Ian Wright
a716d39370
repatch
2021-12-17 16:59:31 +00:00
Ian Wright
335b2466a9
patch again
2021-12-17 16:49:40 +00:00
Ian Wright
96ae9617ec
post cherry-pick patch
2021-12-17 16:43:07 +00:00
Henry Mercer
82029663b2
JS: Push FeaturizationConfig context into more predicates
2021-12-17 16:03:15 +00:00
Henry Mercer
4cd15ba654
JS: Only featurize endpoints that are part of a flow path
2021-12-17 15:58:46 +00:00
Ian Wright
c17c10e450
Revert "JS: Push FeaturizationConfig context into more predicates"
...
This reverts commit a0f479d503
2021-12-17 15:54:03 +00:00
Henry Mercer
a0f479d503
JS: Push FeaturizationConfig context into more predicates
2021-12-17 13:54:25 +00:00
Ian Wright
24a5e8a8e1
bump the release number
2021-12-17 13:12:05 +00:00
Henry Mercer
427cdf480a
JS: Update featurization for absent features optimization
...
Absent features are now represented implicitly by the absence of a row
in the `tokenFeatures` relation, rather than explicitly by an empty
string. This leads to improved runtime performance. To enable this
implicit representation, we pass the set of supported token features to
the `scoreEndpoints` HOP. Requires CodeQL CLI v2.7.4.
2021-12-17 13:10:10 +00:00
Ian Wright
8e1f2645cb
bump the release number
2021-12-17 13:10:10 +00:00
CodeQL CI
39ec7132af
Merge pull request #7049 from asgerf/js/routing-trees
...
Approved by erik-krogh
2021-12-17 12:26:38 +00:00
Tony Torralba
f3819e7b06
Merge pull request #7435 from github/atorralba/log4j-CVE-2021-45046
...
Java: New sinks for Log4j CloseableThreadContext
2021-12-17 13:19:51 +01:00
Erik Krogh Kristensen
c70a2bebda
Merge pull request #7410 from erik-krogh/erik-krogh/publish-ql-for-ql
...
Add QL for QL
2021-12-17 12:55:25 +01:00
Anders Schack-Mulligen
3adc0b57ed
Merge pull request #7426 from MathiasVP/fix-join-order-in-http-string-literal-charpred
...
C++: Fix join-order in `HttpStringLiteral` charpred
2021-12-17 11:21:38 +01:00
Arthur Baars
96aef9f63f
Merge pull request #7393 from aibaars/ruby-simple-parameter-not-expr
...
Ruby: SimpleParameter should not be an Expr
2021-12-17 10:41:43 +01:00
Tom Hvitved
734bfbd7ae
Merge pull request #7433 from github/workflow/coverage/update
...
Update CSV framework coverage reports
2021-12-17 09:52:36 +01:00
Tony Torralba
6f2d91a8ad
Sinks for CloseableThreadContext
2021-12-17 09:17:04 +01:00
github-actions[bot]
6c57cbba2b
Add changed framework coverage reports
2021-12-17 00:09:41 +00:00
Erik Krogh Kristensen
2626b0b3dc
QL: fix test workflow
2021-12-16 22:26:42 +01:00
Erik Krogh Kristensen
be076dc2c8
add Erik and Taus as QL-for-QL reviewers
2021-12-16 21:47:42 +01:00
Mathias Vorreiter Pedersen
53a1f935b7
C++: Fix join-order in 'HttpStringLiteral' charpred.
2021-12-16 17:12:50 +00:00
Chris Gavin
8fabbd697e
Merge pull request #7422 from github/todo-comment-kind
...
Add `kind` metadata to example query.
2021-12-16 16:36:15 +00:00
Chris Smowton
e3b2eed2d2
Merge pull request #7423 from github/atorralba/log4j-CVE-2021-45046
...
Java: Cover CVE-2021-45046 in the Log4jJndiInjection query
2021-12-16 16:00:45 +00:00
Erik Krogh Kristensen
8eda061d2f
add dbscheme and codeql version to query hash
2021-12-16 15:49:07 +01:00
Tom Hvitved
579b58b8fa
Merge pull request #7402 from github/workflow/coverage/update
...
