Michael Nebel
91840c613e
Java: Convert unsafe-url-forward to data extensions.
2022-11-28 12:30:35 +01:00
Michael Nebel
aed5ee4edc
Java: Convert thread-resource-abuse to data extensions.
2022-11-28 12:30:35 +01:00
Michael Nebel
07578f11d4
Java: Convert hardcoded-jwt-key models to data extensions.
2022-11-28 12:30:35 +01:00
Michael Nebel
ab12b6cc2b
Java: Convert android-web-resource-response to data extensions.
2022-11-28 12:30:35 +01:00
Michael Nebel
5c15ad412c
Java: Convert log4j-injection to data extensions.
2022-11-28 12:30:35 +01:00
Michael Nebel
665d40dc4b
Java: Convert file-path-injection to data extensions.
2022-11-28 12:30:35 +01:00
Michael Nebel
805430983c
Java: Convert commons-io to data extensions.
2022-11-28 12:30:35 +01:00
Michael Nebel
d7aafbfe64
Java: Add model generator script that emits data extensions.
2022-11-28 12:30:35 +01:00
Michael Nebel
0abeb831c7
Java: Move summaryModel predicate, which constructs a CSV row to the testcode where it is used.
2022-11-28 12:30:34 +01:00
Michael Nebel
fc4b9827b9
Java: Add script for converting extensions.
2022-11-28 12:30:34 +01:00
Michael Nebel
9f7103c4fb
Java: Add queries for extracting sources, sinks and summaries.
2022-11-28 12:30:34 +01:00
Michael Nebel
24e830f91d
Java: Fix some minor bugs in the CSV printing of summaries for flow test generation.
2022-11-28 09:07:40 +01:00
Ian Lynagh
a423f5f695
Kotlin: Enable java/misnamed-type query
...
We used to get alerts for the class around a local function, a lambda,
or a function reference, which we give name "". Now those are marked as
compiler-generated, and the query ignores compiler-generated types.
2022-11-25 17:11:40 +00:00
Tony Torralba
adf905d838
Merge pull request #11368 from ka1n4t/main
...
Java: Add binding between annotation and sink-param in MyBatis SQL Injection query
2022-11-24 14:34:57 +01:00
Tony Torralba
17218fa663
Formatting
2022-11-24 11:14:16 +01:00
Tony Torralba
443d0f50c1
Apply suggestions from code review
2022-11-24 11:10:07 +01:00
Erik Krogh Kristensen
1eec067474
Merge pull request #11294 from erik-krogh/fileDoc
...
QL: improve the "this block-comment should have been a QLDoc"-query
2022-11-23 22:23:36 +01:00
Ian Lynagh
d401be1845
Java: Fix typo: ceritificate
2022-11-23 12:12:32 +00:00
Tony Torralba
92ee0aa7ae
Merge pull request #11367 from atorralba/atorralba/java/add-bitwise-implicit-intents
...
Java: Consider taint through bitwise operations on PendingIntent flags
2022-11-22 17:08:52 +01:00
Erik Krogh Kristensen
b2267c0e49
Merge pull request #11343 from erik-krogh/redundantAssignment
...
QL: add redundant-assignment query
2022-11-22 13:03:14 +01:00
Tony Torralba
1667fbad88
Add change note
2022-11-22 11:48:21 +01:00
ka1n4t
ce2ba21240
Add binding between annotation and sink-param
2022-11-22 18:32:14 +08:00
Jami
8a73675483
Merge pull request #11070 from jcogs33/java-regex-injection
...
Java: Promote regex injection query from experimental
2022-11-21 15:04:26 -05:00
Jami Cogswell
9e2ec9d12f
apply docs review suggestion
2022-11-21 13:39:46 -05:00
Edoardo Pirovano
6c33ddcd47
Merge pull request #11349 from github/edoardo/2.11.4-mergeback
...
