Benjamin Muskalla
b7b74b51a3
Track taint for String.valueOf(..)
2021-07-29 09:14:03 +02:00
Arthur Baars
fcf2d4cbd2
Apply suggestions from code review
...
Co-authored-by: Nick Rolfe <nickrolfe@github.com >
2021-07-29 09:02:57 +02:00
Geoffrey White
ae35ae10e6
C++: Fix readlink FPs.
2021-07-28 17:45:18 +01:00
Fosstars
893f84fbf4
Merge branch 'unsafe-jackson-deserialization' of github.com:artem-smotrakov/ql into unsafe-jackson-deserialization
2021-07-28 18:25:53 +02:00
Fosstars
50497eb747
Make imports as private as possible
2021-07-28 18:25:05 +02:00
ihsinme
2d5a263799
Update FindIncorrectlyUsedExceptions.ql
2021-07-28 18:46:49 +03:00
Geoffrey White
c2ef58d29d
C++: Support 'readlinkat'.
2021-07-28 16:15:28 +01:00
Geoffrey White
358d89f3ce
C++: Add tests.
2021-07-28 16:15:16 +01:00
Joe Farebrother
d900fcaf42
Merge pull request #6374 from joefarebrother/test-gen-improvements
...
Java: Add support for synthetic fields to the test generator
2021-07-28 16:02:47 +01:00
Artem Smotrakov
7fec575df8
Simplify JsonTypeInfo stub
...
Co-authored-by: Anders Schack-Mulligen <aschackmull@users.noreply.github.com >
2021-07-28 14:23:50 +02:00
Joe Farebrother
9ddae3e9f6
Fix spelling
...
Co-authored-by: Marcono1234 <Marcono1234@users.noreply.github.com >
2021-07-28 10:12:17 +01:00
Tony Torralba
3248f458a5
Update java/change-notes/2021-06-14-groovy-code-injection-query.md
...
Co-authored-by: mc <42146119+mchammer01@users.noreply.github.com >
2021-07-28 10:45:03 +02:00
haby0
eda3d864f5
Model written using smowton
2021-07-28 15:55:47 +08:00
valeria-meli
f3c0bf7826
copy-paste from our repo
2021-07-27 18:09:11 -03:00
Aditya Sharad
d7c29791de
Merge pull request #6368 from bmuskalla/addMissingKeywords
...
Add missing keywords to language specification
2021-07-27 11:08:25 -07:00
Felicity Chapman
0714f4abbb
Merge pull request #6339 from github/package-manager-docs
...
[July 27-8, 2021] CodeQL package manager: update CodeQL CLI docs (beta)
2021-07-27 18:24:03 +01:00
Arthur Baars
1d245b8d2e
Merge pull request #237 from github/aibaars/rules-sarif
...
Build/Release: create rules.sarif file
2021-07-27 18:49:50 +02:00
Arthur Baars
dacd3f3d19
Update dbscheme stats
2021-07-27 18:43:51 +02:00
Arthur Baars
4d18ec226a
Fix dataset_measure.yml
2021-07-27 18:43:51 +02:00
Arthur Baars
38eb6c112f
Add ERB extraction
2021-07-27 18:43:51 +02:00
Arthur Baars
768a751271
Add upgrade script
2021-07-27 18:43:51 +02:00
Arthur Baars
866ff7b1f6
Replace Generated module with Ruby
2021-07-27 18:43:44 +02:00
Arthur Baars
02bf895a4a
Update dbscheme type references
2021-07-27 18:42:21 +02:00
Joe Farebrother
2d862ef119
Support synthetic fields
2021-07-27 17:28:53 +01:00
Arthur Baars
2e10f8f054
Prefix dbscheme entries with language name
2021-07-27 18:17:19 +02:00
Arthur Baars
fe868e4c05
Ruby-Generator: add --dbscheme and --library flags
2021-07-27 18:17:19 +02:00
Arthur Baars
fc8f5919f3
Remove Ruby specific parts from FileSystem.qll
2021-07-27 18:17:15 +02:00
Chris Smowton
23de0859ea
Add missing models and other minor improvements per Marcono1234's review
2021-07-27 16:03:39 +01:00
Joe Farebrother
a8cca4ba0e
Merge pull request #6373 from joefarebrother/test-gen-improvements
...
Java: Test generator improvements
2021-07-27 15:44:56 +01:00
Chris Smowton
0049b8e3c4
Merge pull request #6371 from github/smowton/admin/test-generator-notice-bad-rows
...
Add test-case generator check for non-parseable rows
2021-07-27 15:44:01 +01:00
Joe Farebrother
309f0e7c26
Fix handling of arrays
2021-07-27 15:05:57 +01:00
Joe Farebrother
9ffcfbcd33
Add --force option
2021-07-27 15:05:57 +01:00
Joe Farebrother
8ab0fd54b4
Improvements to the test generator:
...
- Only reference public methods
- Report rows for which test cases could not be generated
- Add a blanket `throws Exception` clause to the generated method
2021-07-27 15:05:55 +01:00
Joe Farebrother
2036aa1e4a
Format test generator
2021-07-27 15:04:19 +01:00
Felicity Chapman
28ce21ed7e
Update docs/codeql/codeql-cli/publishing-and-using-codeql-packs.rst
2021-07-27 15:02:39 +01:00
Geoffrey White
5ac6b38380
C++: Change note.
2021-07-27 14:27:16 +01:00
mc
10a3dcb188
Update GroovyInjection.qhelp
2021-07-27 14:26:49 +01:00
Chris Smowton
97d603cafb
Add test-case generator check for non-parseable rows
2021-07-27 14:26:22 +01:00
Geoffrey White
e7842b9625
C++: Autoformat.
2021-07-27 14:19:30 +01:00
Geoffrey White
00f6f668cc
C++: Don't report underflowing multiplication.
2021-07-27 14:02:40 +01:00
Geoffrey White
40f0658e8a
C++: Exclude unintended results on pointers.
2021-07-27 13:39:20 +01:00
Geoffrey White
503c5c9e33
C++: Add more test cases.
2021-07-27 13:38:00 +01:00
Anders Schack-Mulligen
a5f0a4ea71
Merge pull request #6087 from smowton/smowton/admin/rest-xss-tests
...
Java: Add Spring XSS tests
2021-07-27 14:09:34 +02:00
Felicity Chapman
e5d8e81634
Merge branch 'package-manager-docs' of github.com:github/codeql into package-manager-docs
2021-07-27 12:52:46 +01:00
Felicity Chapman
f060296cf8
Update beta note with details of release
2021-07-27 12:52:15 +01:00
Arthur Baars
58c93bfdca
Build/Release: create rules.sarif file
2021-07-27 12:29:27 +02:00
Anders Schack-Mulligen
aa8fa26a2a
Merge pull request #6355 from intrigus-lgtm/patch-6
...
Update broken link
2021-07-27 09:05:02 +02:00
haby0
00f13e1e6e
Modify isAdditionalTaintStep
2021-07-27 10:59:38 +08:00
Felicity Chapman
ecaf03ff7e
Update docs/codeql/codeql-cli/about-ql-packs.rst
2021-07-27 00:19:31 +01:00
Felicity Chapman
070554e0d8
Update description of 'suites'
2021-07-26 23:48:50 +01:00
