Geoffrey White
2654affeee
Rust: Account for the 'secure' and 'partitioned' attributes.
2025-09-22 16:12:22 +01:00
Geoffrey White
257a1b0179
Rust: Refactor sources, sinks into an extensions source file.
2025-09-22 16:09:30 +01:00
Geoffrey White
eadf922280
Rust: Use models-as-data, add source/sink/flow models.
2025-09-22 16:04:56 +01:00
Geoffrey White
d52b668149
Rust: Add security-severity tag.
2025-09-22 16:04:54 +01:00
Geoffrey White
7e75c1d242
Rust: Add very basic query prototype.
2025-09-22 16:04:53 +01:00
Geoffrey White
513ae2ab54
Rust: Add tests for insecure cookies.
2025-09-22 16:04:52 +01:00
Chad Bentz
b837c56bec
Refactor RootApi and GrapeApiClass constructors for improved readability; add getHelperSelf method to retrieve self parameter in helpers block.
2025-09-22 10:13:33 -04:00
Simon Friis Vindum
45b84ffb31
Rust: Ensure singleton
2025-09-22 14:23:50 +02:00
Simon Friis Vindum
4244a6569c
Rust: Add change note
2025-09-22 14:19:01 +02:00
Simon Friis Vindum
a4c61f6945
Rust: Accept test changes
2025-09-22 14:18:59 +02:00
Simon Friis Vindum
7d6e2060e5
Adapt all languages to changes in shared library
2025-09-22 14:18:58 +02:00
Simon Friis Vindum
265e8b3623
Shared: Pass SummaryComponentStack to isSource and getSourceType
2025-09-22 14:18:54 +02:00
Simon Friis Vindum
014c27ee8a
Rust: Discard sources with spaces in inline flow tests
2025-09-22 14:13:39 +02:00
Simon Friis Vindum
05a58323c1
Rust: Add Warp test to request forgery query tests
2025-09-22 14:13:38 +02:00
Simon Friis Vindum
cd807533f2
Rust: Add tests for parameter in source model
2025-09-22 14:13:37 +02:00
Joe Farebrother
463f79bed2
Merge pull request #20263 from joefarebrother/python-qual-exceptions
...
Python: Modernize the Unreachable Except Block query
2025-09-22 09:42:09 +01:00
Tom Hvitved
be260befd4
Merge pull request #20497 from hvitved/rust/missing-model
...
Rust: Add missing model
2025-09-22 10:30:25 +02:00
Napalys Klicius
a0ea0c9e47
Merge pull request #20492 from Napalys/js/graph-ql-obj-type
...
JS: mark `GraphQLObjectType` resolvers args as remote sources
2025-09-22 09:59:20 +02:00
Tom Hvitved
78641b4dde
Rust: Reduce size of unqualifiedPathLookup
2025-09-22 09:46:28 +02:00
Tom Hvitved
b5b6f06005
Rust: Fix bad join
...
```
Evaluated relational algebra for predicate _PathResolution::CrateItemNode.getName/0#dispred#91b4dd6b_PathResolution::SourceFileItemNode#bd8f490__#antijoin_rhs@e84aee8k with tuple counts:
35406180 ~0% {3} r1 = JOIN PathResolution::SourceFileItemNode#bd8f4905 WITH `PathResolution::CrateItemNode.getName/0#dispred#91b4dd6b` CARTESIAN PRODUCT OUTPUT Lhs.0, Rhs.1, Rhs.0
8455 ~2% {4} | JOIN WITH `PathResolution::declaresDirectly/3#7d0350fb_021#join_rhs` ON FIRST 2 OUTPUT Rhs.2, Lhs.0, Lhs.2, Lhs.1
3259 ~0% {3} | JOIN WITH num#PathResolution::TTypeNamespace#4897e416 ON FIRST 1 OUTPUT Lhs.1, Lhs.2, Lhs.3
return r1
```
2025-09-22 09:38:43 +02:00
Tom Hvitved
b2cc01c490
Rust: Visibility check for qualified path resolution
2025-09-22 09:38:30 +02:00
Kasper Svendsen
97d62950a8
Merge pull request #20484 from kaspersv/kaspersv/future-proof-java-discarding
...
Overlay: Future-proof Java config & XML discard predicates
2025-09-22 08:16:44 +02:00
Chad Bentz
1bf6101967
Remove redundant exclusion of base Grape::API module from GrapeApiClass
...
