5752 Commits

Author	SHA1	Message	Date
Dave Bartolomeo	613ccaac1d	Add change note to all v1.0.0 packs	2024-05-23 13:01:22 -04:00
Arthur Baars	b2c64eabd4	Merge pull request #16572 from github/aibaars-patch-2 ... Java: include link to `remote source` in TrustBoundaryViolation.ql	2024-05-23 18:16:11 +02:00
Michael Nebel	6f5bdfba65	Java: Do not lift neutrals and only generate for public endpoints.	2024-05-23 16:32:45 +02:00
Arthur Baars	b5b5fef642	Switch source and sink in TrustBoundaryViolation.ql	2024-05-23 15:53:12 +02:00
Arthur Baars	5c4eb3c943	Java: add change note	2024-05-23 13:06:01 +00:00
Arthur Baars	d540675b9e	Update TrustBoundaryViolation.ql	2024-05-23 12:04:47 +00:00
Anders Schack-Mulligen	0f864081cb	Java: Remove source dispatch when there's an exact match from a manual model.	2024-05-23 10:50:00 +02:00
Tony Torralba	d202355b07	Merge pull request #16553 from atorralba/atorralba/java/xxe-qhelp-reword ... Java: Reword recommendation section of XXE query	2024-05-23 08:48:29 +02:00
Dave Bartolomeo	ffe4c8c87b	Update all pack versions to 1.0.0	2024-05-22 13:39:08 -04:00
Tony Torralba	5ec3335b07	Java: Reword recommendation section of XXE query	2024-05-22 11:34:19 +02:00
Anders Schack-Mulligen	7828cb8f5a	Java: Add change note.	2024-05-22 10:27:33 +02:00
Tom Hvitved	bebcd679a4	Address review comments	2024-05-21 14:51:52 +02:00
Tom Hvitved	454687d583	Data flow: Synthesize parameter return nodes	2024-05-21 14:47:42 +02:00
Michael Nebel	b1329fd806	Merge pull request #16362 from michaelnebel/java/removelocalqueries ... Java: Remove local query variants.	2024-05-16 14:34:04 +02:00
Max Schaefer	3c47c1137d	Simplify query.	2024-05-15 12:49:45 +01:00
github-actions[bot]	32e8b5c667	Post-release preparation for codeql-cli-2.17.3	2024-05-14 21:14:08 +00:00
github-actions[bot]	100166fa53	Release preparation for version 2.17.3	2024-05-14 19:23:18 +00:00
Michael Nebel	79c6834aa3	Merge pull request #16374 from michaelnebel/java/narrowsuperimpl ... Java: Improve finding best type for models and lifting.	2024-05-14 13:12:04 +02:00
Anders Schack-Mulligen	76e740bc1d	Java: Clean up some instances of getQualifiedName.	2024-05-13 13:06:44 +02:00
am0o0	02b0b402d6	remove useless predicate ... add missed FlowState	2024-05-12 19:29:37 +02:00
am0o0	be03e582c6	remove isBarrier	2024-05-12 18:17:47 +02:00
am0o0	9fffd7846a	remove empty predicates, fix FP for zipFile	2024-05-12 18:16:57 +02:00
am0o0	c9daf914cb	remove unused predicate	2024-05-12 14:09:55 +02:00
am0o0	3eb5778543	upgrade FlowState to new DecompressionState	2024-05-12 14:08:52 +02:00
am0o0	e23cbeda24	update to MethodCall	2024-05-12 13:54:21 +02:00
am0o0	4b68dd2315	add new additional taint steps, fix some comments	2024-05-12 13:51:08 +02:00
Am	9946e07f36	Merge branch 'github:main' into amammad-java-bombs	2024-05-12 13:17:02 +02:00
Michael Nebel	64145cf181	Java: Make it evident that we print signature of the lifted callable.	2024-05-08 14:42:53 +02:00
Michael Nebel	f00ad7c0e7	C#/Java: Invert api filtering logic.	2024-05-08 14:42:53 +02:00
Michael Nebel	e8120afef9	Java: Improve super implementation and ensure that lift produces a result.	2024-05-08 14:42:52 +02:00
Michael Nebel	95ff5bae65	Merge pull request #16297 from michaelnebel/java/improveapitelemetry ... Java: Identify more APIs as supported in the telemetry queries.	2024-05-03 12:34:19 +02:00
Michael Nebel	8b0f3af5b1	Java: Update change-note.	2024-05-02 14:05:44 +02:00
Michael Nebel	42653b5fec	Java: Add change note about local query removal.	2024-05-01 13:07:22 +02:00
Michael Nebel	d9c7401ea2	Java: Deprecate the local content of UrlRedirectLocalQuery and remove the local query variant.	2024-05-01 13:07:21 +02:00
Michael Nebel	ed7538d0b9	Java: Deprecate the local content of TaintedPathQuery and remove the local query variant.	2024-05-01 13:07:21 +02:00
Michael Nebel	5b89bd23c7	Java: Deprecate the content of SqlTaintedLocalQuery and remove the local query variant.	2024-05-01 13:07:21 +02:00
Michael Nebel	b68abab12a	Java: Deprecate the content of ResponseSplittingLocalQuery and remove local query variant.	2024-05-01 13:07:21 +02:00
Michael Nebel	d05c5e3d94	Java: Deprecate the content of NumericCastTaintedLocalQuery, remove the local query variant and update the non-local query variant.	2024-05-01 13:07:21 +02:00
Michael Nebel	301a6cc191	Java: Deprecate the content of ImproperValidationOrArray and remove local query variants.	2024-05-01 13:07:21 +02:00
Michael Nebel	acd0fa4b7b	Java: Deprecate the content of ExternallyControlledFormatStringLocalQuery and remove the externally controlled format string local query variant.	2024-05-01 13:07:21 +02:00
Michael Nebel	85a4dd0325	Java: Deprecate the local content of CommandLineQuery and remove the exec tainted local query variant.	2024-05-01 13:07:20 +02:00
Michael Nebel	072f19008a	Java: Deprecate the content of ArithmeticTaintedLocalQuery and remove the arithmetic tainted local query variant.	2024-05-01 08:59:51 +02:00
Michael Nebel	93988e5834	Java: Deprecate the content of XxeLocalQuery and remove the Xxe local query variant.	2024-05-01 08:59:50 +02:00
Michael Nebel	e0c2a43780	Java: Deprecate the content of XssLocalQuery and remove the Xss local query variant.	2024-05-01 08:59:50 +02:00
github-actions[bot]	99928b82ed	Post-release preparation for codeql-cli-2.17.2	2024-04-30 12:15:35 +00:00
github-actions[bot]	5228d94d42	Release preparation for version 2.17.2	2024-04-30 10:25:51 +00:00
Michael Nebel	9db32f4d26	Java: Identify more APIs as supported in the telemetry queries (as QL defined sinks).	2024-04-26 12:39:46 +02:00
Michael Nebel	acb2bbb2a3	Java: Identify more APIs as supported in the telemetry queries (as QL defined sources).	2024-04-26 12:39:46 +02:00
github-actions[bot]	622e176a16	Post-release preparation for codeql-cli-2.17.1	2024-04-16 14:21:32 +00:00
github-actions[bot]	9bfe4ea90a	Release preparation for version 2.17.1	2024-04-15 17:34:47 +00:00