Chris Smowton
d8a2c08f12
Revert "Convert Xorm sql-injection sinks to MaD"
...
This reverts commit 3b2b7d7d1c
2024-08-24 17:43:03 +01:00
Chris Smowton
59bb142e8b
Revert "Convert Bun sql-injection sinks to MaD"
...
This reverts commit 3eb5b2669b
2024-08-24 17:43:00 +01:00
Chris Smowton
ec59492866
Revert "Convert Beego orm sql-injection sinks to MaD"
...
This reverts commit ad213579a1
2024-08-24 17:42:57 +01:00
Chris Smowton
fa07f16bcc
Revert "Convert database/sql sql-injection sinks to MaD"
...
This reverts commit 501bb3eb56
2024-08-24 17:42:55 +01:00
Chris Smowton
b3326babba
Revert "Convert database/sql/driver sql-injection sinks to MaD"
...
This reverts commit 652dd88c36
2024-08-24 17:42:52 +01:00
Chris Smowton
c33568b602
Revert "Convert mongodb nosql-injection sinks to MaD"
...
This reverts commit ec9d88b364
2024-08-24 17:42:49 +01:00
Chris Smowton
437df5c2a5
Revert "Convert gocb nosql-injection sinks to MaD"
...
This reverts commit 2d2afb17ad
2024-08-24 17:42:45 +01:00
Chris Smowton
a6e3b913d0
Revert "Convert logging sinks to use MaD"
...
This reverts commit fa472f5e18
2024-08-24 17:39:24 +01:00
Chris Smowton
686f47af98
Revert "Fix typo in package path"
...
This reverts commit 6f5a045437
2024-08-24 17:34:34 +01:00
Chris Smowton
67d94376e8
Merge pull request #17227 from smowton/smowton/fix/baseline-vs-nonroot-vendor-dirs
...
Go / configure-baseline: account for multiple vendor directories and the `CODEQL_EXTRACTOR_GO_EXTRACT_VENDOR_DIRS` setting
2024-08-22 15:00:51 +01:00
Owen Mansel-Chan
2edadbf423
Try to fix packages in frameworks coverage
2024-08-22 11:44:34 +01:00
github-actions[bot]
17cd9624fb
Release preparation for version 2.18.3
2024-08-21 17:13:52 +00:00
Edward Minnix III
2aa3e1f7a2
Alphabetize models
...
Co-authored-by: Owen Mansel-Chan <62447351+owen-mc@users.noreply.github.com >
2024-08-21 09:44:20 -04:00
Edward Minnix III
210ea5be79
Add model from older versions of caarlos0/env
...
Co-authored-by: Owen Mansel-Chan <62447351+owen-mc@users.noreply.github.com >
2024-08-21 09:43:58 -04:00
Edward Minnix III
7ae52425ce
Update package list in change note
2024-08-21 09:43:24 -04:00
Edward Minnix III
318a376a78
Remove ProcAttr models
...
Co-authored-by: Owen Mansel-Chan <62447351+owen-mc@users.noreply.github.com >
2024-08-21 09:43:04 -04:00
Ed Minnix
0eddaa0664
syscall environment variables
2024-08-21 00:36:48 -04:00
Ed Minnix
9f00a0060d
gobuffalo/envy
2024-08-21 00:30:36 -04:00
Ed Minnix
8a7e378b40
caarlos0/env
2024-08-21 00:06:10 -04:00
Edward Minnix III
47974914a5
Apply suggestions from code review
...
Co-authored-by: Owen Mansel-Chan <62447351+owen-mc@users.noreply.github.com >
2024-08-21 00:05:53 -04:00
Ed Minnix
69f02293f5
Add change note
2024-08-21 00:03:29 -04:00
Ed Minnix
65a6fa7bc3
Go Environment variable (parsing) models and tests
2024-08-21 00:03:18 -04:00
Edward Minnix III
6103749188
Merge pull request #16710 from egregius313/egregius313/go/dataflow/file-sources
...
Go: Add `file` sources
2024-08-20 23:45:17 -04:00
Owen Mansel-Chan
f0fe3a3388
Merge pull request #17260 from owen-mc/go/mad/convert-sink-5
...
