Anders Schack-Mulligen
88fe4faf9d
SSA: Remove nodes that are no longer used.
2025-02-24 11:00:48 +01:00
Anders Schack-Mulligen
09b2aeb53a
SSA: Replace use-use step implementation in data-flow integration.
2025-02-24 10:58:14 +01:00
Paolo Tranquilli
689e7b8440
Rust: fix <X as Y> path extraction
...
This works around a quirk in rust-analyzer's AST generation machinery,
where for an `<X as Y>` path there might be no way to directly get `Y`
from the path segment.
2025-02-24 10:38:15 +01:00
Geoffrey White
08913c551d
Merge pull request #18827 from geoffw0/exectainted
...
C++: Expand qldoc and tests for cpp/command-line-injection
2025-02-24 08:53:49 +00:00
Michael B. Gale
1b2d842b44
Merge pull request #17900 from github/mbg/go/fix/project-files-in-vendor
2025-02-22 10:00:46 +00:00
Owen Mansel-Chan
d9d909a61e
Address review comments
2025-02-22 02:31:08 +00:00
Geoffrey White
90758b37ef
C++: Change notes.
2025-02-21 19:00:12 +00:00
Geoffrey White
fd32355ca8
C++: Give cpp/overflow-buffer medium precision, and upgrade severity so it will appear in security-extended.
2025-02-21 18:58:58 +00:00
Geoffrey White
ae25399a47
C++: Fix offsetof bug.
2025-02-21 18:58:56 +00:00
Geoffrey White
547b082ac3
C++: Even more test cases.
2025-02-21 18:58:42 +00:00
Geoffrey White
3aa1ba5876
C++: More additional test cases.
2025-02-21 18:09:41 +00:00
Chris Smowton
32e4c741cc
Merge pull request #18554 from smowton/smowton/admin/test-gbk-xml-extraction
...
Java: Add tests for XML and Java extraction with GBK charset
2025-02-21 17:27:32 +00:00
Owen Mansel-Chan
721b8c4ea6
Merge pull request #18826 from owen-mc/go/join-order-fixes
...
Go: Fix bad join order in `comparesFirstCharacter`
2025-02-21 16:25:15 +00:00
Alex Eyers-Taylor
57e985cc21
CPP: Simplify getClassAndNameImpl
2025-02-21 16:23:45 +00:00
Edward Minnix III
c93fb4cbc9
Merge pull request #18493 from egregius313/egregius313/go/mad/database/mongodb
...
Go: `database` local sources for MongoDB
2025-02-21 09:32:15 -05:00
Anders Schack-Mulligen
4e515bc2f5
JS: Remove reference to isInputInto
2025-02-21 14:48:24 +01:00
Asger F
cd0fd02e74
Rust: Remove 'Source' annotations from same line as Alert
...
Source tags should no longer be used when on the same line as the Alert.
The ones in this file went unnoticed however because *all* of them were on the same line as an Alert, which made the test library ignore all Source tags.
2025-02-21 14:44:48 +01:00
Asger F
cd2c4d5e3a
JS: Use post-processed inline test in MissingCsrfMiddleware
...
This query flags the cookie-parsing middleware in order to consolidate huge numbers of alerts into a single alert, which is more manageable. But simply annotating the cookie-parsing middleware with 'Alert' isn't a very useful, we want to annotate which middlewares are vulnerable.
2025-02-21 14:44:46 +01:00
Asger F
e2fe74ccd6
JS: Add support for RelatedLocation tags
2025-02-21 14:44:45 +01:00
Anders Schack-Mulligen
9acb58e8c2
SSA: Add SsaNode predicates that don't mention DefinitionExt.
2025-02-21 14:43:51 +01:00
Tamas Vajk
24bd9fb7e5
Add queries to C# CCR suite
2025-02-21 14:24:09 +01:00
Simon Friis Vindum
4ef64cdf9f
Merge pull request #18820 from paldepind/rust-fewer-no-match
...
