Chris Smowton
|
ca4ef6578d
|
Spelling
|
2022-08-13 14:37:08 +01:00 |
|
Chris Smowton
|
c5e46f78ec
|
Add change note
|
2022-08-13 14:29:17 +01:00 |
|
Chris Smowton
|
8bea2a5f6c
|
Add missing qldoc
|
2022-08-13 14:20:48 +01:00 |
|
Chris Smowton
|
b62e9dc92c
|
Convert tests to inline expectations and fix one bug revealed doing so
Specifically Apache sshd defines its sensitive api calls on an inherited interface, and they need to be described that way for us to pick them up.
|
2022-08-13 14:02:05 +01:00 |
|
Chris Smowton
|
ddb0846e06
|
Split up hardcoded creds queries, ready for conversion to inline expectations
|
2022-08-13 12:39:16 +01:00 |
|
erik-krogh
|
3a4a3437b5
|
fix some QL-for-QL warnings
|
2022-08-12 20:38:50 +02:00 |
|
erik-krogh
|
b54f037424
|
Merge branch 'main' into refacReDoS
|
2022-08-12 20:28:30 +02:00 |
|
erik-krogh
|
b9e96fb078
|
sync changes to other languages
|
2022-08-12 20:28:12 +02:00 |
|
github-actions[bot]
|
21d0c78376
|
Post-release preparation for codeql-cli-2.10.3
|
2022-08-11 23:20:39 +00:00 |
|
Anders Schack-Mulligen
|
a3fc463d0a
|
Java: Minor perf improvement.
|
2022-08-11 14:21:10 +02:00 |
|
github-actions[bot]
|
57c4f9145b
|
Release preparation for version 2.10.3
|
2022-08-11 11:12:15 +00:00 |
|
Erik Krogh Kristensen
|
73df8e4c7d
|
Merge pull request #9832 from erik-krogh/misspellings
Fix lots of misspellings
|
2022-08-11 12:43:26 +02:00 |
|
Chris Smowton
|
e9df675f88
|
Autoformat ql
|
2022-08-11 09:55:46 +01:00 |
|
Anders Schack-Mulligen
|
87461fece4
|
Merge pull request #10006 from aschackmull/java/sensitive-log-dedup
Java: Remove SensitiveLoggingQuery results that flow through a source.
|
2022-08-11 09:26:33 +02:00 |
|
Erik Krogh Kristensen
|
887f6557ed
|
fix common misspellings throughout github/codeql
|
2022-08-10 23:21:41 +02:00 |
|
Anders Schack-Mulligen
|
abad133ab5
|
Dataflow: Fix identification of source PathNodes in the presence of source-to-source flow.
|
2022-08-10 15:02:56 +02:00 |
|
Anders Schack-Mulligen
|
cbd6d24b9c
|
Merge pull request #9963 from intrigus-lgtm/java/model-set-properties
Model `java.util.Properties.setProperty`
|
2022-08-10 14:51:00 +02:00 |
|
Anders Schack-Mulligen
|
ecc15a1f95
|
Java: Remove SensitiveLoggingQuery results that flow through a source.
|
2022-08-10 14:28:07 +02:00 |
|
Tony Torralba
|
7f5fe85e2e
|
Merge pull request #9975 from atorralba/atorralba/asynctask-improvs
Java: Improve AsyncTask data flow support
|
2022-08-09 17:10:09 +02:00 |
|
Erik Krogh Kristensen
|
49276b1f38
|
Merge branch 'main' into refacReDoS
|
2022-08-09 16:18:46 +02:00 |
|
Anders Schack-Mulligen
|
aa3655678e
|
Merge pull request #9823 from aschackmull/dataflow/stage-module
Dataflow: Replace stage duplication with parameterised modules.
