4170 Commits

Author	SHA1	Message	Date
Anders Schack-Mulligen	f353065d26	Java: Allow overloading for exact model matches.	2024-05-23 10:50:01 +02:00
Anders Schack-Mulligen	0f864081cb	Java: Remove source dispatch when there's an exact match from a manual model.	2024-05-23 10:50:00 +02:00
Dave Bartolomeo	ffe4c8c87b	Update all pack versions to 1.0.0	2024-05-22 13:39:08 -04:00
Anders Schack-Mulligen	de5c69d0a1	Merge pull request #16551 from aschackmull/java/model-fixes ... Java: Revise some jdk time-related models	2024-05-22 14:05:23 +02:00
Anders Schack-Mulligen	ba97c3623a	Java: Change most java.time.* df-generated taint models to neutrals.	2024-05-22 10:29:54 +02:00
Anders Schack-Mulligen	54f2316d00	Java: Add a neutral model.	2024-05-22 10:29:49 +02:00
Anders Schack-Mulligen	d82acf5866	Java: Add simple type sanitization to java/zipslip.	2024-05-22 10:23:30 +02:00
Owen Mansel-Chan	a8201a19ae	Merge pull request #16506 from github/smowton/admin/gradle-version-detection-change-note ... Java: Add change note for Gradle JDK version detection	2024-05-16 17:11:03 +01:00
Michael Nebel	b1329fd806	Merge pull request #16362 from michaelnebel/java/removelocalqueries ... Java: Remove local query variants.	2024-05-16 14:34:04 +02:00
Chris Smowton	e8d064e291	Java: Add change note for Gradle JDK version detection	2024-05-16 09:15:47 +01:00
github-actions[bot]	32e8b5c667	Post-release preparation for codeql-cli-2.17.3	2024-05-14 21:14:08 +00:00
github-actions[bot]	100166fa53	Release preparation for version 2.17.3	2024-05-14 19:23:18 +00:00
Chuan-kai Lin	99335e5f29	Merge pull request #16421 from github/cklin/java-entities-reorder ... Java: Use entities in reorder directives	2024-05-14 06:03:52 -07:00
Anders Schack-Mulligen	76e740bc1d	Java: Clean up some instances of getQualifiedName.	2024-05-13 13:06:44 +02:00
Ian Lynagh	4d54c09a6f	Java: Add changenote for dropping support for some old variables	2024-05-09 15:59:47 +01:00
Chuan-kai Lin	30b5d5092d	Java: Use entities in reorder directives	2024-05-03 11:16:31 -07:00
Michael Nebel	95ff5bae65	Merge pull request #16297 from michaelnebel/java/improveapitelemetry ... Java: Identify more APIs as supported in the telemetry queries.	2024-05-03 12:34:19 +02:00
Michael Nebel	c07bf65eb6	Update java/ql/lib/semmle/code/java/dataflow/FlowSources.qll ... Co-authored-by: Owen Mansel-Chan <62447351+owen-mc@users.noreply.github.com>	2024-05-03 11:13:05 +02:00
Michael Nebel	8def1c2c13	Java: Address review comments and some other code quality improvements.	2024-05-03 11:11:52 +02:00
Owen Mansel-Chan	83249cd9c2	Fix grammar in comment	2024-05-02 09:59:48 +01:00
Owen Mansel-Chan	16dcc0969b	Standardise comment explaining why extensible predicates must be defined	2024-05-01 22:00:01 +01:00
Owen Mansel-Chan	09e59ccf44	Name files with empty definitions of MaD extensible predicates to erowdmpty.model.yml	2024-05-01 21:39:38 +01:00
Michael Nebel	58bbfe694f	Java: Deprecate the content of ExecTaintedLocalQuery as this is unused.	2024-05-01 13:07:21 +02:00
Michael Nebel	d9c7401ea2	Java: Deprecate the local content of UrlRedirectLocalQuery and remove the local query variant.	2024-05-01 13:07:21 +02:00
Michael Nebel	ed7538d0b9	Java: Deprecate the local content of TaintedPathQuery and remove the local query variant.	2024-05-01 13:07:21 +02:00
Michael Nebel	5b89bd23c7	Java: Deprecate the content of SqlTaintedLocalQuery and remove the local query variant.	2024-05-01 13:07:21 +02:00
