1488 Commits

Author	SHA1	Message	Date
Dave Bartolomeo	311ba8ea1b	Merge from main to resolve conflicts	2024-03-19 10:41:31 -04:00
Michael Nebel	70c6744944	Java/Go/Swift: Sync changes.	2024-03-19 14:20:43 +01:00
Tom Hvitved	fc55567d90	Merge pull request #15853 from hvitved/dataflow/get-location ... Data flow: Replace `hasLocationInfo` with `getLocation`	2024-03-18 20:21:46 +01:00
github-actions[bot]	aebe9f6992	Post-release preparation for codeql-cli-2.16.5	2024-03-18 12:16:26 +00:00
github-actions[bot]	0a6243d07b	Release preparation for version 2.16.5	2024-03-18 10:14:07 +00:00
Tony Torralba	d8c0ab8e1f	Go: Consider more strings as hardcoded credentials	2024-03-14 10:11:39 +01:00
Tom Hvitved	e4a4c18166	Go: Implement new data flow interface	2024-03-13 14:41:57 +01:00
Tom Hvitved	dddba3228b	Merge pull request #15867 from hvitved/dataflow/ap-limit ... Data flow: Add `ConfigSig::accessPathLimit`	2024-03-12 14:57:51 +01:00
Kevin Stubbings	5acc15bfff	fix grammar	2024-03-11 20:13:08 -07:00
Kevin Stubbings	30fe4168e3	Removed filepath.base sanitizer	2024-03-11 15:08:10 -07:00
Kevin Stubbings	c4c0b22bc7	Formattinga and change notes	2024-03-11 14:54:30 -07:00
Kevin Stubbings	c9b49d3760	resolve feedback	2024-03-11 14:54:28 -07:00
Kevin Stubbings	530c76ca8b	Add New Sanitizers and Modify Old Ones	2024-03-11 14:53:29 -07:00
Tom Hvitved	da66281fef	Sync files	2024-03-11 13:02:04 +01:00
Tony Torralba	7d74125508	Go: Promote go/uncontrolled-allocation-size	2024-03-07 15:17:49 +01:00
github-actions[bot]	dc9092c9ec	Post-release preparation for codeql-cli-2.16.4	2024-03-06 22:19:33 +00:00
github-actions[bot]	2f058ffb4d	Release preparation for version 2.16.4	2024-03-06 20:56:51 +00:00
Angela P Wen	ce31f8641a	Revert "Release preparation for version 2.16.4"	2024-03-06 12:07:33 -08:00
Tony Torralba	f4c2e65614	Merge pull request #15812 from atorralba/atorralba/go/squirrel-sinks ... Go: Add SQLi sinks for Squirrel	2024-03-06 12:09:19 +01:00
github-actions[bot]	661e68dab5	Release preparation for version 2.16.4	2024-03-05 18:13:58 +00:00
Angela P Wen	967963a653	Revert "Release preparation for version 2.16.4"	2024-03-05 08:53:33 -08:00
Tony Torralba	e78e71c875	List Squirrel builders explicitly	2024-03-05 16:05:22 +01:00
Tony Torralba	a264ea23c6	Go: Add SQLi sinks for Squirrel	2024-03-05 15:35:34 +01:00
Owen Mansel-Chan	8e43c5c683	Merge pull request #15811 from owen-mc/go/limit-password-heuristics ... Go: Only check strings of length <= 100 for dummy password with <= 2 unique characters	2024-03-05 13:42:26 +00:00
Owen Mansel-Chan	4dde1fb117	Only check strings of length <= 100 for dummy password with <= 2 unique characters	2024-03-05 11:45:17 +00:00
Tony Torralba	a78e04eb34	Merge pull request #15795 from atorralba/atorralba/go/macaron-sources ... Go: Add Macaron sources	2024-03-05 09:08:58 +01:00
github-actions[bot]	a67218a027	Release preparation for version 2.16.4	2024-03-04 17:42:08 +00:00
Tony Torralba	fc12537699	Go: Add Macaron sources	2024-03-04 14:29:56 +01:00
Michael B. Gale	a8ae2e2525	Go: Add changenote for autobuilder refactor	2024-03-04 12:02:51 +00:00
Chris Smowton	9f84653283	Merge pull request #15613 from smowton/smowton/fix/golang-map-range-read-dataflow ... Golang: fix flow from a map value via a range statement	2024-02-27 15:42:43 +00:00
Chris Smowton	d57160db5c	Direct map stores via a post-update node	2024-02-23 16:37:26 +00:00
Tom Hvitved	62b16c0fa3	Share getFileBySourceArchiveName implementation	2024-02-23 11:25:49 +01:00
github-actions[bot]	37f8fa3413	Post-release preparation for codeql-cli-2.16.3	2024-02-20 16:50:47 +00:00
github-actions[bot]	6d061fbc35	Release preparation for version 2.16.3	2024-02-20 14:26:23 +00:00
Tony Torralba	f9638760ff	Fix MaD rows	2024-02-14 17:25:08 +01:00
Tony Torralba	5a82d2188a	Fix double quotes in MaD row	2024-02-14 17:25:08 +01:00
Tony Torralba	ad7d40f0af	Add missing QLDoc	2024-02-14 17:25:08 +01:00
Tony Torralba	2a30898af6	Go: Promote go/missing-jwt-signature-check from experimental	2024-02-14 17:25:03 +01:00
Chris Smowton	7ed73bc4ed	change note	2024-02-14 15:45:03 +00:00
Chris Smowton	9016997b51	Golang: fix flow from a map value via a range statement	2024-02-14 14:56:24 +00:00
Tony Torralba	458bbb3581	Rename fwk module	2024-02-14 12:23:27 +01:00
Tony Torralba	16284fdd20	Discard sources that are obvious dummy values	2024-02-14 12:21:52 +01:00
Tony Torralba	a76de495e0	Simplify sanitizers ... Use DataFlow::returnedWithError instead	2024-02-14 12:21:51 +01:00
Tony Torralba	6b74cb7e75	Remove unneeded $ANYVERSION	2024-02-14 12:21:51 +01:00
Tony Torralba	3fb422ca25	Split Jwt.qll into framework libraries, which makes more sense	2024-02-14 12:21:38 +01:00
Tony Torralba	8afaa231ee	Update go/ql/lib/semmle/go/security/Jwt.qll	2024-02-14 12:15:20 +01:00
Tony Torralba	84d1d72497	Apply suggestions from code review ... Co-authored-by: Chris Smowton <smowton@github.com>	2024-02-14 12:15:19 +01:00
Tony Torralba	ba1faea630	Go: Promote go/hardcoded-key from experimental	2024-02-14 12:15:14 +01:00
Michael B. Gale	205847df64	Go: Add DummyFile class	2024-02-13 17:49:31 +00:00
Michael B. Gale	c6f4495ada	Go: Exclude dummy files from File	2024-02-13 17:46:41 +00:00