Michael Nebel
3c97bcb790
C#: Exclude properties from the Attribute selection.
2024-09-16 15:45:03 +02:00
Tom Hvitved
d0eae97bcf
Address review comment
2024-09-16 14:46:23 +02:00
Michael Nebel
a6f95c577a
C#: Remove deprecated predicates.
2024-09-16 14:12:05 +02:00
Michael Nebel
21b3daa2c0
C#: Delete Dotnet and CIL library code.
2024-09-16 14:12:01 +02:00
Rasmus Wriedt Larsen
8c10155eb7
mass rename to ActiveThreatModelSource
2024-09-12 10:16:55 +02:00
Chuan-kai Lin
ff78bebf19
Shared support for alert filtering
2024-09-11 13:18:26 -07:00
Tamas Vajk
da3c5f44f2
C#: Include .razor files in File::fromSource
2024-09-11 16:13:42 +02:00
Michael Nebel
e94890280a
C#: Sync changes and make language specific parts.
2024-09-10 15:23:51 +02:00
Rasmus Wriedt Larsen
038bc832a7
Go/Java/C#: Rename to ActiveThreatModelSource
...
As part of adding support for threat-models to Python/JS (see
https://github.com/github/codeql/pull/17203 ), we ran into some trouble
with name clashes.
Naming in existing languages supporting threat-models:
- `SourceNode` (for QL only modeling)
- `ThreatModelFlowSource` (for active sources from QL or data-extensions)
However, since we use `LocalSourceNode` in Python, and `SourceNode` in
JS (for local source nodes), it seems a bit confusing to follow the same
naming convention as other languages, and we had to come up with new names.
Initially I used `ThreatModelSource` for the "QL only modeling", but
that meant that we needed a new name to represent the active sources
coming from either QL or data-extensions... for this I came up with
`ActiveThreatModelSource`, and I really liked it. To me, it's much
clearer that this class only contains the currently active threat
model sources.
So to align languages, I got approval from @michaelnebel to rename the
existing classes.
2024-09-10 14:46:15 +02:00
Erik Krogh Kristensen
4258119ba3
Merge branch 'main' into del-deps-sep-2024
2024-09-04 12:43:41 +02:00
erik-krogh
0fdd06fff5
use my script to delete outdated deprecations
2024-09-03 20:30:58 +02:00
Michael Nebel
6e81d74558
C#: Add support for synthetic fields in MaD for C#.
2024-09-02 11:13:11 +02:00
Tom Hvitved
4ef4ede0b1
C#: Do not calculate field-based SSA for enums
2024-08-30 11:19:07 +02:00
Michael Nebel
20d9fd11ac
Merge pull request #17288 from michaelnebel/shared/contentflow
...
Shared: ContentFlow.
2024-08-23 09:52:27 +02:00
Michael Nebel
d935c47231
C#: Use the shared content flow implementation.
2024-08-22 15:46:01 +02:00
Michael Nebel
bd69b96752
Merge pull request #17273 from michaelnebel/csharp/sqlinject
...
C#: ASP.NET Controller is allowed to be abstract.
2024-08-22 11:18:48 +02:00
Tom Hvitved
d41d7c8246
Merge pull request #17207 from hvitved/csharp/content-set
...
C#: Implement `ContentSet`
2024-08-22 10:55:11 +02:00
Tom Hvitved
e94fabcc19
Address review comment
2024-08-22 08:27:15 +02:00
Michael Nebel
79718f1cd6
C#: Remove requirement that a controller is not allowed to be abstract.
2024-08-21 13:00:15 +02:00
Anders Schack-Mulligen
993bfee096
Merge pull request #17259 from aschackmull/dataflow/remove-srcsink-grouping
...
Dataflow: Remove src/sink grouping feature
2024-08-20 14:42:33 +02:00
Anders Schack-Mulligen
8470e91c16
Legacy Dataflow: Sync.
2024-08-20 10:07:57 +02:00
Rasmus Wriedt Larsen
43b61dd2aa
C#: Support stdin in LocalFlowSource
2024-08-15 15:45:20 +02:00
Michael Nebel
f0817dc07c
C#/Java: Use a parameterized module for making the source and sink callable classes.
