Owen Mansel-Chan
6eda207997
Add integration tests
2023-06-29 16:56:06 +01:00
Alvaro Muñoz
a26bdda668
Add QLdocs for gqlgen.qll
2023-06-29 11:26:36 +02:00
github-actions[bot]
9d7987f822
Release preparation for version 2.13.5
2023-06-29 09:26:18 +00:00
Alvaro Muñoz
0332c52e77
Update go/ql/lib/semmle/go/frameworks/SQL.qll
2023-06-28 15:20:02 +02:00
Alvaro Muñoz
0043acb8e8
Update go/ql/lib/semmle/go/frameworks/SQL.qll
2023-06-28 15:19:31 +02:00
Alvaro Muñoz
c5c6766960
Remove unnecessary imports
2023-06-28 15:17:48 +02:00
Alvaro Muñoz
5174c734fa
Fix tests
2023-06-28 15:16:19 +02:00
Alvaro Muñoz
fe4ddab7e4
Add support for the gqlgen library
2023-06-28 15:05:25 +02:00
Alvaro Muñoz
d2412a0989
remove database
2023-06-28 15:02:10 +02:00
Alvaro Muñoz
03d0000739
Add support for Bun library
2023-06-28 14:59:38 +02:00
Alvaro Muñoz
f3d979be7a
Improve go-pg support
2023-06-28 14:49:25 +02:00
Kasper Svendsen
ab797065ab
Go: Enable implicit this warnings for remaining packs
2023-06-27 11:49:37 +02:00
amammad
fbfc959f82
V1 Bombs
2023-06-25 01:21:09 +10:00
Owen Mansel-Chan
b3a19ef7b2
Merge pull request #13461 from owen-mc/go/show-functionmodel-steps-to-path-summaries
...
Go: show FunctionModel steps in path summaries
2023-06-22 10:46:12 +01:00
Jeroen Ketema
277dbdf410
Merge pull request #13498 from jketema/inline-4
...
Rework more inline expectation tests to use the parameterized module
2023-06-22 10:01:07 +02:00
Henry Mercer
5afdaf8fe1
Merge pull request #13525 from github/rc/3.10
...
Merge `rc/3.10` back to `main`
2023-06-21 17:13:36 +01:00
Jami
5259a6ecfc
Merge pull request #13324 from jcogs33/jcogs33/shared-sink-kind-validation
...
Shared: share MaD kind validation across languages
2023-06-20 11:56:12 -04:00
Owen Mansel-Chan
0baf78f8fa
Add change note
2023-06-20 14:33:29 +01:00
Owen Mansel-Chan
cdc1c2c1aa
Merge pull request #13454 from owen-mc/go/add-mad-content-for-pointer-content
...
Go: Add models-as-data content for pointer content
2023-06-20 14:26:07 +01:00
Owen Mansel-Chan
c0fea85380
Accept test changes
2023-06-20 13:25:49 +01:00
Owen Mansel-Chan
cc320c5e9c
Never skip functionmodel inputs and outputs in path summaries
2023-06-20 13:25:47 +01:00
Owen Mansel-Chan
d7c97f8759
Merge pull request #13455 from owen-mc/dataflow/add-flowCheckNodeSpecific
...
Dataflow: add language-specific hook for breaking up big step relation
2023-06-20 13:24:26 +01:00
github-actions[bot]
18b678e69e
Post-release preparation for codeql-cli-2.13.4
2023-06-20 10:20:05 +00:00
Owen Mansel-Chan
04ff89e1fe
Update access path documentation
2023-06-20 11:05:05 +01:00
Owen Mansel-Chan
732b14ee38
Update pretty printing predicates
2023-06-20 11:04:03 +01:00
Owen Mansel-Chan
a01169eec2
add "Dereference" content for PointerContent
2023-06-20 10:49:37 +01:00
Owen Mansel-Chan
d28c4203db
Merge pull request #13453 from owen-mc/go/test-mad-pointer-content
...
