Tamas Vajk
80f5ec29d4
Log stdout and stderr in CSV coverage jobs
2021-09-13 16:16:03 +02:00
Tamas Vajk
1d8fae44cc
Only leave CSV coverage updater job enabled on github/codeql
2021-09-13 16:15:21 +02:00
Tom Hvitved
b60f1cd531
Java: Upgrade script
2021-09-13 16:09:47 +02:00
Tom Hvitved
9fdcacd865
Java: Drop redundant columns from files and folders relations
2021-09-13 16:09:47 +02:00
Anders Schack-Mulligen
ab862276fc
Java: Fix tests.
2021-09-13 16:04:11 +02:00
Anders Schack-Mulligen
12aeaeed56
Java: Address review comment.
2021-09-13 16:03:50 +02:00
Chris Smowton
47b5165f2a
Merge pull request #6653 from smowton/smowton/admin/javascript-unpaired-surrogate-test
...
Java and JS: Add/adapt tests for literals with an unpaired surrogate character
2021-09-13 14:53:23 +01:00
Anders Schack-Mulligen
818e75bb8f
Java: Fix compilation error in telemetry lib.
2021-09-13 15:50:21 +02:00
Geoffrey White
902fa7d44a
C++: Subsection header.
2021-09-13 14:10:17 +01:00
Geoffrey White
acd1acd869
C++: Give it a section header.
2021-09-13 14:08:18 +01:00
Geoffrey White
befd1a7ccc
C++: Rename security tests readme.
2021-09-13 14:06:22 +01:00
Chris Smowton
abdd3a5dbe
Adjust Java tests that check for unpaired surrogate extraction
2021-09-13 14:02:05 +01:00
Erik Krogh Kristensen
05cc6bcf8a
adjust regexp libraries to how unpaired surrogate are parsed now
2021-09-13 14:02:05 +01:00
Chris Smowton
f24d7c4212
Acknowledge new FPs due to the extractor using U+FFFD for unpaired surrogates
...
These were already misinterpreted, but the ReDoS code ignored them as they previously appeared to be `?` characters.
2021-09-13 14:02:05 +01:00
Chris Smowton
487ebdf173
Add test for Javascript literal with an unpaired surrogate character
2021-09-13 14:02:05 +01:00
Anders Schack-Mulligen
89a6cdc711
Java: Add support for callback-based library models.
2021-09-13 14:49:28 +02:00
Ian Lynagh
3404bcf265
Merge pull request #6680 from github/igfoo/java_location
...
Java: Use the standard URL format for Location.toString()
2021-09-13 13:43:32 +01:00
Ian Lynagh
4fbb165dce
Java: Use the standard URL format for Location.toString()
2021-09-13 12:53:50 +01:00
Chris Smowton
68ed3250e8
Merge pull request #6478 from smowton/smowton/feature/jax-rs-request-filters
...
Java: Add sources for Jax-RS filters
2021-09-13 10:59:17 +01:00
James Fletcher
c86311e879
Merge pull request #6502 from github/dataflow-tutorial
...
Add data flow debugging guide to CodeQL docs
2021-09-13 10:25:19 +01:00
yoff
d0563c80be
Merge pull request #6665 from smowton/smowton/fix/python-redos-invalid-utf16
...
ReDoS: fix unpaired surrogate test
2021-09-13 11:14:45 +02:00
Anders Schack-Mulligen
2db039fb77
Merge pull request #6673 from Marcono1234/marcono1234/clone-method-models
...
Java: Remove duplicate classes modeling Object.clone
2021-09-13 11:13:14 +02:00
Anders Schack-Mulligen
dde07fd2ee
Merge pull request #6672 from Marcono1234/marcono1234/functional-interfaces-test
...
Java: Extend functional interfaces test
2021-09-13 11:13:06 +02:00
Tom Hvitved
4628f880b4
Merge pull request #6489 from hvitved/csharp/files-folders-drop-columns
...
