Owen Mansel-Chan
ef833de123
Convert GithubComGinGonicGinContextSource to MaD
2024-07-16 11:18:17 +01:00
Owen Mansel-Chan
06a2a40f50
Convert GoRestfulReadEntitySource to MaD
2024-07-16 11:18:16 +01:00
Owen Mansel-Chan
7bfa4c1947
Convert GoRestfulSource to MaD
2024-07-16 11:18:14 +01:00
Anders Schack-Mulligen
0fb27fb6fc
Merge pull request #16979 from aschackmull/dataflow/internsets
...
Dataflow: Replace MakeSets with QlBuiltins::InternSets.
2024-07-16 10:47:07 +02:00
Anders Schack-Mulligen
da5abc8321
Dataflow: Replace MakeSets with QlBuiltins::InternSets.
2024-07-15 13:35:57 +02:00
Owen Mansel-Chan
99ed3c2ac1
Convert ElazarlGoproxy::UserControlledRequestData to MaD
2024-07-14 14:28:48 +01:00
Owen Mansel-Chan
2ec64a9ca8
Convert EchoContextBinder to MaD
2024-07-14 14:28:47 +01:00
Owen Mansel-Chan
3fc598dbe9
Convert EchoContextSource to MaD
2024-07-14 14:28:46 +01:00
Owen Mansel-Chan
5b38d51f62
Convert Chi::UserControlledMethod to MaD
2024-07-14 14:28:46 +01:00
Owen Mansel-Chan
3bd4a203bb
Convert Chi::UserControlledFunction to MaD
2024-07-14 14:28:44 +01:00
Owen Mansel-Chan
2c7fbda2ec
Accept review suggestion for QLDoc
2024-07-10 16:48:11 +01:00
Owen Mansel-Chan
32acff76c2
Make groupPrefix() private
...
This could be made public in future. But I expect that we will want to
use this logic for QL models as well then we will want to move it into a
different file, which will be much easier if it's all private at the
moment.
2024-07-10 16:48:10 +01:00
Owen Mansel-Chan
b64ef84393
Use prefix() method on string to check for group prefix
2024-07-10 16:48:10 +01:00
Owen Mansel-Chan
3e2ebf436c
Move logic for dealing with groups into a predicate
2024-07-10 16:48:09 +01:00
Owen Mansel-Chan
f6b9195a61
Add validation of package groups
2024-07-10 16:48:08 +01:00
Owen Mansel-Chan
ab991af2a5
Fix package validation errors
2024-07-10 16:48:07 +01:00
Owen Mansel-Chan
f650e3f72b
Update MaD documentation explain "group:" in package column
2024-07-10 16:48:06 +01:00
Michael Nebel
4193b7e591
Allow grouping import paths for models-as-data
2024-07-10 16:48:02 +01:00
Owen Mansel-Chan
68929d1f73
Fix definition of ClearSanitizer
2024-07-08 16:05:17 +01:00
Owen Mansel-Chan
247abf95ee
Convert BeegoContextSource to MaD
2024-07-01 16:13:40 +01:00
Owen Mansel-Chan
84bb8a400b
Convert BeegoInputRequestBodySource to MaD
2024-07-01 16:13:39 +01:00
Owen Mansel-Chan
194491f3fb
Convert BeegoControllerSource to MaD
2024-07-01 16:13:38 +01:00
Owen Mansel-Chan
6bc0ffe429
Convert BeegoInputSource to MaD
2024-07-01 16:13:37 +01:00
Owen Mansel-Chan
2bbd9ab4eb
Change definition of BeegoInputSafeUrlSource
2024-07-01 16:13:36 +01:00
Owen Mansel-Chan
418a56d385
Replace "$THISVERSION" suffix with "fixed-version:" prefix
2024-06-26 05:01:09 +01:00
Owen Mansel-Chan
081f32141c
Accept review suggestion fixing a comment
...
