Tony Torralba
f4047e016c
Address QL-for-QL alert
...
Use an alert message consistent with the other languages
2022-11-03 12:01:42 +01:00
Tony Torralba
dc6f60a501
Add new XXE query
...
Only XMLParser sinks for the time being
2022-11-03 12:01:42 +01:00
Tony Torralba
83caf01778
Merge pull request #11096 from atorralba/atorralba/swift/unit
...
Swift: Move the Unit class to its own file
2022-11-03 12:00:57 +01:00
Mathias Vorreiter Pedersen
5d5c64a58b
C++: Accept test change.
2022-11-03 10:27:07 +00:00
erik-krogh
3159b3d9a1
swift: fix unused variable
2022-11-03 11:20:15 +01:00
erik-krogh
f9195d194b
go: make sure the source/sink have the same type as the edges relation
2022-11-03 11:20:15 +01:00
erik-krogh
c9fcef2608
go: add a precision tag to go/examples/deferinloop
2022-11-03 11:20:15 +01:00
erik-krogh
1ec204987d
go: remove precision from metric queries
2022-11-03 11:20:15 +01:00
erik-krogh
fc811bd33d
add workflow that checks compilation of all queries with the latest stable release
2022-11-03 11:20:12 +01:00
Tony Torralba
978ed03e9c
Move the Unit class to its own file
2022-11-03 11:19:41 +01:00
Chris Smowton
44b0f1921f
Merge pull request #11090 from smowton/smowton/fix/value-parameter-label-external-class
...
Kotlin: drop same-file requirement for overridden parameter labels
2022-11-03 10:17:33 +00:00
Nora Dimitrijević
3d24e0a2eb
Swift: enable VSCode to build extractor via CMake
...
The `-arch=x86_64` from `swift/rules.bzl` turns out to be unnecessary,
even on Arm-based Macs.
2022-11-03 11:16:48 +01:00
Nora Dimitrijević
28b7f0884f
Swift: UnsafeJsEval test finally compiles
2022-11-03 11:16:48 +01:00
Nora Dimitrijević
7b599f5fef
Swift: Add async varant of WKWebView evaluateJavaScript(_:)
...
See concurrency note here: https://developer.apple.com/documentation/webkit/wkwebview/1415017-evaluatejavascript
See also https://developer.apple.com/documentation/swift/calling-objective-c-apis-asynchronously
2022-11-03 11:16:48 +01:00
Nora Dimitrijević
5c905c42b2
Swift: Initial UnsafeJsEval query
2022-11-03 11:16:48 +01:00
erik-krogh
655b4a4d17
recognize more re-exported values as exported
2022-11-03 11:08:00 +01:00
erik-krogh
94e864e933
add failing test
2022-11-03 11:04:04 +01:00
Asger F
0f1b3486de
Ruby: Use another join order for nested constant lookup
2022-11-03 10:47:39 +01:00
Mathias Vorreiter Pedersen
18802a2883
Merge pull request #11042 from MathiasVP/simplify-buffer.qll
...
C++: Simplify `buffer.qll` repair
2022-11-03 09:18:39 +00:00
Asger F
a195ea942e
Ruby: only drop to CFG layer for getConstantValue()
2022-11-03 10:18:31 +01:00
Asger F
8502939b65
Merge pull request #11081 from asgerf/ql/dependency-paths
...
QL4QL: Add DependencyPath.ql query
2022-11-03 10:17:45 +01:00
Asger F
cf4a3e0bbe
Ruby: 'a' -> 'an' in a qldoc
2022-11-03 10:13:39 +01:00
Asger F
fe8945b5c9
Ruby: Rename getCanonicalEnclosing/Nested module
...
getCanonicalEnclosingModule -> getParentModule
getCanonicalNestedModule -> getNestedModule
2022-11-03 10:10:47 +01:00
Mathias Vorreiter Pedersen
01f3150a70
Merge pull request #11092 from hvitved/swift/avoid-deprecated-ssa-predicates
...
