4304 Commits

Author	SHA1	Message	Date
Mauro Baluda	e9dba59f11	Merge branch 'main' into main	2024-06-10 19:57:00 +02:00
github-actions[bot]	8a25081a0e	Post-release preparation for codeql-cli-2.17.5	2024-06-10 15:33:08 +00:00
Tony Torralba	7336dd1ae5	Merge pull request #16482 from grakshith/rakshith/tune-java-crypto ... Java: Add RSA/ECB/OEAP ciphers to the list of secure algorithms	2024-06-10 17:27:35 +02:00
github-actions[bot]	877bfa2468	Release preparation for version 2.17.5	2024-06-10 13:40:39 +00:00
Mauro Baluda	1d44f45be2	Update org.apache.commons.io.model.yml	2024-06-10 12:03:57 +02:00
Mauro Baluda	71505f4003	Added more org.apache.commons.io.FileUtils-related sinks to the path injection query.	2024-06-10 11:29:51 +02:00
am0o0	412472e9a4	add zip4j	2024-06-08 01:14:04 +02:00
am0o0	ceea475c45	add new s3 and spring IO path injection sinks	2024-06-08 01:04:20 +02:00
Anders Schack-Mulligen	4ec4da4c8c	Dataflow/Java: Add support for pretty-printed provenace in tests. Convert one test.	2024-06-07 11:45:13 +02:00
Owen Mansel-Chan	ef2f01613c	Merge pull request #16676 from owen-mc/qldoc-external-flow ... C/C#/Java/Swift: Cover all params in QLDoc of `modelCoverage`	2024-06-05 16:53:27 +01:00
Chris Smowton	79ae522349	Add change note documenting ECJ improvements	2024-06-05 15:12:33 +01:00
Rakshith Gopalakrishna	65af2556ed	fix: remove rsa/ecb/* from getASecureAlgorithmName ... Co-authored-by: Tony Torralba <atorralba@users.noreply.github.com>	2024-06-04 11:20:05 -07:00
Rakshith Gopala krishna	97f9a882c6	fix: address PR comments	2024-06-04 11:20:05 -07:00
Rakshith Gopala krishna	80bf7cdb52	fix: remove the pkcs1 scheme	2024-06-04 11:20:05 -07:00
Rakshith Gopala krishna	dd223ed704	feat: add rsa/ecb/... variants to the list of secure algorithms	2024-06-04 11:20:05 -07:00
Owen Mansel-Chan	3fb5ad2a0d	Cover all params in QLDoc of modelCoverage	2024-06-04 17:06:00 +01:00
Tony Torralba	f16dd8c010	Apply code review suggestions.	2024-06-04 10:35:11 +02:00
Tony Torralba	f84c2a842d	Java: Add more File-related sinks for path-injection	2024-06-04 10:35:07 +02:00
Anders Schack-Mulligen	06ce40c687	Merge pull request #16561 from aschackmull/java/typeflow-effectively-private ... Java: Improve dispatch through TypeFlow of effectively private calls.	2024-05-31 15:11:18 +02:00
Mauro Baluda	bbe888c2b3	Update SpringCsrfProtection.qll	2024-05-30 23:13:08 +02:00
Mauro Baluda	e2479a7ce2	Disable csrf for ServerHttpSecurity	2024-05-30 23:08:57 +02:00
github-actions[bot]	906b65d09c	Post-release preparation for codeql-cli-2.17.4	2024-05-28 18:02:25 +00:00
github-actions[bot]	33b4ae8bbb	Release preparation for version 2.17.4	2024-05-28 15:44:32 +00:00
Anders Schack-Mulligen	5a259843bb	Dataflow: Switch call context to a set representation.	2024-05-27 11:01:52 +02:00
Anders Schack-Mulligen	bc8ca1af86	Dataflow: Introduce NodeRegions for use in isUnreachableInCall.	2024-05-27 11:01:51 +02:00