Merge `rc/3.8` into `main`
2022-11-21 18:08:27 +00:00
erik-krogh
64707f4f7b
remove redundant assignments
2022-11-21 17:45:05 +01:00
Tony Torralba
aa2c7426ad
Add change note
2022-11-21 11:42:40 +01:00
Tony Torralba
2809c3a77c
Handle disabled Maven repositories
2022-11-21 10:11:57 +01:00
github-actions[bot]
5b14ebf22a
Post-release preparation for codeql-cli-2.11.4
2022-11-18 11:26:00 +00:00
Chris Smowton
d45c35a02e
Copyedit the Java src qlpack 0.4.4 release nnotes
2022-11-17 16:57:08 +00:00
Chris Smowton
47f07d83b8
Copyedit Java src qlpack changelog
2022-11-17 16:56:39 +00:00
github-actions[bot]
e105c13e77
Release preparation for version 2.11.4
2022-11-17 16:40:45 +00:00
Tamás Vajk
c92989ca04
Merge pull request #11289 from tamasvajk/kotlin-empty-block
...
Kotlin: Exclude .kt files from empty block query
2022-11-17 11:11:25 +01:00
Chris Smowton
659f86cecf
Merge pull request #11310 from tamasvajk/kotlin-dead-code
...
Kotlin: Exclude .kt files from dead code queries
2022-11-17 10:10:51 +00:00
Chris Smowton
95fdea8b77
Merge pull request #11308 from tamasvajk/kotlin-non-serializable-field
...
Kotlin: Exclude .kt files from non serializable field query
2022-11-17 10:10:05 +00:00
Chris Smowton
11188304a7
Merge pull request #11306 from tamasvajk/kotlin-equals-missing
...
Kotlin: Exclude .kt files from missing `instanceof` in `equals` query
2022-11-17 10:09:35 +00:00
Tamás Vajk
b70a9d172b
Merge pull request #11304 from tamasvajk/kotlin-mut-dep
...
Kotlin: Exclude .kt files from mutual dependency query
2022-11-16 17:02:46 +01:00
Tamás Vajk
ae38d5d8b7
Merge pull request #11303 from tamasvajk/kotlin-one-stmt-line
...
Kotlin: Exclude .kt files from one stmt in line query
2022-11-16 17:02:35 +01:00
Joe Farebrother
d6c5132f39
Merge pull request #10684 from joefarebrother/android-keyboard-cache
...
Java: Add query for Sensitive Keyboard Cache
2022-11-16 15:27:44 +00:00
Tamás Vajk
dfc72edba2
Merge pull request #11302 from tamasvajk/kotlin-ignored-return
...
Kotlin: Exclude .kt files from ignored return value query
2022-11-16 16:23:58 +01:00
Tamás Vajk
ad7c0f9ebc
Merge pull request #11301 from tamasvajk/kotlin-naming-ref-type
...
Kotlin: Exclude .kt files from misnamed reftype query
2022-11-16 16:22:40 +01:00
Tamás Vajk
b4b8649fd6
Merge pull request #11299 from tamasvajk/kotlin-nested-serializable
...
Kotlin: Exclude .kt files from serializable inner class query
2022-11-16 16:22:13 +01:00
Tamas Vajk
983851fc60
Kotlin: Add FP test case for dead code queries
2022-11-16 16:18:37 +01:00
Tamas Vajk
7d9ce53080
Kotlin: Exclude .kt files from non serializable field query
2022-11-16 15:30:25 +01:00
Tamas Vajk
fc614ad4d0
Kotlin: Exclude .kt files from missing instanceof in equals query
2022-11-16 15:24:47 +01:00
Tamas Vajk
b6978128b1
Exclude .kt files from mutual dependency query
2022-11-16 15:16:51 +01:00
Tamas Vajk
c9241cc933
Exclude .kt files from one stmt in line query
2022-11-16 15:11:38 +01:00
Tamas Vajk
c42663723f
Exclude .kt files from ignored return value query
2022-11-16 15:05:29 +01:00
Tamas Vajk
c1be93a34c
Exclude .kt files from misnamed reftype query
2022-11-16 14:59:20 +01:00
Tamas Vajk
7a0e248096
Exclude .kt files from serializable inner class query
2022-11-16 14:46:01 +01:00