Update CSV framework coverage reports
2021-12-16 15:42:10 +01:00
Arthur Baars
3ef707e358
Address comment
2021-12-16 15:38:41 +01:00
Arthur Baars
cdbd8b27d3
Ruby: SimpleParameter is not an Expr
2021-12-16 15:38:40 +01:00
Chris Gavin
4a1e2ed408
Add a severity and select the correct number of columns.
2021-12-16 14:02:36 +00:00
Tom Hvitved
e9ef53c31b
Merge pull request #7390 from hvitved/ruby/deprecate-pattern-classes
...
Ruby: Deprecate `Pattern` classes
2021-12-16 14:36:13 +01:00
Tony Torralba
7d6cba77a0
Add tests
2021-12-16 13:44:01 +01:00
Tony Torralba
2e0ca6ce2b
Add stubs
2021-12-16 13:44:01 +01:00
Tony Torralba
7d70b77141
Add new sinks and taint steps
2021-12-16 13:43:58 +01:00
Chris Gavin
407c265daf
Add kind metadata to example query.
2021-12-16 12:12:36 +00:00
Michael Nebel
95d175e9e0
Merge pull request #7406 from michaelnebel/csharp-system-threading-csv
...
C#: Convert more flow summaries to CSV format.
2021-12-16 12:56:44 +01:00
Michael Nebel
d777ba8a25
C#: Cleanup private imports in LibraryTypeDataFlow.
2021-12-16 11:24:24 +01:00
Michael Nebel
a26403b359
Convert System.Tuple and friends flow to CSV format.
2021-12-16 11:20:04 +01:00
Asger Feldthaus
0e9c2377e3
JS: Use a field in RouterHandlerParameter
2021-12-16 10:26:35 +01:00
Michael Nebel
348e3b74f3
C#: Convert System.Text.Encoding flow to CSV format.
2021-12-16 10:03:12 +01:00
CodeQL CI
f274f06d9b
Merge pull request #7409 from asgerf/js/track-functions-with-methods
...
Approved by erik-krogh
2021-12-16 09:01:42 +00:00
CodeQL CI
acbf7913b2
Merge pull request #7408 from asgerf/js/trusted-types-sinks
...
Approved by esbena
2021-12-16 08:59:51 +00:00
Michael Nebel
a5c055581e
C#: Convert System.Runtime.CompilerServices.ConfiguredTaskAwaitable<>.ConfiguredTaskAwaiter flow to CSV format.
2021-12-16 09:36:39 +01:00
Michael Nebel
ddb7d722bc
C#: Convert System.Runtime.CompilerServices.TaskAwaiter<> flow to CSV format.
2021-12-16 09:36:39 +01:00
Michael Nebel
bdd44c1c46
C#: Convert System.Runtime.CompilerServices.ConfiguredTaskAwaitable flow to CSV format.
2021-12-16 09:36:39 +01:00
Michael Nebel
034d45ddc0
C#: Convert System.Threading.Tasks.TaskFactory flow to CSV format.
2021-12-16 09:36:39 +01:00
Michael Nebel
440976fe63
C#: Convert System.Threading.Tasks.Task<> flow to CSV format.
2021-12-16 09:36:39 +01:00
Michael Nebel
cde98c7799
C#: Convert System.Threading.Tasks.Task flow to CSV format.
2021-12-16 09:36:39 +01:00
Michael Nebel
90d7b94b8a
Merge pull request #7413 from hvitved/csharp/fix-test
...
C#: Fix broken `FlowSummariesFiltered` test
2021-12-16 09:31:33 +01:00
github-actions[bot]
18489c0ded
Add changed framework coverage reports
2021-12-16 00:09:34 +00:00
Tom Hvitved
4ccf9bf67c
Address review comments
2021-12-15 19:57:27 +01:00
Tom Hvitved
8f1b2b3bb5
C#: Fix broken FlowSummariesFiltered test
2021-12-15 18:32:25 +01:00
