Taus
e5b17af9b5
Java: Fix bad tool output
2023-06-14 12:16:44 +02:00
Ian Lynagh
36e8441ed7
Merge pull request #13427 from igfoo/igfoo/references
...
Kotlin: Avoid using deprecated APIs
2023-06-14 11:15:35 +01:00
Jean Helie
209f3e26d4
Merge pull request #13239 from github/tausbn/automodel-application-mode
...
Java: Add QL support for automodel application mode
2023-06-14 11:42:26 +02:00
Tony Torralba
8bafc22add
Replace open-url sink kinds with request-forgery
2023-06-14 09:59:59 +02:00
Tony Torralba
73d2ab7d66
Add change note
2023-06-14 09:58:30 +02:00
Tony Torralba
686c35e210
Add autogenerated models
2023-06-14 09:58:30 +02:00
Anders Schack-Mulligen
1a4fca334f
Merge pull request #13273 from aschackmull/dataflow/summarynode-refactor
...
Dataflow: Refactor FlowSummaryImpl to synthesize nodes independently from DataFlow::Node.
2023-06-14 09:38:36 +02:00
Taus
b860b21ced
Update MaD Declarations after Triage
2023-06-13 16:50:58 +02:00
Anders Schack-Mulligen
2d616d494e
C#/Ruby: Add fields as per review comments.
2023-06-13 11:26:30 +02:00
Jeroen Ketema
c3ba206b6a
Merge pull request #13346 from jketema/inline-2
...
Update inline expectation tests to use parameterized module
2023-06-13 10:10:55 +02:00
Tony Torralba
ffe67689ec
Merge branch 'main' into atorralba/java/command-injection-mad-sinks
2023-06-13 09:27:33 +02:00
Tony Torralba
29d4b6fadc
Re-add public classes that shouldn't be removed yet
2023-06-13 09:24:27 +02:00
Tony Torralba
2fd2c434f2
Apply suggestions from code review
...
Co-authored-by: Jami <57204504+jcogs33@users.noreply.github.com >
2023-06-13 09:24:15 +02:00
Anders Schack-Mulligen
eec012d308
Java: Fix test
2023-06-12 13:18:13 +02:00
github-actions[bot]
a628384d83
Add changed framework coverage reports
2023-06-12 00:18:38 +00:00
Jami Cogswell
9abe3e3da4
Shared: use a module as input to 'KindValidation'
2023-06-09 14:35:37 -04:00
Ian Lynagh
d3941ae935
Kotlin: Avoid using deprecated APIs
2023-06-09 18:14:09 +01:00
Anders Schack-Mulligen
97b2bdaa9f
Java: Fix types of summary parameter nodes.
2023-06-09 15:39:28 +02:00
Anders Schack-Mulligen
254d60c826
Dataflow: Refactor FlowSummaryImpl to synthesize nodes independently from DataFlow::Node.
2023-06-09 15:27:17 +02:00
Anders Schack-Mulligen
59636c43ca
Dataflow: Rename two private predicates.
2023-06-09 15:27:17 +02:00
Stephan Brandauer
b38bc52019
Java: fix bug in ExcludedFromModeling Characteristic
2023-06-09 14:57:56 +02:00
Stephan Brandauer
1ae2fee309
Java: Update java/ql/lib/ext/okhttp3.model.yml
...
Co-authored-by: Tony Torralba <atorralba@users.noreply.github.com >
2023-06-09 13:48:16 +02:00
Stephan Brandauer
44785b72ce
Java: Update java/ql/lib/ext/okhttp3.model.yml
...
Co-authored-by: Tony Torralba <atorralba@users.noreply.github.com >
2023-06-09 13:46:09 +02:00
Anders Schack-Mulligen
1b7bbf6320
Merge pull request #13083 from aschackmull/dataflow/typestrengthen
...
Dataflow: Strengthen tracked types.
