Michael Nebel
|
b4457de58c
|
C#/Java: Fix typo in the QL doc comment.
|
2022-06-20 16:26:07 +02:00 |
|
Michael Nebel
|
c9c981d03a
|
C#: Add release note for the CSV DSL change.
|
2022-06-20 16:20:02 +02:00 |
|
Michael Nebel
|
38c6bf55b9
|
C#: Make CSV model validation of the provenance column.
|
2022-06-20 16:20:01 +02:00 |
|
Michael Nebel
|
5e3bb8297a
|
C#: Make the model predicates emmit the provenance directly to enable testing.
|
2022-06-20 16:20:01 +02:00 |
|
Michael Nebel
|
cf3cb292b7
|
C#: Update the model generator to use provenance column printing.
|
2022-06-20 16:20:01 +02:00 |
|
Michael Nebel
|
e0a96e16c3
|
C#: Update entity framework flow summaries test.
|
2022-06-20 16:20:01 +02:00 |
|
Michael Nebel
|
da0b9db57f
|
C#: Update flow summary printing in test cases to reflect provenance.
|
2022-06-20 16:20:01 +02:00 |
|
Michael Nebel
|
2975e51652
|
C#: Update existing production models with provenance information.
|
2022-06-20 16:20:01 +02:00 |
|
Michael Nebel
|
32b69d3e0c
|
C#: Update external models tests.
|
2022-06-20 16:20:01 +02:00 |
|
Michael Nebel
|
d6fa7db9f2
|
C#: Update CSV validation to the new format and improve test failure printing.
|
2022-06-20 16:20:01 +02:00 |
|
Michael Nebel
|
e3a5f7b8a3
|
C#: Introduce provenance column in CSV format for Models as data summaries, sources and sinks.
|
2022-06-20 16:20:01 +02:00 |
|
Michael Nebel
|
169ef55890
|
Update csharp/ql/src/Telemetry/ExternalLibraryUsage.ql
Co-authored-by: Anders Schack-Mulligen <aschackmull@users.noreply.github.com>
|
2022-06-20 16:14:44 +02:00 |
|
Tamás Vajk
|
f737804035
|
Merge pull request #9610 from tamasvajk/fix/global-statements
C#: Fix global statement extraction
|
2022-06-20 12:54:36 +02:00 |
|
Michael Nebel
|
70203633a1
|
Merge pull request #9393 from michaelnebel/csharp/asptaintedmember
C#: ASP.NET Core like members are tainted
|
2022-06-20 12:11:16 +02:00 |
|
Tamas Vajk
|
51f0a928dc
|
C#: Fix global statement extraction by extracting statements inside the implicit main method context
|
2022-06-20 10:09:11 +02:00 |
|
Rasmus Wriedt Larsen
|
ae44a941f9
|
Merge pull request #9421 from RasmusWL/inline-brackets
Inline Expectation Tests: Allow `tag[foo bar]`
|
2022-06-20 10:01:19 +02:00 |
|
Tamas Vajk
|
c460e5757b
|
C#: Add extractor error test for global statement extraction
|
2022-06-20 09:42:18 +02:00 |
|
Tamás Vajk
|
be2dfffb76
|
Merge pull request #9564 from tamasvajk/fix/diagnostic-query-metadata
C#: Change `kind` query metadata to `diagnostic` for compiler/extractor errors and messages
|
2022-06-20 09:02:35 +02:00 |
|
Rasmus Wriedt Larsen
|
b65a10d1ef
|
Inline Expectation Tests: sync
|
2022-06-17 17:38:19 +02:00 |
|
Anders Schack-Mulligen
|
1b374e262f
|
C#: Replace deprecated barrier guards.
|
2022-06-16 11:25:29 +02:00 |
|
Anders Schack-Mulligen
|
456f02fd82
|
C#: Add BarrierGuard parameterised module.
|
2022-06-16 11:25:29 +02:00 |
|
Anders Schack-Mulligen
|
6518a01ded
|
Dataflow: Sync.
|
2022-06-16 11:25:28 +02:00 |
|
Michael Nebel
|
9211d75b3d
|
C#: Add change note.
|
2022-06-16 08:43:06 +02:00 |
|
Michael Nebel
|
1f2f2fff7f
|
C#: Update testcases with examples.
|
2022-06-16 08:43:06 +02:00 |
|
Michael Nebel
|
e1c7003cde
|
C#: Only consider directly public auto implemented properties with public getters and setters as being tainted.
|
2022-06-16 08:43:06 +02:00 |
|
Michael Nebel
|
ef0a3d0a79
|
C#: Add testcase for controller parameter types tainted members.
