Joe Farebrother
|
031bd8bd0c
|
Merge pull request #15281 from joefarebrother/android-sensitive-ui-notif
Java: Add query for exposure of sensitive information to android notifiactions
|
2024-01-26 16:42:55 +00:00 |
|
Henry Mercer
|
452359f20e
|
Merge pull request #15446 from github/codeql-cli-2.16.1
Merge `codeql-cli-2.16.1` back to `main`
|
2024-01-26 15:52:56 +00:00 |
|
Henry Mercer
|
6bef1404fd
|
Merge remote-tracking branch 'origin/codeql-cli-2.16.1' into henrymercer/2.16.0-mergeback
|
2024-01-26 13:53:13 +00:00 |
|
Tony Torralba
|
2a146405ac
|
Adjust tests
|
2024-01-26 12:38:32 +01:00 |
|
Tony Torralba
|
1d2a51c522
|
Rename change note
|
2024-01-26 12:20:47 +01:00 |
|
Tony Torralba
|
19cb7adb6d
|
Migrate path injection sinks to MaD
Deprecate and stop using PathCreation
Path creation sinks are now summaries
|
2024-01-26 12:19:54 +01:00 |
|
Tony Torralba
|
661c5cf6aa
|
Merge pull request #15409 from erik-krogh/path-java
Java: Improve the QHelp for `java/path-injection`.
|
2024-01-25 17:14:59 +01:00 |
|
erik-krogh
|
73e3fada44
|
add missing </p>
|
2024-01-25 12:14:10 +01:00 |
|
erik-krogh
|
05a59d2a94
|
apply suggestions from doc review
|
2024-01-25 11:20:46 +01:00 |
|
github-actions[bot]
|
d0b74c00fe
|
Post-release preparation for codeql-cli-2.16.1
|
2024-01-23 23:02:29 +00:00 |
|
github-actions[bot]
|
7ef611e6dc
|
Release preparation for version 2.16.1
|
2024-01-23 19:45:16 +00:00 |
|
erik-krogh
|
158ff0da0a
|
add a trailing slash to the folder check in the QHelp for java/path-injection
|
2024-01-23 14:46:02 +01:00 |
|
erik-krogh
|
00dadeb3bf
|
delete the markdown file again
|
2024-01-23 12:57:15 +01:00 |
|
erik-krogh
|
57e0b3cceb
|
iterate on the java/path-injection qhelp
|
2024-01-23 12:56:43 +01:00 |
|
erik-krogh
|
4958c19c67
|
move the examples for the qhelps into an example/ folder
|
2024-01-23 12:56:23 +01:00 |
|
erik-krogh
|
6b66f5cbc5
|
check in the TaintedPath qhelp as markdown to get pretty diffs
|
2024-01-23 12:56:22 +01:00 |
|
Joe Farebrother
|
69faafa194
|
Add change note
|
2024-01-23 09:51:40 +00:00 |
|
Joe Farebrother
|
1190352b67
|
Add qhelp
|
2024-01-23 09:51:40 +00:00 |
|
Joe Farebrother
|
143ce0b94a
|
Add sensitive notification query
|
2024-01-23 09:51:37 +00:00 |
|
Ed Minnix
|
fb80c5ea84
|
Rename SimpleScalarSanitizer to SimpleTypeSanitizer
|
2024-01-22 23:55:29 -05:00 |
|
Ed Minnix
|
696788e5b2
|
Rename semmle.code.java.security.dataflow.CommonSanitizers to semmle.code.java.security.Sanitizers
|
2024-01-22 23:52:19 -05:00 |
|
Ed Minnix
|
3311b3be8e
|
Convert experimental queries' isBarrier to use instanceof SimpleScalarSanitizer
|
2024-01-22 23:38:29 -05:00 |
|
Tony Torralba
|
736df6fb05
|
Fix change note category for clarity
|
2024-01-18 17:09:34 +01:00 |
|
Alexander Eyers-Taylor
|
934474681d
|
Merge pull request #15254 from github/post-release-prep/codeql-cli-2.16.0
Post-release preparation for codeql-cli-2.16.0
|
2024-01-16 14:50:40 +00:00 |
|
github-actions[bot]
|
57df8b92df
|
Post-release preparation for codeql-cli-2.16.0
|
2024-01-15 15:00:50 +00:00 |
|
Michael Nebel
|
9becd0876f
|
Merge pull request #15179 from michaelnebel/modelgenrespectmanual
C#/Java: Increase precision of model generation.
