Jami Cogswell
744a1a9b72
Java: fix line number changes in tests
2024-07-11 14:07:23 -04:00
Jami Cogswell
5cf05ec863
Java: add change note
2024-07-11 13:40:50 -04:00
Jami Cogswell
4a1497f367
Java: add IOUtils.toByteArray(InputStream) summary
2024-07-11 13:33:08 -04:00
Mathias Vorreiter Pedersen
1a2b4a30bb
Merge pull request #16939 from geoffw0/docsforautofix
...
C++: Assorted minor doc improvements
2024-07-11 18:30:45 +01:00
Calum Grant
24914efcb8
Merge pull request #16956 from github/calumgrant/cpp20-array-sizes
...
C++: Test C++20 implicit array sizes.
2024-07-11 17:44:08 +01:00
Calum Grant
13c25a494f
C++: Move change notes to correct location
2024-07-11 16:49:17 +01:00
Geoffrey White
bf47574796
Merge branch 'main' into docsforautofix
2024-07-11 16:42:27 +01:00
Ian Lynagh
5c97a5f667
Kotlin: Kotlin support is now out of beta, and generally available
2024-07-11 16:11:40 +01:00
Mathias Vorreiter Pedersen
a2a065c04e
Merge pull request #16962 from geoffw0/ga-note
...
Swift: Add GA change note.
2024-07-11 16:04:19 +01:00
Geoffrey White
f5bfdbf5ef
Swift: Fix change note file.
2024-07-11 16:01:52 +01:00
Tom Hvitved
0459422a6c
C#: Restrict multi-body dataflow dispatch based on file-system distance
2024-07-11 16:52:20 +02:00
Tom Hvitved
35bf990f23
C#: Add data flow test for multi-body dispatch
2024-07-11 16:52:18 +02:00
Tom Hvitved
9794269550
Merge pull request #16952 from hvitved/ssa/barrier-guards-param-mod
...
SSA: Make barrier guards a parameterized module
2024-07-11 16:46:02 +02:00
Geoffrey White
e5761d6524
Swift: Add GA change note.
2024-07-11 15:36:28 +01:00
Rasmus Wriedt Larsen
f41d2a896c
Merge pull request #16771 from porcupineyhairs/js2py
...
Python : Arbitrary code execution due to Js2Py
2024-07-11 15:31:57 +02:00
Mathias Vorreiter Pedersen
64513fb6c2
C++: Add change note.
2024-07-11 14:26:47 +01:00
Mathias Vorreiter Pedersen
8012f3b2f7
C++: Increase the precision of 'cpp/iterator-to-expired-container' to high.
2024-07-11 14:26:05 +01:00
Joe Farebrother
8152ec7472
Merge pull request #16696 from joefarebrother/python-cookie-write-headers
...
Python: Model CookieWrites from HeaderWrites
2024-07-11 14:25:54 +01:00
Angela P Wen
0b6714e06f
Merge pull request #16954 from github/angelapwen/remove-ci-workaround
...
Remove CI workaround for `DatabaseQualityDiagnostics.ql`
2024-07-11 15:21:31 +02:00
Calum Grant
c6fb50095b
C++: Change note and autoformat
2024-07-11 14:21:09 +01:00
Rasmus Wriedt Larsen
5ecde387af
Python: Fix .expected
2024-07-11 14:42:26 +02:00
Max Schaefer
d5d0cf5d90
Java: Tag java/non-https-url with CWE-345
2024-07-11 13:37:09 +01:00
Calum Grant
29df3cb5b3
C++: Add test for C++20 implicit array sizes
...
Implement NewArrayExpr.getArraySize()
2024-07-11 12:59:52 +01:00
Ian Lynagh
311799c798
Merge pull request #16899 from igfoo/igfoo/semmle_dist
...
Java/Kotlin: Remove legacy $SEMMLE_DIST support
2024-07-11 12:48:53 +01:00
Erik Krogh Kristensen
de9370ae95
Merge pull request #16540 from aegilops/aegilops/js/insecure-helmet-middleware
...
