Jeroen Ketema
b933a58215
C++: Replace Deprecated Queries by Deprecated Classes
...
This is more accurate for the only change in the list.
2022-02-24 16:48:23 +01:00
Michael Nebel
3e898a1b09
C#: Use generic TryParse method instead.
2022-02-24 16:18:42 +01:00
Tamas Vajk
0d16a7e38d
Fix formatting of C# change logs
2022-02-24 16:06:54 +01:00
github-actions[bot]
20fe22c8c8
Release preparation for version 2.8.2
2022-02-24 14:57:08 +00:00
Rasmus Wriedt Larsen
abe4d8da62
Python: Accept global field-flow inconsistencies
...
Yikes
2022-02-24 15:07:18 +01:00
Rasmus Wriedt Larsen
94d23f3817
Python: Also do all field-flow tests in global scope
...
Notice that these tests don't pass, to show how they differ in the next
commit!
2022-02-24 15:06:40 +01:00
Erik Krogh Kristensen
844815a032
Merge pull request #8231 from erik-krogh/fix-ql-for-ql-in-ql-for-ql
...
QL: fix ql-for-ql errors inside ql-for-ql
2022-02-24 15:01:45 +01:00
Erik Krogh Kristensen
ea1503ce2c
fix ql-for-ql errors inside ql-for-ql
2022-02-24 14:41:27 +01:00
tombolton
d80ef6566d
add new xss queries to result counting query
2022-02-24 13:31:40 +00:00
Paolo Tranquilli
d2ed5c47f9
fix typo
2022-02-24 14:28:21 +01:00
Tamás Vajk
83aaeca751
Merge pull request #8228 from tamasvajk/fix/change-notes-0.0.9
...
Fix 0.0.9 change note to match concatenated change log
2022-02-24 14:04:31 +01:00
Michael Nebel
62dc23f6a5
C#: Move the StandaloneAnalyser to the Standalone project.
2022-02-24 13:51:43 +01:00
Michael Nebel
efab3bfa89
C#: Make an extractor class in the standalone project with some of the specifics for the standalone extractor.
2022-02-24 13:51:43 +01:00
Michael Nebel
d2c872079b
C#: Move ExitCode enum out of Extractor class.
2022-02-24 13:51:42 +01:00
Michael Nebel
b0c62c8a10
C#: Refactor functionality to run standalone extractor into own method.
2022-02-24 13:51:42 +01:00
Michael Nebel
d947861690
C#: Minor refactoring.
2022-02-24 13:51:42 +01:00
Chris Smowton
4973224de7
Merge pull request #8216 from github/smowton/fix/creating-codeql-databases-docs-typo
...
Fix typo
2022-02-24 12:24:32 +00:00
Rasmus Wriedt Larsen
2da4b39844
Python: Add global field-flow tests
...
I thought it was interesting that it did not propagate flow to the uses
inside the functions :O
2022-02-24 13:15:48 +01:00
Geoffrey White
6c40cda68d
C++: Pragmatic solution to include more sinks (plus autoformat changes).
2022-02-24 12:10:34 +00:00
Tamas Vajk
a8c2d87897
Fix 0.0.9 change note to match concatenated change log
2022-02-24 12:51:10 +01:00
Mathias Vorreiter Pedersen
e4af34253a
C++: Actually fix incorrect annotation
2022-02-24 11:06:57 +00:00
Paolo Tranquilli
01a37e5165
fix check-qhelp.py again
2022-02-24 11:56:47 +01:00
Geoffrey White
e3493e32e0
C++: Change note.
2022-02-24 10:54:09 +00:00
Geoffrey White
fc8ebdaeb2
C++: Increase the query to precision high.
2022-02-24 10:54:09 +00:00
Geoffrey White
c16302be13
C++: Fix the FP.
2022-02-24 10:54:08 +00:00
Paolo Tranquilli
11c1b6a8a3
fix typo in .pre-commit-config.yaml
2022-02-24 11:46:19 +01:00
Paolo Tranquilli
4020464c2d
fix check-qhelp.py
...