2024-08-14 09:50:38 +02:00
Tom Hvitved
89a2381165
C#: Adopt shared SSA data-flow integration
2024-08-14 08:39:17 +02:00
Tom Hvitved
f6ec56a977
C#: Implement ContentSet
2024-08-13 15:27:36 +02:00
Tom Hvitved
3395dc9e71
Merge pull request #16576 from hvitved/csharp/static-field-side-effect
...
C#: Add support for flow through side-effects on static fields
2024-08-13 14:16:28 +02:00
Tom Hvitved
fbcb4498fe
Merge pull request #16817 from hvitved/csharp/multi-body-dataflow-dispatch
...
C#: Restrict multi-body dataflow dispatch based on file-system distance
2024-08-13 12:15:22 +02:00
Michael Nebel
4a5c9f0ec4
Merge pull request #17007 from michaelnebel/shared/neutralimplementation
...
C#/Java/Go: Neutrals are split into separate classes.
2024-08-12 13:58:12 +02:00
Tom Hvitved
1bcac50db1
C#: Add support for flow through side-effects on static fields
2024-08-12 10:01:51 +02:00
Anders Schack-Mulligen
7a48fe1102
Dataflow: Replace ppReprType with DataFlowType.toString.
2024-07-25 13:08:47 +02:00
Michael Nebel
2796597d1a
Code quality improvements.
2024-07-19 09:36:17 +02:00
Michael Nebel
ca4bd0c606
C#/Java/Go: Neutrals are split into seperate classes.
2024-07-18 16:29:38 +02:00
Anders Schack-Mulligen
da5abc8321
Dataflow: Replace MakeSets with QlBuiltins::InternSets.
2024-07-15 13:35:57 +02:00
Tom Hvitved
0459422a6c
C#: Restrict multi-body dataflow dispatch based on file-system distance
2024-07-11 16:52:20 +02:00
Tom Hvitved
39b5dbfaf7
C#: Perform fewer regexpCaptures when matching version numbers
2024-07-10 14:50:39 +02:00
Tom Hvitved
d675304703
Merge pull request #16875 from hvitved/csharp/ssa-param-def
...
C#: Move implicit entry definitions inside method bodies in SSA construction
2024-07-04 10:51:06 +02:00
Tom Hvitved
4ae8720930
SSA: Add BasicBlock.{getNode/1,length/0} to the input signature
2024-07-03 11:32:35 +02:00
Tom Hvitved
c5c97aca50
C#: Move implicit entry definitions inside method bodies in SSA construction
2024-07-01 10:48:13 +02:00
Anders Schack-Mulligen
3ede3af6f2
C#: Fix join-order.
2024-06-24 13:35:49 +02:00
Anders Schack-Mulligen
8c23e21073
Dataflow: Cache compatibleTypes.
2024-06-24 13:35:48 +02:00
Michael Nebel
b7bc540325
C#: Adjust implementation to use the shared model printer.
2024-06-24 11:50:46 +02:00
Michael Nebel
0fabca94db
C#: Use the new shared classes for Source and Sink callables.
2024-06-17 12:53:06 +02:00
Anders Schack-Mulligen
0e8d72c126
C#: Add support for pretty-printed provenace in tests. Convert one test.
2024-06-07 11:45:16 +02:00
Michael Nebel
d5af71a6c9
Merge pull request #16647 from michaelnebel/csharp/idempotentsummarygeneration
...
C#: Make summary generation idempotent.
2024-06-07 10:38:25 +02:00
Owen Mansel-Chan
3fb5ad2a0d
Cover all params in QLDoc of modelCoverage
2024-06-04 17:06:00 +01:00
Tom Hvitved
48455ec3c9
C#: Improve performance of MissingXMLValidation query
2024-06-04 08:35:53 +02:00
Michael Nebel
46f5b13854
C#: Only dispatch to summarized callables with generated summaries in case there are no source dispatch possibilities.
2024-06-03 10:40:10 +02:00
Michael Nebel
eb0925be60
C#: There should at least be one manual summary for a non-source summarized callable.
2024-06-03 10:40:06 +02:00
Michael Nebel
cd5168b570
C#: Limit the defintion of database flow source and use summaries for better paths and reduced result multiplicity.
2024-05-31 12:49:44 +02:00
Michael Nebel
195ccb0018
Merge pull request #16484 from michaelnebel/csharp/superimplmodelgen
...
C#: Lift models.
2024-05-28 15:49:35 +02:00
