Maiky
d654e98650
Add empty string as source
2023-06-18 22:21:12 +02:00
Tony Torralba
c97868f774
Add change notes
2023-06-16 09:01:02 +02:00
Tony Torralba
3e96fe60c5
Go/Java/JS/Python/Ruby: Update the description and qhelp of the ZipSlip query
...
All filesystem operations, not just writes, with paths built from untrusted archive entry names are dangerous
2023-06-16 08:52:44 +02:00
Jeroen Ketema
eb62df6ece
Go: Rewrite InlineFlowTest as a parameterized module
2023-06-15 10:51:29 +02:00
Owen Mansel-Chan
74b39b42a1
Accept test changes
2023-06-14 15:47:25 +01:00
Owen Mansel-Chan
3ff6d033d3
Rename to neverSkipInPathGraph
2023-06-14 15:29:54 +01:00
Owen Mansel-Chan
5f72ce0935
Add stub implementations of flowCheckNodeSpecific
2023-06-14 14:46:35 +01:00
Owen Mansel-Chan
dd57d9fd55
Add flowCheckNodeSpecific
...
This allows individual languages to specify `FlowCheckNode`s, which
break up the big step relation and make sure that those nodes appear in
path summaries.
2023-06-14 14:27:58 +01:00
Owen Mansel-Chan
d071b463a3
Add failing tests for MaD with pointer content
2023-06-14 14:14:37 +01:00
Jami
35591113c2
Merge branch 'main' into jcogs33/shared-sink-kind-validation
2023-06-14 08:06:34 -04:00
Michael Nebel
afec9b05e9
Merge pull request #13147 from michaelnebel/csharp/entityframeworkrefactor
...
C#: Use synthetic global in the EntityFramework code instead of jump steps.
2023-06-14 13:47:56 +02:00
Anders Schack-Mulligen
1a4fca334f
Merge pull request #13273 from aschackmull/dataflow/summarynode-refactor
...
Dataflow: Refactor FlowSummaryImpl to synthesize nodes independently from DataFlow::Node.
2023-06-14 09:38:36 +02:00
Anders Schack-Mulligen
2d616d494e
C#/Ruby: Add fields as per review comments.
2023-06-13 11:26:30 +02:00
Jeroen Ketema
d035491c6f
Go: Remove commented out code from test
2023-06-13 10:13:42 +02:00
Jeroen Ketema
c3ba206b6a
Merge pull request #13346 from jketema/inline-2
...
Update inline expectation tests to use parameterized module
2023-06-13 10:10:55 +02:00
Jami Cogswell
9abe3e3da4
Shared: use a module as input to 'KindValidation'
2023-06-09 14:35:37 -04:00
Anders Schack-Mulligen
5062442982
Go/Python/Ruby/Swift: Add stub.
2023-06-09 15:39:28 +02:00
Anders Schack-Mulligen
98f51d7f29
Dataflow: Sync.
2023-06-09 15:39:28 +02:00
Anders Schack-Mulligen
5eb278095c
Go: Fix tests.
2023-06-09 15:39:28 +02:00
Anders Schack-Mulligen
6020e4d0e3
C#/Go/Python/Ruby/Swift: Fix some more references.
2023-06-09 15:30:38 +02:00
Anders Schack-Mulligen
e6e4cef35e
Go: Adjust to FlowSummaryImpl changes.
2023-06-09 15:27:17 +02:00
Anders Schack-Mulligen
2cc5bde925
Dataflow: Sync.
2023-06-09 15:27:17 +02:00
Jeroen Ketema
97c4f497bc
Go: Rewrite inline expectation tests to use parameterized module
2023-06-09 10:41:21 +02:00
Anders Schack-Mulligen
d230509905
Dataflow: Address review comments.
2023-06-09 08:37:36 +02:00
Anders Schack-Mulligen
4399138c82
Dataflow: Fix QL4QL alert.
2023-06-09 08:37:36 +02:00
Anders Schack-Mulligen
53f2b8aab0
Dataflow: Sync.
2023-06-09 08:37:36 +02:00
Anders Schack-Mulligen
fd832416d8
Dataflow: Add empty type strengthening predicate for languages without type pruning.
2023-06-09 08:37:35 +02:00
Anders Schack-Mulligen
e8cea79f1d
Dataflow: Sync.
2023-06-09 08:37:35 +02:00
Jami Cogswell
da58b2afc8
Shared: move shared file to 'shared' folder and add parameterized module for 'getInvalidModelKind'
2023-06-08 20:05:27 -04:00
github-actions[bot]
e4be303a23
Release preparation for version 2.13.4
2023-06-08 19:57:37 +00:00
Owen Mansel-Chan
55fe318f5a
Merge pull request #13397 from owen-mc/go/document-build-environment-recommendations
...
Add Go version table for --identify-environment
2023-06-07 17:06:13 +01:00
Owen Mansel-Chan
69854638b6
Add Go version table for --identify-environment
2023-06-07 15:51:21 +01:00
Jami Cogswell
5a23421d9a
Shared: minor updates to comments
2023-06-05 13:46:56 -04:00
Jami Cogswell
6c46cd9c21
Java/C#/Go/Swift: move 'SharedModelValidation.qll' to internal folder
2023-06-05 13:11:08 -04:00
Jami Cogswell
9d5972acc2
Shared: update qldocs
2023-06-05 12:18:34 -04:00
Jami Cogswell
3f1dc8e5c7
Shared: add outdated Swift sink kinds
2023-06-05 12:18:34 -04:00
Jami Cogswell
62ac0dc471
Shared: add outdated sink kind msg to 'getInvalidModelKind' for all languages
2023-06-05 12:18:33 -04:00
Jami Cogswell
76f5dca861
Shared: move 'OutdatedSinkKind' to shared file and add outdated JS and C# sink kinds
2023-06-05 12:18:33 -04:00
Jami Cogswell
7b629f5d63
Shared: include 'qltest%' and 'test-%'
2023-06-05 12:18:33 -04:00
Jami Cogswell
76508d17c6
Go/Swift: validate source/sink kinds
2023-06-05 12:18:33 -04:00
Jami Cogswell
615f2a573b
Java/C#/Go/Swift: remove commented-out code
2023-06-05 12:18:33 -04:00
Jami Cogswell
7317c29eea
Shared: update kind information
2023-06-05 12:18:33 -04:00
Jami Cogswell
79f61cc645
Java/C#/Go/Swift: use 'SharedModelValidation' file
2023-06-05 12:18:33 -04:00
Jami Cogswell
ddb5d92ef8
Shared: add source, summary, and neutral shared valid kinds
2023-06-05 12:18:33 -04:00
Jami Cogswell
869f820fcf
Shared: add 'SharedModelValidation' file as experiment
2023-06-05 12:18:33 -04:00
Michael B. Gale
06d48dca67
Merge pull request #13211 from github/mbg/identify-environment-stubs
...
Shared: Add stubs for `identify-environment` scripts
2023-06-05 10:29:06 +01:00
Maiky
1a9bfb38aa
Correct barrier
2023-06-05 01:25:17 +02:00
Maiky
bf9d0b93d7
Add Improper LDAP Auth Query (CWE-287)
2023-06-03 23:20:11 +02:00
Jeroen Ketema
7b17b92aca
Fix typo in spelling of expectation
2023-06-02 10:36:11 +02:00
Michael Nebel
06b02eb3ce
Sync files.
2023-06-01 09:30:31 +02:00
