5752 Commits

Author	SHA1	Message	Date
Nicolas Will	f55f27b0d9	Expand handling of generic artifact sources	2025-02-25 18:22:38 +01:00
Owen Mansel-Chan	74a249597a	Merge pull request #18607 from owen-mc/java/xss-content-type-sanitizer ... Java: Add XSS Sanitizer for `HttpServletResponse.setContentType` with safe values	2025-02-24 23:39:18 +00:00
Jami Cogswell	c2e859c756	Java: add change note	2025-02-24 18:33:45 -05:00
Jami Cogswell	26e396732a	Java: edit qhelp	2025-02-24 18:33:43 -05:00
Jami Cogswell	53cb30dcd0	Java: update metadata, move from CWE-016 to CWE-200	2025-02-24 18:33:41 -05:00
Jami Cogswell	8dfb920e05	Java: refactor QL, move code to libraries	2025-02-24 18:24:48 -05:00
Jami Cogswell	8064e8f1f9	Java: convert tests to inline expectations	2025-02-24 18:24:26 -05:00
Jami Cogswell	5e5bc2afe9	Java: remove experimental files	2025-02-24 18:24:19 -05:00
Jami Cogswell	978834bd9c	Java: remove deprecations	2025-02-24 18:24:14 -05:00
Jami Cogswell	2ce5920c5e	Java: copy out of experimental	2025-02-24 18:24:12 -05:00
Nicolas Will	2b0b927b0b	Add Nonce association to Operation, update graph	2025-02-24 17:37:41 +01:00
Jami	485ee5c5ed	Merge pull request #18692 from jcogs33/jcogs33/spring-csrf-qhelp-update ... Java: update `java/spring-disabled-csrf-protection` QHelp	2025-02-19 11:39:11 -05:00
Remco Vermeulen	2d991fc387	Updata Java CCR suite	2025-02-18 20:25:22 +00:00
github-actions[bot]	ad24f94a77	Post-release preparation for codeql-cli-2.20.5	2025-02-17 17:58:24 +00:00
github-actions[bot]	6f4562f3bd	Release preparation for version 2.20.5	2025-02-17 16:55:54 +00:00
Nicolas Will	df01fa7a9c	Expand model and JCA modeling	2025-02-17 00:16:08 +01:00
Nicolas Will	b777a22d35	Expand model and specialize newtype relations	2025-02-14 23:43:07 +01:00
Owen Mansel-Chan	dd102c4cea	Merge pull request #18645 from fabienpe/main ... Added missing "GOOD" and "BAD" to some examples	2025-02-13 10:37:39 +00:00
Nicolas Will	874e3b5e06	Modify model to use newtypes, expand modeling	2025-02-12 17:58:15 +01:00
Jami	2a8cc00284	Merge pull request #18288 from jcogs33/jcogs33/csrf-unprotected-request-type ... Java: add CSRF query	2025-02-11 15:32:56 -05:00
Nicolas Will	4d44755945	Refactor Model and CBOM print queries	2025-02-11 15:37:15 +01:00
Tom Hvitved	75137a0f4c	Java: Adopt shared SSA library	2025-02-11 10:06:43 +01:00
Tom Hvitved	614b3cea66	Merge pull request #18697 from hvitved/rust/telemetry ... Rust: Implement database quality telemetry query	2025-02-07 17:43:23 +01:00
Tom Hvitved	89502d63e5	Rust: Implement database quality telemetry query	2025-02-06 10:46:48 +01:00
Kristen Newbury	efcf7eab0c	Add broken crypto query	2025-02-05 17:24:25 -05:00
Kristen Newbury	86e51dad8a	Improve JCA aes alg model, add test	2025-02-05 13:39:48 -05:00
Jami Cogswell	dce89c5419	Java: update qhelp to align with other csrf queries	2025-02-05 10:57:47 -05:00
Jami Cogswell	c6a71cd3fd	Java: minor qhelp updates	2025-02-05 10:20:57 -05:00
Remco Vermeulen	9894e9ef9f	Add CCR suites	2025-02-05 01:58:34 +00:00
Jami Cogswell	0367846333	Java: remove token section from qhelp overview ... discussing tokens is not directly relevant to this query's recommendation and examples	2025-02-04 13:36:15 -05:00
Jami Cogswell	f438282674	Java: rewrite qhelp overview section; aligns with overview section used by Python and Ruby	2025-02-04 13:21:43 -05:00
Jami Cogswell	283c3b1e44	Java: minor qhelp updates	2025-02-04 12:47:19 -05:00
Kristen Newbury	5f355c7f55	Add first sample JCA encryption model	2025-02-04 11:55:09 -05:00
fabienpe	9a37682851	Moved comment to previous line if resulting in long line	2025-02-04 09:48:34 +00:00
github-actions[bot]	f1b05a79a4	Post-release preparation for codeql-cli-2.20.4	2025-02-04 09:25:09 +00:00
Jami Cogswell	516df3b4be	Java: qhelp wording updates	2025-02-03 14:52:57 -05:00
github-actions[bot]	573e53e454	Release preparation for version 2.20.4	2025-02-03 15:19:35 +00:00
fabienpe	a9f107ce06	Added missing "GOOD" and "BAD" to some examples	2025-01-31 15:47:25 +00:00
Jami Cogswell	0071e1acc2	Java: resolve merge conflict ... remove import no longer needed since contents of MyBatisMapperXML.qll have been moved to MyBatis.qll	2025-01-30 10:19:21 -05:00
Jami Cogswell	577152e20f	Java: minor qhelp update	2025-01-30 10:14:33 -05:00
Jami Cogswell	ead224c7b2	Java: expand qhelp, include Stapler examples	2025-01-30 10:14:29 -05:00
Jami Cogswell	096f6f88b2	Java: precision to medium	2025-01-30 10:14:27 -05:00
Jami Cogswell	27aa9c97a4	Java: add change note	2025-01-30 10:14:07 -05:00
Jami Cogswell	39ccde0c9d	Java: add name-based heuristic	2025-01-30 10:13:54 -05:00
Jami Cogswell	0f39011122	Java: add taint-tracking config for execute to exclude FPs from non-update queries like select	2025-01-30 10:13:50 -05:00
Jami Cogswell	df77d4914f	Java: initial tests	2025-01-30 10:13:45 -05:00
Jami Cogswell	178b032453	Java: add query	2025-01-30 10:13:43 -05:00
Jami Cogswell	b88731df80	Java: move contents of MyBatisMapperXML.qll in src to MyBatis.qll in lib so importable, and fix experimental files broken by the move	2025-01-30 10:13:27 -05:00
Jami Cogswell	0c6925399d	Java: add qhelp	2025-01-30 10:01:39 -05:00
Simon Friis Vindum	e141b4ee95	Merge pull request #18612 from paldepind/shared-model-generation-row ... Shared: Generalize the number of columns in a generated MaD row	2025-01-29 12:56:07 +01:00