Tom Hvitved
faca4b5b56
Merge pull request #11461 from hvitved/ruby/unique-hash-splat-param
...
Ruby: At most one hash-splat `ParameterNode` per callable
2022-12-05 11:53:28 +01:00
Tony Torralba
995b7327fe
Add missing QLDoc
2022-12-05 11:00:57 +01:00
Tony Torralba
21b51b48eb
Adapt PathSanitizer to Kotlin
2022-12-05 11:00:57 +01:00
Michael Nebel
6e486d4347
Re-arrange imports.
2022-12-05 09:49:38 +01:00
Michael Nebel
5c8ef15d6f
Java: Add bi-directional imports of some abstract class extensions.
2022-12-05 09:49:38 +01:00
Michael Nebel
65f242cabe
Java: Delete import of framework related files in ExternalFlow.
2022-12-05 09:49:38 +01:00
Michael Nebel
4c7cdc6245
Java: Remove unneeded imports of ExternalFlow.qll.
2022-12-05 09:49:38 +01:00
Michael Nebel
309807796c
Java: Deprecate ModelCsv classes.
2022-12-02 12:20:22 +01:00
Michael Nebel
b80829a3a0
Java/Kotlin: Cleanup files needed for inline models.
2022-12-02 12:20:22 +01:00
Michael Nebel
f5069ffc1f
Kotlin: Remove the inlined models.
2022-12-02 12:20:22 +01:00
Michael Nebel
42411fd455
Java/Kotlin: Allow dashes in callable names (the Kotlin standard library contains methods with dashes).
2022-12-02 12:20:22 +01:00
Jami
f54480b7c8
change matches to equality
...
Co-authored-by: Rasmus Wriedt Larsen <rasmuswriedtlarsen@gmail.com >
2022-12-01 11:56:44 -05:00
Jami Cogswell
548ff47f03
fix typo in QLDoc
2022-12-01 11:56:44 -05:00
Jami Cogswell
f7ae4e894f
apply rasmus' approach
2022-12-01 11:56:44 -05:00
Jami Cogswell
1f4bd00993
split rsa/dsa/dh
2022-12-01 11:56:44 -05:00
Jami Cogswell
c4dac31895
fix typo in import statement
2022-12-01 11:56:44 -05:00
Jami Cogswell
0fa05d47e3
add shared key sizes
2022-12-01 11:56:44 -05:00
Tom Hvitved
b33f5925bb
Data flow: Sync files
2022-11-30 13:39:25 +01:00
Owen Mansel-Chan
635c202ced
Use ArgumentPosition instead of int
...
This matches what all of the other languages do.
2022-11-30 11:16:52 +00:00
Owen Mansel-Chan
55c4643b20
Dataflow: Sync.
2022-11-30 11:00:07 +00:00
Owen Mansel-Chan
ce8a20cfd1
Fix variable name (source should be sink)
2022-11-30 10:51:59 +00:00
Anders Schack-Mulligen
0963b6f221
Java: Replace ad-hoc scc reduction with union-find.
2022-11-30 11:09:25 +01:00
Ian Lynagh
7eaef0cd3d
Merge pull request #11436 from igfoo/igfoo/NamingConventionsRefTypes
...
Kotlin: Enable java/misnamed-type query
2022-11-29 18:39:18 +00:00
Michael Nebel
bc6f0c1622
Merge pull request #11243 from michaelnebel/java/dataextensions
...
Java: Use data extensions for MaD models.
2022-11-29 12:43:26 +01:00
Tom Hvitved
f3dca95958
Merge pull request #11087 from hvitved/dataflow/summary-ctx
...
Data flow: Add summary/return context to pruning stages 2-4
2022-11-29 10:36:53 +01:00
Michael Nebel
74f02cf855
Java: Allow empty package name in model definitions.
2022-11-28 12:30:35 +01:00
Michael Nebel
b61f515af2
Jave: Make support for query specific models.
