Chris Smowton
|
6fb6923f63
|
Change note
|
2026-01-06 10:59:06 +00:00 |
|
Chris Smowton
|
102cfd06a7
|
Add integration test for paths and paths-ignore vs. Java buildless mode
|
2026-01-06 10:59:04 +00:00 |
|
github-actions[bot]
|
c00663766e
|
Release preparation for version 2.23.9
|
2026-01-05 11:57:06 +00:00 |
|
Mauro Baluda
|
1e1fb43534
|
Update JsonObject put method signatures in YAML
Use erased type
|
2026-01-02 11:55:40 +01:00 |
|
Owen Mansel-Chan
|
bf79b8a792
|
Merge branch 'main' into java-mad-test
|
2026-01-01 23:34:45 +00:00 |
|
Kevin Stubbings
|
f73f1a7aa9
|
Add additional test
|
2025-12-29 07:09:31 +00:00 |
|
Mauro Baluda
|
cb341609e7
|
Add change notes for Couchbase sinks
|
2025-12-24 20:41:11 +01:00 |
|
Mauro Baluda
|
15ee88ee24
|
SQLi test case
|
2025-12-24 20:30:21 +01:00 |
|
Mauro Baluda
|
fd78c949d3
|
Merge branch 'github:main' into couchdb
|
2025-12-22 20:25:41 +01:00 |
|
Mauro Baluda
|
b22077c371
|
Hardcoded credentials in CouchBase
|
2025-12-22 20:22:20 +01:00 |
|
yoff
|
cbc0100675
|
Apply suggestion from @Copilot
|
2025-12-16 10:11:05 +01:00 |
|
yoff
|
50e9057db1
|
java: add change note
|
2025-12-16 10:11:05 +01:00 |
|
yoff
|
c6240e5a99
|
java: understand more initializers
Whne a fiels is assigned a safe type in a constructor,
that field is not exposed.
|
2025-12-16 10:11:05 +01:00 |
|
yoff
|
a65d385297
|
java: add tests for thread safe initialisation
Co-authored-by: Raúl Pardo <raul.pardo@protonmail.com>
|
2025-12-16 10:11:05 +01:00 |
|
Tom Hvitved
|
d709343d38
|
Merge pull request #21011 from aschackmull/mad/shared-externalflow
Java/C++/Go/C#: Share parts of ExternalFlow.qll
|
2025-12-15 20:27:04 +01:00 |
|
Óscar San José
|
2824c98efb
|
Merge pull request #21025 from github/oscarsj/mergeback-rc-3-20-into-main
Mergeback rc/3.20 into main
|
2025-12-15 11:59:58 +01:00 |
|
Anders Schack-Mulligen
|
64a48e4e7b
|
MaD: Use "namespace" instead "package" in shared code.
|
2025-12-12 13:57:02 +01:00 |
|
Anders Schack-Mulligen
|
7f8d0771df
|
MaD: Rename file.
|
2025-12-12 13:50:58 +01:00 |
|
Óscar San José
|
d972af9ef8
|
Merge branch 'main' of https://github.com/github/codeql into oscarsj/mergeback-rc-3-20-into-main
|
2025-12-12 13:22:08 +01:00 |
|
Tom Hvitved
|
0b81d44ec7
|
Rust: Apply same filtering of generated summaries as in C# and Java
|
2025-12-12 11:16:16 +01:00 |
|
Anders Schack-Mulligen
|
5bddc8d289
|
Go: Move Go package-grouping support into shared lib.
|
2025-12-12 09:17:51 +01:00 |
|
Anders Schack-Mulligen
|
07252519c8
|
Java/C++: Thread additional models through the shared lib.
|
2025-12-12 08:20:20 +01:00 |
|
Anders Schack-Mulligen
|
47dcf05a32
|
C++/Go/Java: Don't import top-level extensible predicates.
|
2025-12-12 08:20:19 +01:00 |
|
Anders Schack-Mulligen
|
3b334ea215
|
Java/C#: Share model coverage code.
|
2025-12-12 08:20:19 +01:00 |
|
Anders Schack-Mulligen
|
cb578e32ab
|
Java: Move interpretModelForTest into shared code.
