f7575b34	Add StackTraceExposureQuery	2023-05-04 10:14:59 -04:00
Ed Minnix	aff299eafd	Add ExecTaintedLocal	2023-05-04 10:14:59 -04:00
Ed Minnix	b39d5088de	Add InsecureCookieQuery	2023-05-04 10:14:59 -04:00
Ed Minnix	be24b29e7a	Add UrlRedirectLocalQuery.qll	2023-05-04 10:14:59 -04:00
Ed Minnix	0249187282	Add ExternallyControlledFormatStringLocalQuery.qll	2023-05-04 10:14:59 -04:00
Ed Minnix	5834e4ac52	Add UrlRedirectQuery.qll	2023-05-04 10:14:59 -04:00
Ed Minnix	cc22a7d4b4	Add XssLocalQuery	2023-05-04 10:14:59 -04:00
Ed Minnix	c2b6a3f4e0	Add XPathInjectionQuery	2023-05-04 10:14:59 -04:00
Ed Minnix	c15ce27957	Add SqlConcatenatedQuery	2023-05-04 10:14:59 -04:00
Ed Minnix	1af6d5f7b3	Add TaintedPermissionsCheckQuery	2023-05-04 10:14:59 -04:00
Kasper Svendsen	29239939c7	Merge pull request #13010 from kaspersv/kaspersv/java-explicit-this-receivers ... Java: Make implicit this receivers explicit	2023-05-04 13:06:41 +02:00
Stephan Brandauer	32f2614fe0	add typecheckable mechanism to enforce minimal set of metadata	2023-05-03 16:00:50 +02:00
Jami Cogswell	917268e7e6	Java: activate the models in openstream query	2023-05-03 09:57:45 -04:00
Stephan Brandauer	6d29273c43	make framework mode explicit in file/module names	2023-05-03 14:36:42 +02:00
Stephan Brandauer	dfb9d88198	fix ql-for-ql errors	2023-05-03 14:17:11 +02:00
Ian Lynagh	b56b843d13	Merge pull request #12987 from github/post-release-prep/codeql-cli-2.13.1 ... Post-release preparation for codeql-cli-2.13.1	2023-05-03 13:12:10 +01:00
Kasper Svendsen	081085e128	Java: Make implicit this receivers explicit	2023-05-03 13:37:35 +02:00
Stephan Brandauer	05bf13b020	use getCallable predicate	2023-05-03 11:27:14 +02:00
Stephan Brandauer	09f3296134	export related locations using notation	2023-05-03 10:27:46 +02:00
Edward Minnix III	733a00039e	Merge pull request #12864 from egregius313/egregius313/java/mad/update-typeAsModel ... Java: Erase generics in `typeAsModel` predicate used in model generator	2023-05-02 15:28:51 -04:00
Anders Schack-Mulligen	353d5f82a6	Merge pull request #12984 from aschackmull/dataflow/instanceof-node ... Dataflow: Replace "extends Node" with "instanceof Node".	2023-05-02 13:52:33 +02:00
Stephan Brandauer	f1644adca9	add internal tag to extraction queries; use 'ml' in query ids, instead of 'ml-powered'	2023-05-02 13:30:22 +02:00
Stephan Brandauer	bb7e473cbf	use the name callable, instead of callee for methods, functions	2023-05-02 13:22:31 +02:00
Stephan Brandauer	f7f6f104d0	use NegativeEndpointType class; replace link to slack discussion	2023-05-02 13:15:30 +02:00
github-actions[bot]	18d4af994d	Post-release preparation for codeql-cli-2.13.1	2023-05-02 10:50:20 +00:00
Anders Schack-Mulligen	2001ce34d4	Java/C#: Adjust references.	2023-05-02 10:21:09 +02:00
Tony Torralba	51c08f1314	Merge pull request #12969 from atorralba/atorralba/java/fix-model-generator-sinks-instance-parameters ... Java: Fix sink model generator for instance parameters	2023-05-02 10:10:59 +02:00
Tony Torralba	77ec181cac	Java: Fix sink model generator for instance parameters	2023-04-28 14:49:04 +02:00
github-actions[bot]	3bd29171fb	Release preparation for version 2.13.1	2023-04-28 12:14:35 +00:00
Stephan Brandauer	bd3aaf0306	remove comment that no longer applies	2023-04-28 10:16:18 +02:00
Anders Schack-Mulligen	9ad2da6196	Java: Fix reference to TypedContent.	2023-04-27 14:52:25 +02:00
Stephan Brandauer	adcf4a3dc2	documentation clean-up	2023-04-27 14:48:48 +02:00
Stephan Brandauer	52a8230ce3	restructure shared characteristics module; add framework support for sanitizers	2023-04-27 14:46:24 +02:00
Stephan Brandauer	ffe7c62766	use US spelling	2023-04-27 14:46:24 +02:00
Stephan Brandauer	a91b71c53b	add parameter names to metadata, set subtypes = false for static method candidates; remove UndocumentedMethodCharacteristics, now that we use ModelApi	2023-04-27 14:46:23 +02:00
Stephan Brandauer	3868defb87	use ModelApi to define parameters worth modeling	2023-04-27 14:46:23 +02:00
Stephan Brandauer	6eefb268dd	Automodel extraction queries in java telemetry query directory	2023-04-27 14:46:08 +02:00
Tony Torralba	4606df5cb6	Add change note	2023-04-26 12:24:43 +02:00
Tony Torralba	fba61d51ed	Remove experimental files	2023-04-26 12:24:30 +02:00
Ed Minnix	64ea4833d9	Erase generics in typeAsModel	2023-04-20 17:09:36 -04:00
Jami Cogswell	85542638d7	Java: refactor CaptureModelsSpecific; resolve conflict for isInTestFile	2023-04-20 16:23:12 -04:00
Jami Cogswell	94f11029ee	Java: refactor ExternalApi	2023-04-20 16:19:15 -04:00