Jami Cogswell
d6d2a213e7
Java: add change note
2024-07-19 18:19:37 -04:00
Jami Cogswell
f3e5b55cc4
Java: add path injection sinks for Property.setFile and Property.setResource
2024-07-19 18:04:17 -04:00
Michael Nebel
2796597d1a
Code quality improvements.
2024-07-19 09:36:17 +02:00
Ed Minnix
0990a370c7
Convert QL classes for Lastaflute to MaD
2024-07-18 17:41:06 -04:00
Ed Minnix
9713551448
Missing QLDoc
2024-07-18 17:41:05 -04:00
Ed Minnix
4fa45bb81c
Change note
2024-07-18 17:41:03 -04:00
Ed Minnix
3bd330423d
Add some models for the org.lastaflute.web library
...
Methods annotated `@Execute` are handlers for URLs. Therefore, the
parameters of the methods annotated with the
`org.lastaflute.web.Execute` annotation are likely either URL parameters
or forms.
2024-07-18 17:41:00 -04:00
Michael Nebel
ca4bd0c606
C#/Java/Go: Neutrals are split into seperate classes.
2024-07-18 16:29:38 +02:00
Jami
39f0288e09
Merge pull request #16964 from jcogs33/jcogs33/add-toByteArray-summaries
...
Java: add `IOUtils.toByteArray` summaries
2024-07-16 17:03:30 -04:00
Owen Mansel-Chan
e2356d9820
Merge pull request #16914 from owen-mc/java/android-app-detection
...
Java: Improve Android app detection
2024-07-16 21:52:43 +01:00
Jami
a73170df49
Merge branch 'main' into jcogs33/add-toByteArray-summaries
2024-07-16 10:46:36 -04:00
Ian Lynagh
777cc357ee
Kotlin: Support 2.0.20
2024-07-16 15:07:30 +01:00
Owen Mansel-Chan
db6cd1877c
Accept suggested QLDoc fix
...
Co-authored-by: Chris Smowton <smowton@github.com >
2024-07-16 12:24:42 +01:00
Anders Schack-Mulligen
938f46b888
Java: Remove superfluous clone models.
2024-07-16 11:11:53 +02:00
Anders Schack-Mulligen
12d6875cc4
Java: Replace the MaD Object.clone() models with a non-aliasing value step.
2024-07-16 11:11:50 +02:00
Jami
b70a4c839c
Merge branch 'main' into jcogs33/add-toByteArray-summaries
2024-07-15 12:35:05 -04:00
Jami Cogswell
7f34dd1e0a
Java: update change note
2024-07-15 12:15:02 -04:00
Jami Cogswell
cd82ada239
Java: add manual models for all overloads of IOUtils.toByteArray
2024-07-15 12:12:31 -04:00
Anders Schack-Mulligen
da5abc8321
Dataflow: Replace MakeSets with QlBuiltins::InternSets.
2024-07-15 13:35:57 +02:00
Ian Lynagh
a951718f2e
Merge pull request #16955 from igfoo/igfoo/kotlin-ga
...
Kotlin: Kotlin support is now out of beta, and generally available
2024-07-15 11:30:20 +01:00
am0o0
1d1c476674
update tests and use TaintFlowTestArgString
...
add stubs
add missed sink models
2024-07-13 16:58:51 +02:00
Owen Mansel-Chan
b7a5252cb0
Refactor inAndroidApplication
2024-07-13 07:35:02 +01:00
Owen Mansel-Chan
8dcef8223f
Tweak change note
2024-07-13 07:31:18 +01:00
Jami Cogswell
ab9a6faaf3
Java: add change note
2024-07-11 15:10:11 -04:00
Jami Cogswell
77a8ba934c
Java: add path-injection sink for hudson.FilePath.exists()
2024-07-11 15:03:40 -04:00
Jami Cogswell
5cf05ec863
Java: add change note
2024-07-11 13:40:50 -04:00
Jami Cogswell
4a1497f367
Java: add IOUtils.toByteArray(InputStream) summary
2024-07-11 13:33:08 -04:00
Ian Lynagh
5c97a5f667
Kotlin: Kotlin support is now out of beta, and generally available
2024-07-11 16:11:40 +01:00
Ian Lynagh
311799c798
Merge pull request #16899 from igfoo/igfoo/semmle_dist
...
Java/Kotlin: Remove legacy $SEMMLE_DIST support
2024-07-11 12:48:53 +01:00
Owen Mansel-Chan
b83147fa44
Add links on threat models to change note
2024-07-08 15:39:27 +01:00
Owen Mansel-Chan
8241d0b7ef
Update QLDoc for ReverseDnsUserInput
2024-07-08 15:33:39 +01:00
github-actions[bot]
ae3aba061b
Post-release preparation for codeql-cli-2.18.0
2024-07-08 13:30:13 +00:00
Angela P Wen
dc20b0d19e
Merge pull request #16921 from github/release-prep/2.18.0
...
Release preparation for version 2.18.0
2024-07-08 13:12:57 +02:00
Chris Smowton
d9573596c7
Merge pull request #16810 from smowton/smowton/feature/java-low-db-quality-query
...
Java: add diagnostic query indicating low database quality
2024-07-08 12:06:42 +01:00
github-actions[bot]
b0d6778652
Release preparation for version 2.18.0
2024-07-08 09:10:51 +00:00
Owen Mansel-Chan
de5fc4e609
Add change notes
2024-07-07 00:24:27 +01:00
Owen Mansel-Chan
5347770608
Update Android app detection
2024-07-07 00:24:25 +01:00
Owen Mansel-Chan
9c82966022
Move detection of Android app to one place
2024-07-05 23:47:56 +01:00
Ian Lynagh
ea16f72c6f
Java: Add changenote for dropping $SEMMLE_DIST support
2024-07-03 17:12:04 +01:00
Tom Hvitved
4ae8720930
SSA: Add BasicBlock.{getNode/1,length/0} to the input signature
2024-07-03 11:32:35 +02:00
am0o0
7e5f2e2a48
experimentalSinkModel to sinkModel, remove one path injection sink that already exist before
2024-07-03 08:55:12 +02:00
Arthur Baars
b12b33c8f9
Merge remote-tracking branch 'upstream/main' into 'rc/3.14'
2024-06-28 19:50:35 +02:00
Jami Cogswell
85a1e1a972
Java: update change note date
2024-06-27 22:11:01 -04:00
Chris Smowton
567ba9f9c3
Change note
2024-06-27 09:57:30 +01:00
Jami
901245ae3d
Merge branch 'main' into jcogs33/unsafe-url-forward-promotion-resource-and-file-methods
2024-06-26 21:57:07 -04:00
github-actions[bot]
fd385736e6
Post-release preparation for codeql-cli-2.17.6
2024-06-25 06:39:45 +00:00
Owen Mansel-Chan
9e25279cb8
Change category in change note to "majorAnalysis"
2024-06-24 21:23:51 +01:00
Owen Mansel-Chan
059ef42f41
Add change note
2024-06-24 21:23:49 +01:00
Owen Mansel-Chan
91db2b6c9c
Make new threat model kind "reverse-dns"
2024-06-24 21:23:46 +01:00
github-actions[bot]
e32a587078
Release preparation for version 2.17.6
2024-06-24 14:33:10 +00:00
