9901 Commits

Author	SHA1	Message	Date
aegilops	01798f63f8	Switched to new dataflow and added a test (but it doesn't produce results yet)	2023-06-28 17:14:39 +01:00
aegilops	23bf8470ce	Removed .md and made class change	2023-06-19 17:29:17 +01:00
aegilops	8c9ccab9c9	Autoformat	2023-06-19 11:53:53 +01:00
Paul Hodgkinson	72d9d4736e	Merge branch 'main' into java/experimental/command-injection	2023-06-19 11:51:45 +01:00
aegilops	2112d73a6a	Autoformat	2023-06-19 11:50:54 +01:00
aegilops	1a108fb1c9	Changed to for constant string	2023-06-19 11:46:08 +01:00
aegilops	7c235e3786	Fixed linting issues. Will not fix instanceof, that is necessary	2023-06-19 11:41:23 +01:00
aegilops	8c73fbeabe	Formatted	2023-06-16 17:33:21 +01:00
aegilops	55eeb00309	Added experimental tag	2023-06-16 17:27:01 +01:00
aegilops	b6c35dd88c	Added experimental version of Java Command Injection query, to be more sensitive to unusual code constructs	2023-06-16 17:12:53 +01:00
Ian Lynagh	04a7ff7f76	Merge pull request #13477 from igfoo/igfoo/diags_classes ... Kotlin: Remove diags.ql from classes test	2023-06-16 17:07:38 +01:00
Ian Lynagh	a8acf16088	Kotlin: Remove diags.ql from classes test ... The diags consistency test already handles this for us.	2023-06-16 12:57:19 +01:00
Ian Lynagh	b7e9915151	Merge pull request #13463 from igfoo/igfoo/AccessControlException ... Kotlin: Remove use of AccessControlException	2023-06-15 10:53:28 +01:00
github-actions[bot]	e6160b8e49	Add changed framework coverage reports	2023-06-15 00:18:04 +00:00
Ian Lynagh	0419b6e505	Kotlin: Remove use of AccessControlException ... We were getting warnings about it being deprecated, and it was all dead code anyway.	2023-06-14 17:45:58 +01:00
Tony Torralba	37a62d3021	Merge pull request #13227 from atorralba/atorralba/java/jenkins-generated-models ... Java: Add autogenerated models for frameworks related to Jenkins	2023-06-14 15:59:28 +02:00
Tony Torralba	7c4cdbf0d6	Remove badly generated models	2023-06-14 14:20:16 +02:00
Michael Nebel	afec9b05e9	Merge pull request #13147 from michaelnebel/csharp/entityframeworkrefactor ... C#: Use synthetic global in the EntityFramework code instead of jump steps.	2023-06-14 13:47:56 +02:00
Tony Torralba	182513a981	Merge pull request #13235 from atorralba/atorralba/java/hudson-models ... Java: Add Hudson models	2023-06-14 12:33:18 +02:00
Ian Lynagh	36e8441ed7	Merge pull request #13427 from igfoo/igfoo/references ... Kotlin: Avoid using deprecated APIs	2023-06-14 11:15:35 +01:00
Jean Helie	209f3e26d4	Merge pull request #13239 from github/tausbn/automodel-application-mode ... Java: Add QL support for automodel application mode	2023-06-14 11:42:26 +02:00
Tony Torralba	8bafc22add	Replace open-url sink kinds with request-forgery	2023-06-14 09:59:59 +02:00
Tony Torralba	73d2ab7d66	Add change note	2023-06-14 09:58:30 +02:00
Tony Torralba	686c35e210	Add autogenerated models	2023-06-14 09:58:30 +02:00
Anders Schack-Mulligen	1a4fca334f	Merge pull request #13273 from aschackmull/dataflow/summarynode-refactor ... Dataflow: Refactor FlowSummaryImpl to synthesize nodes independently from DataFlow::Node.	2023-06-14 09:38:36 +02:00
Anders Schack-Mulligen	2d616d494e	C#/Ruby: Add fields as per review comments.	2023-06-13 11:26:30 +02:00
Jeroen Ketema	c3ba206b6a	Merge pull request #13346 from jketema/inline-2 ... Update inline expectation tests to use parameterized module	2023-06-13 10:10:55 +02:00
Anders Schack-Mulligen	eec012d308	Java: Fix test	2023-06-12 13:18:13 +02:00
github-actions[bot]	a628384d83	Add changed framework coverage reports	2023-06-12 00:18:38 +00:00
Ian Lynagh	d3941ae935	Kotlin: Avoid using deprecated APIs	2023-06-09 18:14:09 +01:00
Anders Schack-Mulligen	97b2bdaa9f	Java: Fix types of summary parameter nodes.	2023-06-09 15:39:28 +02:00
Anders Schack-Mulligen	254d60c826	Dataflow: Refactor FlowSummaryImpl to synthesize nodes independently from DataFlow::Node.	2023-06-09 15:27:17 +02:00
Anders Schack-Mulligen	59636c43ca	Dataflow: Rename two private predicates.	2023-06-09 15:27:17 +02:00
Stephan Brandauer	b38bc52019	Java: fix bug in ExcludedFromModeling Characteristic	2023-06-09 14:57:56 +02:00
Anders Schack-Mulligen	1b7bbf6320	Merge pull request #13083 from aschackmull/dataflow/typestrengthen ... Dataflow: Strengthen tracked types.	2023-06-09 13:23:30 +02:00
Jeroen Ketema	49993b023e	Java: Rewrite inline expectation tests to use parameterized module	2023-06-09 10:42:17 +02:00
Tony Torralba	0cef5651e2	Merge pull request #13417 from github/workflow/coverage/update ... Update CSV framework coverage reports	2023-06-09 09:27:03 +02:00
Anders Schack-Mulligen	44b09507ab	Merge pull request #13408 from aschackmull/java/loginjection-perf ... Java: Add more negation context to reduce string ops and improve perf.	2023-06-09 08:44:27 +02:00
Anders Schack-Mulligen	68f1e40370	Java/C#: Add change notes.	2023-06-09 08:37:36 +02:00
Anders Schack-Mulligen	85d6b44d92	Java: Fix test output.	2023-06-09 08:37:36 +02:00
Anders Schack-Mulligen	d230509905	Dataflow: Address review comments.	2023-06-09 08:37:36 +02:00
Anders Schack-Mulligen	95afd551ff	Java: Fix qltest	2023-06-09 08:37:36 +02:00
Anders Schack-Mulligen	4399138c82	Dataflow: Fix QL4QL alert.	2023-06-09 08:37:36 +02:00
Anders Schack-Mulligen	8a584b78ac	Dataflow: Enable type strengthening in partial flow.	2023-06-09 08:37:36 +02:00
Anders Schack-Mulligen	441ccef6c4	Dataflow: Bugfix, use arg type rather than strengthened param type.	2023-06-09 08:37:36 +02:00
Anders Schack-Mulligen	a0a9d30286	Java: Fix qltests.	2023-06-09 08:37:35 +02:00
Anders Schack-Mulligen	4633abe19e	Java: Autoformat	2023-06-09 08:37:35 +02:00
Anders Schack-Mulligen	ad461a87b4	Dataflow: Strengthen tracked types.	2023-06-09 08:37:35 +02:00
Anders Schack-Mulligen	1d87f0793b	Dataflow: Minor refactor.	2023-06-09 08:37:35 +02:00
github-actions[bot]	81b08b4399	Add changed framework coverage reports	2023-06-09 00:18:12 +00:00