It turns out checking changes on `.inc.qhelp` files is a bit trickier,
as we need to first find which `qhelp` files use them. The previous
iteration of this script was working under the assumption that
`.inc.qhelp` files were only included from the current or a parent
path, but this turns out to be wrong.
This time around, if we are asked to check one or more `.inc.qhelp`
files we build an include map from all `qhelp` files and run the help
generator on the `qhelp` files actually including them.
2022-02-24 11:40:46 +01:00
Paolo Tranquilli
9667315d49
pre-commit: add qhelp check
...
Also the instructions on customizing `pre-commit`'s behaviour have been
updated to use the `--config` option.
2022-02-24 10:55:53 +01:00
Mathias Vorreiter Pedersen
ef5f16ddd3
Merge branch 'main' into add-using-expired-stack-address-query
2022-02-24 08:41:27 +00:00
Harry Maclean
fc351fbd64
Ruby: Remove value-flow for name-matched summaries
...
String summaries that are identified by name only should not specify
value-preserving flow as this can cause spurious flow in cases where
they are applied to different but identically-named methods.
2022-02-24 16:15:15 +13:00
Harry Maclean
07369916b0
Ruby: Remove bad flow to/from block arguments
...
In these cases there is no block argument to the method call.
2022-02-24 14:44:59 +13:00
Erik Krogh Kristensen
e13b2df86f
Merge pull request #8185 from erik-krogh/amdImp
...
JS: recognize modules imported by AMD imports as library inputs
2022-02-23 20:21:45 +01:00
Geoffrey White
326dfa5bc2
C++: Add test cases.
2022-02-23 18:37:58 +00:00
Chris Smowton
3167a67e65
Fix typo
2022-02-23 18:19:11 +00:00
Chris Smowton
01db73bfc7
Merge pull request #5935 from porcupineyhairs/javaSstiNew
...
Java : Add SSTI query
2022-02-23 17:30:02 +00:00
Mathias Vorreiter Pedersen
8900f6c043
C++: Add comment about ir re-evaluation.
2022-02-23 17:12:05 +00:00
Mathias Vorreiter Pedersen
033edc24f4
C++: Respond to review comments.
2022-02-23 16:23:49 +00:00
Mathias Vorreiter Pedersen
fd83f3a999
Merge pull request #8209 from jketema/ir-structured-bindings-tests
...
C++: Add IR structured binding tests
2022-02-23 16:09:40 +00:00
Chris Smowton
7b425a80bc
Note path query expectations
2022-02-23 16:02:54 +00:00
Rasmus Wriedt Larsen
aeba497832
Merge pull request #7735 from yoff/python/promote-log-injection
...
Python: promote log injection
2022-02-23 16:21:12 +01:00
Jeroen Ketema
99dd049c1b
Add IR test for tuple structured bindings
2022-02-23 16:15:19 +01:00
Jeroen Ketema
caf0f28547
Add IR test for data member structured bindings
2022-02-23 15:55:19 +01:00
Taus
3ce7d47b5b
Merge pull request #7452 from jorgectf/python_jwt
...
Python: Add Python_JWT to JWT security query
2022-02-23 15:23:20 +01:00
Jeroen Ketema
ec2567b64b
Add IR test for array structured bindings
2022-02-23 15:10:10 +01:00
Chris Smowton
a8fe10f353
Java template injection query: import pathgraph
2022-02-23 13:47:24 +00:00
Asger Feldthaus
f1bfb31403
Shared: fix typo in a comment
2022-02-23 14:13:41 +01:00
Asger Feldthaus
bb9348d77f
Ruby: reject ArrayElement[-n] instead of interpreting it as ArrayElement[?]
2022-02-23 14:13:41 +01:00
Asger Feldthaus
a11c6f0f8e
Ruby: use AccessPathSyntax library
2022-02-23 14:13:40 +01:00
Asger Feldthaus
efec348eb3
Java: use AccessPathSyntax library
2022-02-23 14:13:40 +01:00
Asger Feldthaus
9cff065dca
C#: use AccessPathSyntax library
2022-02-23 14:13:40 +01:00
