Geoffrey White
|
0d7769f687
|
Merge pull request #13276 from geoffw0/sqlpathinject
Swift: Add path injection sinks for sqlite3 and SQLite.swift
|
2023-09-12 17:36:27 +01:00 |
|
Geoffrey White
|
3fd5de83cb
|
Merge branch 'main' into sqlpathinject
|
2023-09-11 12:42:49 +01:00 |
|
Geoffrey White
|
fc69be4df9
|
Merge branch 'main' into quicktest
|
2023-09-11 12:25:38 +01:00 |
|
Robert Marsh
|
603f2cd3b2
|
Swift: fix test expectation properly
|
2023-09-07 19:35:02 +00:00 |
|
Robert Marsh
|
0fff540add
|
Swift: update a test expectation for dictionary flow
|
2023-09-07 16:14:23 +00:00 |
|
Robert Marsh
|
4f4491a876
|
Swift: autoformat
|
2023-09-07 16:14:05 +00:00 |
|
Robert Marsh
|
5bdd9597d2
|
Merge branch 'main' into rdmarsh2/swift/dictionary-flow-tuples
|
2023-09-06 14:50:16 +00:00 |
|
Alex Denisov
|
35e949945d
|
Swift: add queries for unresolved AST nodes
|
2023-09-05 13:29:11 +02:00 |
|
Tom Hvitved
|
9af706c2a5
|
Swift: Use data flow consistency checks from shared pack
|
2023-08-30 15:29:41 +02:00 |
|
Mathias Vorreiter Pedersen
|
6a21fa04cd
|
Merge pull request #14034 from geoffw0/hostname
Swift: New query: Incomplete regular expression for hostnames
|
2023-08-30 11:33:36 +01:00 |
|
Geoffrey White
|
39b45fa24f
|
Merge pull request #13943 from geoffw0/weakhashexample
Swift: Update the weak sensitive data hashing examples and qhelp
|
2023-08-30 10:36:23 +01:00 |
|
Geoffrey White
|
125629a7e2
|
Swift: Delete 'usually'.
|
2023-08-29 23:25:22 +01:00 |
|
Geoffrey White
|
210a5bfff2
|
Update swift/ql/src/queries/Security/CWE-328/WeakSensitiveDataHashing.qhelp
Co-authored-by: mc <42146119+mchammer01@users.noreply.github.com>
|
2023-08-29 23:24:12 +01:00 |
|
Geoffrey White
|
7006cfd8f8
|
Swif: Fix paragraph breaks.
|
2023-08-29 23:00:17 +01:00 |
|
Dave Bartolomeo
|
3343b78015
|
Merge pull request #14074 from github/post-release-prep/codeql-cli-2.14.3
Post-release preparation for codeql-cli-2.14.3
|
2023-08-28 13:34:10 -04:00 |
|
github-actions[bot]
|
3eba77421a
|
Post-release preparation for codeql-cli-2.14.3
|
2023-08-28 15:53:49 +00:00 |
|
Mathias Vorreiter Pedersen
|
2fd627b460
|
Merge pull request #13827 from geoffw0/closuremodels
Swift: Model withUnsafeBytes and similar closure methods
|
2023-08-25 10:01:52 +01:00 |
|
Geoffrey White
|
415d9e0674
|
Swift: Address review comments.
|
2023-08-24 18:41:48 +01:00 |
|
Geoffrey White
|
242a49e6f1
|
Apply suggestions from code review
Co-authored-by: mc <42146119+mchammer01@users.noreply.github.com>
|
2023-08-24 17:19:01 +01:00 |
|
Geoffrey White
|
46fc1fdaa1
|
Swift: Suggestions from review.
|
2023-08-23 14:04:56 +01:00 |
|
Geoffrey White
|
15c49eeee9
|
Update swift/ql/lib/codeql/swift/regex/Regex.qll
Co-authored-by: Mathias Vorreiter Pedersen <mathiasvp@github.com>
|
2023-08-23 13:58:05 +01:00 |
|
Geoffrey White
|
02fbb47b64
|
Swift: Change note.
|
2023-08-23 13:04:49 +01:00 |
|
Geoffrey White
|
03ca29ab96
|
Swift: Adapt the IncompleteHostnameRegex qhelp for Swift.
|
2023-08-23 13:04:49 +01:00 |
|
Geoffrey White
|
1805b070dc
|
Swift: Adapt the IncompleteHostnameRegex test for Swift.
