Andrew Eisenberg
|
66c1629974
|
Merge pull request #7285 from github/post-release-prep-2.7.3-ddd4ccbb
Post-release preparation 2.7.3
|
2021-12-10 09:59:45 -08:00 |
|
github-actions[bot]
|
7e5bfa5aa0
|
Add changed framework coverage reports
|
2021-12-10 00:09:34 +00:00 |
|
Chris Smowton
|
753d886b0d
|
Merge pull request #6319 from haby0/java/MyBatisSqlInjection
[Java] CWE-089 MyBatis Mapper Sql Injection
|
2021-12-09 19:57:18 +00:00 |
|
Chris Smowton
|
75f3ebf051
|
Fix OTHER XML tag
|
2021-12-09 17:55:03 +00:00 |
|
Chris Smowton
|
9f69c75c50
|
Fix XML tag
|
2021-12-09 17:44:49 +00:00 |
|
Chris Smowton
|
2cd70b96cd
|
Fix doctype
|
2021-12-09 17:44:08 +00:00 |
|
Chris Smowton
|
470256da85
|
Copyedit
|
2021-12-09 15:10:07 +00:00 |
|
Chris Smowton
|
d0a19fffee
|
Copyedit
|
2021-12-09 14:58:29 +00:00 |
|
Tony Torralba
|
38250b0821
|
Remove unnecessary implicit read step
|
2021-12-09 15:18:38 +01:00 |
|
Tony Torralba
|
522a4bb9fa
|
Propagate extras through build methods
|
2021-12-09 14:56:52 +01:00 |
|
Tony Torralba
|
c0c40cc05b
|
Remove synthetic fields
|
2021-12-09 13:34:41 +01:00 |
|
Tony Torralba
|
3a3c7fc59e
|
Fix stub
|
2021-12-09 13:34:41 +01:00 |
|
Tony Torralba
|
f209ff4f76
|
Use synthetic fields to improve taint precision
|
2021-12-09 13:34:39 +01:00 |
|
Tony Torralba
|
b7f7c5ba20
|
Change format of fluent models to make review easier
|
2021-12-09 13:33:19 +01:00 |
|
Tony Torralba
|
f63ffb0630
|
Add models for Notification builders
|
2021-12-09 13:33:17 +01:00 |
|
haby0
|
8bcbf8e30f
|
rename isMybatisCollectionTypeSqlInjection
|
2021-12-09 09:16:33 +08:00 |
|
haby0
|
a18aad8536
|
Fix one
|
2021-12-08 21:03:17 +08:00 |
|
Anders Schack-Mulligen
|
38d0bb4a60
|
Merge pull request #7260 from hvitved/dataflow/argument-parameter-matching
Data flow: Introduce `ParameterPosition` and `ArgumentPosition`
|
2021-12-08 12:49:08 +01:00 |
|
haby0
|
1d321c692b
|
Refactor isMybatisXmlOrAnnotationSqlInjection
|
2021-12-08 18:59:55 +08:00 |
|
Tom Hvitved
|
283173ad02
|
Address review comments
|
2021-12-08 11:26:44 +01:00 |
|
Tom Hvitved
|
490872173a
|
Data flow: Sync files
|
2021-12-07 20:29:18 +01:00 |
|
Anders Schack-Mulligen
|
6c739b67fa
|
Merge pull request #7318 from RasmusWL/java-cwe-328
Java: Tag queries with CWE-328
|
2021-12-07 11:39:48 +01:00 |
|
Erik Krogh Kristensen
|
3c59aa319e
|
Merge pull request #7245 from erik-krogh/explicit-this-all-the-places
All langs: apply the explicit-this patch to all remaining code
|
2021-12-07 10:40:26 +01:00 |
|
Rasmus Wriedt Larsen
|
ff9ed0d4fb
|
Java: Tag queries with CWE-328
CWE-328: Use of Weak Hash, see https://cwe.mitre.org/data/definitions/328.html
Since weak hash functions (md5/sha1) are considered for the
`java/weak-cryptographic-algorithm` query. See
caeeebf572/java/ql/lib/semmle/code/java/security/Encryption.qll (L148)
To keep things consistent between `java/weak-cryptographic-algorithm`
and `java/potentially-weak-cryptographic-algorithm`, I also added the
tag to the latter.
