Tony Torralba
bced2d692b
Apply suggestions from code review
2023-04-05 15:19:21 +02:00
Stephan Brandauer
f87618238f
Review suggestions
2023-04-05 15:15:03 +02:00
Stephan Brandauer
edf7ba09e7
try different change note name
2023-04-05 15:15:02 +02:00
Stephan Brandauer
0a5d19fc71
Update MaD Declarations after Triage
2023-04-05 15:15:02 +02:00
github-actions[bot]
ac426b1302
Post-release preparation for codeql-cli-2.12.6
2023-04-04 16:49:26 +00:00
Jonathan Leitschuh
0d774a647c
Fix partial path traversal Java example Again
...
The original wouldn't compile, and the fix made by #11899 is sub-optimal.
This keeps the entire comparision using the Java `Path` object, which is optimal.
Signed-off-by: Jonathan Leitschuh <Jonathan.Leitschuh@gmail.com >
2023-03-31 23:36:07 -04:00
Jonathan Leitschuh
b9d409279b
Update java/ql/src/Security/CWE/CWE-023/PartialPathTraversalRemainder.inc.qhelp
...
Co-authored-by: Tony Torralba <atorralba@users.noreply.github.com >
2023-03-31 23:36:07 -04:00
Jonathan Leitschuh
e641505361
Fix partial path traversal Java example Again
...
The original wouldn't compile, and the fix made by #11899 is sub-optimal.
This keeps the entire comparision using the Java `Path` object, which is optimal.
Signed-off-by: Jonathan Leitschuh <Jonathan.Leitschuh@gmail.com >
2023-03-31 23:36:07 -04:00
Jami Cogswell
0688fa6ed1
Java: update expected file for results without interface members
2023-03-31 18:02:09 -04:00
Jami Cogswell
c69745a6f8
Java: fix stubs
2023-03-31 18:02:09 -04:00
Jami Cogswell
266939840d
Java: update expected file with results that include interface members
2023-03-31 18:02:09 -04:00
Jami Cogswell
aca538310f
Java: update some qldocs
2023-03-31 18:02:09 -04:00
Jami Cogswell
8b18df0987
Java: update top jdk apis test case with stubs
2023-03-31 18:02:09 -04:00
Jami Cogswell
e0524a1177
Java: add test case for top jdk apis
2023-03-31 18:02:09 -04:00
Jami Cogswell
8501a16cac
Java: move TopJdkApis.qll to lib directory for better importing
2023-03-31 18:02:09 -04:00
Jami Cogswell
fea55e910e
Java: move query logic to qll file and add subset restriction for top500 jdk apis
2023-03-31 18:02:08 -04:00
Edward Minnix III
2b9daed26a
Merge pull request #12563 from egregius313/egregius313/refactor-java-libs-to-dataflow-modules
...
Java: Refactor Java query libraries to use dataflow modules
2023-03-31 12:38:14 -04:00
Ed Minnix
800411cd81
More replacing of single-predicate classes to predicate
2023-03-31 10:55:17 -04:00
Ian Lynagh
c1a7d7f825
Merge pull request #12646 from igfoo/igfoo/expanded_args
...
Java: Store expanded args in the database
2023-03-31 15:27:02 +01:00
Ian Lynagh
3d85c4f19c
Java: Add another change note
2023-03-31 12:46:10 +01:00
Ian Lynagh
04c09a73a9
Java: Add .md extension to changenote file
2023-03-31 12:40:19 +01:00
Ed Minnix
ac218ba08b
Replace private classes with one method to predicates
2023-03-30 22:03:05 -04:00
github-actions[bot]
0a3218676c
Release preparation for version 2.12.6
2023-03-30 19:25:06 +00:00
Edward Minnix III
8e54328315
Merge pull request #12681 from egregius313/egregius313/java/move-configurations-to-libraries
...
Java: Move dataflow configurations in queries to `*Query.qll` libraries (part 1)
2023-03-30 14:33:21 -04:00
Ed Minnix
03078603bf
Reinstate private markers on additional predicates
2023-03-30 11:24:33 -04:00
Ed Minnix
684408a493
Fix StringFormat import
2023-03-30 11:20:35 -04:00
Ed Minnix
ecbd3be5e9
Remove private marker
...
This class is used in the actual query, so it needs to be exposed.
2023-03-30 11:08:41 -04:00
Ed Minnix
dba5e9e9e2
Updates to imports
...
Make some imports private
Remove unnecessary imports
2023-03-30 11:03:48 -04:00
Edward Minnix III
c7a049a867
Mark things which can be private as private
...
Co-authored-by: Tony Torralba <atorralba@users.noreply.github.com >
2023-03-30 11:00:00 -04:00
Edward Minnix III
8250e4393c
Typos and rewording
...
Co-authored-by: Tony Torralba <atorralba@users.noreply.github.com >
2023-03-30 10:59:12 -04:00
Ian Lynagh
5c50ddce3d
Java: Add up/downgrade scripts
2023-03-30 15:53:34 +01:00
Ian Lynagh
69567449de
Java: Update stats
2023-03-30 15:53:34 +01:00
Ian Lynagh
b381f00a73
Java: Add changenote for expanded arguments
2023-03-30 15:53:34 +01:00
Ian Lynagh
81a26f0396
Java: Add expanded arguments
2023-03-30 15:53:34 +01:00
Alex Ford
62fcea030a
Merge pull request #12718 from github/post-release-prep/codeql-cli-2.12.5
...
Post-release preparation for codeql-cli-2.12.5
2023-03-30 15:50:56 +01:00
github-actions[bot]
e87ce62f95
Post-release preparation for codeql-cli-2.12.5
2023-03-30 13:48:58 +00:00
Ian Lynagh
f5a2853ab9
Merge pull request #12705 from igfoo/igfoo/integ-extractor-info
...
Java: Allow keys to be omitted from ExtractorInformation.ql
2023-03-30 14:06:41 +01:00
Tony Torralba
3102199a69
Make LocalUserInputToArgumentToExecFlowConfig and LocalUserInputToArgumentToExecFlow importable
2023-03-30 10:24:23 +02:00
Tony Torralba
534725f9eb
Add command injection sink kind
2023-03-30 10:17:35 +02:00
Ed Minnix
58ad8e4292
ExternallyControlledFormatString change note
2023-03-29 22:43:26 -04:00
Ed Minnix
312508e279
Documentation for IntentUriPermissionManipulationQuery
2023-03-29 22:33:10 -04:00
Ed Minnix
cf7aa2e420
Documentation UnsafeDeserializationQuery
2023-03-29 22:33:10 -04:00
Ed Minnix
1a89c3fa7c
Documentation for AndroidSensitiveCommunicationQuery
2023-03-29 22:33:10 -04:00
Ed Minnix
1016b7323f
Documentation for ConditionalBypassQuery
2023-03-29 22:33:10 -04:00
Ed Minnix
96cf4f16fa
Documentation for ExternalAPIs
2023-03-29 22:33:10 -04:00
Ed Minnix
c7fd216c3c
Documentation for RsaWithoutOaepQuery
2023-03-29 22:33:10 -04:00
Ed Minnix
11d72ffc1f
Documentation for UnsafeContentUriResolutionQuery
2023-03-29 22:33:10 -04:00
Ed Minnix
59b1460c49
Documentation for UnsafeCertTrustQuery
2023-03-29 22:33:09 -04:00
Ed Minnix
a798b1959f
Replace flow(_, sink) with flowTo(sink)
2023-03-29 22:33:09 -04:00
Ed Minnix
d24c5071d8
Move private helper method out of module
2023-03-29 22:33:09 -04:00