- should not impact extracted application code
2025-09-21 20:52:28 -04:00
Chad Bentz
50bf9ae756
Refactor RootApi class to use getAnImmediateDescendent for clarity
2025-09-21 20:44:46 -04:00
Tom Hvitved
8d5d219c0f
Rust: Update expected test output
2025-09-21 15:36:22 +02:00
Tom Hvitved
223ab5e60c
Rust: Add missing model
2025-09-21 15:28:50 +02:00
Tom Hvitved
bdeeb3217e
Rust: Add path resolution tests
2025-09-20 09:30:55 +02:00
Tom Hvitved
fdb0c6ebb5
Merge pull request #20454 from paldepind/rust/path-resolution-attribute-expansion
...
Rust: Account for attribute expansions in path resolution
2025-09-20 09:21:00 +02:00
Chad Bentz
f4bbbc346f
Refactor Grape framework to be encapsulated properly in Module
2025-09-19 19:06:50 -04:00
Chad Bentz
89e9ee43c0
Convert from GrapeHelperMethodTaintStep extends AdditionalTaintStep to a simplified GrapeHelperMethodTarget extends AdditionalCallTarget
2025-09-19 18:28:45 -04:00
Joe Farebrother
6eac6b7258
Rename qhelp file
2025-09-19 17:03:19 +01:00
Geoffrey White
c26a07bb10
Apply suggestions from code review
...
Co-authored-by: Simon Friis Vindum <simonfv@gmail.com >
2025-09-19 16:49:54 +01:00
Taus
b9f073e596
Python: Update test output
2025-09-19 15:39:12 +00:00
Geoffrey White
523ec9d633
Merge pull request #20439 from geoffw0/assignment
...
Rust: Add a couple of simple data flow test cases
2025-09-19 16:27:14 +01:00
Taus
95a84ad655
Python: Fix false positive for unmatchable dollar/caret
...
Our previous modelling did not account for the fact that a lookahead can
potentially extend all the way to the end of the input (and similarly,
that a lookbehind can extend all the way to the beginning).
To fix this, I extended `firstPart` and `lastPart` to handle lookbehinds
and lookaheads correctly, and added some test cases (all of which yield
no new results).
Fixes #20429 .
2025-09-19 15:06:46 +00:00
Joe Farebrother
a9a258e743
Add changenote
2025-09-19 15:11:02 +01:00
Joe Farebrother
2e95c2b3c2
Split test cases for insecure cookie queries
2025-09-19 14:41:02 +01:00
Alexander Eyers-Taylor
c1c0828082
Merge pull request #20378 from github/alexet/java-regex-local
...
Jave: Use force local to make parsing local after global regex finding.
2025-09-19 13:48:43 +01:00
Alexander Eyers-Taylor
27e2c4d580
Merge pull request #20459 from github/alexet/caller_tc
...
Java: Make a TC overlay caller.
2025-09-19 13:48:34 +01:00
Napalys Klicius
3a6a537986
JS: Add change note
2025-09-19 14:47:58 +02:00
Napalys Klicius
6cfc950159
JS: Model GraphQLObjectType resolve params as sources
2025-09-19 14:39:36 +02:00
Simon Friis Vindum
afb6d30762
Rust: Fix typo in superseded
2025-09-19 14:27:14 +02:00
Simon Friis Vindum
72103adacc
Rust: Fix spurious path resolution
...
The annotated impl block was filtered away, but it's children where not. This caused the associated type `Foo` to appear as if it was an item in the scope outside of the impl block.
2025-09-19 14:25:11 +02:00
Simon Friis Vindum
60ceb89f01
Rust: Add debug predicate for ItemNode
2025-09-19 14:23:44 +02:00
Napalys Klicius
d88bc8e408
JS: Add test case for GraphQLObjectType
2025-09-19 14:23:40 +02:00
Simon Friis Vindum
a9d7662bb7
Rust: Add path resolution test with attribute on impl block
2025-09-19 14:23:39 +02:00
Simon Friis Vindum
2c84b49ced
Rust: Update test expecations
2025-09-19 14:22:10 +02:00
Simon Friis Vindum
32365fd673
Rust: Account for attribute expansions in path resolution
2025-09-19 14:22:00 +02:00
Simon Friis Vindum
c7a9cc5a42
Rust: Use annotations also for items in macro expansions
2025-09-19 14:19:27 +02:00
Joe Farebrother
04316d306f
Update qhelp
2025-09-19 12:42:30 +01:00
