Commit Graph

78658 Commits

Author SHA1 Message Date
Owen Mansel-Chan
2c061b0d56 Add QLDoc for HostnameSanitizingPrefix 2024-11-29 09:46:44 +00:00
Owen Mansel-Chan
7f8a1ae941 Add change note 2024-11-29 09:46:42 +00:00
Owen Mansel-Chan
7648d397f8 Improve model to remove some false positives 2024-11-29 09:46:41 +00:00
Owen Mansel-Chan
617f4f140e Make HostnameSanitizingPrefix public 2024-11-29 09:46:39 +00:00
Owen Mansel-Chan
ba3f9d6134 Convert model to QL 2024-11-29 09:46:38 +00:00
Jeroen Ketema
bcb7901758 Merge pull request #18111 from jketema/guarded-free
C++: Promote `cpp/guarded-free` out of experimental
2024-11-29 10:43:02 +01:00
Geoffrey White
49b569cc4b Rust: Update for changes on main. 2024-11-29 09:37:32 +00:00
Geoffrey White
0f3469313f Merge branch 'main' into ctor 2024-11-29 09:37:23 +00:00
Michael Nebel
47487cca0e Merge pull request #18158 from github/workflow/coverage/update
Update CSV framework coverage reports
2024-11-29 10:21:09 +01:00
Geoffrey White
a6f20a6ac1 Apply suggestions from code review
Co-authored-by: mc <42146119+mchammer01@users.noreply.github.com>
2024-11-29 09:09:59 +00:00
Simon Friis Vindum
b8d60cbb13 Rust: Implement predicates for lambdas/closures in the data flow library 2024-11-29 09:32:04 +01:00
Simon Friis Vindum
ad7480591b Rust: Add data flow tests involving closures 2024-11-29 09:30:26 +01:00
Tamás Vajk
5f41b6d3f2 Merge pull request #18141 from tamasvajk/fix/db-quality-query
C#: Exclude `get`-only property accesses from `CallTargetStats`
2024-11-29 08:49:55 +01:00
Napalys Klicius
13afd6310b Update javascript/ql/lib/change-notes/2024-11-28-regexp-unknown-flags.md
Co-authored-by: Erik Krogh Kristensen <erik-krogh@github.com>
2024-11-29 08:26:04 +01:00
github-actions[bot]
8feca3d532 Add changed framework coverage reports 2024-11-29 00:21:55 +00:00
github-actions[bot]
32bfaa8569 Post-release preparation for codeql-cli-2.19.4 2024-11-28 19:40:05 +00:00
Alexander Eyers-Taylor
de325133c7 Merge pull request #18156 from github/release-prep/2.19.4
Release preparation for version 2.19.4
codeql-cli/v2.19.4
2024-11-28 19:32:51 +00:00
Alex Eyers-Taylor
dbe9f22034 Fix broken changelog. 2024-11-28 19:31:25 +00:00
github-actions[bot]
b36f3f97ee Release preparation for version 2.19.4 2024-11-28 19:28:05 +00:00
Alexander Eyers-Taylor
f7896b4c2b Merge pull request #18155 from github/revert-18065-release-prep/2.19.4
Revert "Release preparation for version 2.19.4"
2024-11-28 19:22:36 +00:00
Alexander Eyers-Taylor
6f18d69925 Revert "Release preparation for version 2.19.4" 2024-11-28 19:19:56 +00:00
Geoffrey White
1fc112e7a7 Swift: Fix for OptionSet. 2024-11-28 18:48:23 +00:00
Geoffrey White
e08eac03d8 Swift: Fix for Int.description. 2024-11-28 18:18:23 +00:00
Owen Mansel-Chan
b5fbf2e944 Add models for third arg of getForObject
No attempt to stop FPs.