Go: Add failing tests for MaD with pointer content
2023-06-20 09:55:06 +01:00
Jeroen Ketema
d6d21e3928
Go: Update remaining inline expectation tests to use the paramterized module
2023-06-20 10:15:46 +02:00
Jeroen Ketema
9c774ac97f
Merge pull request #13426 from jketema/inline-3
...
Update inline flow tests to use parameterized module
2023-06-19 17:39:29 +02:00
Jeroen Ketema
6a84e6cbfd
Add the merged PathGraph to all copies of the InlineFlowTest library
2023-06-19 10:28:10 +02:00
Tony Torralba
8f6d2ed2f9
Adjust ZipSlip query description according to review suggestions.
2023-06-19 10:27:41 +02:00
Tony Torralba
3c4d938cf1
Apply code review suggestions.
...
Co-authored-by: Asger F <asgerf@github.com >
2023-06-19 10:20:19 +02:00
Tony Torralba
433fc680ec
Apply suggestions from code review
...
Co-authored-by: mc <42146119+mchammer01@users.noreply.github.com >
2023-06-19 10:17:40 +02:00
Maiky
d654e98650
Add empty string as source
2023-06-18 22:21:12 +02:00
Tony Torralba
c97868f774
Add change notes
2023-06-16 09:01:02 +02:00
Tony Torralba
3e96fe60c5
Go/Java/JS/Python/Ruby: Update the description and qhelp of the ZipSlip query
...
All filesystem operations, not just writes, with paths built from untrusted archive entry names are dangerous
2023-06-16 08:52:44 +02:00
Jeroen Ketema
eb62df6ece
Go: Rewrite InlineFlowTest as a parameterized module
2023-06-15 10:51:29 +02:00
Owen Mansel-Chan
74b39b42a1
Accept test changes
2023-06-14 15:47:25 +01:00
Owen Mansel-Chan
3ff6d033d3
Rename to neverSkipInPathGraph
2023-06-14 15:29:54 +01:00
Owen Mansel-Chan
5f72ce0935
Add stub implementations of flowCheckNodeSpecific
2023-06-14 14:46:35 +01:00
Owen Mansel-Chan
dd57d9fd55
Add flowCheckNodeSpecific
...
This allows individual languages to specify `FlowCheckNode`s, which
break up the big step relation and make sure that those nodes appear in
path summaries.
2023-06-14 14:27:58 +01:00
Owen Mansel-Chan
d071b463a3
Add failing tests for MaD with pointer content
2023-06-14 14:14:37 +01:00
Jami
35591113c2
Merge branch 'main' into jcogs33/shared-sink-kind-validation
2023-06-14 08:06:34 -04:00
Michael Nebel
afec9b05e9
Merge pull request #13147 from michaelnebel/csharp/entityframeworkrefactor
...
C#: Use synthetic global in the EntityFramework code instead of jump steps.
2023-06-14 13:47:56 +02:00
Anders Schack-Mulligen
1a4fca334f
Merge pull request #13273 from aschackmull/dataflow/summarynode-refactor
...
Dataflow: Refactor FlowSummaryImpl to synthesize nodes independently from DataFlow::Node.
2023-06-14 09:38:36 +02:00
Anders Schack-Mulligen
2d616d494e
C#/Ruby: Add fields as per review comments.
2023-06-13 11:26:30 +02:00
Jeroen Ketema
d035491c6f
Go: Remove commented out code from test
2023-06-13 10:13:42 +02:00
Jeroen Ketema
c3ba206b6a
Merge pull request #13346 from jketema/inline-2
...
Update inline expectation tests to use parameterized module
2023-06-13 10:10:55 +02:00
Jami Cogswell
9abe3e3da4
Shared: use a module as input to 'KindValidation'
2023-06-09 14:35:37 -04:00
Anders Schack-Mulligen
5062442982
Go/Python/Ruby/Swift: Add stub.
2023-06-09 15:39:28 +02:00
