Edward Minnix III
e066c52ac6
Update change note
...
Co-authored-by: Owen Mansel-Chan <62447351+owen-mc@users.noreply.github.com >
2024-08-20 12:33:38 -04:00
Chris Smowton
fc301206d1
Change note
2024-08-20 17:11:58 +01:00
Chris Smowton
3acab640b2
Add configure-baseline integration test
2024-08-20 17:07:09 +01:00
Chris Smowton
15b5bcc67c
Output to stdout, not stderr
2024-08-20 17:01:54 +01:00
Chris Smowton
8b9617cd38
Update bazel build files
2024-08-20 15:56:28 +01:00
Chris Smowton
ea3e5c8a99
Clarify comment
2024-08-20 15:56:27 +01:00
Chris Smowton
f1f6f9b580
Share vendor-dir extraction logic between extractor and configure-baseline script
2024-08-20 15:56:26 +01:00
Chris Smowton
22802fd41f
Improve struct naming
2024-08-20 15:56:25 +01:00
Chris Smowton
5d34dbf2c2
Remove unnecessary batch script flag
2024-08-20 15:56:24 +01:00
Chris Smowton
624d2b83c0
Tidy comments
2024-08-20 15:56:23 +01:00
Chris Smowton
21366dd502
Go / configure-baseline: account for multiple vendor directories and the CODEQL_EXTRACTOR_GO_EXTRACT_VENDOR_DIRS setting
...
Our existing configure-baseline scripts would give the wrong result if a `vendor` directory wasn't at the root of the repository, or if the `CODEQL_EXTRACTOR_GO_EXTRACT_VENDOR_DIRS` variable was set to `true` indicating the user wants their vendored code scanned.
Here I replace the shell scripts that implemented the very simplest behaviour with a small Go program.
2024-08-20 15:56:22 +01:00
Owen Mansel-Chan
30f8d6e4ff
Allow MaD models for XSS sinks using "html-injection" or "js-injection"
2024-08-20 14:04:23 +01:00
Anders Schack-Mulligen
993bfee096
Merge pull request #17259 from aschackmull/dataflow/remove-srcsink-grouping
...
Dataflow: Remove src/sink grouping feature
2024-08-20 14:42:33 +02:00
Anders Schack-Mulligen
8470e91c16
Legacy Dataflow: Sync.
2024-08-20 10:07:57 +02:00
Ed Minnix
0361b5c342
Fix AllocationSizeOverflow expectations
2024-08-19 22:31:29 -04:00
Ed Minnix
bb1cf4f51f
Fix tests
2024-08-19 20:14:23 -04:00
Ed Minnix
e3ffbbe3b7
Fix extensible name in io/fs models
2024-08-19 19:02:07 -04:00
Ed Minnix
442026cc9d
Fix test results
2024-08-19 17:23:32 -04:00
Ed Minnix
2629e09b67
Add io/ioutil and io/fs models
2024-08-19 17:22:46 -04:00
Ed Minnix
a308bdb75d
Modify UnhandledCloseWritableHandle to use post processing
2024-08-19 12:59:34 -04:00
Ed Minnix
5e8185ac4f
Port test to inline expectations test
2024-08-19 12:44:30 -04:00
Ed Minnix
704cd8aee3
Update change note
2024-08-19 12:28:55 -04:00
Edward Minnix III
fc38476e42
Fix models
...
Co-authored-by: Owen Mansel-Chan <62447351+owen-mc@users.noreply.github.com >
2024-08-19 12:25:55 -04:00
Ed Minnix
f89174a6f3
CI changes (provenance)
2024-08-19 12:25:52 -04:00
Ed Minnix
0f7ad98a23
Change note
2024-08-19 12:25:48 -04:00
Ed Minnix
eb8c785c6b
Fix formatting
2024-08-19 12:25:43 -04:00
Ed Minnix
3f640a99d3
Tests for file models
2024-08-19 12:25:37 -04:00
Ed Minnix
383e27c2bd
Add file sources
2024-08-19 12:25:27 -04:00
Owen Mansel-Chan
2d2afb17ad
Convert gocb nosql-injection sinks to MaD
2024-08-16 11:19:15 +01:00
Owen Mansel-Chan
ec9d88b364
Convert mongodb nosql-injection sinks to MaD
2024-08-16 11:19:13 +01:00
Owen Mansel-Chan
86e9f15929
Accept MaD sinks with kind nosql-injection
2024-08-16 11:19:12 +01:00
Owen Mansel-Chan
ced000ae46
Add Argument.getACorrespondingSyntacticArgument
2024-08-16 11:19:09 +01:00
Owen Mansel-Chan
652dd88c36
Convert database/sql/driver sql-injection sinks to MaD
2024-08-16 11:19:06 +01:00
Owen Mansel-Chan
c7859ecebf
Improve SQL tests
...
Separate the tests for Squirrel and database/sql. Add tests for
database/sql/driver.
2024-08-16 11:19:04 +01:00
Owen Mansel-Chan
501bb3eb56
Convert database/sql sql-injection sinks to MaD
2024-08-16 11:19:03 +01:00
Owen Mansel-Chan
ad213579a1
Convert Beego orm sql-injection sinks to MaD
2024-08-16 11:19:01 +01:00
Owen Mansel-Chan
e1bdc7f5a7
Update Beego orm tests
2024-08-16 11:19:00 +01:00
Owen Mansel-Chan
3eb5b2669b
Convert Bun sql-injection sinks to MaD
2024-08-16 11:18:58 +01:00
Owen Mansel-Chan
3b2b7d7d1c
Convert Xorm sql-injection sinks to MaD
2024-08-16 11:18:57 +01:00
Owen Mansel-Chan
ba310417a8
Convert Gorm sql-injection sinks to MaD
2024-08-16 11:18:55 +01:00
Owen Mansel-Chan
7ad63fc3e6
Convert sqlx sql-injection sinks to MaD
2024-08-16 11:18:54 +01:00
Owen Mansel-Chan
db559f75b6
Convert gogf/gf sql-injection sinks to MaD
2024-08-16 11:18:52 +01:00
Owen Mansel-Chan
ce0cb12c29
Upgrade and convert gorqlite sql-injection sinks to MaD
2024-08-16 11:18:51 +01:00
Owen Mansel-Chan
06f86dd22f
Convert squirrel sql-injection sinks to MaD (non-existent methods removed)
...
Various non-existent methods were modeled, and I couldn't find any
evidence that they used to exist. They aren't in the stubs or tests. I
have removed them.
2024-08-16 11:18:49 +01:00
Owen Mansel-Chan
0acb29d3dd
Update frameworks.csv
2024-08-16 11:15:13 +01:00
github-actions[bot]
86ab941acd
Add changed framework coverage reports
2024-08-14 00:18:29 +00:00
Tom Hvitved
aeabee3e34
Merge pull request #17179 from hvitved/shared/pretty-print-models
...
Go/Java: Share more `PrettyPrintModels.ql` logic
2024-08-13 14:15:40 +02:00
Tom Hvitved
f83df76928
Shared: Apply ShowProvenance in InlineFlowTest.qll
2024-08-13 13:34:43 +02:00
Tom Hvitved
d5a0df3f87
Go/Java: Share more PrettyPrintModels.ql logic
2024-08-13 12:48:22 +02:00
Owen Mansel-Chan
0dfdee775b
Merge pull request #17177 from owen-mc/go/mad/convert-sink-3
...
Go: convert regex-use, url-redirection sinks to use models-as-data
2024-08-12 16:21:48 +01:00