Michael Nebel	b68abab12a	Java: Deprecate the content of ResponseSplittingLocalQuery and remove local query variant.	2024-05-01 13:07:21 +02:00
Michael Nebel	d05c5e3d94	Java: Deprecate the content of NumericCastTaintedLocalQuery, remove the local query variant and update the non-local query variant.	2024-05-01 13:07:21 +02:00
Michael Nebel	301a6cc191	Java: Deprecate the content of ImproperValidationOrArray and remove local query variants.	2024-05-01 13:07:21 +02:00
Michael Nebel	acd0fa4b7b	Java: Deprecate the content of ExternallyControlledFormatStringLocalQuery and remove the externally controlled format string local query variant.	2024-05-01 13:07:21 +02:00
Michael Nebel	85a4dd0325	Java: Deprecate the local content of CommandLineQuery and remove the exec tainted local query variant.	2024-05-01 13:07:20 +02:00
Michael Nebel	072f19008a	Java: Deprecate the content of ArithmeticTaintedLocalQuery and remove the arithmetic tainted local query variant.	2024-05-01 08:59:51 +02:00
Michael Nebel	93988e5834	Java: Deprecate the content of XxeLocalQuery and remove the Xxe local query variant.	2024-05-01 08:59:50 +02:00
Michael Nebel	e0c2a43780	Java: Deprecate the content of XssLocalQuery and remove the Xss local query variant.	2024-05-01 08:59:50 +02:00
Henry Mercer	797f675285	Merge pull request #16365 from github/post-release-prep/codeql-cli-2.17.2 ... Post-release preparation for codeql-cli-2.17.2	2024-04-30 14:51:01 +01:00
Ian Lynagh	0715c4ac5a	Merge pull request #16341 from igfoo/igfoo/ODASA_BUILD_ERROR_DIR ... Java: Remove support for deprecated ODASA_BUILD_ERROR_DIR env var	2024-04-30 13:18:51 +01:00
github-actions[bot]	99928b82ed	Post-release preparation for codeql-cli-2.17.2	2024-04-30 12:15:35 +00:00
github-actions[bot]	5228d94d42	Release preparation for version 2.17.2	2024-04-30 10:25:51 +00:00
Ian Lynagh	676bcf39a5	Java: Remove support for deprecated ODASA_BUILD_ERROR_DIR env var	2024-04-29 18:02:28 +01:00
erik-krogh	800d7546fa	change all the change-notes to breaking	2024-04-26 17:17:23 +02:00
Michael Nebel	f95b33049e	Java: Improve the Api sources and sinks implementation.	2024-04-26 14:12:41 +02:00
erik-krogh	14d88eb3ce	add change-notes	2024-04-26 12:56:28 +02:00
Michael Nebel	9db32f4d26	Java: Identify more APIs as supported in the telemetry queries (as QL defined sinks).	2024-04-26 12:39:46 +02:00
Michael Nebel	acb2bbb2a3	Java: Identify more APIs as supported in the telemetry queries (as QL defined sources).	2024-04-26 12:39:46 +02:00
erik-krogh	fb376a1cfd	revert the deletion of explorationLimit. It'll be deleted along with the entire class later	2024-04-25 22:31:11 +02:00
erik-krogh	baa31e1469	delete outdated deprecations	2024-04-25 22:19:28 +02:00
Anders Schack-Mulligen	b2f09949df	Merge pull request #15599 from aschackmull/dataflow/fieldflowbranchlimit-v2 ... Dataflow: update fieldFlowBranchLimit semantics	2024-04-23 10:08:05 +02:00
Anders Schack-Mulligen	874d9d14bc	Merge pull request #16290 from aschackmull/java/oscheck-perf ... Java: Fix join-order.	2024-04-19 16:55:56 +02:00
Anders Schack-Mulligen	c45fd4080d	Java: Fix join-order. ... The TC was being fully materialised but all we need is unary reachability.	2024-04-19 15:41:35 +02:00
Alexander Eyers-Taylor	da3fa22cbd	Merge pull request #16228 from github/post-release-prep/codeql-cli-2.17.1 ... Post-release preparation for codeql-cli-2.17.1	2024-04-17 11:24:34 +01:00