Anders Schack-Mulligen
b1b72b73ed
SSA: Add qldoc.
2025-02-25 10:35:57 +01:00
Michael Nebel
a35510d937
Merge pull request #18849 from michaelnebel/csharp/tupledefaulttostring
...
C#: Proper handling of value tuples in `cs/call-to-object-tostring`.
2025-02-25 10:24:02 +01:00
Anders Schack-Mulligen
f00f2c6f47
SSA: Deprecate public SsaDefinitionExtNode and SsaInputNode.
2025-02-25 10:03:43 +01:00
Anders Schack-Mulligen
1f628d0f86
Ruby: Remove reference to SsaInputNode.
2025-02-25 10:01:57 +01:00
Anders Schack-Mulligen
95cbd21a62
Ruby: Accept test change following SSA bugfix.
...
This is a result of the commit "SSA: Fix bug in guards for ssa input
nodes."
2025-02-25 09:59:35 +01:00
Tom Hvitved
b40290683e
Rust: Update some inline expectation comments
2025-02-25 09:34:50 +01:00
Anders Schack-Mulligen
57c4fd6f25
JS: Combine phi reads and ssa input nodes into SynthReadNode class.
2025-02-25 09:23:53 +01:00
Kevin Stubbings
04476ca5f4
Add more choices to SSRF remediation
2025-02-25 00:16:48 -08:00
Owen Mansel-Chan
74a249597a
Merge pull request #18607 from owen-mc/java/xss-content-type-sanitizer
...
Java: Add XSS Sanitizer for `HttpServletResponse.setContentType` with safe values
2025-02-24 23:39:18 +00:00
Jami Cogswell
c2e859c756
Java: add change note
2025-02-24 18:33:45 -05:00
Jami Cogswell
26e396732a
Java: edit qhelp
2025-02-24 18:33:43 -05:00
Jami Cogswell
53cb30dcd0
Java: update metadata, move from CWE-016 to CWE-200
2025-02-24 18:33:41 -05:00
Jami Cogswell
6fe7c7a233
Java: some refactoring
2025-02-24 18:33:29 -05:00
Jami Cogswell
f65a5b9a66
Java: add test for qhelp good example
2025-02-24 18:27:45 -05:00
Jami Cogswell
9e51b014d2
Java: handle example in Spring docs
2025-02-24 18:27:43 -05:00
Jami Cogswell
b2469ff8ba
Java: add APIs and tests for more recent Spring versions: authorizeHttpRequests, AuthorizeHttpRequestsConfigurer, securityMatcher(s)
2025-02-24 18:26:02 -05:00
Jami Cogswell
8dfb920e05
Java: refactor QL, move code to libraries
2025-02-24 18:24:48 -05:00
Jami Cogswell
8064e8f1f9
Java: convert tests to inline expectations
2025-02-24 18:24:26 -05:00
Jami Cogswell
5e5bc2afe9
Java: remove experimental files
2025-02-24 18:24:19 -05:00
Jami Cogswell
089a491d5a
Java: fix tests; update for non-experimental directory
2025-02-24 18:24:17 -05:00
Jami Cogswell
978834bd9c
Java: remove deprecations
2025-02-24 18:24:14 -05:00
Jami Cogswell
2ce5920c5e
Java: copy out of experimental
2025-02-24 18:24:12 -05:00
Owen Mansel-Chan
0d994c1527
Merge pull request #18831 from owen-mc/go/join-order-fix-2
...
Go: Improve bad join order in guardingCall
2025-02-24 22:16:22 +00:00
Geoffrey White
6437bd692e
Merge pull request #18851 from geoffw0/typo
...
Fix typo in shared DataFlowImplConsistency.qll
2025-02-24 18:45:09 +00:00
Alexander Eyers-Taylor
ddfb16899a
Merge pull request #18828 from alexet/alexet/fix-flakey-join-order
...
CPP: Prevent forced bad join order which is saved by context.