2024-11-28 16:51:13 +00:00
Owen Mansel-Chan
65fb895ed5 (Unrelated) Fix typo in class name 2024-11-28 16:51:09 +00:00
Jeroen Ketema
6d37efc0d8 Update cpp/ql/src/Best Practices/GuardedFree.qhelp
Co-authored-by: mc <42146119+mchammer01@users.noreply.github.com>
2024-11-28 16:36:13 +01:00
Jeroen Ketema
f9d9f9ba62 Update cpp/ql/src/Best Practices/GuardedFree.qhelp
Co-authored-by: mc <42146119+mchammer01@users.noreply.github.com>
2024-11-28 16:36:04 +01:00
Jeroen Ketema
088a3ef15c Update cpp/ql/src/Best Practices/GuardedFree.qhelp
Co-authored-by: mc <42146119+mchammer01@users.noreply.github.com>
2024-11-28 16:35:39 +01:00
Paolo Tranquilli
9f6a2e090e Rust: add diagnostics queries to integration tests 2024-11-28 15:33:10 +01:00
Ed Minnix
a7a77a5f23 Added NavigationManager::BaseUri 2024-11-28 09:16:45 -05:00
Geoffrey White
5b50a8270d Rust: Clarify the doc on the two models a little. 2024-11-28 14:11:15 +00:00
Geoffrey White
1d0338444a Rust: Fix SqlExecute. 2024-11-28 14:11:14 +00:00
Ed Minnix
5bcc694f6a Fix typo 2024-11-28 09:06:18 -05:00
Simon Friis Vindum
08648f912e Merge branch 'main' into rust-df-inconsistency-no-location 2024-11-28 15:03:52 +01:00
Ed Minnix
1c06c4aae0 Fix summaries 2024-11-28 08:59:58 -05:00
Ed Minnix
61a4b251c0 NavigationManager::Uri and URI-parsing utilities 2024-11-28 08:59:57 -05:00
Edward Minnix III
418ab4b22a Merge pull request #18123 from egregius313/egregius313/csharp/ijsruntime-models
C#: Add `js-interop` sinks for `Microsoft.JSInterop.IJSRuntime`
2024-11-28 08:58:23 -05:00
Tamas Vajk
7acbf1a984 Add change note 2024-11-28 14:40:20 +01:00
Tamas Vajk
072713f771 C#: Exclude more property access expressions from DB quality metric 2024-11-28 14:34:35 +01:00
Napalys
d2de9a2238 Fixed change notes 2024-11-28 14:24:27 +01:00
Napalys Klicius
9ca0fe4cbf Update RegExp handling and add test case
Co-authored-by: erik-krogh <erik-krogh@github.com>
2024-11-28 14:13:40 +01:00
Geoffrey White
2810d64b22 Rust: Fix ql-for-ql warning. 2024-11-28 12:43:24 +00:00
Taus
a9817a0281 Python: Add guide describing how to extend the parser 2024-11-28 12:32:00 +00:00
Geoffrey White
14b70b856a Merge pull request #18143 from geoffw0/swift6models3
Swift: Fix makeIterator() models
2024-11-28 12:11:26 +00:00
Simon Friis Vindum
b05d290bf0 Rust: Exclude data flow inconsistencies that stem from other inconsistencies 2024-11-28 12:46:32 +01:00
Napalys
fd773603e6 Added change notes 2024-11-28 12:04:09 +01:00
Napalys
9a1c1f4be3 JS: Added in RegExpCreationNode maybeGlobal predicate for more convenience. 2024-11-28 12:03:51 +01:00
Paolo Tranquilli
50c917d2eb Rust: restrict extracted files queries 2024-11-28 12:02:57 +01:00
yoff
c1937ea549 Merge pull request #18117 from github/tausbn/python-fix-match-literal-pruning
Python: Add change note for CFG pruning fix
2024-11-28 11:40:21 +01:00
Napalys
1d2e08a3b6 JS: now Reg Exp injection treats unknownFlags as sanitization, MetacharEscapeSanitizer 2024-11-28 11:26:58 +01:00