Tom Hvitved
da66281fef
Sync files
2024-03-11 13:02:04 +01:00
Tom Hvitved
7a39f077d9
Data flow: Add ConfigSig::accessPathLimit
2024-03-11 13:01:58 +01:00
Ed Minnix
d300736c7e
Remove AddLocalSource classes
2024-03-10 22:20:51 -04:00
Edward Minnix III
e7852f520f
Merge pull request #15605 from egregius313/egregius313/csharp/dataflow/sources/commandargs-and-environment
...
C#: Add more `environment` and `commandargs` sources for the C# Standard Library
2024-03-08 14:10:09 -05:00
Lindsay Simpkins
7dd175d938
change note
2024-03-07 17:16:17 -08:00
Lindsay Simpkins
feb1ca29cc
csharp update MaD for HttpRequestMessage
2024-03-07 15:00:05 -08:00
Michael Nebel
48fcec82d6
Merge pull request #15736 from michaelnebel/csharp/disconnectfromdotnet
...
C#: Deprecate dotnet and CIL in QL.
2024-03-07 19:17:05 +01:00
Ed Minnix
608a3f907c
Add type signature for methods with no overloads
2024-03-07 12:32:06 -05:00
Ed Minnix
1f64f5f8c9
Change note
2024-03-07 12:32:05 -05:00
Ed Minnix
f8c805de6b
Microsoft.Extensions.Configuration models
2024-03-07 12:32:04 -05:00
Ed Minnix
a3f6bfe1df
commandargs sources
2024-03-07 12:30:06 -05:00
Ed Minnix
51afe12ae1
Environment variable sources
2024-03-07 12:20:48 -05:00
Michael Nebel
990dec67d0
C#: Address more review comments.
2024-03-07 09:40:34 +01:00
Michael Nebel
eda345a5b8
C#: Address review comments.
2024-03-07 09:40:34 +01:00
Michael Nebel
e3380aa545
C#: Add change note.
2024-03-07 09:40:34 +01:00
Michael Nebel
7f6c84dda8
C#: Fix bad join order.
2024-03-07 09:40:34 +01:00
Michael Nebel
35b93063f9
C#: Deprecate dotnet and cil.
2024-03-07 09:40:34 +01:00
Michael Nebel
58a1353ddc
C#: Clean up implementation and remove CIL dataflow implementation.
2024-03-07 09:40:33 +01:00
Michael Nebel
1638183d18
C#: Copy dotnet.Variable implementation.
2024-03-07 09:40:33 +01:00
Michael Nebel
6178acc070
C#: Copy dotnet.Type implementation.
2024-03-07 09:40:33 +01:00
Michael Nebel
81ce8dc02d
C#: Copy dotnet.Parameterizable implementation.
2024-03-07 09:40:33 +01:00
Michael Nebel
92447dc743
C#: Copy dotnet.Namespace implementation.
2024-03-07 09:40:33 +01:00
Michael Nebel
7ba25b23a5
C#: Copy dotnet.Generics implementation.
2024-03-07 09:40:33 +01:00
Michael Nebel
eb5cb2a7bf
C#: Copy dotnet.Expr implementation.
2024-03-07 09:40:33 +01:00
Michael Nebel
215808d7e9
C#: Copy dotnet.Declaration implementation.
2024-03-07 09:40:33 +01:00
Michael Nebel
cdf3d47031
C#: Copy dotnet.Element implementation.
2024-03-07 09:40:32 +01:00
Michael Nebel
c606ab09a5
C#: Copy dotnet.Callable implementation.
2024-03-07 09:40:32 +01:00
github-actions[bot]
dc9092c9ec
Post-release preparation for codeql-cli-2.16.4
2024-03-06 22:19:33 +00:00
github-actions[bot]
2f058ffb4d
Release preparation for version 2.16.4
2024-03-06 20:56:51 +00:00
Angela P Wen
ce31f8641a
Revert "Release preparation for version 2.16.4"
2024-03-06 12:07:33 -08:00
Ed Minnix
527041348e
Add comment about Memory<T>
2024-03-06 10:39:31 -05:00
Ed Minnix
e065390185
Add .Element modifier to Memory<T> arguments in MaD models
2024-03-06 10:39:30 -05:00
Ed Minnix
27ba51cf9d
Change note
2024-03-06 10:39:28 -05:00
Ed Minnix
ca55b92281
Change System.IO.TextReader models to transfer taint to out parameter instead of return value
...
Some of the `System.IO.TextReader` models transfered taint to
`ReturnValue`, when there is a more relevant out-parameter/array.
2024-03-06 10:39:25 -05:00
github-actions[bot]
661e68dab5
Release preparation for version 2.16.4
2024-03-05 18:13:58 +00:00
Angela P Wen
967963a653
Revert "Release preparation for version 2.16.4"
2024-03-05 08:53:33 -08:00
Tom Hvitved
a92e394a7c
C#: Variable capture follow-up
2024-03-04 19:36:30 +01:00
github-actions[bot]
a67218a027
Release preparation for version 2.16.4
2024-03-04 17:42:08 +00:00
Ed Minnix
86ceeebd89
Change handling of LocalSource in queries
...
1. Change `LocalSource` to extend `DataFlow::Node`, thus removed from
the definiton of `Source`
2. Add a private class `AddLocalSource` which extends `Source`. This
allows us to currently preserve the inclusion of local sources, while
making it easier to remove it in the future.
2024-02-29 12:03:17 -05:00
Ed Minnix
3563c7ef03
Modify deprecated RemoteSource classes to extend DataFlow::Node directly.
...
Since `ThreatModelFlowSource` contains `RemoteFlowSource` by default, we
can safely remove the `RemoteSource` from the default of the queries.
2024-02-29 12:03:16 -05:00
Ed Minnix
af749e221b
Remove commented out code
2024-02-29 12:03:13 -05:00
Ed Minnix
f237d2aeda
Refactor to use ThreatModelFlowSource
2024-02-29 12:03:12 -05:00
Ed Minnix
434fa20646
Refactor to using ThreatModelFlowSource
2024-02-29 12:03:05 -05:00
Ed Minnix
1086abca63
Refactor to using ThreatModelFlowSource
2024-02-29 12:03:04 -05:00
Ed Minnix
31d4d0ca57
Move getSourceType to SourceNode
2024-02-29 12:03:00 -05:00
Ed Minnix
f388a0f10c
Deprecate direct uses of RemoteFlowSource and replace with ThreatModelFlowSource
2024-02-29 12:02:57 -05:00
Ed Minnix
bd0137a721
Deprecated direct use of RemoteFlowSource and use ThreatModelFlowSource instead
2024-02-29 12:02:55 -05:00
Michael Nebel
14d046ef18
Merge pull request #15710 from michaelnebel/csharp/refreadonlyparameters
...
C# 12: Ref readonly parameters.
2024-02-29 09:59:12 +01:00
Tom Hvitved
297a17975d
Merge pull request #15665 from hvitved/csharp/variable-capture
...
C#: Adopt shared variable capture library
2024-02-28 15:13:03 +01:00
Michael Nebel
9563705eb3
C#: Add change note.
2024-02-28 14:53:15 +01:00