JS/TS: insecure Helmet middleware (new query)
2024-07-11 13:48:09 +02:00
Owen Mansel-Chan
5bdef38dd9
Merge pull request #16941 from owen-mc/go/mad-package-alias
...
Go: Allow grouping import paths for models-as-data
2024-07-11 12:27:43 +01:00
Angela P Wen
90641a5152
Remove CI workaround for DatabaseQualityDiagnostics.ql
2024-07-11 13:22:06 +02:00
Alvaro Muñoz
7a54170b31
feat(ext): Move regexp delimiters to Config.qll
2024-07-11 12:59:34 +02:00
Jeroen Ketema
87d9218369
Merge pull request #16951 from jketema/builtin-op
...
C++: Support more builtin operations
2024-07-11 12:50:46 +02:00
aegilops
d71be8aeaf
Moved from experimental into default queries
2024-07-11 11:44:01 +01:00
Michael B. Gale
45b782554c
Merge pull request #16925 from github/mbg/go/add-vendor-env-var
...
Go: Add environment variable to include `vendor` directories in extraction
2024-07-11 11:06:31 +01:00
Paul Hodgkinson
412ad177c2
Merge branch 'main' into aegilops/js/insecure-helmet-middleware
2024-07-11 11:01:38 +01:00
Jeroen Ketema
5e0ce7efc4
C++: Fix test
2024-07-11 11:58:25 +02:00
Jeroen Ketema
ed42c3cd6f
C++: Fix class extension
2024-07-11 11:48:01 +02:00
Alvaro Muñoz
f4581d0aa5
Bump qlpack versions
2024-07-11 11:36:18 +02:00
Alvaro Muñoz
eb66114d8b
feat(models): New ArgInj sink
2024-07-11 11:35:44 +02:00
Tom Hvitved
16b142d332
SSA: Make barrier guards a parameterized module
2024-07-11 11:34:56 +02:00
Tom Hvitved
a452eadb33
Merge pull request #16946 from hvitved/csharp/fewer-version-regexps
...
C#: Perform fewer `regexpCapture`s when matching version numbers
2024-07-11 11:22:36 +02:00
Tamás Vajk
fd8cda36e5
Merge pull request #16924 from tamasvajk/feature/winforms-linux
...
C#: Restore Windows dependencies when Windows Forms or WPF usage is detected
2024-07-11 11:01:37 +02:00
Alvaro Muñoz
56af52a729
feat(tests): New tests for Command Injection
...
Injections on a workflow_run triggered protected by a allow branches list should not be reported as critical
2024-07-11 10:46:37 +02:00
Alvaro Muñoz
adbb236465
fix(query): Better identification of argument injection commands
2024-07-11 10:45:49 +02:00
Jeroen Ketema
48bf06f1aa
C++: Fix getAPrimaryQlClass
2024-07-11 10:43:17 +02:00
Jeroen Ketema
0413e0e090
C++: Clean up QLDoc and add change note
2024-07-11 10:37:26 +02:00
Alvaro Muñoz
8d75250da7
Bump qlpack versions
2024-07-11 10:05:29 +02:00
Alvaro Muñoz
732f0dc29f
feat(queries): Argument Injection
...
Make argument injection sinks congigurable with MaD
2024-07-11 10:04:43 +02:00
Alvaro Muñoz
73c77bc93b
Initial implementation
...
Pending work: complete the regular expression
2024-07-11 10:04:43 +02:00
Owen Mansel-Chan
3417605b6d
Tests: update provenance numbering
2024-07-11 06:42:58 +01:00
Jeroen Ketema
3f789bad60
C++: Support more builtin operations
2024-07-10 21:27:09 +02:00
Owen Mansel-Chan
2c7fbda2ec
Accept review suggestion for QLDoc
2024-07-10 16:48:11 +01:00
Owen Mansel-Chan
32acff76c2
Make groupPrefix() private
...
This could be made public in future. But I expect that we will want to
use this logic for QL models as well then we will want to move it into a
different file, which will be much easier if it's all private at the
moment.
2024-07-10 16:48:10 +01:00
