Harry Maclean
bf3b86b402
Add test for erb flow
2024-01-30 20:30:58 +01:00
Tom Hvitved
2d95ac9d5f
Merge pull request #15468 from hvitved/ruby/ctx-sensitivity-rework
2024-01-30 20:27:43 +01:00
Arthur Baars
4591560692
Merge pull request #14544 from p-/p--oj-ox-unsafe-deser
...
Ruby: additional unsafe deserialization sinks for ox and one for oj
2024-01-30 19:28:32 +01:00
Peter Stöckli
fb075a9e88
Rename 2023-10-19-unsafe-deserialization-sinks.md to 2024-01-30-unsafe-deserialization-sinks.md
2024-01-30 17:31:33 +01:00
Sid Shankar
f557110d9b
Merge pull request #15465 from sidshank/sidshank/rename-file-name-for-extracted-files-diagnostic
...
JS/TS/Python/Ruby: Renames diagnostic query files and tests
2024-01-30 10:19:00 -05:00
Koen Vlaswinkel
0442631c68
Ruby: Only generate models for public methods
2024-01-30 16:07:34 +01:00
Koen Vlaswinkel
8aa3542d13
Merge pull request #15470 from github/koesie10/add-summary-neutral-ruby-supported
...
Ruby: Correctly report supported status of summary and neutral models
2024-01-30 15:46:45 +01:00
Peter Stöckli
1947dee46a
Merge branch 'main' into p--oj-ox-unsafe-deser
2024-01-30 15:33:39 +01:00
Peter Stöckli
9596aebee3
Format: getValue now on one line
2024-01-30 15:22:16 +01:00
Peter Stöckli
3c8bc96ab5
replace occurence of AssignExprCfgNode for Oj as well
2024-01-30 15:17:37 +01:00
Peter Stöckli
e87effc18c
Apply suggestions from code review
...
Co-authored-by: Arthur Baars <aibaars@github.com >
2024-01-30 15:14:35 +01:00
Koen Vlaswinkel
b32071999b
Ruby: Correctly report supported status of summary and neutral models
2024-01-30 15:00:13 +01:00
Harry Maclean
f230e618a3
Ruby: Update tests
2024-01-30 09:43:56 +00:00
Tom Hvitved
503d2f7b95
Ruby: Rework mayBenefitFromCallContext
2024-01-30 09:57:29 +01:00
Harry Maclean
75b13da4e4
Ruby: Block flow from LHS of && expressions
...
The only values that can flow from the LHS of an && expression are
`false` and `nil`, neither of which seem relevant for any of our
queries.
2024-01-30 08:53:32 +00:00
Sid Shankar
b1d7a635f5
Renames diagnostic query files and tests
...
This commit renames the files relating to the diagnostic query that produces information on the number of files extracted. The files have been renamed from "SuccessfullExtractedFiles.*" to "ExtractedFiles.*". All related tests and test files have been renamed too.
The `@tags` and `@id` attributes of the queries have been left untouched, consistent with the `@tags` and `@id` for similar queries in other languages.
2024-01-29 20:19:20 +00:00
Maiky
c2c4d9e4d1
` change to <code>
...
Co-authored-by: intrigus-lgtm <60750685+intrigus-lgtm@users.noreply.github.com >
2024-01-27 14:08:55 +01:00
maikypedia
d7314a1689
File format
2024-01-27 14:07:36 +01:00
github-actions[bot]
d0b74c00fe
Post-release preparation for codeql-cli-2.16.1
2024-01-23 23:02:29 +00:00
github-actions[bot]
7ef611e6dc
Release preparation for version 2.16.1
2024-01-23 19:45:16 +00:00
erik-krogh
865df920f9
add change-notes
2024-01-22 19:30:57 +01:00
erik-krogh
8be7eadace
delete outdated deprecations
2024-01-22 09:11:35 +01:00
Sid Shankar
2c683c910f
Merge branch 'change/adjust-extracted-files-diagnostics' of https://github.com/sidshank/codeql into change/adjust-extracted-files-diagnostics
2024-01-17 14:32:36 +00:00
Sid Shankar
0824ab77e9
Adds change notes
2024-01-17 14:31:40 +00:00
Sid Shankar
59098be8c4
Merge branch 'main' into change/adjust-extracted-files-diagnostics
2024-01-16 21:51:41 -05:00
Alexander Eyers-Taylor
934474681d
Merge pull request #15254 from github/post-release-prep/codeql-cli-2.16.0
...
