Jeroen Ketema
ac05bfcf4e
C++: Remove some redundant toStrings
2025-01-09 11:04:07 +01:00
Jeroen Ketema
6325dd2ce1
C++: Simplify toString
2025-01-09 11:03:41 +01:00
Asger F
a7fbfb2c2d
JS: Change note
2025-01-09 10:48:52 +01:00
Asger F
fd5a3dad90
JS: One more test
2025-01-09 10:46:45 +01:00
Asger F
138b000891
JS: Coerce the local export node to an Identifier
2025-01-09 10:42:25 +01:00
Asger F
db98880163
JS: Add crash reproduction to test case
2025-01-09 10:39:30 +01:00
Tom Hvitved
de0deabe4c
Ruby: Implement localMustFlowStep
2025-01-09 10:37:43 +01:00
Asger F
9c4d378a1d
JS: Remove TODO comment
...
It is not subsumed by the other case, both cases are needed
2025-01-09 10:17:16 +01:00
Asger F
3f2882e1c6
JS: Remove an obsolete comment
...
The RHS of an assignment actually has a post-update node now
2025-01-09 09:59:23 +01:00
Asger F
b2d62a080b
JS: Move a test failure explanation into the test suite
...
We have an issue for fixing the underlying problem
2025-01-09 09:57:44 +01:00
Asger F
d9da9444fa
JS: Rephrase TODO
...
This is useful info, but not something that can be fixed locally in this query, so a TODO comment isn't helping
2025-01-09 09:45:39 +01:00
Asger F
3def8ecdee
JS: Remove unimportant TODO
2025-01-09 09:43:03 +01:00
Asger F
388dd871e1
JS: Remove TODO tracked by an issue.
...
This requires changes to the shared data flow library, not something we should track with a TODO in the JS codebase
2025-01-09 09:41:40 +01:00
Asger F
8b060c4294
JS: Remove TODO about evaluating legacy steps
...
There is an issue for tracking this. It's not a small fix.
2025-01-09 09:40:29 +01:00
Asger F
a8f93cac05
JS: Remove obsolete comment
...
The test case actually has the correct result now
2025-01-09 09:39:32 +01:00
Asger F
dd37c474d8
JS: Remove mention of results from comments
2025-01-09 09:39:30 +01:00
Asger F
fb54a3bde8
JS: Remove obsolete TODO comment
2025-01-09 09:39:29 +01:00
Asger F
b29ee2acde
JS: Remove references to localFieldStep
...
These are tracked in https://github.com/github/codeql-javascript-team/issues/456
2025-01-09 09:39:27 +01:00
Asger F
7766f97232
JS: Remove obsolete TODO
2025-01-09 09:39:26 +01:00
Asger F
8ac08db5c2
JS: Remove TODOs about WithArrayElement not being a taint step
...
This isn't going to become a taint step, the workaround is the permanent solution
2025-01-09 09:39:23 +01:00
Tom Hvitved
07910b09d0
Ruby: Add more callback flow tests
2025-01-09 09:30:08 +01:00
Asger F
3cc1525985
JS: Remove obsolete TODOs
2025-01-09 09:19:30 +01:00
Asger F
1997e0a7b6
Merge pull request #18427 from asgerf/jss/change-note
...
JS: Add migration guide and change note
2025-01-09 09:13:16 +01:00
Paolo Tranquilli
ca05697365
Merge pull request #18429 from github/redsun82/rust-ast-generator-mustache
...
Rust: make ast-generator use mustache templates
2025-01-09 08:37:07 +01:00
Jeroen Ketema
f08d10065c
C++: Add upgrade and downgrade scripts
2025-01-09 00:44:39 +01:00
Jeroen Ketema
7cba263bc4
C++: Update dbscheme stats file
2025-01-09 00:44:38 +01:00
Jeroen Ketema
033f35fe42
C++: Improve PrintAST for concept ids
...
If a type would be used in multiple places in the AST, rendering of the
AST would be broken. Hence, we cannot directly use types as AST nodes.