C#: Drop redundant columns from `files` and `folders` relations
2021-09-13 11:02:13 +02:00
Anders Schack-Mulligen
31739cdae6
Merge pull request #6668 from github/workflow/coverage/update
...
Update CSV framework coverage reports
2021-09-13 09:50:09 +02:00
Tom Hvitved
2730423ab2
C#: Upgrade script
2021-09-13 09:49:10 +02:00
Tom Hvitved
5d048a9518
C#: Drop redundant columns from files and folders relations
2021-09-13 09:49:09 +02:00
Tamás Vajk
cc1374b832
Merge pull request #6646 from tamasvajk/fix/csv-timeseries
...
Fix CSV timeseries script to create DB with scheme from correct git SHA
2021-09-13 09:41:56 +02:00
Tom Hvitved
0abfb00032
Merge pull request #6660 from hvitved/csharp/dotnet-exec-tracing-windows
...
C#: Handle `dotnet exec csc.dll` compiler calls on Windows
2021-09-13 09:07:50 +02:00
github-actions[bot]
26e8e89aca
Add changed framework coverage reports
2021-09-13 00:08:00 +00:00
Philip Ginsbach
131d63c374
Merge pull request #6592 from github/ginsbach/instanceofDocs
...
language reference entry for non-extending subtypes
2021-09-12 15:21:41 +01:00
Marcono1234
d117593d72
Java: Remove duplicate classes modeling Object.clone
2021-09-12 02:05:57 +02:00
Marcono1234
5009ed618f
Java: Extend functional interfaces test
2021-09-12 01:50:07 +02:00
Andrew Eisenberg
edbaceceb3
Merge pull request #6666 from github/aeisenberg/suites-fix
...
Remove incorrect `suites` directive
2021-09-10 14:15:10 -07:00
CodeQL CI
e8fc3c8ead
Merge pull request #5888 from erik-krogh/casting
...
Approved by asgerf
2021-09-10 09:11:39 -07:00
Andrew Eisenberg
9c0f18b88d
Remove incorrect directive
...
This directive should only be in the
pack.
2021-09-10 08:57:37 -07:00
Chris Smowton
95046b9bb1
Factor JaxRS models
2021-09-10 16:36:40 +01:00
Chris Smowton
451a46bf0e
Add models for getLanguage, getMediaType
2021-09-10 16:36:38 +01:00
Chris Smowton
5e7a3ca2e6
Model UriInfo.relativize and resolve.
2021-09-10 16:36:37 +01:00
Chris Smowton
62ecab8432
Add change note
2021-09-10 16:36:36 +01:00
Chris Smowton
f1c3a11103
Add sources for Jax-RS filters
2021-09-10 16:36:34 +01:00
Chris Smowton
d83ed33252
Make supertype consideration consistent
2021-09-10 16:27:28 +01:00
Chris Smowton
9b488207eb
Add support for the Flexjson framework to the unsafe-deserialization query
2021-09-10 16:27:23 +01:00
Chris Smowton
9d31641bb1
Add change note
2021-09-10 16:10:56 +01:00
Chris Smowton
655236c70d
Remove no-longer-needed generic specifiers
2021-09-10 16:10:55 +01:00
Chris Smowton
b47939c737
Note resolved spurious results
2021-09-10 16:10:54 +01:00
Chris Smowton
d940085384
Spring HTTP: inherit produced content-types from surrounding class
2021-09-10 16:10:52 +01:00
Chris Smowton
bdd135dbff
Spring HTTP: mark explicitly content-typed body calls as sinks
...
Previously only the return from the request-handler method constituted a sink, and was filtered by the Produces annotation if any, even though a BodyBuilder could explicitly override.
These sinks are also marked as out-barriers to avoid duplicate paths when the Produces annotation is in agreement.
2021-09-10 16:10:50 +01:00
Chris Smowton
701d0bcdca
Spring content types: recognise constant content-type strings
2021-09-10 16:10:48 +01:00
Chris Smowton
4397371a50
Spring constant media types: recognise constant string versions
...
Previously we only recognised the constant MediaTypes
2021-09-10 16:10:47 +01:00
