erik-krogh
92db7b047c
escape unicode chars in the output for the ReDoS queries
2023-08-08 00:15:54 +02:00
github-actions[bot]
79c90fa36a
Release preparation for version 2.14.2
2023-08-07 18:08:52 +00:00
Jeroen Ketema
8b6a7985db
Refactor the traint-tracking library to follow the dataflow library refactoring
2023-08-07 15:23:15 +02:00
Jeroen Ketema
5d2984b7a5
Merge branch 'main' into shared-taint-tracking
2023-08-07 15:22:29 +02:00
Rasmus Lerchedahl Petersen
ef1a5cb0fa
shared: change-note
2023-08-07 11:50:03 +02:00
Tom Hvitved
b926a7ebba
Data flow: Update QL doc
2023-08-07 11:35:21 +02:00
Tom Hvitved
4d14311653
Data flow: Rename DataFlowParameter to InputSig
2023-08-07 11:35:21 +02:00
Tom Hvitved
6208175aa9
Data flow: Move DataFlowParameter into DataFlow.qll
2023-08-07 11:35:21 +02:00
Tom Hvitved
0d33c32d8e
Data flow: Move DataFlowImpl(Common).qll into an internal folder
2023-08-07 11:35:21 +02:00
Rasmus Lerchedahl Petersen
b8717b3046
Python: remove incorrect use of "stem"
2023-08-07 11:25:31 +02:00
Jeroen Ketema
c4a65e58bb
Add change note
2023-08-04 22:53:33 +02:00
Jeroen Ketema
20b792545d
Add missing QLDoc
2023-08-04 22:52:05 +02:00
Jeroen Ketema
7ba2f7a22a
Address review comments
2023-08-04 22:52:05 +02:00
Jeroen Ketema
bdd64ce86d
Introduce shared taint tracking library
2023-08-04 22:51:55 +02:00
Mathias Vorreiter Pedersen
abe3a816ce
Merge pull request #13851 from MathiasVP/sink-without-states
...
DataFlow: Support stateless `isSink` in `StateConfigSig`s
2023-08-04 18:01:42 +02:00
Mathias Vorreiter Pedersen
e066e87890
Update shared/dataflow/codeql/dataflow/DataFlowImpl.qll
...
Co-authored-by: Anders Schack-Mulligen <aschackmull@users.noreply.github.com >
2023-08-04 11:32:41 +02:00
Mathias Vorreiter Pedersen
eb19052a7d
Apply suggestions from code review
...
Co-authored-by: Anders Schack-Mulligen <aschackmull@users.noreply.github.com >
2023-08-04 11:10:12 +02:00
Mathias Vorreiter Pedersen
981f67531c
DataFlow: Introduce 'revSinkNode'.
2023-08-04 11:09:08 +02:00
Tom Hvitved
b69188fee9
C#: Adopt shared CFG construction library from shared controlflow pack
2023-08-03 14:12:24 +02:00
Mathias Vorreiter Pedersen
50f5c4d5f6
DataFlow: Don't support stateless sink nodes in partial flow exploration.
2023-08-03 13:30:05 +02:00
Tom Hvitved
2ac646770e
Merge ControlFlowTreeBase and AstNode
2023-08-03 10:59:26 +02:00
Tom Hvitved
525ed65b0b
Rename getNode to getAstNode
2023-08-03 10:56:50 +02:00
Anders Schack-Mulligen
72171972c3
Apply suggestions from code review
...
Co-authored-by: Mathias Vorreiter Pedersen <mathiasvp@github.com >
2023-08-03 10:04:06 +02:00
Anders Schack-Mulligen
84316c41a3
Java: Add more qldoc.
2023-08-03 10:04:06 +02:00
Anders Schack-Mulligen
90052a3ca2
Java: Add proper types for capture nodes.
2023-08-03 10:04:06 +02:00
Anders Schack-Mulligen
e2a0849a0e
Java: Add more qldoc.