2025-01-09 00:44:37 +01:00
Jeroen Ketema
f8458f6025
C++: Add change note
2025-01-09 00:44:36 +01:00
Jeroen Ketema
c48fcf1fb2
C++: Support concept id expressions
2025-01-09 00:44:26 +01:00
Dave Bartolomeo
554ea29547
Merge pull request #18437 from github/post-release-prep/codeql-cli-2.20.1
...
Post-release preparation for codeql-cli-2.20.1
2025-01-08 14:33:34 -05:00
Geoffrey White
3363235b1c
Merge pull request #18414 from geoffw0/sensitive
...
Rust: Sensitive data library
2025-01-08 17:38:18 +00:00
aegilops
4b57d5feb2
Added XSS sink for innerHTML/outerHTML using new Angular attribute def
2025-01-08 16:36:46 +00:00
aegilops
2dc9e7bab7
Moved def from AngularJSCore to Angular2
2025-01-08 16:36:10 +00:00
Edward Minnix III
af15ebad7e
Merge pull request #18426 from egregius313/egregius313/go/mad/database/sqlx
...
Go: Add `database` source models for the `jmoiron/sqlx` package
2025-01-08 11:31:36 -05:00
Owen Mansel-Chan
0f8f5d2793
Merge branch 'main' into post-release-prep/codeql-cli-2.20.1
2025-01-08 16:28:23 +00:00
Owen Mansel-Chan
5cc34a16d1
Merge pull request #18439 from egregius313/egregius313/go/mad/database-sql/revert-varargs
...
Go: Revert MaD models for `database/sql` to use QL instead
2025-01-08 16:24:04 +00:00
Paolo Tranquilli
53b0a3464d
Merge branch 'main' into redsun82/rust-ast-generator-mustache
2025-01-08 17:09:39 +01:00
Paolo Tranquilli
3bf2416e56
Merge pull request #18313 from github/redsun82/rust-mute-warnings-in-uncompiled-blocks
...
Rust: exclude extraction of code excluded by `cfg`
2025-01-08 17:03:29 +01:00
Taus
4141b4fb8a
Python: Add metrics query for type annotations
...
Adds a query that counts the number of type annotations of various
kinds. Intended to be used with something like MRVA to inform our
modelling decisions.
Currently the query counts the following "interesting" types in addition
to the total number of types:
- Built-in types (which are less likely to be interesting from a
modelling perspective)
- Forward declarations (i.e. annotations inside strings) which will
require a fair bit of QL machinery to interpret.
- Simple types (stuff like `foo` or `foo.bar.baz`)
- Optional types (stuff like `Optional[foo]` which from a modelling
perspective should likely be treated the same as `foo`)
- Complex types (anything that contains more complex type constructions
such as instantiations of generic types)
2025-01-08 15:41:31 +00:00
yoff
21e7a0e828
Merge branch 'main' into shared/locations-in-range-analysis
2025-01-08 16:40:59 +01:00
Ed Minnix
8e4939ee5d
Add tests for Conn
2025-01-08 10:25:57 -05:00
Ed Minnix
a4afff2c3c
Add extra variable for tracking flow
2025-01-08 10:25:55 -05:00
Ed Minnix
e7f99cdfb7
Order DB, NamedStmt, Stmt, Tx in tests
2025-01-08 10:25:54 -05:00
Ed Minnix
4ed0f7fc40
Alphabetical ordering
2025-01-08 10:25:52 -05:00
Ed Minnix
cc54e75235
Remove duplicate stubs
2025-01-08 10:25:51 -05:00
Ed Minnix
67070e0f2a
Change note
2025-01-08 10:25:49 -05:00
Ed Minnix
22a4cd3698
sqlx tests
2025-01-08 10:25:48 -05:00
Ed Minnix
89a68fed7c
Vendor sqlx stubs for test
2025-01-08 10:25:42 -05:00
Ed Minnix
4966ed1280
Add missing models
2025-01-08 10:24:12 -05:00
Ed Minnix
b916a7b5a7
Remove duplicate models
2025-01-08 10:24:10 -05:00
