Edward Minnix III
938d52b86f
Docs review suggestions
...
Co-authored-by: Felicity Chapman <felicitymay@github.com >
2024-01-08 09:39:05 -05:00
Ed Minnix
a528db8958
Use MapMutation instead of MethodCall
2024-01-08 09:39:05 -05:00
Ed Minnix
e14be0e971
Add BAD markers to samples
2024-01-08 09:39:04 -05:00
Ed Minnix
709649e9df
Model replace and putIfAbsent
2024-01-08 09:39:03 -05:00
Ed Minnix
1544330f3f
Minor fixes for code review
2024-01-08 09:38:53 -05:00
Ed Minnix
4b9b27c395
change note
2024-01-08 09:38:52 -05:00
Edward Minnix III
18e8a27fca
Reworded name and description
2024-01-08 09:38:51 -05:00
Edward Minnix III
1f37e70d83
Fix typos
...
Co-authored-by: Tony Torralba <atorralba@users.noreply.github.com >
2024-01-08 09:38:51 -05:00
Ed Minnix
51006aa088
Formatting fix
2024-01-08 09:38:50 -05:00
Ed Minnix
6eff72f99a
Include other map mutations
2024-01-08 09:38:49 -05:00
Ed Minnix
4fc6f710a4
Fix alert message
2024-01-08 09:38:48 -05:00
Ed Minnix
1550f5df2a
Environment variable injection query documentation
2024-01-08 09:38:47 -05:00
Ed Minnix
f1f0f50c92
TaintedEnvironmentVariableQuery docs
2024-01-08 09:38:47 -05:00
Ed Minnix
818c5de8d5
security-severity metadata
2024-01-08 09:38:46 -05:00
Ed Minnix
d4e2b84348
Cleanup helper dataflow configuration
2024-01-08 09:38:45 -05:00
Ed Minnix
f05f16116b
Testing for Environment variable injection
2024-01-08 09:38:45 -05:00
Ed Minnix
8ed3f3c865
Move to library
2024-01-08 09:38:44 -05:00
Ed Minnix
65d05bf3de
Add environment-injection to Model Validation
2024-01-08 09:38:43 -05:00
Ed Minnix
814885f7f6
Hudson environment variables models
2024-01-08 09:38:43 -05:00
Ed Minnix
028bd49211
org.apache.commons.exec models
2024-01-08 09:38:42 -05:00
Ed Minnix
b482b36b5f
Initial ProcessBuilder support
2024-01-08 09:38:41 -05:00
Ed Minnix
ad32b81492
environment-injection sink
2024-01-08 09:38:41 -05:00
Ed Minnix
93025cc8cf
Argument injection initial commit
2024-01-08 09:38:40 -05:00
Tony Torralba
7e6f2d1fc5
Merge pull request #14681 from atorralba/atorralba/java/weak-randomness-cve-coverage
...
Java: Add more sinks to the Insecure Randomness query
2024-01-08 15:33:03 +01:00
Robert Marsh
51acd1169c
Swift: accept test output
2024-01-08 14:29:51 +00:00
Jeroen Ketema
e772531bb3
C++: Remove test that is no longer relevant
2024-01-08 15:24:41 +01:00
Geoffrey White
6636c76af8
Merge pull request #15122 from geoffw0/pwhash
...
Swift: Query for Use of an inappropriate cryptographic hashing algorithm on passwords
2024-01-08 14:11:02 +00:00
Ian Lynagh
02734be287
Kotlin: Fix building with 2.0.255 snapshots
...
A couple of extension functions were moved
2024-01-08 13:25:25 +00:00
Ian Lynagh
9bc0167566
Kotlin: Add a 2.0.255 snapshot
...
The current master isn't compatible with the 2.0.0-Beta1
2024-01-08 13:25:25 +00:00
github-actions[bot]
a6c8cc9551
Release preparation for version 2.16.0
2024-01-08 13:11:26 +00:00
Cornelius Riemenschneider
b0599edb7e
Bazel: Bump dependant rules versions.
...
This doesn't bump rules_python, as there's some incompatible changes in that
which will need further addressing.
2024-01-08 11:21:02 +01:00
Arthur Baars
f4df5c9556
Merge pull request #15224 from aibaars/ruby-update-grammar
...
Ruby: update tree-sitter-ruby
2024-01-08 11:01:42 +01:00
Tamás Vajk
6b8ed7ee71
Merge pull request #15175 from tamasvajk/feature/arg-param-mapping
...
C#: Improve arg-param mapping logic to better handle arguments passed to `params` parameters
2024-01-08 10:42:38 +01:00
Tom Hvitved
25e2271b2f
Merge pull request #15157 from hvitved/dataflow/fwd-flow-in-non-linear-rec
...
Data flow: Avoid unnecessary non-linear recursion in `fwdFlowIn`
2024-01-08 10:31:51 +01:00
Tamas Vajk
e67035f891
Fix comment in test file
2024-01-08 10:00:39 +01:00
Tamas Vajk
e70cb1f259
Code quality improvement: simplify DataFlowPrivate::isParamsArg
2024-01-08 10:00:39 +01:00
Tamas Vajk
91637d49d4
Fix null dereference false positive
2024-01-08 10:00:39 +01:00
Tamas Vajk
a354ca3264
Add null dereference test case with false positive
2024-01-08 10:00:39 +01:00
Tamas Vajk
35ee3246bb
Add change note
2024-01-08 10:00:39 +01:00
Tamas Vajk
7daeeef3a1
C#: Improve arg-param mapping logic to consider named arguments passed to params parameters
2024-01-08 10:00:39 +01:00
Tamas Vajk
9bb807431d
C#: Improve arg-param mapping logic to consider arguments passed to params parameters
2024-01-08 10:00:39 +01:00
Tamas Vajk
93b0eb9ba3
C#: Add more test cases to argument-parameter mapping test
2024-01-08 10:00:39 +01:00
Alvaro Muñoz
dbefc132de
Apply suggestions from code review
...
Co-authored-by: Alex Ford <alexrford@users.noreply.github.com >
2024-01-07 10:31:50 +01:00
Marcono1234
3edfdc5ceb
Java: Improve Regex flag parsing
...
Fixes:
- Flag `d` not being recognized
- Syntax for disabling flags (`-`) not being recognized
- Non-capturing group with flags erroneously containing `:` as literal
2024-01-06 04:15:09 +01:00
Chuan-kai Lin
66d2b9b7d2
Ruby: Fix upgrade delete directives
2024-01-05 14:21:52 -08:00
Chuan-kai Lin
6e25fb129b
C#: Fix upgrade delete directives
2024-01-05 14:21:08 -08:00
Chuan-kai Lin
6f5bce046c
C++: Fix upgrade delete directives
2024-01-05 14:20:30 -08:00
Robert Marsh
80452cc9f7
Swift: redirect consistency queries to new module
2024-01-05 21:28:21 +00:00
Robert Marsh
2d457e17d6
Swift: autoformat for CFG library
2024-01-05 21:28:07 +00:00
Robert Marsh
86f59a1c13
Swift: add AnnotatedExitNode to cfg to match prior interface
2024-01-05 21:25:08 +00:00