Post-release preparation for codeql-cli-2.16.0
2024-01-16 14:50:40 +00:00
github-actions[bot]
57df8b92df
Post-release preparation for codeql-cli-2.16.0
2024-01-15 15:00:50 +00:00
Tom Hvitved
295198744b
Ruby: Handle captured yield calls
2024-01-10 14:25:15 +01:00
Tom Hvitved
55be4c39ef
Ruby: Add data flow call sensitivity test
2024-01-10 14:25:12 +01:00
Tom Hvitved
c9cf2a899c
Merge pull request #15260 from hvitved/dataflow/may-benefit-from-cctx-simplify
...
Data flow: Remove column from `mayBenefitFromCallContext`
2024-01-10 11:43:15 +01:00
Tom Hvitved
f90201eb56
Data flow: Remove column from mayBenefitFromCallContext
2024-01-09 11:34:43 +01:00
maikypedia
6c8fbe877d
Changes
2024-01-09 00:46:41 +01:00
Sid Shankar
b26fef816a
Rb: Report any extracted file as successfully extracted
2024-01-08 22:21:30 +00:00
Alex Ford
ef8ca55d92
Merge pull request #15203 from pwntester/patch-3
...
Ruby: Update Kernel.qll to include `Object.send` aliases
2024-01-08 15:32:57 +00:00
Chuan-kai Lin
a743fca3a5
Merge pull request #15243 from github/cklin/upgrade-delete-fixes-ruby
...
Ruby: Fix upgrade delete directives
2024-01-08 07:27:59 -08:00
github-actions[bot]
a6c8cc9551
Release preparation for version 2.16.0
2024-01-08 13:11:26 +00:00
Arthur Baars
f4df5c9556
Merge pull request #15224 from aibaars/ruby-update-grammar
...
Ruby: update tree-sitter-ruby
2024-01-08 11:01:42 +01:00
Alvaro Muñoz
dbefc132de
Apply suggestions from code review
...
Co-authored-by: Alex Ford <alexrford@users.noreply.github.com >
2024-01-07 10:31:50 +01:00
Chuan-kai Lin
66d2b9b7d2
Ruby: Fix upgrade delete directives
2024-01-05 14:21:52 -08:00
Alvaro Muñoz
9146407f23
Add [] to the list of methods returning an `ActionController::Parameters"
2024-01-05 15:14:11 +01:00
Arthur Baars
20022b6f3a
Add test case
2024-01-05 14:39:30 +01:00
Arthur Baars
aad42b1b0d
Add change note
2024-01-05 14:36:52 +01:00
Arthur Baars
6ed7223167
Ruby: update tree-sitter-ruby
2024-01-05 14:33:14 +01:00
Harry Maclean
c96be39474
Merge pull request #15048 from hmac/hmac-model-editor-ruby-modules
...
Ruby: Model editor improvements
2024-01-03 12:53:43 +00:00
Harry Maclean
22830c7311
Ruby: Address review comments
2024-01-02 14:39:53 +00:00
Harry Maclean
4c6855ed93
Ruby: Address review comments
2024-01-02 13:51:12 +00:00
Alvaro Muñoz
2964aef083
Update Kernel.qll to include send aliases
...
Add `public_send` and `__send__` as Code Injection sinks as proposed by @vcsjones
2023-12-28 19:08:03 +01:00
Aditya Sharad
b1803d0ac2
Merge rc/3.12 into main
2023-12-21 16:40:51 -08:00
github-actions[bot]
8f72b0e4f7
Post-release preparation for codeql-cli-2.15.5
2023-12-19 10:32:57 +00:00
github-actions[bot]
19af35b29a
Release preparation for version 2.15.5
2023-12-18 21:22:44 +00:00