2025-02-24 17:54:16 +00:00
Simon Friis Vindum
6353dbf3f5
Merge branch 'main' into rust-core-std-models
2025-02-24 16:05:08 +01:00
Anders Schack-Mulligen
22b3dc8f43
Ruby: Remove getDefinitionExt references.
2025-02-24 15:25:53 +01:00
Paolo Tranquilli
22074afafb
Merge pull request #18847 from github/redsun82/rust-trait-path
...
Rust: fix `<X as Y>` path extraction
2025-02-24 15:10:41 +01:00
Geoffrey White
24411b61e9
Fix typo.
2025-02-24 13:59:22 +00:00
Anders Schack-Mulligen
7499df43d0
Rust: Remove getDefinitionExt reference.
2025-02-24 14:27:17 +01:00
Anders Schack-Mulligen
0583d85f20
C#: Remove getDefinitionExt references.
2025-02-24 14:22:59 +01:00
Paolo Tranquilli
d8dad7dff0
Merge branch 'main' into redsun82/rust-trait-path
2025-02-24 14:12:53 +01:00
Michael Nebel
e8f86e41f4
C#: Add change note.
2025-02-24 13:58:55 +01:00
Michael Nebel
97f9f0ccc5
C#: Update test expected output.
2025-02-24 13:53:50 +01:00
Michael Nebel
a85131bf0f
C#: Better handling of (value) tuple types in cs/call-to-object-tostring.
2025-02-24 13:53:16 +01:00
Anders Schack-Mulligen
db7ec4a781
Java: Remove getDefinitionExt reference
2025-02-24 13:50:08 +01:00
Michael Nebel
5eb305da93
C#: Add some value tuple examples for cs/call-to-object-tostring and update test expected output.
2025-02-24 13:42:30 +01:00
Jonas Jensen
11a0a9f8af
Java: StaticInitializationVector with postprocess
...
Use the new `postprocess` feature for the test of
`StaticInitializationVector.ql`. This makes it easier to modify and test
this query for diff-informed operation.
2025-02-24 13:33:02 +01:00
Anders Schack-Mulligen
09454f9f14
SSA: Remove unused.
2025-02-24 13:02:03 +01:00
Anders Schack-Mulligen
1af753cd0c
JS: Use shared barrier guard for falsy check.
2025-02-24 13:00:06 +01:00
Anders Schack-Mulligen
782b6cfb9a
SSA: Fix bug in guards for ssa input nodes.
2025-02-24 13:00:06 +01:00
Paolo Tranquilli
8ef2029f3d
Merge pull request #18756 from github/redsun82/rust-config
...
Rust: expose more rust-analyzer config knobs
2025-02-24 12:51:37 +01:00
Paolo Tranquilli
81b6848a9c
Merge pull request #18822 from github/redsun82/rust-lint
...
Rust: strengthen linting script
2025-02-24 12:48:29 +01:00
Tom Hvitved
425fa0db09
Merge pull request #18823 from hvitved/rust/path-resolution-more
...
Rust: More path resolution improvements
2025-02-24 12:46:07 +01:00
Geoffrey White
6cb8f65076
Rust: Fix up .expected after merge.
2025-02-24 10:58:19 +00:00
Geoffrey White
fdc76dd06a
Merge branch 'main' into nth
2025-02-24 10:57:45 +00:00
Geoffrey White
3681ace746
C++: Explore negative indices more in tests.
2025-02-24 10:36:43 +00:00
Paolo Tranquilli
1bce783623
Rust: accept test changes for now
2025-02-24 11:30:58 +01:00
Tom Hvitved
7380ec8a55
Address review comments
2025-02-24 11:09:58 +01:00
Florin Coada
fcb470330c
Merge pull request #18833 from github/changedocs/2.20.5
...
Add changelog for CodeQL CLI version 2.20.5
2025-02-24 10:06:34 +00:00