Anders Schack-Mulligen	5a7174dcbb	Merge pull request #16500 from aschackmull/java/static-field-side-effect ... Java: Add support for flow through side-effects on static fields.	2024-05-24 09:19:31 +02:00
Dave Bartolomeo	f498e05099	Merge branch 'main' into dbartol/v1	2024-05-23 14:37:28 -04:00
Dave Bartolomeo	613ccaac1d	Add change note to all v1.0.0 packs	2024-05-23 13:01:22 -04:00
Anders Schack-Mulligen	4905612905	Merge pull request #16573 from aschackmull/java/dispatch-joinorder ... Java: Fix join-order in viableImplInCallContext.	2024-05-23 14:48:25 +02:00
Anders Schack-Mulligen	1bc3f6b0e7	Java: Add change note.	2024-05-23 13:03:06 +02:00
Anders Schack-Mulligen	bf3dbc24de	Java: Add support for flow through side-effects on static fields.	2024-05-23 12:57:57 +02:00
Anders Schack-Mulligen	4b3e35ed52	Java: Fix join-order in viableImplInCallContext.	2024-05-23 12:49:57 +02:00
Anders Schack-Mulligen	b519f13600	Java: Add change note.	2024-05-23 10:50:16 +02:00
Anders Schack-Mulligen	527dafa346	Java: Improve dispatch through TypeFlow of effectively private calls.	2024-05-23 10:50:16 +02:00
Anders Schack-Mulligen	f353065d26	Java: Allow overloading for exact model matches.	2024-05-23 10:50:01 +02:00
Anders Schack-Mulligen	0f864081cb	Java: Remove source dispatch when there's an exact match from a manual model.	2024-05-23 10:50:00 +02:00
Dave Bartolomeo	ffe4c8c87b	Update all pack versions to 1.0.0	2024-05-22 13:39:08 -04:00
Anders Schack-Mulligen	de5c69d0a1	Merge pull request #16551 from aschackmull/java/model-fixes ... Java: Revise some jdk time-related models	2024-05-22 14:05:23 +02:00
Anders Schack-Mulligen	ba97c3623a	Java: Change most java.time.* df-generated taint models to neutrals.	2024-05-22 10:29:54 +02:00
Anders Schack-Mulligen	54f2316d00	Java: Add a neutral model.	2024-05-22 10:29:49 +02:00
Anders Schack-Mulligen	d82acf5866	Java: Add simple type sanitization to java/zipslip.	2024-05-22 10:23:30 +02:00
Owen Mansel-Chan	a8201a19ae	Merge pull request #16506 from github/smowton/admin/gradle-version-detection-change-note ... Java: Add change note for Gradle JDK version detection	2024-05-16 17:11:03 +01:00
Michael Nebel	b1329fd806	Merge pull request #16362 from michaelnebel/java/removelocalqueries ... Java: Remove local query variants.	2024-05-16 14:34:04 +02:00
Chris Smowton	e8d064e291	Java: Add change note for Gradle JDK version detection	2024-05-16 09:15:47 +01:00
github-actions[bot]	32e8b5c667	Post-release preparation for codeql-cli-2.17.3	2024-05-14 21:14:08 +00:00
github-actions[bot]	100166fa53	Release preparation for version 2.17.3	2024-05-14 19:23:18 +00:00
Chuan-kai Lin	99335e5f29	Merge pull request #16421 from github/cklin/java-entities-reorder ... Java: Use entities in reorder directives	2024-05-14 06:03:52 -07:00
Anders Schack-Mulligen	76e740bc1d	Java: Clean up some instances of getQualifiedName.	2024-05-13 13:06:44 +02:00
Ian Lynagh	4d54c09a6f	Java: Add changenote for dropping support for some old variables	2024-05-09 15:59:47 +01:00
Chuan-kai Lin	30b5d5092d	Java: Use entities in reorder directives	2024-05-03 11:16:31 -07:00