Mathias Vorreiter Pedersen
|
11aef7019e
|
Merge pull request #19273 from MathiasVP/prepare-shared-mad-generation-for-cpp
Shared: Prepare model generation for C++ adoption
|
2025-04-11 07:22:56 -07:00 |
|
Mathias Vorreiter Pedersen
|
877118fb3b
|
Merge pull request #19274 from MathiasVP/prepare-cpp-for-mad-generation
C++: Prepare for model generation adoption
|
2025-04-11 05:11:36 -07:00 |
|
Mathias Vorreiter Pedersen
|
deef95d384
|
Update cpp/ql/lib/semmle/code/cpp/ir/dataflow/internal/DataFlowPrivate.qll
Co-authored-by: Taus <tausbn@github.com>
|
2025-04-11 12:43:59 +01:00 |
|
Mathias Vorreiter Pedersen
|
bfc494c0e1
|
Update cpp/ql/lib/semmle/code/cpp/ir/dataflow/internal/DataFlowPrivate.qll
Co-authored-by: Taus <tausbn@github.com>
|
2025-04-11 12:43:51 +01:00 |
|
Paolo Tranquilli
|
4ae49cfe35
|
Merge pull request #19281 from github/redsun82/rust-setup
Rust: refine `ql/test/setup.sh`
|
2025-04-11 11:55:12 +02:00 |
|
Owen Mansel-Chan
|
472bfa2668
|
Merge pull request #19115 from owen-mc/java/port/java/string-replace-all-with-non-regex
Java: Add new quality query to detect `String#replaceAll` with non-regex first argument
|
2025-04-11 10:31:38 +01:00 |
|
Napalys Klicius
|
3d7c0201d9
|
Merge pull request #19231 from Napalys/js/typed_array
JS: Taint propagation from low-level `ArrayBuffer` to `Strings`
|
2025-04-11 11:29:01 +02:00 |
|
Napalys Klicius
|
d0dcf897cb
|
Update javascript/ql/lib/semmle/javascript/internal/flow_summaries/Strings.qll
Co-authored-by: Asger F <asgerf@github.com>
|
2025-04-11 11:04:08 +02:00 |
|
Napalys Klicius
|
d17d29a387
|
Merge pull request #19218 from Napalys/js/upgrade_websocket
JS: Refactor `WebSocket` to use `API` graphs
|
2025-04-11 10:05:54 +02:00 |
|
Napalys
|
e3f1720f9c
|
RenamedDecodeLike to Decode and updated propagatesFlow
|
2025-04-11 10:04:09 +02:00 |
|
Arthur Baars
|
85940484ab
|
Update rust/ql/test/setup.sh
|
2025-04-11 09:57:50 +02:00 |
|
Paolo Tranquilli
|
db1203acb3
|
Rust: reinstate adding rust-src for test toolchains
|
2025-04-11 08:57:14 +02:00 |
|
Paolo Tranquilli
|
becea89a47
|
Rust: refine ql/test/setup.sh
|
2025-04-11 08:26:48 +02:00 |
|
Tom Hvitved
|
7ed8a85e08
|
Merge pull request #19246 from hvitved/rust/cache-tweaks
|
2025-04-10 19:02:25 +02:00 |
|
Felicity Chapman
|
c2baf9a052
|
Merge pull request #19270 from github/felicitymay-patch-1
CodeQL docs: Fix ordering in side navigation bar for Query help
|
2025-04-10 15:10:14 +01:00 |
|
Owen Mansel-Chan
|
4f5bdbb517
|
Add new query to java-code-quality.qls.expected
|
2025-04-10 14:37:11 +01:00 |
|
Mathias Vorreiter Pedersen
|
3bb249f580
|
C++: Ensure we always have 'Position's even if there are no calls in the DB.
|
2025-04-10 14:28:40 +01:00 |
|
Mathias Vorreiter Pedersen
|
b678112f4d
|
C++: Add a few predicates to 'ReturnKind'.
|
2025-04-10 14:28:38 +01:00 |
|
Mathias Vorreiter Pedersen
|
960e9900af
|
C++: Move the 'getArgumentIndex' into the abstract 'Position' class. It is implemented in all subclasses anyway.
|
2025-04-10 14:28:36 +01:00 |
|
Mathias Vorreiter Pedersen
|
94e08e318d
|
C++: Expose a few predicates from 'ExternalFlow'.
|
2025-04-10 14:18:47 +01:00 |
|
Napalys Klicius
|
43bf0beae9
|
Merge pull request #19263 from Napalys/js/make-dir-lib
JS: Add support for `make-dir` package
|
2025-04-10 15:09:43 +02:00 |
|
Mathias Vorreiter Pedersen
|
ea3bb8cf0c
|
Shared: Provide a hook to MaD generation to modify the 'ReturnValue' string.
