Erik Krogh Kristensen
1eec067474
Merge pull request #11294 from erik-krogh/fileDoc
...
QL: improve the "this block-comment should have been a QLDoc"-query
2022-11-23 22:23:36 +01:00
Erik Krogh Kristensen
efdfc361be
Merge pull request #11396 from erik-krogh/jsTypo
...
JS: fix two typos
2022-11-23 22:18:43 +01:00
tiferet
03b8e649f1
Filter endpoints by confidence
...
Select endpoints to score at inference time base purely on their confidence level, and not on whether they fit the historical definition of endpoint filters.
2022-11-23 10:46:27 -08:00
Asger F
5a51d718c6
Update some comments referring to the package column
2022-11-23 14:44:03 +01:00
erik-krogh
2eb6b1adb3
JS: fix two typos
2022-11-23 14:38:12 +01:00
Henry Mercer
3b69821630
ATM: Add descriptions to ML-powered packs
2022-11-23 10:46:23 +00:00
Asger F
2e3413c9b8
JS: Merge package/type columns
2022-11-23 11:17:42 +01:00
Erik Krogh Kristensen
f67219965e
Merge pull request #11082 from erik-krogh/shellArr
...
JS: treat arrays that gets executed with shell:true as a sink for `js/shell-command-constructed-from-input`
2022-11-22 13:03:50 +01:00
Erik Krogh Kristensen
b2267c0e49
Merge pull request #11343 from erik-krogh/redundantAssignment
...
QL: add redundant-assignment query
2022-11-22 13:03:14 +01:00
Erik Krogh Kristensen
06386b2cdd
Merge pull request #11072 from erik-krogh/slicing
...
JS: poly-redos: don't sanitize calls through substring calls that just remove the start
2022-11-22 13:02:09 +01:00
erik-krogh
6b5cd9abc3
use RegExpTreeView insteaed of RegexTreeView in JS
2022-11-22 12:55:48 +01:00
erik-krogh
f9b775e4b8
do private imports of the deprecated Dep modules
2022-11-22 12:39:56 +01:00
Edoardo Pirovano
6c33ddcd47
Merge pull request #11349 from github/edoardo/2.11.4-mergeback
...
Merge `rc/3.8` into `main`
2022-11-21 18:08:27 +00:00
erik-krogh
64707f4f7b
remove redundant assignments
2022-11-21 17:45:05 +01:00
tiferet
1c9545e49a
Address comment from code review:
...
Make `SyntacticHeuristics` an explicit import
2022-11-21 08:00:31 -08:00
tiferet
8d22fd25f1
Suggestions from code review
2022-11-18 15:57:46 -08:00
github-actions[bot]
5b14ebf22a
Post-release preparation for codeql-cli-2.11.4
2022-11-18 11:26:00 +00:00
erik-krogh
ba2734909f
JS: don't use deprecated files in tests
2022-11-17 22:12:50 +01:00
erik-krogh
3635db8244
JS: delete the deprecated [queryName].qll files
2022-11-17 22:12:50 +01:00
erik-krogh
635b8772d7
JS: delete old deprecations
2022-11-17 22:12:50 +01:00
Chris Smowton
0219c2b02b
Copyedit Javascript changelog
2022-11-17 17:02:01 +00:00
Chris Smowton
80b2f0d3cd
Coopyedit Javascript changelog
2022-11-17 17:01:43 +00:00
github-actions[bot]
e105c13e77
Release preparation for version 2.11.4
2022-11-17 16:40:45 +00:00
Mauro Baluda
a7dc29bad4
Merge branch 'main' into main
2022-11-16 23:53:16 +01:00
Mauro Baluda
49f476d3b4
Update javascript/ql/lib/semmle/javascript/frameworks/Hapi.qll
...
Co-authored-by: Erik Krogh Kristensen <erik-krogh@github.com >
2022-11-16 23:53:07 +01:00
tiferet
4a1382925e
Remove some imports that are no longer used
2022-11-16 14:01:16 -08:00
tiferet
ccbf1ca2a9
Add a comment
2022-11-16 13:05:06 -08:00
tiferet
38c40a7192
isEffectiveSink can't be final because ExtractMisclassifiedEndpointFeatures overrides it.
2022-11-16 12:12:50 -08:00
tiferet
8fee9cb0d5
Fix CodeQL warnings
2022-11-16 12:06:52 -08:00
tiferet
c2035e85d2
Be explicit in requiring that each ATM config set its endpoint type.
2022-11-16 11:55:23 -08:00
tiferet
0fd013f9fd
Update the reason names in FilteredTruePositives.expected.
...
This is needed because we changed the names of three endpoint filters that were all called "not a direct argument to a likely external library call or a heuristic sink" in order to disambiguate them (fc56c5a022
2022-11-16 11:54:10 -08:00
tiferet
eab270eb84
Move the definitions of isEffectiveSink and getAReasonSinkExcluded to the base class.
...
They can now be implemented generically for all sink types.
2022-11-16 11:47:24 -08:00
tiferet
fc56c5a022
Implement the type-specific endpoint filters as EndpointCharacteristics.
...
Also disambiguate three filters from three different sink types that all have the same name, "not a direct argument to a likely external library call or a heuristic sink".
2022-11-16 11:14:25 -08:00
erik-krogh
76c6943159
add stats for @satisfies_expr
2022-11-16 13:48:41 +01:00
erik-krogh
fe49e41d7b
JS: convert some block-comments that could be QLDoc to QLDoc
2022-11-16 13:45:35 +01:00
erik-krogh
9eaeaf7322
ATM: convert some block-comments that could be QLDoc to QLDoc
2022-11-16 13:41:52 +01:00
Mauro Baluda
8bf0bbb715
code generalization
...
Co-authored-by: Erik Krogh Kristensen <erik-krogh@github.com >
2022-11-16 12:06:23 +01:00
Mauro Baluda
798b03f29d
code generalization
...
Co-authored-by: Erik Krogh Kristensen <erik-krogh@github.com >
2022-11-16 12:06:07 +01:00
Mauro Baluda
784475dd66
Merge branch 'main' into main
2022-11-16 11:06:27 +01:00
Mauro Baluda
84cb59b942
Create 2022-11-08-hapi-glue.md
2022-11-16 11:05:23 +01:00
tiferet
13cb0ab554
Fix CodeQL warning
2022-11-15 17:32:30 -08:00
tiferet
2ecdfd1ff6
Delete some code that's no longer in use
2022-11-15 17:29:03 -08:00
tiferet
fedb98ddb5
Implement the standard getAReasonSinkExcluded using StandardEndpointFilterCharacteristics
2022-11-15 17:22:00 -08:00
tiferet
cf4e37a0ab
Implement the standard endpoint filters as EndpointCharacteristics
2022-11-15 17:20:20 -08:00
tiferet
cb632b3534
Delete the file ExtractEndpointData.expected which was leftover in the last PR
2022-11-15 17:11:34 -08:00
Mauro Baluda
ec04f0c88f
hapi/glue tests
2022-11-15 23:45:27 +01:00
erik-krogh
8cb68b79c1
bump extractor version
2022-11-15 22:09:09 +01:00
erik-krogh
b0b5761a8c
update TS from 4.9.2-rc to 4.9.3
2022-11-15 22:08:54 +01:00
erik-krogh
364336e22a
add downgrade script
2022-11-15 22:07:25 +01:00
erik-krogh
1f90f7dd4d
add upgrade script
2022-11-15 22:07:25 +01:00