|
2024-01-12 15:12:21 +01:00 |
|
Michael Nebel
|
37a21ec548
|
Java: Address review comments.
|
2024-01-12 13:36:23 +01:00 |
|
Michael Nebel
|
6af0bca777
|
Java: Avoid generating contradicting summary and neutral summary models.
|
2024-01-12 13:36:23 +01:00 |
|
Michael Nebel
|
81de9d35af
|
C#/Java: Don't generate models if there exist a manual summary or neutral summary.
|
2024-01-12 13:35:22 +01:00 |
|
Owen Mansel-Chan
|
6945289afc
|
Merge pull request #15246 from owen-mc/java/manual-neutral-overrides-generated
C#/Java: Manual neutral summaries should block generated summaries
|
2024-01-12 10:05:18 +00:00 |
|
Owen Mansel-Chan
|
5e9ddd8c63
|
Apply suggestions from code review on change notes
Co-authored-by: Michael Nebel <michaelnebel@github.com>
|
2024-01-11 15:15:21 +00:00 |
|
Owen Mansel-Chan
|
3c369f88bb
|
Add change notes
|
2024-01-11 14:00:17 +00:00 |
|
Ed Minnix
|
55da62e9cf
|
Remove stray comma
Co-authored-by: Felicity Chapman <felicitymay@github.com>
|
2024-01-08 11:09:11 -05:00 |
|
Ed Minnix
|
b8466b45be
|
Update change note date
|
2024-01-08 09:39:11 -05:00 |
|
Edward Minnix III
|
2440075402
|
Remove off-topic reference
Co-authored-by: Tony Torralba <atorralba@users.noreply.github.com>
|
2024-01-08 09:39:10 -05:00 |
|
Edward Minnix III
|
3816271b3e
|
Remove redundant CWE link
Co-authored-by: Tony Torralba <atorralba@users.noreply.github.com>
|
2024-01-08 09:39:10 -05:00 |
|
Ed Minnix
|
2eff6b351c
|
Add comment
|
2024-01-08 09:39:09 -05:00 |
|
Ed Minnix
|
16bb19e176
|
Add OWASP and CERT references
|
2024-01-08 09:39:08 -05:00 |
|
Ed Minnix
|
9f974415c0
|
Add references to CWE-454 (External Initialization of Trusted Variables)
|
2024-01-08 09:39:07 -05:00 |
|
Ed Minnix
|
97b29bb965
|
Add Java Tutorial reference
|
2024-01-08 09:39:06 -05:00 |
|
Edward Minnix III
|
938d52b86f
|
Docs review suggestions
Co-authored-by: Felicity Chapman <felicitymay@github.com>
|
2024-01-08 09:39:05 -05:00 |
|
Ed Minnix
|
e14be0e971
|
Add BAD markers to samples
|
2024-01-08 09:39:04 -05:00 |
|
Ed Minnix
|
4b9b27c395
|
change note
|
2024-01-08 09:38:52 -05:00 |
|
Edward Minnix III
|
18e8a27fca
|
Reworded name and description
|
2024-01-08 09:38:51 -05:00 |
|
Edward Minnix III
|
1f37e70d83
|
Fix typos
Co-authored-by: Tony Torralba <atorralba@users.noreply.github.com>
|
2024-01-08 09:38:51 -05:00 |
|
Ed Minnix
|
51006aa088
|
Formatting fix
|
2024-01-08 09:38:50 -05:00 |
|
Ed Minnix
|
4fc6f710a4
|
Fix alert message
|
2024-01-08 09:38:48 -05:00 |
|
Ed Minnix
|
1550f5df2a
|
Environment variable injection query documentation
|
2024-01-08 09:38:47 -05:00 |
|
Ed Minnix
|
818c5de8d5
|
security-severity metadata
|
2024-01-08 09:38:46 -05:00 |
|
Ed Minnix
|
8ed3f3c865
|
Move to library
|
2024-01-08 09:38:44 -05:00 |
|