2022-11-28 12:30:35 +01:00
Michael Nebel
805430983c
Java: Convert commons-io to data extensions.
2022-11-28 12:30:35 +01:00
Michael Nebel
b3a3b676ba
Java: Remove manual models from QL code.
2022-11-28 12:30:34 +01:00
Michael Nebel
0abeb831c7
Java: Move summaryModel predicate, which constructs a CSV row to the testcode where it is used.
2022-11-28 12:30:34 +01:00
Michael Nebel
663d091776
Java: Invert dependencies and use the extensible predicates.
2022-11-28 12:30:34 +01:00
Michael Nebel
8e25cac653
Java: Add extensible predicates.
2022-11-28 12:30:34 +01:00
Michael Nebel
7b6f202f23
Java: Renaming.
2022-11-28 12:30:34 +01:00
Michael Nebel
a8ee878356
Java: Add bi-directional import of FragmentInjection.
2022-11-28 12:30:33 +01:00
Michael Nebel
663112576a
Java: Update commons-io models.
2022-11-28 12:30:33 +01:00
Tom Hvitved
cde05e1190
Data flow: Sync files
2022-11-28 12:11:38 +01:00
Ian Lynagh
a423f5f695
Kotlin: Enable java/misnamed-type query
...
We used to get alerts for the class around a local function, a lambda,
or a function reference, which we give name "". Now those are marked as
compiler-generated, and the query ignores compiler-generated types.
2022-11-25 17:11:40 +00:00
Alexander Eyers-Taylor
3c7f7511be
Merge pull request #11418 from alexet/alexet/mockito-class-rename
...
Java: Add new Mockito runner class location.
2022-11-24 17:49:31 +00:00
alexet
e24e3bf13f
Java: Add new Mockito runner class location.
2022-11-24 16:43:57 +00:00
Erik Krogh Kristensen
03737543d4
Merge pull request #11403 from erik-krogh/additional
...
ReDoS: add missing additional keywords
2022-11-24 15:53:51 +01:00
Anders Schack-Mulligen
f2897f5bfc
Merge pull request #11392 from aschackmull/java/adjust-mad-dispatch-priority
...
Java: Adjust the prioritisation between MaD and source dispatch.
2022-11-24 13:10:48 +01:00
Erik Krogh Kristensen
1eec067474
Merge pull request #11294 from erik-krogh/fileDoc
...
QL: improve the "this block-comment should have been a QLDoc"-query
2022-11-23 22:23:36 +01:00
erik-krogh
95f35196e4
add missing additional keywords
2022-11-23 20:45:51 +01:00
Anders Schack-Mulligen
807f87e01f
Java: Adjust the prioritisation between MaD and source dispatch.
2022-11-23 12:56:32 +01:00
Tony Torralba
92ee0aa7ae
Merge pull request #11367 from atorralba/atorralba/java/add-bitwise-implicit-intents
...
Java: Consider taint through bitwise operations on PendingIntent flags
2022-11-22 17:08:52 +01:00
Erik Krogh Kristensen
b2267c0e49
Merge pull request #11343 from erik-krogh/redundantAssignment
...
QL: add redundant-assignment query
2022-11-22 13:03:14 +01:00
Tony Torralba
43f4dd8bc4
Consider taint through bitwise operations on PendingIntent flags
2022-11-22 11:39:30 +01:00
Jami
8a73675483
Merge pull request #11070 from jcogs33/java-regex-injection
...
Java: Promote regex injection query from experimental
2022-11-21 15:04:26 -05:00
erik-krogh
64707f4f7b
remove redundant assignments
2022-11-21 17:45:05 +01:00
Tony Torralba
e28f1ffe18
Merge pull request #11346 from atorralba/atorralba/java/fix-path-models
...
Java: Fix a couple of taint models for `java.nio.file.Path(s)`
2022-11-21 16:57:00 +01:00
