5453 Commits

Author	SHA1	Message	Date
Jami Cogswell	7c72ece4a0	Java: update genVsMan coverage query to use ModelApi instead of DataFlowTargetApi	2023-04-20 16:19:15 -04:00
Edward Minnix III	76f8d460e7	Merge pull request #12851 from egregius313/egregius313/mad/add-groovy-stubs-to-isInTestFile ... Java: Add `*/test/*` to model generator's list of ignored paths	2023-04-20 11:06:38 -04:00
Edward Minnix III	fc3c776bdc	Permit CodeQL's own tests ... Removing `%/test/%` accidentally removed our own test cases. Co-authored-by: Jami <57204504+jcogs33@users.noreply.github.com>	2023-04-18 15:31:49 -04:00
Ed Minnix	83d5cde01d	Change isInTestFile to ignore %/test/%	2023-04-18 10:27:20 -04:00
Alex Ford	924ce250dd	Merge pull request #12847 from github/post-release-prep/codeql-cli-2.13.0 ... Post-release preparation for codeql-cli-2.13.0	2023-04-18 14:40:40 +01:00
Tom Hvitved	f6d000eb20	Merge pull request #12805 from hvitved/remove-queries-xml ... Remove all `queries.xml` files	2023-04-18 10:52:14 +02:00
Ed Minnix	d1de453c7a	Change multiple match calls to set literal	2023-04-17 15:36:44 -04:00
Ed Minnix	027f08a0df	Add groovy-stubs/test to list of directory names to ignore in model generator.	2023-04-17 14:34:04 -04:00
github-actions[bot]	648f0e19ec	Post-release preparation for codeql-cli-2.13.0	2023-04-17 15:39:24 +00:00
Edward Minnix III	38826c98f1	Merge pull request #12751 from egregius313/egregius313/dataflow-refactor-cleanup ... Java: Finish dataflow refactor	2023-04-14 10:35:11 -04:00
github-actions[bot]	075d063370	Release preparation for version 2.13.0	2023-04-14 13:31:30 +00:00
Ed Minnix	ea54ea47b1	Deprecate sensitiveResultReceiver	2023-04-13 23:06:16 -04:00
Ed Minnix	cd661f1d9f	Refactor SensitiveResultReceiver	2023-04-13 23:06:16 -04:00
Ed Minnix	735a7383c6	Refactor HardcodedCredentialsSourceCall	2023-04-13 23:06:16 -04:00
Alex Eyers-Taylor	c6a482819a	Bump all qlpacks major versions	2023-04-13 19:15:27 +01:00
Edward Minnix III	aeff6d3b85	Merge pull request #12808 from egregius313/egregius313/java/dataflow/refactor-experimental ... Java: Refactor experimental queries to new DataFlow API	2023-04-13 10:58:34 -04:00
Michael Nebel	52bc43b22b	Merge pull request #12595 from michaelnebel/enhanceprovenance ... Java/C# : Enhance provenance.	2023-04-13 14:27:53 +02:00
Alex Ford	8c46bfd051	Merge pull request #12816 from github/rc/3.9 ... Merge `rc/3.9` into `main`	2023-04-13 12:35:41 +01:00
Tony Torralba	d7feaf4098	Merge pull request #12685 from atorralba/atorralba/java/command-injection-mad ... Java: Add command-injection sink kind and refactor command injection queries	2023-04-13 11:38:14 +02:00
Tom Hvitved	3cc9dec9c8	Remove all queries.xml files	2023-04-13 11:18:58 +02:00
Michael Nebel	dc8a31f2c5	C#/Java: Update dataflow model generator related comments to include provenance.	2023-04-13 09:21:06 +02:00
Michael Nebel	de7f486cb1	C#/Java: Update model converter queries.	2023-04-13 09:21:06 +02:00
Michael Nebel	df7d58d101	Java: Adjust model generator printing to the new provenance.	2023-04-13 09:21:06 +02:00
Michael Nebel	54e55e2262	Java: Introduce more provenance values.	2023-04-13 09:21:04 +02:00
Ed Minnix	2edad6ec71	Remove unused import	2023-04-12 20:42:26 -04:00
Ed Minnix	c756bdbc30	Fix naming in SensitiveCookieNotHttpOnly	2023-04-12 20:39:18 -04:00
Ed Minnix	c49bf01dc8	Refactor PermissiveDotRegex.ql	2023-04-12 20:37:36 -04:00
Ed Minnix	5164c2480f	Refactor SensitiveCookieNotHttpOnly	2023-04-12 20:37:36 -04:00
Ed Minnix	8f7d8cbcea	Refactor timing attack queries	2023-04-12 20:37:36 -04:00
Ed Minnix	597949dbfe	Refactor PermissiveDotRegexQuery	2023-04-12 20:37:36 -04:00
Ed Minnix	157b7ceaff	Refactor TimingAttackAgainstHeader	2023-04-12 20:37:36 -04:00
Ed Minnix	a186b771ba	Refactor JxBrowserWithoutCertValidation	2023-04-12 20:37:35 -04:00
Ed Minnix	ccdd9bce33	Refactor Revocation checking	2023-04-12 20:37:35 -04:00
Ed Minnix	380888e446	Refactor ClientSuppliedIpUsedInSecurityCheck	2023-04-12 20:37:35 -04:00
Ed Minnix	3c85ca9740	Refactor ThreadResourceAbuse	2023-04-12 20:37:35 -04:00
Ed Minnix	da5a719ffc	Refactor UnsafeUsageOfClientSideEncryptionVersion	2023-04-12 20:37:35 -04:00
Ed Minnix	e880a5f187	Refactor UnsafeTlsVersion	2023-04-12 20:37:35 -04:00
Ed Minnix	e3f6bc043d	Refactor InsecureWebResourceResponse	2023-04-12 20:37:35 -04:00
Ed Minnix	074745315c	Refactor SensitiveAndroidFileLeak	2023-04-12 20:37:35 -04:00
Ed Minnix	685a2043a8	Refactor UnsafeReflection	2023-04-12 20:37:35 -04:00
Ed Minnix	13e1cc50c8	Add SpringUrlRedirect	2023-04-12 20:37:35 -04:00
Ed Minnix	30cfbb83b3	Add UncaughtServletException	2023-04-12 20:37:35 -04:00
Ed Minnix	5594e7f6d2	Add SensitiveGetQuery	2023-04-12 20:37:35 -04:00
Ed Minnix	478309c90b	Add UnsafeDeserializationRmi	2023-04-12 20:37:35 -04:00
Ed Minnix	e2cfea19b5	Add UnsafeUrlForward	2023-04-12 20:37:35 -04:00
Ed Minnix	d48adbd175	Refactor JsonpInjection	2023-04-12 20:37:35 -04:00
Ed Minnix	8cb5e78832	Refactor XXE files	2023-04-12 20:37:35 -04:00
Ed Minnix	4c80ff03de	Refactor UnvalidatedCors	2023-04-12 20:37:35 -04:00
Ed Minnix	d254d91f57	Refactor Injection queries	2023-04-12 20:37:35 -04:00
Ed Minnix	7002ed5303	Refactor InsecureRmiJmxEnvironmentConfiguration	2023-04-12 20:37:35 -04:00