Asger F
7e162f5451
JS: Port experimental EnvValueInjection to ConfigSig
2024-12-03 14:30:17 +01:00
Asger F
4f839070a0
JS: Port experimental EnvValueAndKeyInjection to ConfigSig
2024-12-03 14:30:16 +01:00
Asger F
8887ca1722
JS: Port an experimental CodeInjection variant to ConfigSig
2024-12-03 14:30:15 +01:00
Asger F
1832e93766
JS: Port FormParsers test to ConfigSig
2024-12-03 14:30:14 +01:00
Asger F
4d7401a074
JS: Deprecate tests for deprecated APIs
...
Mainly adds 'deprecated' in front of a bunch of tests for deprecated APIs.
2024-12-03 14:30:12 +01:00
Asger F
3548544970
JS: Avoid some uses of deprecated guard classes in tests
2024-12-03 14:30:11 +01:00
Asger F
a568d8c086
JS: Port threat-model test to ConfigSig
2024-12-03 14:30:10 +01:00
Asger F
f758b67d30
JS: Openly recommend SummarizedCallable
2024-12-03 14:30:09 +01:00
Asger F
249104b8ae
JS: Update comments referring to old Configuration style
...
Also avoid the term "analysis-specific" because it's not a term we use anywhere else.
2024-12-03 14:30:08 +01:00
Asger F
13ee597848
JS: Add some proper documentation to SummarizedCallable
2024-12-03 14:30:07 +01:00
Asger F
988fa9c0ef
JS: Deprecate AdditionalSanitizerGuardNode
...
We're deprecating the class through an alias, but it is still the base class for a non-deprecated class, for backwards compatibility. For this reason we're also deprecating all of its member predicates so we can remove those in the future.
2024-12-03 14:30:06 +01:00
Asger F
0b1e859e70
JS: Remove uses of AdditionalSanitizerGuardNode
2024-12-03 14:30:05 +01:00
Asger F
c2abb0fbd0
JS: Remove reference to AdditionalSanitizerGuard from CachedStages
2024-12-03 14:30:04 +01:00
Asger F
82682d9a62
JS: Remove a non-deprecated reference to SanitizerGuardNode
2024-12-03 14:30:03 +01:00
Asger F
bc7753de29
JS: Remove non-deprecated reference to AdditionalBarrierGuardNode
2024-12-03 14:30:02 +01:00
Asger F
0cd2e3f9eb
JS: Deprecate old data flow library, except some guard-related nodes
2024-12-03 14:30:01 +01:00
Asger F
071189a9e9
Merge pull request #18175 from asgerf/jss/documentation
...
JS: Update data flow documentation and tutorials for JavaScript
2024-12-03 14:23:29 +01:00
Simon Friis Vindum
cac4514eae
Rust: Add basic data flow through arrays
2024-12-03 14:15:54 +01:00
Simon Friis Vindum
3346b64e96
Rust: Add variables and data flow array tests
2024-12-03 14:14:41 +01:00
Anders Schack-Mulligen
2c0baff76a
Java: Delete deprecated data flow api.
2024-12-03 14:13:03 +01:00
Michael Nebel
4675426241
C#: Update change note with info on private fields.
2024-12-03 14:12:09 +01:00
Tom Hvitved
06b1d8e448
Merge pull request #18177 from hvitved/rust/dataflow-variant-canonical-path
...
Rust: Use canonical paths for variants in data flow
2024-12-03 14:01:28 +01:00
Anders Schack-Mulligen
9734cff15b
Java/C#: Update expected files.
2024-12-03 12:57:44 +01:00
Asger F
e1aff15f29
Merge pull request #18125 from asgerf/jss/summary-type-tracker
...