Co-authored-by: Anders Schack-Mulligen <aschackmull@users.noreply.github.com >
2024-06-26 05:01:09 +01:00
Owen Mansel-Chan
d4e8e4c943
Add QLDoc for majorVersionSuffixRegex
2024-06-26 05:01:09 +01:00
Owen Mansel-Chan
46d0c6ff9c
Use lookahead in regex to not match e.g. "/v2foo"
2024-06-26 05:01:09 +01:00
Owen Mansel-Chan
c8a3bedf44
Move major version suffix regex into one place
2024-06-26 05:01:09 +01:00
Owen Mansel-Chan
cb2ccef5fa
Refactor suffix check
2024-06-26 05:01:09 +01:00
Owen Mansel-Chan
c045e77d61
Fix QLDoc for interpretPackage
2024-06-26 05:01:09 +01:00
Owen Mansel-Chan
7d11fc2c7d
Fix bug in regex
...
I accidentally included a `$` at the end, so it only matched a major
version suffix at the end of the package path.
2024-06-26 05:01:09 +01:00
Owen Mansel-Chan
a9afbfa993
Document version matching and "$THISVERSION"
2024-06-26 05:01:09 +01:00
Owen Mansel-Chan
47d946fb1c
Make MaD package match any version without $ANYVERSION
...
Note that if the package column contains major version suffix (like
"/v2") or if it ends with "$THISVERSION" (which is removed) then we
don't do any version matching.
2024-06-26 05:01:09 +01:00
Owen Mansel-Chan
ea0db4d55e
Add predicate for package path without "/v2" etc
2024-06-26 05:01:09 +01:00
Owen Mansel-Chan
890da5377e
Merge pull request #16819 from owen-mc/go/remove-dataflowtype-optimizer-bug-workaround
...
Go: Make DataFlowType a singleton (remove workaround)
2024-06-25 10:03:08 +01:00
Owen Mansel-Chan
d8df38c683
Make DataFlowType a singleton (remove workaround)
2024-06-24 13:43:10 +01:00
Anders Schack-Mulligen
8c23e21073
Dataflow: Cache compatibleTypes.
2024-06-24 13:35:48 +02:00
Owen Mansel-Chan
f04a85e121
Merge pull request #16753 from owen-mc/go/misc-clean-up
...
Go: a few small clean ups
2024-06-24 10:47:21 +01:00
Owen Mansel-Chan
aa35bd771b
Fix bug removing "vendor/" from package paths
2024-06-20 13:18:21 +01:00
Owen Mansel-Chan
754fd8e84c
Drop leading . from getQualifiedName for built-in functions
...
So it will be "panic" instead of ".panic".
2024-06-19 22:04:21 +01:00
Owen Mansel-Chan
68a661f3c7
Write out whole function names
2024-06-19 21:58:31 +01:00
Owen Mansel-Chan
b79711b17e
Move deprecated notice to top of comment
2024-06-19 21:58:28 +01:00
Ed Minnix
6a0be6ad09
ExternalAPIs
2024-06-18 12:27:18 -04:00
Ed Minnix
cfd5f53eb0
Refactor Customizations libraries to use ThreatModelFlowSource
2024-06-18 12:27:15 -04:00
Edward Minnix III
8997f2cdf2
Merge pull request #16697 from egregius313/egregius313/go/dataflow/threat-modeling
...
Go: Introduce Threat Modeling
2024-06-18 12:25:33 -04:00
Chris Smowton
822f6eebfb
Add support for flow through content of global variables
2024-06-17 16:42:23 +01:00
Ed Minnix
fa2c50616b
Remove getSourceType definitions
2024-06-17 10:57:11 -04:00
Ed Minnix
49fb372eb9
Add getSourceType declarations to existing remote flow sources
2024-06-17 10:51:09 -04:00
Ed Minnix
df6449cfc7
Go: Add the SourceNode and ThreatModelFlowSource classes
2024-06-17 10:51:07 -04:00
