Napalys
381b5ebe8a
Added intersection support
2025-03-03 14:37:40 +01:00
Napalys
fa5093f6ad
Added test cases for intersection
2025-03-03 14:37:39 +01:00
Napalys
2333c538d9
Added ability to parse nested character classes while using v flag.
2025-03-03 14:37:38 +01:00
Napalys
de6f3b1d04
Add additional test cases.
2025-03-03 14:37:37 +01:00
Napalys
ab7e08f40f
Added test cases for nested character class.
2025-03-03 14:37:35 +01:00
Napalys
ed418be97a
Add support for '\q{}' escape sequence in regular expressions.
2025-03-03 14:37:20 +01:00
Lukas Abfalterer
a3749530d6
The query should only report cases when the method is not empty.
2025-03-03 10:20:46 +01:00
Paolo Tranquilli
9740232df8
Merge branch 'main' into redsun82/cargo-upgrade
2025-03-03 10:15:17 +01:00
Chris Smowton
ee08e8b1fb
Merge pull request #18888 from github/dbartol/actions-executable-bit
...
Set the executable bit on the scripts in the Actions extractor
2025-03-03 08:53:50 +00:00
Simon Friis Vindum
1225c5c828
Rust: Accept changes
2025-03-03 09:44:24 +01:00
Simon Friis Vindum
d8d882958d
Merge branch 'main' into rust-ref-mut
2025-03-03 09:19:08 +01:00
Simon Friis Vindum
757067216d
Merge pull request #18896 from paldepind/rust-model-ptr-rw
...
Rust: Model pointer read and write functions
2025-03-03 09:14:39 +01:00
Jami Cogswell
b0b95965f6
Java: add change note
2025-03-02 17:13:37 -05:00
Jami Cogswell
fbf7513f37
Java: handle lock state check stored in variable
2025-03-02 17:01:18 -05:00
Napalys
d162acf02c
Added quoted string \q parser test cases
2025-03-02 17:09:01 +01:00
Napalys
cb448db3ce
Exposed flags to the regex parser
2025-03-02 17:08:52 +01:00
Geoffrey White
7169c4be48
C++: Another attempt to make the fix more solid. I believe it can't produce negative numbers now.
2025-02-28 14:21:58 +00:00
Asger F
2e32e441b8
Update javascript/ql/src/change-notes/2025-02-28-membership-regexp-test.md
...
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com >
2025-02-28 14:25:56 +01:00
Asger F
c8a89c4203
JS: Change note
2025-02-28 14:04:40 +01:00
Asger F
c3ad805fe8
JS: Sharpen up EnumerationRegExp
2025-02-28 13:58:11 +01:00
Asger F
d97d67359b
JS: Add test case showing lack of flow through non-sanitising regexp
2025-02-28 13:58:08 +01:00
Simon Friis Vindum
c1ee20b2b9
Rust: Update generated models for Rust built-in libraries
2025-02-28 13:40:43 +01:00
Asger F
2a194a53af
raw test output
2025-02-28 13:29:39 +01:00
Asger F
193b26e938
JS: Add query IDs
2025-02-28 13:29:37 +01:00
Asger F
33602ee52b
JS: Convert some comments to JSX
2025-02-28 13:29:36 +01:00
Asger F
c67c5854ba
Disable for more queries with alerts in JSON
2025-02-28 13:29:35 +01:00
Asger F
7bd01bf039
JS: Bulk update in UnneededDefensiveProgramming test
...
The history of updates to this test got messed up so just squashing
into one commit.
Some possible regressions have been accepted, but the query is strangely
opinionated so it's just hard to say what it ought to flag.
2025-02-28 13:29:33 +01:00
Asger F
64d39da5f8
JS: Accept Sources/Sink tags
2025-02-28 13:29:30 +01:00
Asger F
19cada38ff
JS: Migrate a new file from OK-style comments
2025-02-28 13:29:29 +01:00
Asger F
fd6a9c6144
JS: Accept an alert
2025-02-28 13:29:27 +01:00
Asger F
b4ac2f7d73
JS: Add a query ID
2025-02-28 13:29:26 +01:00
Asger F
87518ba60e
JS: Update tainted-sendFile.js
...
This file was added on main while this branch was in progress. Porting the whole file in one step.
2025-02-28 13:29:25 +01:00
Asger F
bb67a0e9b0
JS: Remove outdated comment
2025-02-28 13:29:23 +01:00
Asger F
0496de6c8f
JS: Accept alerts in UselessCharacterEscape
2025-02-28 13:29:22 +01:00
Asger F
aade1e863d
JS: Add a related location in UnusedOrUndefinedStateProperty
2025-02-28 13:29:21 +01:00
Asger F
8ef51c495f
JS: Fix wrong expectation in UnusedOrUndefinedStateProperty
2025-02-28 13:29:19 +01:00
Asger F
87ed86e4fd
JS: Update UnusedOrUndefinedStateProperty
...
Using RelatedLocations to add clarity
2025-02-28 13:29:18 +01:00
Asger F
605999454a
JS: Accept more results in SpuriousArguments
2025-02-28 13:29:17 +01:00
Asger F
dc28bb527b
JS: Fix alert location and use RelatedLocation in InsecureUrlWhitelist
2025-02-28 13:29:16 +01:00
Asger F
a1c13f02be
JS: Remove alert marker that's reported on another line
...
We had two 'NOT OK' comments for the same alert. The alert appears on the 'pref' object above.
2025-02-28 13:29:14 +01:00
Asger F
2b33ed3671
JS: Remove incorrect alert marker
2025-02-28 13:29:13 +01:00
Asger F
6cf1334c6d
Fix comment style in UnboundEventHandlerReceiver
2025-02-28 13:29:12 +01:00
Asger F
7623ebb13b
JS: Accept changes in UseOfReturnlessFunction
2025-02-28 13:29:11 +01:00
Asger F
507a0918ad
JS: More alert updates in UselessConditional
2025-02-28 13:29:10 +01:00
Asger F
e634b31c27
JS: Accept some UselessConditional alerts
2025-02-28 13:29:08 +01:00
Asger F
4d7cbe6f60
JS: Accept to web socket-based SSRF alerts
2025-02-28 13:29:07 +01:00
Asger F
764eb98809
JS: Move two alerts and add query ID
2025-02-28 13:29:06 +01:00
Asger F
976096540f
JS: Accept an alert
2025-02-28 13:29:05 +01:00
Asger F
49274d5f73
JS: Accept an alert
2025-02-28 13:29:03 +01:00
Asger F
2d1aa3e00a
JS: Accept missing alert and clarify reason
2025-02-28 13:29:02 +01:00