Chuan-kai Lin
4960305022
Merge pull request #13025 from cklin/java-location-tostring-bindingset
...
Java: Add pragma[only_bind_out] to Top::toString() calls
2023-05-08 06:27:42 -07:00
Mathias Vorreiter Pedersen
09ba9a74ce
Merge pull request #12959 from MathiasVP/identity-consistency-check
...
DataFlow: Add an "identity-step" consistency check
2023-05-05 10:03:20 +01:00
Edward Minnix III
2d5b35067e
Merge pull request #12721 from egregius313/egregius313/java/move-configurations-to-libraries
...
Java: Move more dataflow configurations to `*Query.qll` files
2023-05-04 20:14:22 -04:00
Ed Minnix
0c604b1c34
Remove generated model
2023-05-04 16:56:14 -04:00
Ed Minnix
7a295b554b
Remove Map rows
2023-05-04 16:52:40 -04:00
Edward Minnix III
a34a51737f
Add SyntheticFields for JwsHeader
...
Co-authored-by: Tony Torralba <atorralba@users.noreply.github.com >
2023-05-04 16:52:40 -04:00
Ed Minnix
62cbcdb30c
Add change note
2023-05-04 16:52:40 -04:00
Ed Minnix
a4f4ff15ce
Change method resolveSigningKey from class to interface
...
The resolveSigningKey method of SigningKeyResolverAdapter is an
implementation of that defined in SigningKeyResolver. So this changes
the type from the class to the interface it implements
2023-05-04 16:52:40 -04:00
Ed Minnix
a38466b0f3
Erase generics in generated model
2023-05-04 16:52:40 -04:00
Ed Minnix
26cdf24bf0
Added MaD models for io.jsonwebtoken
2023-05-04 16:52:39 -04:00
Jami
3c74c8bbe0
Merge pull request #13019 from jcogs33/jcogs33/url-open-stream-updates
...
Java: switch `url-open-stream` sink models to `experimentalSinkModel`
2023-05-04 15:07:44 -04:00
Chuan-kai Lin
d968cee2c4
Java: Add pragma[only_bind_out] to Top::toString() calls
2023-05-04 11:46:35 -07:00
Jami
4e31c46b0c
Merge pull request #13024 from jcogs33/jcogs33/remove-hardcoded-jwt-key-summaries
...
Java: remove `hardcoded-jwt-key` experimental summary models
2023-05-04 11:18:18 -04:00
Ed Minnix
5f3c8fef3f
Privacy markers and fixed imports
2023-05-04 10:25:17 -04:00
Ed Minnix
3100e98513
Add missing change notes and update date
2023-05-04 10:25:17 -04:00
Ed Minnix
74fc6382a6
Add improper validation of array size query libraries
2023-05-04 10:25:17 -04:00
Ed Minnix
c319ee4c0d
Add TempDirLocalInformationDisclosureQuery
2023-05-04 10:25:16 -04:00
Ed Minnix
b087cf9a0a
Add Arithmetic query libraries
2023-05-04 10:25:16 -04:00
Ed Minnix
b6361cdd3d
Move CWE-190/ArithmeticCommon.qll to semmle.code.java.security
2023-05-04 10:25:16 -04:00
Ed Minnix
77ee80fd81
Add missing change notes
2023-05-04 10:25:16 -04:00
Ed Minnix
24b00bac11
Add UnsafeHostnameVerificationQuery
2023-05-04 10:25:16 -04:00
Ed Minnix
f4a6f555b4
Add NumericCastTaintedQuery
2023-05-04 10:25:13 -04:00
Ed Minnix
e65a54b85f
Add BrokenCryptoAlgorithmQuery
2023-05-04 10:19:12 -04:00
Ed Minnix
4b76564911
Add MaybeBrokenCryptoAlgorithmQuery
2023-05-04 10:15:00 -04:00
Ed Minnix
e4f47ece43
Add ResponseSplittingLocalQuery
2023-05-04 10:15:00 -04:00
Ed Minnix
91b3533035
Add SqlTaintedLocalQuery
2023-05-04 10:14:59 -04:00
Ed Minnix
a0f7575b34
Add StackTraceExposureQuery
2023-05-04 10:14:59 -04:00
Ed Minnix
aff299eafd
Add ExecTaintedLocal
2023-05-04 10:14:59 -04:00
Ed Minnix
b39d5088de
Add InsecureCookieQuery
2023-05-04 10:14:59 -04:00
Ed Minnix
be24b29e7a
Add UrlRedirectLocalQuery.qll
2023-05-04 10:14:59 -04:00
Ed Minnix
0249187282
Add ExternallyControlledFormatStringLocalQuery.qll
2023-05-04 10:14:59 -04:00
Ed Minnix
5834e4ac52
Add UrlRedirectQuery.qll
2023-05-04 10:14:59 -04:00
Ed Minnix
cc22a7d4b4
Add XssLocalQuery
2023-05-04 10:14:59 -04:00
Ed Minnix
c2b6a3f4e0
Add XPathInjectionQuery
2023-05-04 10:14:59 -04:00
Ed Minnix
c15ce27957
Add SqlConcatenatedQuery
2023-05-04 10:14:59 -04:00
Ed Minnix
1af6d5f7b3
Add TaintedPermissionsCheckQuery
2023-05-04 10:14:59 -04:00
Kasper Svendsen
4035b16ac1
Merge pull request #13008 from kaspersv/kaspersv/explicit-this-receivers-shared1
...
Java, C#: Make implicit this receivers explicit
2023-05-04 15:38:45 +02:00
Anders Schack-Mulligen
1185bfc90f
Merge pull request #12986 from aschackmull/java/mapvalue-precision
...
Java: Force high precision for MapValueContent.
2023-05-04 14:52:41 +02:00
Anders Schack-Mulligen
3b004b06b0
Java: Minor perf fix for typePrefixContainsAux1.
2023-05-04 14:21:36 +02:00
Kasper Svendsen
29239939c7
Merge pull request #13010 from kaspersv/kaspersv/java-explicit-this-receivers
...
Java: Make implicit this receivers explicit
2023-05-04 13:06:41 +02:00
Mathias Vorreiter Pedersen
77001a070b
Merge branch 'main' into identity-consistency-check
2023-05-03 22:01:06 +01:00
Jami Cogswell
78661f4ec9
Java: remove hardcoded-jwt-key summaries
2023-05-03 16:09:30 -04:00
Jami Cogswell
2e683b3dd2
Java: add change note
2023-05-03 10:43:50 -04:00
Jami Cogswell
2224c5d9be
Java: remove url-open-stream kind from getInvalidModelKind
2023-05-03 10:08:50 -04:00
Jami Cogswell
917268e7e6
Java: activate the models in openstream query
2023-05-03 09:57:45 -04:00
Jami Cogswell
f8b39fda2e
Java: switch url-open-stream models to experimentalSinkModel
2023-05-03 09:11:24 -04:00
Ian Lynagh
b56b843d13
Merge pull request #12987 from github/post-release-prep/codeql-cli-2.13.1
...
Post-release preparation for codeql-cli-2.13.1
2023-05-03 13:12:10 +01:00
Kasper Svendsen
081085e128
Java: Make implicit this receivers explicit
2023-05-03 13:37:35 +02:00
Kasper Svendsen
e071a25653
Java, C#: Make implicit this receivers explicit
2023-05-03 13:09:00 +02:00
Tony Torralba
ec44aa2597
Add change note
2023-05-02 15:31:20 +02:00
