Owen Mansel-Chan
|
8dcef8223f
|
Tweak change note
|
2024-07-13 07:31:18 +01:00 |
|
Jami Cogswell
|
ab9a6faaf3
|
Java: add change note
|
2024-07-11 15:10:11 -04:00 |
|
Jami Cogswell
|
77a8ba934c
|
Java: add path-injection sink for hudson.FilePath.exists()
|
2024-07-11 15:03:40 -04:00 |
|
Jami Cogswell
|
5cf05ec863
|
Java: add change note
|
2024-07-11 13:40:50 -04:00 |
|
Jami Cogswell
|
4a1497f367
|
Java: add IOUtils.toByteArray(InputStream) summary
|
2024-07-11 13:33:08 -04:00 |
|
Ian Lynagh
|
5c97a5f667
|
Kotlin: Kotlin support is now out of beta, and generally available
|
2024-07-11 16:11:40 +01:00 |
|
Ian Lynagh
|
311799c798
|
Merge pull request #16899 from igfoo/igfoo/semmle_dist
Java/Kotlin: Remove legacy $SEMMLE_DIST support
|
2024-07-11 12:48:53 +01:00 |
|
Owen Mansel-Chan
|
b83147fa44
|
Add links on threat models to change note
|
2024-07-08 15:39:27 +01:00 |
|
Owen Mansel-Chan
|
8241d0b7ef
|
Update QLDoc for ReverseDnsUserInput
|
2024-07-08 15:33:39 +01:00 |
|
github-actions[bot]
|
ae3aba061b
|
Post-release preparation for codeql-cli-2.18.0
|
2024-07-08 13:30:13 +00:00 |
|
Angela P Wen
|
dc20b0d19e
|
Merge pull request #16921 from github/release-prep/2.18.0
Release preparation for version 2.18.0
|
2024-07-08 13:12:57 +02:00 |
|
Chris Smowton
|
d9573596c7
|
Merge pull request #16810 from smowton/smowton/feature/java-low-db-quality-query
Java: add diagnostic query indicating low database quality
|
2024-07-08 12:06:42 +01:00 |
|
github-actions[bot]
|
b0d6778652
|
Release preparation for version 2.18.0
|
2024-07-08 09:10:51 +00:00 |
|
Owen Mansel-Chan
|
de5fc4e609
|
Add change notes
|
2024-07-07 00:24:27 +01:00 |
|
Owen Mansel-Chan
|
5347770608
|
Update Android app detection
|
2024-07-07 00:24:25 +01:00 |
|
Owen Mansel-Chan
|
9c82966022
|
Move detection of Android app to one place
|
2024-07-05 23:47:56 +01:00 |
|
Ian Lynagh
|
ea16f72c6f
|
Java: Add changenote for dropping $SEMMLE_DIST support
|
2024-07-03 17:12:04 +01:00 |
|
Tom Hvitved
|
4ae8720930
|
SSA: Add BasicBlock.{getNode/1,length/0} to the input signature
|
2024-07-03 11:32:35 +02:00 |
|
am0o0
|
7e5f2e2a48
|
experimentalSinkModel to sinkModel, remove one path injection sink that already exist before
|
2024-07-03 08:55:12 +02:00 |
|
Arthur Baars
|
b12b33c8f9
|
Merge remote-tracking branch 'upstream/main' into 'rc/3.14'
|
2024-06-28 19:50:35 +02:00 |
|
Jami Cogswell
|
85a1e1a972
|
Java: update change note date
|
2024-06-27 22:11:01 -04:00 |
|
Chris Smowton
|
567ba9f9c3
|
Change note
|
2024-06-27 09:57:30 +01:00 |
|
Jami
|
901245ae3d
|
Merge branch 'main' into jcogs33/unsafe-url-forward-promotion-resource-and-file-methods
|
2024-06-26 21:57:07 -04:00 |
|
github-actions[bot]
|
fd385736e6
|
Post-release preparation for codeql-cli-2.17.6
|
2024-06-25 06:39:45 +00:00 |
|
Owen Mansel-Chan
|
9e25279cb8
|
Change category in change note to "majorAnalysis"
|
2024-06-24 21:23:51 +01:00 |
|
Owen Mansel-Chan
|
059ef42f41
|
Add change note
|
2024-06-24 21:23:49 +01:00 |
|
Owen Mansel-Chan
|
91db2b6c9c
|
Make new threat model kind "reverse-dns"
|
2024-06-24 21:23:46 +01:00 |
|
github-actions[bot]
|
e32a587078
|
Release preparation for version 2.17.6
|
2024-06-24 14:33:10 +00:00 |
|
Anders Schack-Mulligen
|
8c23e21073
|
Dataflow: Cache compatibleTypes.
