github-actions[bot]
455c8c5953
Release preparation for version 2.19.1
2024-09-30 17:59:48 +00:00
Anders Schack-Mulligen
a8f55d93cb
C#: Add overrides to the interpretation of neutral MaD models.
2024-09-30 15:23:27 +02:00
Tom Hvitved
7c473c38c0
Merge pull request #17585 from hvitved/shared/cfg-scope-no-first-consistency
...
Shared: Add CFG consistency check for scopes with missing entry points
2024-09-26 14:05:08 +02:00
Rasmus Wriedt Larsen
381ea93ec3
Merge pull request #17424 from RasmusWL/active-threat-model-source
...
Go/Java/C#: Rename `ThreatModelFlowSource` to `ActiveThreatModelSource`
2024-09-26 13:08:17 +02:00
Michael Nebel
297d32180c
Merge pull request #17582 from michaelnebel/csharp/attributecollectionsinks
...
C#: `AttributeCollection` is no longer considered a HTML sink.
2024-09-26 09:17:31 +02:00
Michael Nebel
1dcc6ac2b1
C#: Address review comments.
2024-09-25 17:06:19 +02:00
Tom Hvitved
1bd504bf61
C#: Restrict CfgScope
2024-09-25 16:43:15 +02:00
Michael Nebel
d00e27916d
C#: No longer consider attribute collections as HTML sinks.
2024-09-25 14:12:59 +02:00
Chuan-kai Lin
1cd8af54f2
Merge pull request #17190 from github/cklin/diff-informed-java-queries
...
Java: add support for alert location restrictions
2024-09-23 08:39:24 -07:00
Rasmus Wriedt Larsen
63c3a71d95
Merge branch 'main' into active-threat-model-source
2024-09-23 11:18:14 +02:00
Anders Schack-Mulligen
3a1e50dcf9
Dataflow: Simplify diff-informed implementation and tweak flag name.
2024-09-20 07:07:10 -07:00
Chris Smowton
0deefaddc5
Merge pull request #17483 from smowton/smowton/feature/csharp-dataflow-fewer-nodes-including-virtual-dispatch
...
C#: Restrict dataflow node creation to source and source-referenced entities [virtual-dispatch-inclusive variant]
2024-09-19 15:33:47 +01:00
Chris Smowton
bb82dc1b18
Change note
2024-09-19 15:12:11 +01:00
Chris Smowton
bc9eb993b8
Remove unnecessary fromSource conditions
2024-09-19 15:08:08 +01:00
Michael Nebel
4a9e3ee3aa
Merge pull request #17363 from michaelnebel/modelgen/fieldbasedimprovements
...
C#/Java: Content based model generation improvements.
2024-09-19 10:49:11 +02:00
Michael Nebel
24a101297c
Merge pull request #15884 from michaelnebel/csharp/cleanupcil
...
C#: CIL and Dotnet cleanup (removal).
2024-09-18 11:43:41 +02:00
Michael Nebel
295861d577
Merge pull request #17459 from michaelnebel/csharp/accessormad
...
C#: Add MaD support for `Attribute.Getter` and `Attribute.Setter`.
2024-09-18 09:11:51 +02:00
Chris Smowton
3e91f0f53f
Expand range of callables requiring nodes to include unbound declarations of generic instantiations, static targets, and methods that have a body even if not flagged fromSource
2024-09-17 15:00:15 +01:00
Chris Smowton
349268cbf7
Expand the range of callables used in source to include potential virtual dispatch targets and referenced callables (e.g., in assigning a delegate)
2024-09-17 15:00:14 +01:00
Chris Smowton
66f48f767e
Restrict dataflow node creation to source and source-referenced entities
2024-09-17 15:00:13 +01:00
Tom Hvitved
d680a549bd
Merge pull request #16936 from hvitved/csharp/ssa-integration
...
C#: Adopt shared SSA data-flow integration
2024-09-17 13:45:31 +02:00
Michael Nebel
8d0cb07ba2
C#: Update the internal MaD attribute documentation.
2024-09-17 09:27:37 +02:00
Chris Smowton
30be6803c3
Merge pull request #17480 from github/post-release-prep/codeql-cli-2.19.0
...
Post-release preparation for codeql-cli-2.19.0
2024-09-16 16:06:58 +01:00
github-actions[bot]
79be301984
Post-release preparation for codeql-cli-2.19.0
2024-09-16 14:09:32 +00:00
Michael Nebel
bdc00841c0
C#: Add change note.