|
2025-12-12 08:20:17 +01:00 |
|
Anders Schack-Mulligen
|
4066c0d84a
|
Java: Fix input/output naming.
|
2025-12-11 16:24:29 +01:00 |
|
Owen Mansel-Chan
|
87f58fe51a
|
Convert regex injection barrier to MaD
|
2025-12-11 16:24:29 +01:00 |
|
Owen Mansel-Chan
|
44295e4c7d
|
Convert XSS barrier to MaD
|
2025-12-11 16:24:28 +01:00 |
|
Owen Mansel-Chan
|
7e562f3150
|
Convert request forgery barrier guard to MaD
|
2025-12-11 16:24:28 +01:00 |
|
Owen Mansel-Chan
|
f6e3c77145
|
Convert path injection barrier to MaD
|
2025-12-11 16:24:27 +01:00 |
|
Owen Mansel-Chan
|
f6e40bd49d
|
Convert trust boundary violation barrier and barrier guard to MaD
|
2025-12-11 16:24:26 +01:00 |
|
Anders Schack-Mulligen
|
dcf6041dca
|
Java: Add empty extensible data.
|
2025-12-11 16:24:26 +01:00 |
|
Anders Schack-Mulligen
|
8da65ec6d0
|
Java: Add support for boolean MaD barrier guards.
|
2025-12-11 16:24:25 +01:00 |
|
Anders Schack-Mulligen
|
d24b0ff596
|
Java: Basic support for pass-through barrier models.
|
2025-12-11 16:24:25 +01:00 |
|
Anders Schack-Mulligen
|
eaa96864f7
|
Java: Extend test to cover assertion-like barrier guards.
|
2025-12-10 12:23:52 +01:00 |
|
Anders Schack-Mulligen
|
9cd2247b91
|
Java: expose support for more general BarrierGuards.
|
2025-12-10 12:23:52 +01:00 |
|
Anders Schack-Mulligen
|
ebb989962c
|
Guards: Generalise ValidationWrapper to support GuardValue-based BarrierGuards.
|
2025-12-10 12:23:51 +01:00 |
|
Joe Farebrother
|
94fcee5340
|
minor formatting tweak
|
2025-12-09 14:15:36 +00:00 |
|
Joe Farebrother
|
d0cd4ee959
|
Add change note
|
2025-12-09 14:13:38 +00:00 |
|
Joe Farebrother
|
d98e660803
|
Test fixes + more tests
|
2025-12-09 14:13:28 +00:00 |
|
Joe Farebrother
|
1d61da51a6
|
Generate stubs
|
2025-12-09 14:13:02 +00:00 |
|
Joe Farebrother
|
a594ca9de8
|
Add tests
|
2025-12-09 14:12:45 +00:00 |
|
Joe Farebrother
|
41b94e7031
|
Add spring websocket handler models
|
2025-12-09 14:12:39 +00:00 |
|
github-actions[bot]
|
2854330759
|
Post-release preparation for codeql-cli-2.23.8
|
2025-12-08 15:49:10 +00:00 |
|
github-actions[bot]
|
66c51e979e
|
Release preparation for version 2.23.8
|
2025-12-08 14:38:23 +00:00 |
|
Chris Smowton
|
359a28e409
|
Merge pull request #20984 from github/rc/3.20
Java: Add change note for Maven compiler flags
|
2025-12-08 14:24:58 +00:00 |
|
idrissrio
|
a0e7afde8e
|
Java: Add change note for Maven compiler flags
|
2025-12-08 12:14:03 +01:00 |
|
Óscar San José
|
bc6133de5c
|
Merge branch 'main' of https://github.com/github/codeql into oscarsj/merge-back-rc-3.20
|
2025-12-05 19:31:47 +01:00 |
|
Owen Mansel-Chan
|
5c8ab1f6d1
|
Merge pull request #20956 from owen-mc/java/improve-regex-sanitizer
Java: improve regex sanitizer for `java/ssrf`
|
2025-12-04 15:32:12 +00:00 |
|
Anders Schack-Mulligen
|
607ad1f886
|
Merge pull request #20961 from aschackmull/dataflow/flowfrom
Dataflow: Add flowFrom predicates to mirror flowTo.
|
2025-12-04 10:09:29 +01:00 |
|