|
2022-06-16 08:38:31 +02:00 |
|
Michael Nebel
|
93007f89c8
|
C#: Move ASP Net Core stubs into stubs folder.
|
2022-06-16 08:38:31 +02:00 |
|
Ian Lynagh
|
5280cf4e91
|
CaptureSinkModels.ql: Fix typo
|
2022-06-15 20:19:15 +01:00 |
|
github-actions[bot]
|
1ed70d51d7
|
Post-release preparation for codeql-cli-2.9.4
|
2022-06-15 13:25:20 +00:00 |
|
Michael Nebel
|
9639dca33f
|
C#: Consider all properties of ASP.NET Core like objects to also be sources of tainted data.
|
2022-06-15 15:13:37 +02:00 |
|
Tamas Vajk
|
aedf43f14a
|
C#: Change kind query metadata to diagnostic for compiler/extractor errors and messages
|
2022-06-15 13:50:27 +02:00 |
|
Michael Nebel
|
9175421fa2
|
C#/Java: Update some QL Doc comments to comply with the standard and remove some redundant imports.
|
2022-06-15 11:32:54 +02:00 |
|
Michael Nebel
|
e3ecc5a66b
|
C#: Add qlDoc to the restrict predicate.
|
2022-06-15 10:45:32 +02:00 |
|
github-actions[bot]
|
104ac05f49
|
Release preparation for version 2.9.4
|
2022-06-15 08:22:38 +00:00 |
|
Michael Nebel
|
d288b3d35d
|
C#: Refactor and narrow number of displayed results of the External library usage query.
|
2022-06-14 16:41:48 +02:00 |
|
Michael Nebel
|
51d2eb621b
|
C#: Refactor queries to use Results module and thus narrowing the number of returned results.
|
2022-06-14 16:40:53 +02:00 |
|
Michael Nebel
|
d5eebc8405
|
C#: Add a parameterized module for a telemetry result ordering predicate (will be needed to narrow the number of produced results).
|
2022-06-14 16:39:45 +02:00 |
|
Robert Marsh
|
5f77552c37
|
Merge branch 'main' into rdmarsh2/fix-ir-globals
|
2022-06-13 12:43:08 -04:00 |
|
Rasmus Wriedt Larsen
|
50196d099b
|
Inline Expectation Tests: sync
|
2022-06-03 11:39:57 +02:00 |
|
Anders Schack-Mulligen
|
4f3751dfea
|
Merge pull request #9316 from hvitved/dataflow/edges-get-a-successor-consistency
Data flow: Make `PathGraph::edges/2` and `PathNode::getASuccessor/1` consistent
|
2022-06-01 10:38:25 +02:00 |
|
Nick Rolfe
|
f417c12c5e
|
Merge pull request #9332 from github/post-release-prep/codeql-cli-2.9.3
Post-release preparation for codeql-cli-2.9.3
|
2022-05-31 16:17:50 +01:00 |
|
github-actions[bot]
|
ed2f3409bc
|
Post-release preparation for codeql-cli-2.9.3
|
2022-05-31 09:54:55 +00:00 |
|
github-actions[bot]
|
31c91a6faa
|
Add changed framework coverage reports
|
2022-05-29 00:16:56 +00:00 |
|
Tom Hvitved
|
bcdef98392
|
Data flow: Sync files
|
2022-05-25 14:39:37 +02:00 |
|
Tom Hvitved
|
a4023b8a1d
|
Data flow: Make PathGraph::edges/2 and PathNode::getASuccessor/1 consistent
|
2022-05-25 14:39:37 +02:00 |
|
Tom Hvitved
|
42f05dadc4
|
Data flow: Sync files
|
2022-05-25 14:21:22 +02:00 |
|
github-actions[bot]
|
1f1b364feb
|
Release preparation for version 2.9.3
|
2022-05-25 07:46:48 +00:00 |
|
Michael Nebel
|
9cab92b16f
|
C#: Update flow summaries test after rebase. The rebase included a fix to the isAutoGenerated predicate, which means that a summary is only considered autogenerated, if no hand-written version exist. This affects the printing as well.
|
2022-05-25 08:28:15 +02:00 |
|
Michael Nebel
|
5b405bb4cf
|
C#: Update FlowSummaries test with generated printing (needed due to rebase).
|
2022-05-25 08:28:15 +02:00 |
|
Michael Nebel
|
ba7238d6e2
|
C#: Update XML Injectiont test output after rebase (query has been turned into a path-problem and the output is now affected by the added summaries for NameValueCollection).
|
2022-05-25 08:28:15 +02:00 |
|