2024-09-16 15:45:14 +02:00
Michael Nebel
308aca632e
C#: Make support for Attribute.Getter and Attribute.Setter in MaD.
2024-09-16 15:45:09 +02:00
Michael Nebel
3c97bcb790
C#: Exclude properties from the Attribute selection.
2024-09-16 15:45:03 +02:00
Michael Nebel
5de9e7c3ad
C#: Add change note.
2024-09-16 15:39:44 +02:00
Michael Nebel
add033249f
Merge pull request #17475 from michaelnebel/csharp/indexerattributes
...
C#: Extract attributes on indexers.
2024-09-16 15:26:53 +02:00
Tom Hvitved
d0eae97bcf
Address review comment
2024-09-16 14:46:23 +02:00
Michael Nebel
b76613901c
C#: Add upgrade script.
2024-09-16 14:12:10 +02:00
Michael Nebel
a6f95c577a
C#: Remove deprecated predicates.
2024-09-16 14:12:05 +02:00
Michael Nebel
982208cd81
C#: Remove all CIL and Dotnet related tables and types from the dbscheme.
2024-09-16 14:12:03 +02:00
Michael Nebel
21b3daa2c0
C#: Delete Dotnet and CIL library code.
2024-09-16 14:12:01 +02:00
github-actions[bot]
acdafd9646
Release preparation for version 2.19.0
2024-09-16 10:56:10 +00:00
Michael Nebel
f2360542e0
C#: Add change note.
2024-09-16 11:00:37 +02:00
Dave Bartolomeo
485fc04029
Initial merge from main
2024-09-15 08:55:31 -04:00
Rasmus Wriedt Larsen
66b61ee25a
Go/Java/C#: Add change-note
2024-09-12 10:16:55 +02:00
Rasmus Wriedt Larsen
8c10155eb7
mass rename to ActiveThreatModelSource
2024-09-12 10:16:55 +02:00
Chuan-kai Lin
ff78bebf19
Shared support for alert filtering
2024-09-11 13:18:26 -07:00
Tamas Vajk
da3c5f44f2
C#: Include .razor files in File::fromSource
2024-09-11 16:13:42 +02:00
Michael Nebel
e94890280a
C#: Sync changes and make language specific parts.
2024-09-10 15:23:51 +02:00
Rasmus Wriedt Larsen
038bc832a7
Go/Java/C#: Rename to ActiveThreatModelSource
...
As part of adding support for threat-models to Python/JS (see
https://github.com/github/codeql/pull/17203 ), we ran into some trouble
with name clashes.
Naming in existing languages supporting threat-models:
- `SourceNode` (for QL only modeling)
- `ThreatModelFlowSource` (for active sources from QL or data-extensions)
However, since we use `LocalSourceNode` in Python, and `SourceNode` in
JS (for local source nodes), it seems a bit confusing to follow the same
naming convention as other languages, and we had to come up with new names.
Initially I used `ThreatModelSource` for the "QL only modeling", but
that meant that we needed a new name to represent the active sources
coming from either QL or data-extensions... for this I came up with
`ActiveThreatModelSource`, and I really liked it. To me, it's much
clearer that this class only contains the currently active threat
model sources.
So to align languages, I got approval from @michaelnebel to rename the
existing classes.
2024-09-10 14:46:15 +02:00
Chuan-kai Lin
fae180f612
C#: Fix trivial upgrade.properties errors
2024-09-09 13:33:04 -07:00
github-actions[bot]
97edff3f70
Post-release preparation for codeql-cli-2.18.4
2024-09-09 18:45:46 +00:00
github-actions[bot]
91537cdf9a
Release preparation for version 2.18.4
2024-09-09 16:08:48 +00:00
Erik Krogh Kristensen
4258119ba3
Merge branch 'main' into del-deps-sep-2024
2024-09-04 12:43:41 +02:00
Tamas Vajk
d4947cc1a2
C#: Add change note for build-mode:none GA
2024-09-04 11:13:31 +02:00
Michael Nebel
99400fe3d4
Merge pull request #17346 from michaelnebel/csharp/madsynthetics
...
C#: Support SyntheticField in MaD.
2024-09-04 08:28:07 +02:00
erik-krogh
e2b16bd8f9
add some change-notes
2024-09-03 22:06:07 +02:00
