yoff
|
e0c027f13c
|
Merge pull request #14848 from hvitved/python/shared-type-tracking
Python: Adopt shared type tracking library
|
2023-12-18 21:14:42 +01:00 |
|
maikypedia
|
a3ae8bd2c0
|
Add change note
|
2023-12-18 12:28:35 +01:00 |
|
maikypedia
|
8b2accca83
|
Add fixes and suggestions
|
2023-12-18 12:20:32 +01:00 |
|
Tom Hvitved
|
020a049d30
|
Merge pull request #15103 from hvitved/ruby/simple-pattern-flow
Ruby: Model simple pattern matching as value steps instead of taint steps
|
2023-12-18 08:49:11 +01:00 |
|
Tom Hvitved
|
25a676ac6a
|
Ruby: Model simple pattern matching as value steps instead of taint steps
|
2023-12-14 20:18:24 +01:00 |
|
Anders Schack-Mulligen
|
a1068ce2f9
|
Dataflow: deprecate references
|
2023-12-14 15:05:33 +01:00 |
|
Tom Hvitved
|
84aa9f17a0
|
Python/Ruby: Use SummaryTypeTracker from typetracking pack
|
2023-12-14 13:25:18 +01:00 |
|
Tom Hvitved
|
c8b4a215bc
|
Merge pull request #14573 from hvitved/flow-summary-impl-param
Move `FlowSummaryImpl.qll` to `dataflow` pack
|
2023-12-14 12:24:15 +01:00 |
|
Tom Hvitved
|
8f0e0b6559
|
Merge pull request #15090 from hvitved/inline-flow-test-get-arg-string
InlineFlowTest: Allow for custom `getArgString`
|
2023-12-14 10:53:55 +01:00 |
|
Jeroen Ketema
|
99e65df6ce
|
Merge remote-tracking branch 'upstream/rc/3.12' into mb12
|
2023-12-13 15:43:39 +01:00 |
|
Tom Hvitved
|
28a2d05cf8
|
InlineFlowTest: Allow for custom getArgString
|
2023-12-13 13:58:44 +01:00 |
|
Tom Hvitved
|
a46964dfe8
|
Address review comments
|
2023-12-12 13:55:52 +01:00 |
|
Harry Maclean
|
f877f7dc64
|
Ruby: Stick to dataflow layer in endpoints query
|
2023-12-11 09:46:09 +00:00 |
|
Tom Hvitved
|
cdf59e1e1d
|
Ruby: Cache more predicates
|
2023-12-11 10:15:17 +01:00 |
|
Tom Hvitved
|
0e81577269
|
Ruby: Use FlowSummaryImpl from dataflow pack
|
2023-12-10 11:25:43 +01:00 |
|
Harry Maclean
|
944fbeb34c
|
Ruby: Update comment
We don't actually generate type models for `extend` relationships yet,
because they are more complex than `include`.
|
2023-12-08 14:54:21 +00:00 |
|
Harry Maclean
|
ece196cb25
|
Ruby: Update model editor tests
|
2023-12-08 14:52:51 +00:00 |
|
Harry Maclean
|
ec24b25c8b
|
Ruby: fix location in model editor query
|
2023-12-08 14:16:50 +00:00 |
|
Harry Maclean
|
e6df264865
|
Ruby: Report module declarations to model editor
This allows us to render type relations between modules/classes, not
just methods.
|
2023-12-08 14:16:49 +00:00 |
|
Harry Maclean
|
c1c258f567
|
Ruby: Include ancestors in type model generation
|
2023-12-08 14:16:49 +00:00 |
|
Anders Schack-Mulligen
|
64eb4ff753
|
Merge pull request #14983 from aschackmull/dataflow/deprecate-old-api
Data Flow: Deprecate old data flow api.