|
2023-08-23 13:04:48 +01:00 |
|
Geoffrey White
|
d594de8190
|
Swift: Test dataflow on fields a bit more.
|
2023-08-23 10:49:03 +01:00 |
|
Geoffrey White
|
efcadbda69
|
Swift: Get the IncompleteHostnameRegex query working for Swift.
|
2023-08-23 10:32:10 +01:00 |
|
Geoffrey White
|
6deaf4e5f8
|
Swift: Rework ParsedStringRegex and introduce the needed RegexPatternSource class.
|
2023-08-23 09:01:15 +01:00 |
|
Geoffrey White
|
6fb1058e73
|
Swift: Copy IncompleteHostnameRegex query from JS.
|
2023-08-23 08:46:13 +01:00 |
|
Robert Marsh
|
5734e475d4
|
Merge pull request #14014 from rdmarsh2/rdmarsh2/swift/keypath-force-steps
Swift: flow through keypath optional components
|
2023-08-22 10:35:36 -04:00 |
|
Robert Marsh
|
e94781fa8f
|
Swift: fix comment
|
2023-08-22 13:27:17 +00:00 |
|
Michael Nebel
|
ce6fd8ac5f
|
Merge pull request #13432 from michaelnebel/updateissupported
Java/C#: Update telemetry queries to report callables with sink/source neutrals as being supported.
|
2023-08-22 08:39:38 +02:00 |
|
Robert Marsh
|
a335ece5e5
|
Swift: change note for keypath optional flows
|
2023-08-21 20:11:37 +00:00 |
|
Robert Marsh
|
1634fa2e25
|
Swift: support for optional chaining in keypaths
|
2023-08-21 20:09:28 +00:00 |
|
Robert Marsh
|
81bf415b50
|
Swift: modify test so implicit read isn't needed at sink
|
2023-08-21 20:08:30 +00:00 |
|
Robert Marsh
|
246d5c530e
|
Swift: flow through keypath force components
|
2023-08-21 19:07:40 +00:00 |
|
Geoffrey White
|
f7776f812c
|
Swift: 'good enough' fix for UnsafeJsEval flow.
|
2023-08-21 18:30:30 +01:00 |
|
Geoffrey White
|
317757b7ae
|
Swift: Create proper models for JavaScriptCore.
|
2023-08-21 18:24:26 +01:00 |
|
Geoffrey White
|
6ef6be7291
|
Swift: UnsafeJSEval regression.
|
2023-08-21 11:28:48 +01:00 |
|
Geoffrey White
|
997984c529
|
Swift: Minor test .expected changes.
|
2023-08-21 11:15:43 +01:00 |
|
Geoffrey White
|
a54747f850
|
Swift: Fix mysterious taint flow issue.
|
2023-08-21 11:06:04 +01:00 |
|
Geoffrey White
|
b4db68af80
|
Swift: Add content to the string models.
|
2023-08-21 10:16:40 +01:00 |
|
Geoffrey White
|
a6f29fa417
|
Swift: Address pointer/pointee conflation in the string tests themselves.
|
2023-08-21 10:16:39 +01:00 |
|
Michael Nebel
|
106ba11e10
|
Address review comments.
|
2023-08-21 09:59:02 +02:00 |
|
Michael Nebel
|
d66fe08661
|
Add QLDoc for the getKind predicate.
|
2023-08-21 09:59:02 +02:00 |
|
Michael Nebel
|
a9f7994b7d
|
Swift: Sync files and make manual changes.
|
2023-08-21 09:59:01 +02:00 |
|
github-actions[bot]
|
098dfb4242
|
Release preparation for version 2.14.3
|
2023-08-18 14:48:15 +00:00 |
|
Geoffrey White
|
86a73fa0e7
|
Swift: Accept fixed spurious test results.
|
2023-08-17 19:41:21 +01:00 |
|
Geoffrey White
|
0fd4f6180f
|
Swift: Allow subscript content reads from collections.
|
2023-08-17 19:37:55 +01:00 |
|
Geoffrey White
|
1ac9d2c618
|
Swift: Update models with CollectionElement, value flow.
|
2023-08-17 18:49:19 +01:00 |
|
Geoffrey White
|
59e2b0482c
|
Merge branch 'main' into closuremodels
|
2023-08-17 17:16:44 +01:00 |
|