Rust: Remove nonsentical no-match CFG edges
2025-02-21 14:18:23 +01:00
Napalys
3587ba593a
Add change note and added tanstack to supported framework list
2025-02-21 13:47:48 +01:00
Napalys
ab0241c1de
Added missing doc strings for Tanstack queries
2025-02-21 13:32:49 +01:00
Simon Friis Vindum
e6e4ff1b72
Rust: Accept changes to expected files
2025-02-21 13:24:06 +01:00
Napalys
1227a7eedc
Add Tanstack framework support and enhance data flow tracking for fetch responses
2025-02-21 13:24:00 +01:00
Napalys
05690c21ed
Added a test for tanstack/react-query useQuery
2025-02-21 13:24:00 +01:00
Simon Friis Vindum
0f627ae59a
Merge branch 'main' into rust-fewer-no-match
2025-02-21 13:20:50 +01:00
Florin Coada
967c1ad51c
Merge pull request #18832 from github/coadaflorin/csharp-changelog-clean
...
Coadaflorin/csharp changelog clean
2025-02-21 11:01:39 +00:00
Florin Coada
fd9475ea2f
Add changelog for CodeQL CLI version 2.20.5
2025-02-21 10:48:21 +00:00
Florin Coada
38f538e76a
Update 3.1.1.md
2025-02-21 10:44:20 +00:00
Florin Coada
b77b5fc308
Update CHANGELOG.md
2025-02-21 10:43:43 +00:00
Owen Mansel-Chan
50d1bc6aa0
Improve bad join order
2025-02-21 10:31:46 +00:00
Simon Friis Vindum
df2a110b41
Rust: Changes based on PR comments
2025-02-21 11:15:54 +01:00
Simon Friis Vindum
65bce9d7e0
Rust: Add CFG test with tuple struct pattern
2025-02-21 10:59:21 +01:00
Anders Schack-Mulligen
6932e000c6
Java: Switch BaseSSA to use shared SSA lib.
2025-02-21 08:57:23 +01:00
Anders Schack-Mulligen
1c616d10d4
Merge pull request #18819 from aschackmull/ssa/refactor-phiread3
...
Ssa: Refactor shared SSA in preparation for eliminating phi-read definitions
2025-02-21 08:56:38 +01:00
Owen Mansel-Chan
44c5df5246
Force global value fanout to go last
2025-02-21 01:01:09 +00:00
Owen Mansel-Chan
8aa9dd7092
Move go generate comment
2025-02-21 00:38:33 +00:00
Sarita Iyer
26da997bb2
Merge pull request #18809 from github/saritai/docs-formatting-fix
...
Fix table alignment in supported languages article
2025-02-20 16:35:39 -05:00
Ed Minnix
f7e094e887
Move depstubber line to test file
2025-02-20 16:28:51 -05:00
Paolo Tranquilli
45baceb2f5
Merge pull request #18821 from github/redsun82/rust-license
...
Rust: add licensing information to crates and extractor pack
2025-02-20 22:20:40 +01:00
Chris Smowton
311c1e1654
Merge pull request #18829 from smowton/smowton/admin/regularise-extractor-licenses
...
Regularise extractor pack licenses to all cite the MIT license that covers the whole CodeQL repository
2025-02-20 20:02:26 +00:00
Chris Smowton
a1ba584b20
Autoformat
2025-02-20 19:31:00 +00:00
Chris Smowton
4567e02b8c
Regularise extractor pack licenses to all cite the MIT license that covers the whole CodeQL repository
2025-02-20 18:55:55 +00:00
Chris Smowton
fe34aa35a9
Merge pull request #18699 from github/smowton/admin/update-license
...
Update license; remove redundant Go qlpack license.
2025-02-20 18:19:51 +00:00
Geoffrey White
89355991df
C++: Additional test cases.
2025-02-20 16:28:35 +00:00
Geoffrey White
e77ebf0715
C++: Test spacing.
2025-02-20 16:23:35 +00:00
Alex Eyers-Taylor
53c5b8ff9e
CPP: Prevent forced bad join order.
2025-02-20 16:06:42 +00:00
Geoffrey White
b6f9055566
C++: Add and correct some QLDoc.
2025-02-20 15:33:59 +00:00