2023-06-09 13:23:30 +02:00
Jeroen Ketema
49993b023e
Java: Rewrite inline expectation tests to use parameterized module
2023-06-09 10:42:17 +02:00
Tony Torralba
0cef5651e2
Merge pull request #13417 from github/workflow/coverage/update
...
Update CSV framework coverage reports
2023-06-09 09:27:03 +02:00
Anders Schack-Mulligen
44b09507ab
Merge pull request #13408 from aschackmull/java/loginjection-perf
...
Java: Add more negation context to reduce string ops and improve perf.
2023-06-09 08:44:27 +02:00
Anders Schack-Mulligen
68f1e40370
Java/C#: Add change notes.
2023-06-09 08:37:36 +02:00
Anders Schack-Mulligen
85d6b44d92
Java: Fix test output.
2023-06-09 08:37:36 +02:00
Anders Schack-Mulligen
d230509905
Dataflow: Address review comments.
2023-06-09 08:37:36 +02:00
Anders Schack-Mulligen
95afd551ff
Java: Fix qltest
2023-06-09 08:37:36 +02:00
Anders Schack-Mulligen
4399138c82
Dataflow: Fix QL4QL alert.
2023-06-09 08:37:36 +02:00
Anders Schack-Mulligen
8a584b78ac
Dataflow: Enable type strengthening in partial flow.
2023-06-09 08:37:36 +02:00
Anders Schack-Mulligen
441ccef6c4
Dataflow: Bugfix, use arg type rather than strengthened param type.
2023-06-09 08:37:36 +02:00
Anders Schack-Mulligen
a0a9d30286
Java: Fix qltests.
2023-06-09 08:37:35 +02:00
Anders Schack-Mulligen
4633abe19e
Java: Autoformat
2023-06-09 08:37:35 +02:00
Anders Schack-Mulligen
ad461a87b4
Dataflow: Strengthen tracked types.
2023-06-09 08:37:35 +02:00
Anders Schack-Mulligen
1d87f0793b
Dataflow: Minor refactor.
2023-06-09 08:37:35 +02:00
github-actions[bot]
81b08b4399
Add changed framework coverage reports
2023-06-09 00:18:12 +00:00
Jami Cogswell
da58b2afc8
Shared: move shared file to 'shared' folder and add parameterized module for 'getInvalidModelKind'
2023-06-08 20:05:27 -04:00
Jeroen Ketema
bff11c3d23
Apply suggestions from code review
2023-06-08 22:33:50 +02:00
github-actions[bot]
e4be303a23
Release preparation for version 2.13.4
2023-06-08 19:57:37 +00:00
Tony Torralba
abb775c616
Merge pull request #13409 from atorralba/atorralba/java/fix-gson-models
...
Java: Fix more problems in the Gson models
2023-06-08 17:36:40 +02:00
Ian Lynagh
22fe055e53
Kotlin: Tweak our JSON escaping
...
We were escaping '/', but I don't think there is any need to do so. It
just happens to have a nice escape in the spec. Escaping it might
filenames annoying to work with.
I've also added escaping for the other control characters that we're
meant to escape.
2023-06-08 15:20:30 +01:00
Tony Torralba
0e242cba7e
Update java/ql/lib/ext/retrofit2.model.yml
2023-06-08 14:59:10 +02:00
Tony Torralba
4608481d7b
Java: Fix more problems in the Gson models
...
Found during type strengthening work by @aschackmull
2023-06-08 14:53:09 +02:00
Anders Schack-Mulligen
5a2ac1b5ca
Java: Add more negation context to reduce string ops and improve perf.
2023-06-08 14:04:57 +02:00
Anders Schack-Mulligen
dabb4dd643
Java: Improve join-order for FunctionalInterface.
2023-06-08 13:02:54 +02:00
Stephan Brandauer
8f697ac1ee
Java: fix broken MaD export format
2023-06-08 12:02:50 +02:00
Stephan Brandauer
c6f10519fa
Merge branch 'main' into java/update-mad-decls-after-triage-2023-06-08T08-51-47
2023-06-08 12:00:07 +02:00