JS: Derive type-tracking steps from flow summaries
2024-12-03 12:40:56 +01:00
Paolo Tranquilli
ebe38bca23
Merge branch 'main' into redsun82/rust-less-canonical-paths
2024-12-03 12:19:08 +01:00
Paolo Tranquilli
952f41e17e
Rust: fix broken test
2024-12-03 12:06:39 +01:00
Asger F
27e61a1f3d
JS: Also update cheat sheet
2024-12-03 12:00:30 +01:00
Asger F
89463d73f5
JS: Remove mention of isAdditionalTaintStep
2024-12-03 11:51:46 +01:00
Asger F
935e1c065a
Update docs/codeql/codeql-language-guides/using-flow-labels-for-precise-data-flow-analysis.rst
...
Co-authored-by: Erik Krogh Kristensen <erik-krogh@github.com >
2024-12-03 11:49:45 +01:00
Asger F
89849fae87
Update docs/codeql/codeql-language-guides/using-flow-labels-for-precise-data-flow-analysis.rst
...
Co-authored-by: Erik Krogh Kristensen <erik-krogh@github.com >
2024-12-03 11:49:34 +01:00
Asger F
5e27257405
Update docs/codeql/codeql-language-guides/analyzing-data-flow-in-javascript-and-typescript.rst
...
Co-authored-by: Erik Krogh Kristensen <erik-krogh@github.com >
2024-12-03 11:49:22 +01:00
Michael Nebel
cc4382c785
Merge pull request #18186 from michaelnebel/csharp/removechangenote
...
C#: Remove change note.
2024-12-03 11:45:34 +01:00
Paolo Tranquilli
db18d1046b
Rust: rename getTy -> getTypeRepr
2024-12-03 11:17:08 +01:00
Paolo Tranquilli
8287cdd7b3
Rust: accept test changes
2024-12-03 11:01:05 +01:00
Anders Schack-Mulligen
b65a4e45ab
Dataflow: Postpone type pruning until stage 5.
2024-12-03 10:59:12 +01:00
Anders Schack-Mulligen
4933e803cf
Dataflow: Track stored type.
2024-12-03 10:59:11 +01:00
Paolo Tranquilli
b99e234cdc
Merge branch 'main' into redsun82/rust-tweaks
2024-12-03 10:47:03 +01:00
Tom Hvitved
3c767b086b
Rust: Use canonical paths for variants in data flow
2024-12-03 10:19:33 +01:00
Michael Nebel
27d2f9e402
C#: Add change-note.
2024-12-03 10:14:22 +01:00
Tom Hvitved
0bebfa6e45
Merge pull request #18130 from hvitved/rust/flow-summary-impl
...
Rust: Adopt shared flow summaries library
2024-12-03 10:14:21 +01:00
Simon Friis Vindum
e377a0e05a
Merge branch 'main' into rust-df-closure
2024-12-03 10:09:52 +01:00
Asger F
054558d7b5
JS: Include content properties in type-tracker properties
...
Reminder: we have two PropertyName classes because the one in Contents.qll can't depend on DataFlow::Node.
2024-12-03 09:58:54 +01:00
Asger F
8bca66493f
JS: Add test showing lack of inclusion in PropertyName
2024-12-03 09:57:02 +01:00
Napalys Klicius
1e1674a08a
Merge pull request #18089 from Napalys/napalys/regexp-unknown-flags
...
JS: RegExp unknown flags support and enhanced compatibility with RegExp objects
2024-12-03 09:43:13 +01:00
Tom Hvitved
6b7522fe77
Merge pull request #18178 from hvitved/csharp/unsafe-crypto-transform-from-source
...
C#: Restrict `cs/thread-unsafe-icryptotransform-field-in-class` to source fields
2024-12-03 09:30:28 +01:00
Tom Hvitved
52dc79eb7d
Address review comments
2024-12-03 09:28:21 +01:00
Tom Hvitved
3e5f4b7f89
Rust: Add a model for unwrap
2024-12-03 09:12:01 +01:00
Tom Hvitved
fbeb6f3940
Shared: Move shared logic into FlowSummaryImpl.qll
2024-12-03 09:11:11 +01:00
Tom Hvitved
395901b8e0
Rust: Adopt shared flow summaries library
2024-12-03 09:11:06 +01:00
Michael Nebel
86515b0140
C#: Remove change note.
2024-12-03 08:55:04 +01:00