2023-08-03 10:04:06 +02:00
Anders Schack-Mulligen
c5990311ca
Java: Redesign and reimplement variable capture flow.
2023-08-03 10:04:06 +02:00
Anders Schack-Mulligen
f4a05c183b
Shared: Add some qldoc.
2023-08-03 10:04:05 +02:00
Anders Schack-Mulligen
15daa51ee5
Shared: Address review comments and QL4QL alerts.
2023-08-03 10:04:05 +02:00
Anders Schack-Mulligen
d1a616a70a
Java: Add proper support for variable capture flow.
2023-08-03 10:04:02 +02:00
Tom Hvitved
2f3e52646c
Add class wrappers around newtype in Cfg.qll
2023-08-03 09:39:30 +02:00
Tom Hvitved
5d69e14cc1
Rename ControlFlowElement to AstNode
2023-08-03 09:39:30 +02:00
Tom Hvitved
1988397f93
Make shared CFG construction library a parameterized module
2023-08-03 09:39:30 +02:00
Tom Hvitved
5049aafdd8
Copy existing ControlFlowGraphImplShared into new shared controlflow pack
2023-08-03 09:32:37 +02:00
Mathias Vorreiter Pedersen
a5f521cfa4
DataFlow: Add change note.
2023-08-02 14:56:57 +02:00
Mathias Vorreiter Pedersen
b953c4a1cf
DataFlow: Allow stateless sinks.
2023-08-02 14:31:18 +02:00
Anders Schack-Mulligen
1ad51e754e
Dataflow: Rename change note to proper format.
2023-08-02 08:50:51 +02:00
Anders Schack-Mulligen
199d1431d7
Dataflow: Add change note.
2023-08-01 14:02:34 +02:00
Anders Schack-Mulligen
50e7892498
Dataflow: Autoformat/indent.
2023-08-01 13:47:08 +02:00
Anders Schack-Mulligen
d7ea60e137
Java: Move data flow lib.
2023-08-01 13:47:08 +02:00
yoff
2067d393e1
Update shared/yaml/codeql/serverless/ServerLess.qll
...
Co-authored-by: Alex Ford <alexrford@users.noreply.github.com >
2023-07-25 17:27:45 +02:00
Rasmus Lerchedahl Petersen
21937e6a27
python: address review comments
...
- rename `normalise` to `normalizePath`
- factor out `lookupValueOrEmpty`
2023-07-24 16:04:01 +02:00
yoff
c0407ae0be
Apply suggestions from code review
...
Co-authored-by: Alex Ford <alexrford@users.noreply.github.com >
2023-07-24 15:51:27 +02:00
github-actions[bot]
f91b7a9342
Post-release preparation for codeql-cli-2.14.1
2023-07-21 16:16:25 +00:00
github-actions[bot]
c936a920b0
Release preparation for version 2.14.1
2023-07-20 16:32:27 +00:00
Rasmus Lerchedahl Petersen
4d2ce6b2e0
python: create shared serverless module and use it
...
Modelled on the javascript serverless module, but
- The predicate that reports YAML files is now public
so languages can implement their own file conventions.
- It also reports framework and runtime.
- The conveninece predicates with files still exist,
but they only report the path.
- Handler mapping conventions are now documented.
- Use parameterised serverless module in Python,
tests now pass.
2023-07-12 16:42:01 +02:00
Jeroen Ketema
8cee4f37a4
Merge branch 'main' into inline-5
2023-07-11 10:30:11 +02:00
Asger F
d88f557dbe
Merge pull request #13683 from asgerf/rb/api-graph-noobject
...
Ruby: exclude Object class from API graph
2023-07-10 12:51:15 +02:00
github-actions[bot]
13cf054a9d
Post-release preparation for codeql-cli-2.14.0
2023-07-07 14:55:41 +00:00
Jeroen Ketema
c2be2c2738
Add change note for InlineExpectationsTest class deprecation
2023-07-07 15:26:47 +02:00
