Joe Farebrother
a022893f0f
Add additional example to qhelp + additional resource
2023-09-15 10:25:27 +01:00
Joe Farebrother
9f25c71ca6
Apply minor reveiw suggstions
2023-09-15 10:25:26 +01:00
Joe Farebrother
4967fe0b77
Add change note + update query ID
2023-09-15 10:25:26 +01:00
Joe Farebrother
3e6750ba4c
Add documentation
2023-09-15 10:25:26 +01:00
Joe Farebrother
f8b1b38438
Update alert message and make user checks more precise
2023-09-15 10:25:26 +01:00
Joe Farebrother
2edd73eb60
Fix typos in filepath + metadata, add severity
2023-09-15 10:25:26 +01:00
Joe Farebrother
251f875304
Fix filenme typo
2023-09-15 10:25:26 +01:00
Joe Farebrother
5d1289672b
Add IDOR query
2023-09-15 10:25:26 +01:00
Koen Vlaswinkel
585fb9db7e
C#: Add VS Code model editor queries
2023-09-13 13:12:55 +02:00
github-actions[bot]
d699880c86
Post-release preparation for codeql-cli-2.14.4
2023-09-08 21:17:52 +00:00
github-actions[bot]
abf2b12b1c
Release preparation for version 2.14.4
2023-09-05 16:56:14 +00:00
Alex Eyers-Taylor
24b679d5a0
CPP: Fix IR formatting.
2023-08-29 11:17:44 +01:00
Alex Eyers-Taylor
3b344c3578
CPP: Handle cases where the deallocator function is determined dynamically.
2023-08-29 11:17:44 +01:00
Bradley Grainger
d10597f69d
Delete thin space from documentation.
...
Update the MSDN link to avoid an unnecessary redirection and use the correct anchor.
2023-08-28 11:02:38 -07:00
github-actions[bot]
3eba77421a
Post-release preparation for codeql-cli-2.14.3
2023-08-28 15:53:49 +00:00
github-actions[bot]
098dfb4242
Release preparation for version 2.14.3
2023-08-18 14:48:15 +00:00
Tom Hvitved
7cc01ea8b5
Merge pull request #13595 from hvitved/csharp/use-shared-cfg-pack
...
C#: Adopt shared CFG construction library from shared `controlflow` pack
2023-08-17 10:37:09 +02:00
Henry Mercer
1213eba630
Merge branch 'main' into post-release-prep/codeql-cli-2.14.2
2023-08-11 13:54:55 +01:00
github-actions[bot]
432c21d4fb
Post-release preparation for codeql-cli-2.14.2
2023-08-09 18:45:18 +00:00
Michael Nebel
1a511c2d52
C#: Update the queries that provide LINQ recommendation.
2023-08-08 10:31:33 +02:00
github-actions[bot]
79c90fa36a
Release preparation for version 2.14.2
2023-08-07 18:08:52 +00:00
Tom Hvitved
b69188fee9
C#: Adopt shared CFG construction library from shared controlflow pack
2023-08-03 14:12:24 +02:00
Chris Smowton
c69a9ea032
Merge pull request #13793 from github/post-release-prep/codeql-cli-2.14.1
...
Post-release preparation for codeql-cli-2.14.1
2023-07-26 17:22:05 +01:00
github-actions[bot]
f91b7a9342
Post-release preparation for codeql-cli-2.14.1
2023-07-21 16:16:25 +00:00
github-actions[bot]
c936a920b0
Release preparation for version 2.14.1
2023-07-20 16:32:27 +00:00
Jeroen Ketema
2a63116fc2
C++: Rename shouldPrintFunction to shouldPrintDeclaration
2023-07-19 16:55:43 +02:00
Anders Schack-Mulligen
91de43f918
C#/Java/Ruby: Remove superfluous module members.