|
2024-06-24 13:35:48 +02:00 |
|
Michael Nebel
|
cd9d58fdc8
|
Merge pull request #16772 from michaelnebel/java/taintedpermissionthreatmodel
Java: Opt-in `java/tainted-permissions-check` to threat models.
|
2024-06-18 10:54:28 +02:00 |
|
Michael Nebel
|
197cdab43d
|
Merge pull request #16752 from michaelnebel/shared/sourcesinkcallables
C#/Java: Add some (shared) helper classes for Neutrals, Sources and Sink
|
2024-06-17 14:58:27 +02:00 |
|
Anders Schack-Mulligen
|
96b6ddefe0
|
Merge pull request #16751 from aschackmull/java/sndlevelscope-fix
Java: Calculate 2nd level scopes for implicit instance accesses.
|
2024-06-17 13:10:46 +02:00 |
|
Michael Nebel
|
833b4f90bf
|
Java: Make source and sink callable adapters.
|
2024-06-17 12:53:08 +02:00 |
|
Anders Schack-Mulligen
|
b8b95fd81d
|
Java: Add change note.
|
2024-06-17 11:46:54 +02:00 |
|
Michael Nebel
|
327dab69d0
|
Java: Opt-in the tainted permissions check query to threat models.
|
2024-06-17 11:02:08 +02:00 |
|
Owen Mansel-Chan
|
6cfd9458b0
|
Add change note
|
2024-06-14 14:05:25 +01:00 |
|
Owen Mansel-Chan
|
7a13c31021
|
Exclude loopback address from reverse DNS source
|
2024-06-14 14:05:01 +01:00 |
|
Paolo Tranquilli
|
f9db7864e1
|
Change note: reword
|
2024-06-13 18:04:23 +02:00 |
|
Paolo Tranquilli
|
0198806658
|
Merge branch 'main' into redsun82/kotlin
|
2024-06-13 16:29:13 +02:00 |
|
Anders Schack-Mulligen
|
b47831af14
|
Java: Calculate 2nd level scopes for implicit instance accesses.
|
2024-06-13 13:57:18 +02:00 |
|
Paolo Tranquilli
|
11c37734c3
|
Kotlin: add change note for having fixed kotlin QL tests in release
|
2024-06-13 09:49:39 +02:00 |
|
Mathias Vorreiter Pedersen
|
67b327a0f7
|
Merge pull request #16725 from MathiasVP/rc-3.14-mergeback
Mergeback from `rc/3.14`
|
2024-06-11 17:37:40 +01:00 |
|
Mathias Vorreiter Pedersen
|
3351b9547d
|
Merge branch 'rc/3.14' into rc-3.14-mergeback
|
2024-06-11 16:21:08 +01:00 |
|
Mauro Baluda
|
29e3816412
|
Apply suggestions from code review
Address reviewiew comments
Co-authored-by: Tony Torralba <atorralba@users.noreply.github.com>
|
2024-06-11 12:05:14 +02:00 |
|
Mauro Baluda
|
e9dba59f11
|
Merge branch 'main' into main
|
2024-06-10 19:57:00 +02:00 |
|
github-actions[bot]
|
8a25081a0e
|
Post-release preparation for codeql-cli-2.17.5
|
2024-06-10 15:33:08 +00:00 |
|
Tony Torralba
|
7336dd1ae5
|
Merge pull request #16482 from grakshith/rakshith/tune-java-crypto
Java: Add RSA/ECB/OEAP ciphers to the list of secure algorithms
|
2024-06-10 17:27:35 +02:00 |
|
github-actions[bot]
|
877bfa2468
|
Release preparation for version 2.17.5
|
2024-06-10 13:40:39 +00:00 |
|
Mauro Baluda
|
1d44f45be2
|
Update org.apache.commons.io.model.yml
|
2024-06-10 12:03:57 +02:00 |
|
Mauro Baluda
|
71505f4003
|
Added more org.apache.commons.io.FileUtils-related sinks to the path injection query.
|
2024-06-10 11:29:51 +02:00 |
|