2197 Commits

Author	SHA1	Message	Date
github-actions[bot]	8dcd8b9e5b	Post-release preparation for codeql-cli-2.15.1	2023-10-17 20:24:00 +00:00
github-actions[bot]	3b3c036626	Release preparation for version 2.15.1	2023-10-16 17:49:39 +00:00
Joe Farebrother	fe2468e7d0	Merge pull request #14498 from joefarebrother/csharp-missing-access-control ... C#: Fix FP in Missing Function Level Access Control and Insecure Direct Object Reference	2023-10-16 10:46:19 +01:00
Joe Farebrother	915352861d	Check for generic base types in Missing Function Level Access Control and Insecure Direct Object Reference.	2023-10-13 14:22:45 +01:00
Tony Torralba	0cea3f8531	Remove library annotations	2023-10-13 12:46:56 +02:00
Henry Mercer	1a370bfbbe	Merge pull request #14443 from github/post-release-prep/codeql-cli-2.15.0 ... Post-release preparation for codeql-cli-2.15.0	2023-10-11 17:39:04 +01:00
github-actions[bot]	ae6af17c74	Post-release preparation for codeql-cli-2.15.0	2023-10-11 14:19:20 +00:00
Tamas Vajk	267fd23b26	C#: Include the void type in value types	2023-10-11 12:01:17 +02:00
Tamas Vajk	4c6073ebce	C#: Remove keyset from metadata_handle relation	2023-10-10 16:49:48 +02:00
erik-krogh	a7ab9fd93b	add change-notes	2023-10-09 09:43:06 +02:00
erik-krogh	4bc4e0845d	delete the deprecated isBarrierGuard predicate from the shared dataflow library, and its uses	2023-10-07 21:48:49 +02:00
Cornelius Riemenschneider	96edc1d349	Add skeleton bazel files for accessing the dbschemes.	2023-10-05 09:00:38 +02:00
github-actions[bot]	9fe993bec3	Release preparation for version 2.15.0	2023-10-04 14:15:27 +00:00
Henry Mercer	da92da2204	Bump minor versions of packs we regularly release	2023-10-03 16:31:23 +01:00
Henry Mercer	f3847b3f51	Merge branch 'main' into henrymercer/rc-3.11-mergeback	2023-10-03 16:30:23 +01:00
Asger F	0d96ed8aee	Merge pull request #14305 from asgerf/shared/flow-state-inout-barriers ... Shared: add in/out barriers with flow state	2023-09-28 11:07:23 +02:00
Anders Schack-Mulligen	5feb2f7622	Merge pull request #14321 from aschackmull/shared/filesystem ... All languages: Use shared FileSystem library and minor regex performance improvement.	2023-09-28 10:51:05 +02:00
Koen Vlaswinkel	0f4f98787c	Merge pull request #14200 from github/koesie10/add-csharp-model-editor-queries ... C#: Add VS Code model editor queries	2023-09-28 10:12:57 +02:00
Anders Schack-Mulligen	20cbab9e8f	C#: Minor simplification.	2023-09-28 08:58:55 +02:00
Joe Farebrother	7c230d61a8	Merge pull request #13882 from joefarebrother/csharp-insecure-direct-object-ref ... C#: Add query for Insecure Direct Object Reference	2023-09-25 20:29:54 +01:00
Tom Hvitved	4183fbe7cb	Merge pull request #14295 from hvitved/csharp/lambda-type-flow ... C#: Improve lambda dispatch using type flow	2023-09-25 19:19:51 +02:00
Joe Farebrother	d7c1be40d9	Fix codescanning alert by tweaking imported modules	2023-09-25 15:47:05 +01:00
Tom Hvitved	ae06040a48	Address review comments	2023-09-25 14:30:08 +02:00
Asger F	d501856519	Update DataFlowImpl.qll copies	2023-09-25 10:05:29 +02:00
Tom Hvitved	8f35c99f16	C#: Improve lambda dispatch using type flow	2023-09-23 11:41:03 +02:00
Anders Schack-Mulligen	66da997b7b	Dataflow: Make use of defaults for language-specific hooks.	2023-09-22 14:54:22 +02:00
Tom Hvitved	13ad6f8690	C#: Add missing flow summary for List<T>.ForEach	2023-09-22 13:48:32 +02:00
Michael Nebel	45432f211c	C#: Identify whether callables in the source code are supported in terms of MaD.	2023-09-20 13:01:24 +02:00
github-actions[bot]	3acf5244b0	Post-release preparation for codeql-cli-2.14.6	2023-09-20 10:25:10 +00:00
Joe Farebrother	475fe3a2a5	Attempt to improve performance in checksUser	2023-09-20 03:18:20 +01:00
github-actions[bot]	0a3670727f	Release preparation for version 2.14.6	2023-09-19 11:40:30 +00:00
Anders Schack-Mulligen	b13d026434	Dataflow: Review fixes.	2023-09-18 13:15:26 +02:00
Joe Farebrother	68ad5b7c00	Restrict logic for checking for id parameters on index expressions for performance	2023-09-15 16:35:29 +01:00
Joe Farebrother	6d704be7d2	Rewrite checks for index expressions in terms of dataflow	2023-09-15 10:25:27 +01:00
Joe Farebrother	a2dce6be14	Check for authorize attributes in more namespaces and on overridden methods	2023-09-15 10:25:27 +01:00
Joe Farebrother	ac45050545	Add checks for authorization attributes	2023-09-15 10:25:27 +01:00
Joe Farebrother	0a27da08d6	Minor changes from review suggestions to shared logic between this and missing access control ... Use case insensitive regex, factor out page load to improve possible bad joins make needsAuth not a member predicate	2023-09-15 10:25:27 +01:00
Joe Farebrother	9f25c71ca6	Apply minor reveiw suggstions	2023-09-15 10:25:26 +01:00
Joe Farebrother	f8b1b38438	Update alert message and make user checks more precise	2023-09-15 10:25:26 +01:00
Joe Farebrother	251f875304	Fix filenme typo	2023-09-15 10:25:26 +01:00
Joe Farebrother	5d1289672b	Add IDOR query	2023-09-15 10:25:26 +01:00
Joe Farebrother	a510a7b4c0	Add insecure direct object reference definitions and factor out those from missing access control	2023-09-15 10:25:26 +01:00
Anders Schack-Mulligen	1750d00fbe	C#: Add localMustFlowStep	2023-09-13 15:43:46 +02:00
Tom Hvitved	53302117a1	C#: Implement missingArgumentCallExclude and multipleArgumentCallExclude	2023-09-12 20:05:11 +02:00
github-actions[bot]	d699880c86	Post-release preparation for codeql-cli-2.14.4	2023-09-08 21:17:52 +00:00
Tom Hvitved	ecbf2d8b13	C#: Exclude CIL arguments from ArgumentNode when they are compiled from source	2023-09-08 14:14:06 +02:00
Michael Nebel	a8e427ffe1	Merge pull request #14097 from michaelnebel/csharp/extractorerrormessages ... C#: Update extractor_messages relation schema.	2023-09-06 14:01:36 +02:00
github-actions[bot]	abf2b12b1c	Release preparation for version 2.14.4	2023-09-05 16:56:14 +00:00
Michael Nebel	b5d4987c0a	C#: Add upgrade and downgrade scripts.	2023-09-05 15:32:09 +02:00
Michael Nebel	880da69d16	C#: Update extractor_messages relation schema.	2023-09-05 15:19:32 +02:00