2023-07-13 11:38:35 +02:00
github-actions[bot]
13cf054a9d
Post-release preparation for codeql-cli-2.14.0
2023-07-07 14:55:41 +00:00
github-actions[bot]
6484ee106e
Release preparation for version 2.14.0
2023-07-07 08:22:14 +00:00
Dave Bartolomeo
9631e9f2f1
Bump minor version numbers post-GHES
2023-07-06 10:10:01 -04:00
Dave Bartolomeo
2bb9adfbf1
Merge remote-tracking branch 'origin/main' into dbartol/mergeback-3.10
2023-07-06 10:00:46 -04:00
Joe Farebrother
c10a66809d
Merge pull request #13094 from joefarebrother/csharp-missing-access-control
...
C#: Add query for missing function level access control
2023-07-05 17:40:59 +01:00
Joe Farebrother
a53bf4ddd7
Apply doc review suggestions
2023-07-05 15:37:48 +01:00
Michael Nebel
3cde59e409
Merge pull request #13651 from michaelnebel/telemetrytop100
...
Java/C#: Reduce the amount of telemetry being produced.
2023-07-04 08:33:53 +02:00
Michael Nebel
23a119b8c2
Java/C#: Reduce the amount of telemetry being produced.
2023-07-03 16:54:07 +02:00
Chuan-kai Lin
ce464a7d69
Remove pragma[assume_small_delta]
2023-06-30 11:09:29 -07:00
github-actions[bot]
668aaa2dc8
Post-release preparation for codeql-cli-2.13.5
2023-06-30 08:51:48 +00:00
github-actions[bot]
9d7987f822
Release preparation for version 2.13.5
2023-06-29 09:26:18 +00:00
Koen Vlaswinkel
6812389fc8
C#: Fix external API name for nested types
...
This fixes the name of reported external APIs for nested types. The
`getDeclaringType().getUnboundDeclaration()`'s `toString()` method
reports the name of the type, but not the name of the declaring type.
This results in missing information in the
`UnsupportedExternalAPIs.ql` query.
For example, previously it would report:
```
GitHub.Nested#NestedClass.Test()
```
However, the `NestedClass` class does not exist in the namespace and is
only a nested type within `MyFirstClass`. The correct name should be:
```
GitHub.Nested#MyFirstClass+NestedClass.Test()
```
This name also matches the format of MaD.
2023-06-27 16:31:06 +02:00
Joe Farebrother
270bcc3740
fix qhelp and remove commented out code
2023-06-22 11:20:58 +01:00
Henry Mercer
5afdaf8fe1
Merge pull request #13525 from github/rc/3.10
...
Merge `rc/3.10` back to `main`
2023-06-21 17:13:36 +01:00
Joe Farebrother
8fdec4f116
Add documentation
2023-06-20 17:18:04 +01:00
github-actions[bot]
18b678e69e
Post-release preparation for codeql-cli-2.13.4
2023-06-20 10:20:05 +00:00
Tony Torralba
8f6d2ed2f9
Adjust ZipSlip query description according to review suggestions.
2023-06-19 10:27:41 +02:00
Tony Torralba
3c4d938cf1
Apply code review suggestions.
...
Co-authored-by: Asger F <asgerf@github.com >
2023-06-19 10:20:19 +02:00
Tony Torralba
433fc680ec
Apply suggestions from code review
...
Co-authored-by: mc <42146119+mchammer01@users.noreply.github.com >
2023-06-19 10:17:40 +02:00
Tony Torralba
c97868f774
Add change notes
2023-06-16 09:01:02 +02:00
Tony Torralba
3e96fe60c5
Go/Java/JS/Python/Ruby: Update the description and qhelp of the ZipSlip query
...
All filesystem operations, not just writes, with paths built from untrusted archive entry names are dangerous
2023-06-16 08:52:44 +02:00
Joe Farebrother
12bb418375
Add change note
2023-06-14 16:12:34 +01:00
Joe Farebrother
e93f3186fe
Add missing function level access control query
2023-06-14 16:07:40 +01:00
