Tamás Vajk
b4fdd4e222
Merge pull request #15808 from tamasvajk/buildless/package-source-telemetry
...
C#: Add package source error count to DB
2024-03-05 17:20:38 +01:00
Tamas Vajk
2b99b83857
C#: Add package source error count to DB
2024-03-05 15:32:08 +01:00
Tom Hvitved
bd7b2c4cc6
Update expected output
2024-03-05 10:44:13 +01:00
Tom Hvitved
a92e394a7c
C#: Variable capture follow-up
2024-03-04 19:36:30 +01:00
github-actions[bot]
a67218a027
Release preparation for version 2.16.4
2024-03-04 17:42:08 +00:00
Tom Hvitved
357638baa8
C#: Update variable capture test
2024-03-04 14:39:48 +01:00
Michael Nebel
11142df4d0
Merge pull request #15764 from michaelnebel/csharp/csharptracerrunapp
...
C#: Don't inject compiler flags when dotnet is used to execute an application.
2024-03-04 08:13:11 +01:00
Ed Minnix
59b14f6a69
Fix test expectations (merge conflict)
2024-03-01 12:52:03 -05:00
Ed Minnix
45e1be875c
Fix test expectations
2024-03-01 12:52:00 -05:00
Ed Minnix
4dc605354c
Second-order SQL injection
2024-03-01 12:51:59 -05:00
Ed Minnix
1ba3efb111
Change note updates
2024-03-01 12:51:58 -05:00
Ed Minnix
e84a509976
Modify test cases
2024-03-01 12:51:56 -05:00
Ed Minnix
c3671c7625
Fix change note
2024-03-01 12:51:55 -05:00
Ed Minnix
be3c1ed0be
Change note
2024-03-01 12:51:53 -05:00
Ed Minnix
c95abd47ce
Remove stored variants of queries
2024-03-01 12:51:51 -05:00
Michael Nebel
a97510a2fc
Merge pull request #15419 from github/egregius313/csharp/dataflow/threat-modeling/refactor-to-threatmodelflowsource
...
C#: Refactor C# queries to use `ThreatModelFlowSource` instead of `RemoteFlowSource`
2024-03-01 14:40:40 +01:00
Tom Hvitved
6d9f3d4a3e
C#: Add build_modes: none to codeql-extractor.yml
2024-03-01 13:54:57 +01:00
Michael Nebel
ac4ad0cbc0
C#: Add test where build should not be interpreted as a SDK sub command.
2024-03-01 13:24:04 +01:00
Michael Nebel
24572848f3
C#: Move helper function to other repo to allow sharing.
2024-03-01 13:24:04 +01:00
Michael Nebel
07fc84de8c
C#: Don't inject compiler flags when dotnet is used to execute an application.
2024-03-01 13:24:04 +01:00
Tom Hvitved
cb128da5aa
Merge pull request #15762 from hvitved/csharp/fetch-dotnet-dependency-fetching
...
C#: Fetch .NET in dependency manager instead of autobuilder
2024-03-01 13:19:20 +01:00
Tom Hvitved
20ff7def73
Address review comment
2024-03-01 12:54:47 +01:00
Tom Hvitved
a8468a6178
C#: Better handle multiple global.json files
2024-02-29 20:27:52 +01:00
Ed Minnix
f488f23a48
Add LocalFlowSource back to UncontrolledFormatString
2024-02-29 12:06:59 -05:00
Edward Minnix III
89bdb7f437
Remove discussion of local flow in change note
...
Co-authored-by: Michael Nebel <michaelnebel@github.com >
2024-02-29 12:03:19 -05:00
Ed Minnix
86ceeebd89
Change handling of LocalSource in queries
...
1. Change `LocalSource` to extend `DataFlow::Node`, thus removed from
the definiton of `Source`
2. Add a private class `AddLocalSource` which extends `Source`. This
allows us to currently preserve the inclusion of local sources, while
making it easier to remove it in the future.
2024-02-29 12:03:17 -05:00
Ed Minnix
3563c7ef03
Modify deprecated RemoteSource classes to extend DataFlow::Node directly.
...
Since `ThreatModelFlowSource` contains `RemoteFlowSource` by default, we
can safely remove the `RemoteSource` from the default of the queries.
2024-02-29 12:03:16 -05:00
Ed Minnix
e64826db1b
Add threat-model configuration for UncontrolledFormatString test
2024-02-29 12:03:14 -05:00
Ed Minnix
af749e221b
Remove commented out code
2024-02-29 12:03:13 -05:00
Ed Minnix
f237d2aeda
Refactor to use ThreatModelFlowSource
2024-02-29 12:03:12 -05:00
Ed Minnix
5198f52351
Add references to changed queries in change note
2024-02-29 12:03:11 -05:00
Ed Minnix
22e8da2928
Update change note date
2024-02-29 12:03:09 -05:00
Ed Minnix
eb81946adc
Change note changes to mention local sources as well
2024-02-29 12:03:08 -05:00
Ed Minnix
b4dabee770
Remove unnecessary flowsources.Remote imports
...
Since `FlowSources` now re-exports `Remote`, these can be safely removed.
2024-02-29 12:03:07 -05:00
Ed Minnix
434fa20646
Refactor to using ThreatModelFlowSource
2024-02-29 12:03:05 -05:00
Ed Minnix
1086abca63
Refactor to using ThreatModelFlowSource
2024-02-29 12:03:04 -05:00
Ed Minnix
b76795fd28
Refactor to using ThreatModelFlowSource
2024-02-29 12:03:03 -05:00
Ed Minnix
fd3738b10e
Refactor to using SourceNode::getSourceType
2024-02-29 12:03:01 -05:00
Ed Minnix
31d4d0ca57
Move getSourceType to SourceNode
2024-02-29 12:03:00 -05:00
Ed Minnix
75772664f2
Change note
2024-02-29 12:02:58 -05:00
Ed Minnix
f388a0f10c
Deprecate direct uses of RemoteFlowSource and replace with ThreatModelFlowSource
2024-02-29 12:02:57 -05:00
Ed Minnix
bd0137a721
Deprecated direct use of RemoteFlowSource and use ThreatModelFlowSource instead
2024-02-29 12:02:55 -05:00
Tom Hvitved
62382fc5a2
C#: Fetch .NET in dependency manager instead of autobuilder
2024-02-29 11:23:36 +01:00
Michael Nebel
14d046ef18
Merge pull request #15710 from michaelnebel/csharp/refreadonlyparameters
...
C# 12: Ref readonly parameters.
2024-02-29 09:59:12 +01:00
Tom Hvitved
c6426d8858
C#: Move BuildScript.cs and friends to Semmle.Util
2024-02-29 08:49:20 +01:00
Tom Hvitved
297a17975d
Merge pull request #15665 from hvitved/csharp/variable-capture
...
C#: Adopt shared variable capture library
2024-02-28 15:13:03 +01:00
Michael Nebel
9563705eb3
C#: Add change note.
2024-02-28 14:53:15 +01:00
Michael Nebel
f6b1d1f235
C#: Add upgrade and downgrade scripts.
2024-02-28 14:09:59 +01:00
Michael Nebel
00d311205b
C#: Update expected test output.
2024-02-28 13:44:28 +01:00
Michael Nebel
794bc44a41
C#: Add test query predicate for ref readonly parameters.
2024-02-28 13:44:28 +01:00