|
2022-08-08 10:56:32 +02:00 |
|
Joe Farebrother
|
dd83c17144
|
Use more precise control flow logic
|
2022-08-05 12:56:21 +01:00 |
|
Joe Farebrother
|
abf894a64c
|
Fix typos
|
2022-08-05 12:56:20 +01:00 |
|
Joe Farebrother
|
03c2a0e818
|
Add missing qldoc
|
2022-08-05 12:56:20 +01:00 |
|
Joe Farebrother
|
a2245bb858
|
Fix test
|
2022-08-05 12:56:19 +01:00 |
|
Joe Farebrother
|
16e16f08dc
|
Add webview cert validation query
|
2022-08-05 12:56:18 +01:00 |
|
Tony Torralba
|
b75b073dae
|
Remove unused class member
|
2022-08-05 12:21:22 +02:00 |
|
Tony Torralba
|
792d34c3a1
|
Add change note
|
2022-08-05 11:10:09 +02:00 |
|
Anders Schack-Mulligen
|
3d47875b60
|
Dataflow: Generate shorter RA/DIL names.
|
2022-08-05 11:00:56 +02:00 |
|
Anders Schack-Mulligen
|
d3dcc3ce3a
|
Dataflow: Sync.
|
2022-08-05 11:00:56 +02:00 |
|
Anders Schack-Mulligen
|
09d0f8e0ce
|
Dataflow: Replace stage duplication with parameterised modules.
|
2022-08-05 11:00:56 +02:00 |
|
Tony Torralba
|
5ebce6ee4f
|
Improve AsyncTask data flow support
Model the life-cycle described here: https://developer.android.com/reference/android/os/AsyncTask\#the-4-steps
|
2022-08-05 10:29:49 +02:00 |
|
intrigus
|
b7d94906bf
|
Add change note
|
2022-08-04 16:21:55 +02:00 |
|
intrigus
|
55618adf6a
|
Model java.util.Properties.setProperty
|
2022-08-04 16:21:48 +02:00 |
|
Anders Schack-Mulligen
|
a5a58f46eb
|
Merge pull request #9945 from aschackmull/java/wrappedinvocation-joinorder
Java: Improve join-order.
|
2022-08-04 11:12:23 +02:00 |
|
Anders Schack-Mulligen
|
c2b99747d4
|
Merge pull request #9951 from aschackmull/java/notintersect-perf
Java: Improve join-order for `not haveIntersection`.
|
2022-08-04 11:08:02 +02:00 |
|
Shyam Mehta
|
76cecc170e
|
Fix documentation
|
2022-08-03 14:30:17 -04:00 |
|
Anders Schack-Mulligen
|
aabdf84300
|
Java: Improve join-order for not haveIntersection.
|
2022-08-02 14:29:03 +02:00 |
|
Anders Schack-Mulligen
|
cd356a5ac1
|
Java: Improve join-order.
|
2022-08-02 08:49:58 +02:00 |
|
github-actions[bot]
|
e8747d3176
|
Post-release preparation for codeql-cli-2.10.2
|
2022-07-28 20:00:09 +00:00 |
|
Alex Ford
|
a8345e00fc
|
Update java/ql/lib/change-notes/released/0.3.2.md
|
2022-07-28 14:58:38 +01:00 |
|
Alex Ford
|
258b58cd37
|
Update java/ql/lib/CHANGELOG.md
|
2022-07-28 14:58:34 +01:00 |
|
github-actions[bot]
|
212786ed91
|
Release preparation for version 2.10.2
|
2022-07-28 13:38:35 +00:00 |
|
Anders Schack-Mulligen
|
70e6db3ce1
|
Merge pull request #9902 from aschackmull/java/junit5-assertnotnull
Java: Add support for JUnit5 assertions in the nullness queries.
|
2022-07-27 13:52:01 +02:00 |
|
Tony Torralba
|
e179126abb
|
Merge pull request #9129 from atorralba/atorralba/get-underlying-expr
Java: Add Expr::getUnderlyingExpr predicate
|
2022-07-27 11:42:28 +02:00 |
|
Anders Schack-Mulligen
|
cc423af8f1
|
Java: Add support for JUnit5 assertions in the nullness queries.
|
2022-07-27 10:20:47 +02:00 |
|
Tony Torralba
|
33f5620782
|
Add more models
|
2022-07-26 11:06:11 +02:00 |
|
Tony Torralba
|
c56e0f7c0d
|
Add change note
|
2022-07-26 10:50:34 +02:00 |
|
Tony Torralba
|
95db81658b
|
Add CSV models for java.util.Scanner
|
2022-07-26 10:42:24 +02:00 |
|
Shyam Mehta
|
09ec37943c
|
Partial Path Traversal split into 2 queries
|
2022-07-20 17:53:26 -04:00 |
|