Chris Smowton
99f4eef9c5
Fix spelling
2023-05-11 22:12:35 +01:00
Chris Smowton
a10b11e09e
Fix spelling and remove dead code
2023-05-11 22:12:17 +01:00
Chris Smowton
b6c2db6baf
Fix duplicate query ID
2023-05-11 22:10:09 +01:00
Porcupiney Hairs
2c518c1fa6
Include changes from review
2023-05-12 01:59:42 +05:30
Porcupiney Hairs
ae6fda03b7
Include changes from review
2023-05-11 23:56:50 +05:30
Porcupiney Hairs
d536157c1a
Go : Add query to detect potential timing attacks
2023-05-11 09:57:50 +05:30
Owen Mansel-Chan
270ba09ffb
Merge pull request #11732 from owen-mc/go/fix/model-data-flow-through-varargs
...
Go: Allow data flow through varargs parameters
2023-05-11 05:26:40 +01:00
Porcupiney Hairs
ec424d7e51
Go: Add query to detect DSN Injection.
2023-05-11 03:45:29 +05:30
Owen Mansel-Chan
1c66564ccc
address review comments
2023-05-10 14:05:09 +01:00
Kasper Svendsen
46727af948
Go: Enable warnings for implicit this receivers
2023-05-03 15:41:55 +02:00
Owen Mansel-Chan
3f645e9401
Merge pull request #13006 from kaspersv/kaspersv/go-explicit-this-receivers
...
Go: Make implicit this receivers explicit
2023-05-03 13:47:10 +01:00
Ian Lynagh
b56b843d13
Merge pull request #12987 from github/post-release-prep/codeql-cli-2.13.1
...
Post-release preparation for codeql-cli-2.13.1
2023-05-03 13:12:10 +01:00
Kasper Svendsen
e969018f99
Go: Make implicit this receivers explicit
2023-05-03 12:45:42 +02:00
github-actions[bot]
18d4af994d
Post-release preparation for codeql-cli-2.13.1
2023-05-02 10:50:20 +00:00
github-actions[bot]
3bd29171fb
Release preparation for version 2.13.1
2023-04-28 12:14:35 +00:00
Owen Mansel-Chan
bc0f9030e3
use CallNode.getSyntacticArgument
2023-04-28 06:09:10 +01:00
Michael B. Gale
72b082806b
Go: Update html-template-escaping-passthrough
...
Modify this query to apply sanitizers only in the data flow
between untrusted inputs and passthrough conversion types.
2023-04-27 17:14:38 +01:00
Alex Ford
924ce250dd
Merge pull request #12847 from github/post-release-prep/codeql-cli-2.13.0
...
Post-release preparation for codeql-cli-2.13.0
2023-04-18 14:40:40 +01:00
Tom Hvitved
f6d000eb20
Merge pull request #12805 from hvitved/remove-queries-xml
...
Remove all `queries.xml` files
2023-04-18 10:52:14 +02:00
github-actions[bot]
648f0e19ec
Post-release preparation for codeql-cli-2.13.0
2023-04-17 15:39:24 +00:00
github-actions[bot]
075d063370
Release preparation for version 2.13.0
2023-04-14 13:31:30 +00:00
Alex Eyers-Taylor
c6a482819a
Bump all qlpacks major versions
2023-04-13 19:15:27 +01:00
Alex Ford
8c46bfd051
Merge pull request #12816 from github/rc/3.9
...
Merge `rc/3.9` into `main`
2023-04-13 12:35:41 +01:00
Tom Hvitved
3cc9dec9c8
Remove all queries.xml files
2023-04-13 11:18:58 +02:00
Chris Smowton
18d00c1116
Autoformat QL
2023-04-12 14:19:03 +01:00
Chris Smowton
a673610e18
Adapt query not to depend on TaintTracking::FunctionModel
2023-04-12 14:19:01 +01:00
github-actions[bot]
ac426b1302
Post-release preparation for codeql-cli-2.12.6
2023-04-04 16:49:26 +00:00
Owen Mansel-Chan
00fd23d7b9
Merge pull request #12396 from porcupineyhairs/GoJwtSignImprovements
...