Go: Allow MaD models for XSS sinks using "html-injection" or "js-injection"
2024-08-20 22:40:44 +01:00
Edward Minnix III
e066c52ac6
Update change note
...
Co-authored-by: Owen Mansel-Chan <62447351+owen-mc@users.noreply.github.com >
2024-08-20 12:33:38 -04:00
Chris Smowton
fc301206d1
Change note
2024-08-20 17:11:58 +01:00
Owen Mansel-Chan
30f8d6e4ff
Allow MaD models for XSS sinks using "html-injection" or "js-injection"
2024-08-20 14:04:23 +01:00
Anders Schack-Mulligen
993bfee096
Merge pull request #17259 from aschackmull/dataflow/remove-srcsink-grouping
...
Dataflow: Remove src/sink grouping feature
2024-08-20 14:42:33 +02:00
Anders Schack-Mulligen
8470e91c16
Legacy Dataflow: Sync.
2024-08-20 10:07:57 +02:00
Ed Minnix
e3ffbbe3b7
Fix extensible name in io/fs models
2024-08-19 19:02:07 -04:00
Ed Minnix
2629e09b67
Add io/ioutil and io/fs models
2024-08-19 17:22:46 -04:00
Ed Minnix
704cd8aee3
Update change note
2024-08-19 12:28:55 -04:00
Edward Minnix III
fc38476e42
Fix models
...
Co-authored-by: Owen Mansel-Chan <62447351+owen-mc@users.noreply.github.com >
2024-08-19 12:25:55 -04:00
Ed Minnix
0f7ad98a23
Change note
2024-08-19 12:25:48 -04:00
Ed Minnix
383e27c2bd
Add file sources
2024-08-19 12:25:27 -04:00
Owen Mansel-Chan
2d2afb17ad
Convert gocb nosql-injection sinks to MaD
2024-08-16 11:19:15 +01:00
Owen Mansel-Chan
ec9d88b364
Convert mongodb nosql-injection sinks to MaD
2024-08-16 11:19:13 +01:00
Owen Mansel-Chan
86e9f15929
Accept MaD sinks with kind nosql-injection
2024-08-16 11:19:12 +01:00
Owen Mansel-Chan
ced000ae46
Add Argument.getACorrespondingSyntacticArgument
2024-08-16 11:19:09 +01:00
Owen Mansel-Chan
652dd88c36
Convert database/sql/driver sql-injection sinks to MaD
2024-08-16 11:19:06 +01:00
Owen Mansel-Chan
501bb3eb56
Convert database/sql sql-injection sinks to MaD
2024-08-16 11:19:03 +01:00
Owen Mansel-Chan
ad213579a1
Convert Beego orm sql-injection sinks to MaD
2024-08-16 11:19:01 +01:00
Owen Mansel-Chan
3eb5b2669b
Convert Bun sql-injection sinks to MaD
2024-08-16 11:18:58 +01:00
Owen Mansel-Chan
3b2b7d7d1c
Convert Xorm sql-injection sinks to MaD
2024-08-16 11:18:57 +01:00
Owen Mansel-Chan
ba310417a8
Convert Gorm sql-injection sinks to MaD
2024-08-16 11:18:55 +01:00
Owen Mansel-Chan
7ad63fc3e6
Convert sqlx sql-injection sinks to MaD
2024-08-16 11:18:54 +01:00
Owen Mansel-Chan
db559f75b6
Convert gogf/gf sql-injection sinks to MaD
2024-08-16 11:18:52 +01:00
Owen Mansel-Chan
ce0cb12c29
Upgrade and convert gorqlite sql-injection sinks to MaD
2024-08-16 11:18:51 +01:00
Owen Mansel-Chan
06f86dd22f
Convert squirrel sql-injection sinks to MaD (non-existent methods removed)
...
Various non-existent methods were modeled, and I couldn't find any
evidence that they used to exist. They aren't in the stubs or tests. I
have removed them.
2024-08-16 11:18:49 +01:00
Owen Mansel-Chan
0dfdee775b
Merge pull request #17177 from owen-mc/go/mad/convert-sink-3
...
Go: convert regex-use, url-redirection sinks to use models-as-data
2024-08-12 16:21:48 +01:00