|
2023-12-08 14:27:25 +01:00 |
|
Harry Maclean
|
1dc0a063b0
|
Merge pull request #14679 from hmac/hmac-model-editor-ruby
Ruby: Experimental model editor support
|
2023-12-08 11:03:38 +00:00 |
|
Harry Maclean
|
199c6b224d
|
Ruby: fix warnings
|
2023-12-08 09:16:17 +00:00 |
|
Harry Maclean
|
1b29ed2a81
|
Ruby: Address review comments
|
2023-12-07 14:31:27 +00:00 |
|
Harry Maclean
|
79a83ec74b
|
Ruby: elaborate placeholder query
|
2023-12-07 14:26:15 +00:00 |
|
github-actions[bot]
|
92af5f5386
|
Post-release preparation for codeql-cli-2.15.4
|
2023-12-06 22:59:22 +00:00 |
|
github-actions[bot]
|
c04457e9e7
|
Release preparation for version 2.15.4
|
2023-12-06 21:11:50 +00:00 |
|
Tom Hvitved
|
dde83b6415
|
Merge pull request #14709 from hvitved/ruby/shared-type-tracking
Ruby: Adopt shared type tracking library
|
2023-12-05 20:12:06 +01:00 |
|
Tom Hvitved
|
c6e805faef
|
Ruby: Add more deprecation comments
|
2023-12-05 14:57:15 +01:00 |
|
Harry Maclean
|
d630773575
|
Merge pull request #14627 from alexrford/rb/update_all_sink
Ruby: refine `ActiveRecord` `update_all` as an SQL sink
|
2023-12-04 13:02:14 +00:00 |
|
Anders Schack-Mulligen
|
67f0529cda
|
Dataflow: Sync.
|
2023-12-04 12:36:57 +01:00 |
|
Harry Maclean
|
bd575db254
|
Ruby: Add test for FrameworkModeEndpoints query
|
2023-11-27 14:18:18 +00:00 |
|
Harry Maclean
|
f40f2db3ab
|
Ruby: Fix name of url-redirection sink model
|
2023-11-27 11:25:37 +00:00 |
|
Harry Maclean
|
6a38223127
|
Ruby: QL4QL fix
|
2023-11-27 10:17:31 +00:00 |
|
Harry Maclean
|
e9277a56a9
|
Ruby: Add sinks from external models
|
2023-11-27 09:18:00 +00:00 |
|
Harry Maclean
|
ad608341ab
|
Ruby: Handle alternative gemspec names
Gemspecs are sometimes named via the first argument to
`Gem::Specification.new`:
```rb
Gem::Specification.new 'sinatra' do |s|
# ...
end
```
|
2023-11-27 09:18:00 +00:00 |
|
Harry Maclean
|
9b998a39b4
|
Ruby: Add tags to GenerateModel query
This allows the model editor to find this query in a more robust way
than by file path.
|
2023-11-27 09:18:00 +00:00 |
|
Harry Maclean
|
b9d15bacba
|
Ruby: Don't classify our test files as test files
For model editing purposes.
|
2023-11-27 09:17:59 +00:00 |
|
Harry Maclean
|
064b10a5cb
|
Ruby: Handle missing gemspec in model query
|
2023-11-27 09:17:59 +00:00 |
|
Harry Maclean
|
9dcc424f8c
|
Ruby: Include keyword parameters endpoint query
|
2023-11-27 09:17:59 +00:00 |
|
Harry Maclean
|
5dcc3d43ca
|
Ruby: Recognise modeled source/sink methods
|
2023-11-27 09:17:59 +00:00 |
|
Harry Maclean
|
766e68aa36
|
Ruby: Handle multiple gemspecs in endpoints query
|
2023-11-27 09:17:59 +00:00 |
|
Harry Maclean
|
c54743c3fd
|
Ruby: Include class methods in model editor query
|
2023-11-27 09:17:59 +00:00 |
|
Harry Maclean
|
78125a701d
|
Ruby: Model Editor support
Add experimental support for the CodeQL Model Editor.
|
2023-11-27 09:17:59 +00:00 |
|
Tom Hvitved
|
9eaebfcf60
|
Merge pull request #14859 from hvitved/ruby/missing-flow-tests
Ruby: Add tests illustrating missing flow
|
2023-11-24 14:57:15 +01:00 |
|
Harry Maclean
|
d239a30866
|
Merge pull request #14874 from hmac/hmac-missing-flow-test
Ruby: Add test for missing block flow
|
2023-11-24 13:44:55 +00:00 |
|
Tom Hvitved
|
8ccce5891d
|
Ruby: Add tests illustrating missing flow
|
2023-11-24 14:28:04 +01:00 |
|
Harry Maclean
|
288fbfd2ec
|
Ruby: Add test for missing block flow
|
2023-11-22 09:59:55 +00:00 |
|
amammad
|
2097a001b9
|
apply code review suggestions, fix qldoc, add experimental additional taint steps that can improve performance
|
2023-11-22 10:01:51 +01:00 |
|
Tom Hvitved
|
1a6886cf99
|
SSA: Add locations to ease debugging
|
2023-11-22 08:37:02 +01:00 |
|