Go: Add more JWT sinks
2023-04-04 13:28:38 +01:00
Porcupiney Hairs
e9615c57e9
Go: Add more JWT sinks
...
This pull requests adds modelling for `katras/iris/v12/middleware/jwt`, `katras/jwt` and `gogf/gf-jwt` frameworks.
2023-03-31 23:11:24 +05:30
Owen Mansel-Chan
9ac0c57a3e
Fix alert message to match style guide
2023-03-31 16:47:57 +01:00
Owen Mansel-Chan
cf89b00f47
Fix variable names in QLDocs
2023-03-31 16:47:57 +01:00
Owen Mansel-Chan
513409e082
Fix formatting of QLDocs
2023-03-31 16:47:56 +01:00
Owen Mansel-Chan
7a25200962
Remove fields which are only used in char pred
2023-03-31 16:47:55 +01:00
Owen Mansel-Chan
a113b8e8a4
No need for singleton set
2023-03-31 16:47:55 +01:00
github-actions[bot]
0a3218676c
Release preparation for version 2.12.6
2023-03-30 19:25:06 +00:00
github-actions[bot]
e87ce62f95
Post-release preparation for codeql-cli-2.12.5
2023-03-30 13:48:58 +00:00
Asger F
6d665da4dc
Merge pull request #12570 from github/post-release-prep/codeql-cli-2.12.5
...
Post-release preparation for codeql-cli-2.12.5
2023-03-21 13:06:25 +01:00
github-actions[bot]
981e171525
Post-release preparation for codeql-cli-2.12.5
2023-03-17 13:27:00 +00:00
Chris Smowton
3e9924fcd2
Add change note
2023-03-16 15:35:00 +00:00
github-actions[bot]
fe4d27e8cc
Release preparation for version 2.12.5
2023-03-16 12:58:50 +00:00
Asger F
6e744093e2
Merge pull request #12398 from github/post-release-prep/codeql-cli-2.12.4
...
Post-release preparation for codeql-cli-2.12.4
2023-03-09 15:38:21 +01:00
Chris Smowton
a63a4c29e2
Go: fix incorrect-integer-conversion sanitizer
...
This was amended as part of https://github.com/github/codeql/pull/12186 , but the conversion was inadequate because the new implementation didn't work when a sink (type conversion) led directly to a non-`localTaintStep` step, such as a store step or an interprocedural step. Here I move the sink back one step to the argument of the type
conversion and sanitize the result of the conversion instead, to ensure there is always a unique local successor to a sink.
This should eliminate unexpected extra results that resulted from https://github.com/github/codeql/pull/12186 . Independently there are also *lost* results that stem from needing a higher `fieldFlowBranchLimit` that are not addressed in this PR, but raising that limit is a performance risk and so I will address this separately.
2023-03-08 09:48:35 +00:00
github-actions[bot]
af61b45785
Post-release preparation for codeql-cli-2.12.4
2023-03-04 14:16:55 +00:00
Jeroen Ketema
549fb0324b
Apply suggestions from code review
2023-03-03 15:26:38 +01:00
github-actions[bot]
462da63970
Release preparation for version 2.12.4
2023-03-03 14:11:51 +00:00
Chris Smowton
be468fe122
Change note
2023-02-17 19:21:15 +00:00
github-actions[bot]
8eb8daa4d4
Post-release preparation for codeql-cli-2.12.3
2023-02-16 17:23:25 +00:00
github-actions[bot]
b0315119c6
Release preparation for version 2.12.3
2023-02-16 11:49:06 +00:00
Owen Mansel-Chan
947a9f12a1
Make DiagnosticsReporting.qll a library
2023-02-13 11:59:36 +00:00
Michael B. Gale
70a6ff84af
Add change note
2023-02-09 09:56:36 +00:00