|
2025-04-10 14:02:31 +01:00 |
|
Mathias Vorreiter Pedersen
|
6c348b5855
|
Rust: Fixup MaD input.
|
2025-04-10 14:01:20 +01:00 |
|
Mathias Vorreiter Pedersen
|
b6c658767e
|
Java: Fixup MaD input.
|
2025-04-10 14:01:11 +01:00 |
|
Mathias Vorreiter Pedersen
|
04bf908a4b
|
C#: Fixup MaD input.
|
2025-04-10 14:01:00 +01:00 |
|
Mathias Vorreiter Pedersen
|
c484945f39
|
Shared: Move 'getEnclosingCallable' and 'getAsExprEnclosingCallable' out of the class signature.
|
2025-04-10 14:00:11 +01:00 |
|
Mathias Vorreiter Pedersen
|
732fcbf1c9
|
Shared: Move 'asParameter' out of the class signature.
|
2025-04-10 13:58:59 +01:00 |
|
Mathias Vorreiter Pedersen
|
a1dc87496a
|
Shared: Replace a 'count' with a 'strictcount' to prevent a CP when testing on C++.
|
2025-04-10 13:56:38 +01:00 |
|
Asger F
|
eac14b9837
|
Merge pull request #19200 from asgerf/js/web-response
JS: Add sinks for calls to 'new Response()'
|
2025-04-10 14:41:32 +02:00 |
|
Napalys
|
171a84609e
|
Applied copilot suggestion.
|
2025-04-10 14:13:48 +02:00 |
|
Felicity Chapman
|
78a26cfdb2
|
Update index.rst
|
2025-04-10 13:09:51 +01:00 |
|
Joe Farebrother
|
7f7fca9e27
|
Merge pull request #19165 from joefarebrother/python-qual-loop-var-capture
Python: Modernize the Loop Variable Capture query
|
2025-04-10 13:07:05 +01:00 |
|
Owen Mansel-Chan
|
acfcc6d490
|
Sort ids in java-code-quality.qls
|
2025-04-10 12:35:42 +01:00 |
|
Owen Mansel-Chan
|
576f4cf19f
|
Update tags
|
2025-04-10 12:21:09 +01:00 |
|
Owen Mansel-Chan
|
ad89e7980e
|
Tweak documentation
|
2025-04-10 12:21:08 +01:00 |
|
Owen Mansel-Chan
|
3ea5cc1b66
|
Add query to code-quality query suite
|
2025-04-10 12:21:06 +01:00 |
|
Owen Mansel-Chan
|
e1c5517de7
|
Keep COMPLIANT and NON_COMPLIANT comments in test
|
2025-04-10 12:21:05 +01:00 |
|
Owen Mansel-Chan
|
04ec1d7830
|
Update test expectations
|
2025-04-10 12:21:03 +01:00 |
|
Owen Mansel-Chan
|
626a7d5007
|
Fix punctuation
|
2025-04-10 12:21:02 +01:00 |
|
Owen Mansel-Chan
|
c4e56b1ec8
|
Add quality and cwe tag to query
CWE-1176: Inefficient CPU Computation
|
2025-04-10 12:21:00 +01:00 |
|
Owen Mansel-Chan
|
042fe07494
|
Adjust alert message
|
2025-04-10 11:47:19 +01:00 |
|
Owen Mansel-Chan
|
fea3d10b97
|
Update qhelp
|
2025-04-10 11:47:18 +01:00 |
|
Owen Mansel-Chan
|
441c79ebdf
|
Use existing class StringReplaceAllCall
|
2025-04-10 11:47:17 +01:00 |
|
Owen Mansel-Chan
|
b5b252b10f
|
Convert test to inline expectations
|
2025-04-10 11:47:15 +01:00 |
|
Owen Mansel-Chan
|
ff2947a0e5
|
Adjust query name
|
2025-04-10 11:47:14 +01:00 |
|
Owen Mansel-Chan
|
041adcd63a
|
Java: Add initial version of string replaceAll with no regex query
|
2025-04-10 11:46:59 +01:00 |
|
Asger F
|
d2a4f1e17a
|
Merge pull request #19267 from asgerf/js/json-array-trailing-comma
JS: Tolerate trailing commas in JSON arrays
|
2025-04-10 12:38:16 +02:00 |
|
Joe Farebrother
|
6802037c89
|
Update qhelp formatting
|
2025-04-10 09:52:18 +01:00 |
|
Joe Farebrother
|
00999baf9a
|
Apply docs review suggestion - Reword query description.
Co-authored-by: mc <42146119+mchammer01@users.noreply.github.com>
|
2025-04-10 09:06:01 +01:00 |
|
Asger F
|
3da1f261f7
|
JS: Change note
|
2025-04-10 07:21:48 +02:00 |
|