|
2021-12-06 13:59:00 +01:00 |
|
github-actions[bot]
|
c46ede02e6
|
Add changed framework coverage reports
|
2021-12-06 00:09:47 +00:00 |
|
haby0
|
daf6a4ce07
|
Partial modification 2
|
2021-12-04 17:45:02 +08:00 |
|
Tony Torralba
|
8ffa195538
|
Merge branch 'main' into atorralba/android_slice_models
|
2021-12-03 16:59:33 +01:00 |
|
haby0
|
6c6113b85b
|
Partial modification
|
2021-12-03 18:59:24 +08:00 |
|
intrigus
|
2c4ccb79a1
|
Fix QL Doc typos.
|
2021-12-02 15:30:29 +01:00 |
|
Michael Nebel
|
ad281c0365
|
C#: Sync FlowSummaryImpl files.
|
2021-12-02 09:03:00 +01:00 |
|
github-actions[bot]
|
87b968f337
|
Post-release preparation 2.7.3
|
2021-12-02 00:46:55 +00:00 |
|
Anders Schack-Mulligen
|
cde853c095
|
Merge pull request #7270 from aschackmull/dataflow/stage2-refactor
Dataflow: Stage 2 refactor
|
2021-12-01 11:09:08 +01:00 |
|
haby0
|
6742beae1b
|
use <code> tags
|
2021-12-01 16:24:46 +08:00 |
|
Tom Hvitved
|
ae6501d906
|
Java: Implement ParameterPosition et al
|
2021-12-01 08:51:22 +01:00 |
|
haby0
|
08be8edbce
|
Modify according to suggestions
|
2021-12-01 11:57:57 +08:00 |
|
github-actions[bot]
|
337ce65fe5
|
Release preparation for version 2.7.3
|
2021-11-30 20:39:35 +00:00 |
|
Tom Hvitved
|
540ecf3c21
|
Data flow: Sync files
|
2021-11-30 15:20:20 +01:00 |
|
Anders Schack-Mulligen
|
3e914ef2ff
|
Dataflow: Sync.
|
2021-11-30 13:52:52 +01:00 |
|
Anders Schack-Mulligen
|
fc05825c73
|
Dataflow: Make stage 2 equal to stages 3 and 4.
|
2021-11-30 13:52:31 +01:00 |
|
github-actions[bot]
|
66e086f92f
|
Add changed framework coverage reports
|
2021-11-30 00:09:58 +00:00 |
|
Dave Bartolomeo
|
5ed9029143
|
Move change notes to correct directories
|
2021-11-29 16:31:11 -05:00 |
|
Dave Bartolomeo
|
d0dac03bad
|
Manually bump versions
|
2021-11-29 14:21:08 -05:00 |
|
Dave Bartolomeo
|
2dfcd1dd9c
|
Add groups property
Also removed versions from test packs
|
2021-11-29 14:15:53 -05:00 |
|
Chris Smowton
|
27f40e08e5
|
Merge pull request #7007 from JLLeitschuh/feat/JLL/improve_ratpack_support
Java: Ratpack HTTP Framework Additional Modeling
|
2021-11-29 16:20:53 +00:00 |
|
Tom Hvitved
|
fdc94365b4
|
Merge pull request #7178 from michaelnebel/csharp-flowsummary-pp-csv
C#: Initial implementation of csv printing in FlowSummaries test
|
2021-11-29 09:59:33 +01:00 |
|
haby0
|
db04a0dadf
|
New model: SQL injection in MyBatis annotations
|
2021-11-28 14:43:57 +08:00 |
|
Erik Krogh Kristensen
|
74158f1e3a
|
revert explicit-this that caused non-monotonic recursion
|
2021-11-26 21:37:46 +01:00 |
|
Michael Nebel
|
d4f3a6d4bb
|
C#: Review comments. Keep the TContent type pribate
|
2021-11-26 15:38:33 +01:00 |
|
Erik Krogh Kristensen
|
6ff8d4de5c
|
add all remaining explicit this
|
2021-11-26 13:50:10 +01:00 |
|
Anders Schack-Mulligen
|
00ee34c0a0
|
Merge pull request #7237 from hvitved/dataflow/consistency-config
Data flow: Introduce `ConsistencyConfiguration` class
|
2021-11-26 12:49:25 +01:00 |
|