Swift: Avoid calls to deprecated SSA predicates
2022-11-03 09:03:47 +00:00
Asger F
bd2a065562
Ruby: rename ConstantValue::getX -> fromX
2022-11-03 10:03:40 +01:00
Asger F
fbcdb53d72
QL: Add option to follow 'cached' dependencies
2022-11-03 09:43:56 +01:00
erik-krogh
f3741ff1e4
changes based on review
2022-11-03 09:41:05 +01:00
Paolo Tranquilli
7e0a7d8b71
Swift: fix third-party action commit
2022-11-03 09:20:58 +01:00
Paolo Tranquilli
73131cef9e
Merge branch 'main' into redsun82/swift-macos-integration-tests
2022-11-03 09:19:07 +01:00
Tom Hvitved
4e3fcc3235
Swift: Avoid calls to deprecated SSA predicates
2022-11-03 09:03:20 +01:00
Dave Bartolomeo
499f20f6e8
Merge pull request #11004 from dbartol/dbartol/use-workspace-versions
2022-11-02 20:02:48 -04:00
JarLob
3317223e19
Fix AV Rule 76
2022-11-02 22:50:25 +01:00
Tom Hvitved
46631d6eaf
Merge pull request #10931 from hvitved/ruby/fix-flow-into-phis
...
Ruby: Fix flow steps into phi nodes
2022-11-02 21:07:06 +01:00
Chris Smowton
8e240a2e84
Kotlin: drop same-file requirement for overridden parameter labels
2022-11-02 19:28:53 +00:00
Chris Smowton
8eee450c65
Merge pull request #11064 from smowton/smowton/fix/kotlin-inherited-defaults
...
Kotlin: handle default parameter values inherited from an overridden function
2022-11-02 18:13:14 +00:00
Dave Bartolomeo
15be488c53
Fix typo
2022-11-02 12:40:55 -04:00
Dave Bartolomeo
a475e5758d
Merge remote-tracking branch 'upstream/main' into dbartol/use-workspace-versions
2022-11-02 12:38:03 -04:00
Dave Bartolomeo
7cad4b7918
Revert changes to ATM, which isn't in the workspace
2022-11-02 12:37:30 -04:00
Tamas Vajk
e48dfcc5b1
Kotlin: exclude loop variables on ranges from 'unused locals' check
2022-11-02 17:34:59 +01:00
Dave Bartolomeo
966be2727e
Use correct bundle version for second init
2022-11-02 12:22:39 -04:00
Dave Bartolomeo
3507cdc796
Stop using latest for second init
2022-11-02 12:17:24 -04:00
Chris Smowton
197be69425
Merge pull request #11069 from smowton/smowton/fix/kotlin-vararg-constructor-defaults
...
Kotlin vararg constructors: don't call a default-parameter constructor just because there are no varargs
2022-11-02 16:08:45 +00:00
Alex Ford
3b015eef51
Merge pull request #11057 from alexrford/ruby/ast-doc-table-whitespace
...
Ruby: fix whitespace in basic query doc table
2022-11-02 15:43:06 +00:00
Dave Bartolomeo
906f2f5e0f
Add repo
2022-11-02 11:42:39 -04:00
Dave Bartolomeo
631b8fed30
Add token
2022-11-02 11:40:01 -04:00
Dave Bartolomeo
bb0b0801dd
Try again
2022-11-02 11:38:11 -04:00
Rasmus Lerchedahl Petersen
0a7cfad048
python: inline query tests for command injection
...
note how the test file is partially annotated
and those annotations can now be expressed
In this particular test file, absolute line numbers
might have been better than relative ones.
We might remove line numbers altogether,
but should check more querries to see how it looks.
2022-11-02 16:21:59 +01:00
Rasmus Lerchedahl Petersen
f486c44b00
python: library for inline query tests
...
similar to the consistency queires used in js
but based on the inline expectations framework
2022-11-02 16:18:36 +01:00
Dave Bartolomeo
5d288d321a
Use latest released bundle for QL-for-QL
2022-11-02 11:10:04 -04:00
Tamás Vajk
b59cb778ef
Merge pull request #11077 from tamasvajk/kotlin-code-quality
...
Kotlin: Remove code duplication
2022-11-02 16:00:55 +01:00
