25512 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
Benjamin Muskalla	190bf90bc8	Replace stringbuilder step with model	2021-09-01 15:41:16 +02:00
Benjamin Muskalla	7ddf7ff211	Track taint from concatenated string	2021-09-01 15:41:16 +02:00
Benjamin Muskalla	d178fe4e5d	Fix failing tests	2021-09-01 15:41:16 +02:00
Benjamin Muskalla	93bc8aa7b2	Fix tests to take trim into account	2021-09-01 15:41:15 +02:00
Benjamin Muskalla	7be179cf6c	Mark String constructor as propagating taint	2021-09-01 15:41:15 +02:00
Benjamin Muskalla	3928ffd30d	Support CharSequence#subSequence	2021-09-01 15:41:15 +02:00
Benjamin Muskalla	b7e608abc9	Model string builder APIs	2021-09-01 15:41:14 +02:00
Benjamin Muskalla	dab626270d	Convert Objects API to csv model	2021-09-01 15:41:14 +02:00
Benjamin Muskalla	5df5805d36	Convert strings to summary model	2021-09-01 15:41:14 +02:00
Benjamin Muskalla	e0d978fd58	Migrate String constructor to model	2021-09-01 15:41:13 +02:00
Chris Smowton	dccdc3be5a	Merge pull request #6582 from github/smowton/admin/mention-multiple-sort-criteria ... Expression docs: mention multiple sort criteria	2021-09-01 12:22:23 +01:00
Tamás Vajk	e9ff6e8755	Merge pull request #6578 from tamasvajk/fix/cil-local-decoding ... C#: Handle non-critical exception in CIL local variable extraction	2021-09-01 12:52:53 +02:00
CodeQL CI	29bcd7ca6f	Merge pull request #6572 from erik-krogh/live-server ... Approved by esbena	2021-09-01 12:41:23 +02:00
Tamás Vajk	50a9b18c92	Merge pull request #6579 from tamasvajk/fix/cil-type-args ... C#: Fix completely broken type argument extraction in NoMetadataHandleType	2021-09-01 12:16:15 +02:00
Chris Smowton	303e02fb8a	Fix typo ... Co-authored-by: Marcono1234 <Marcono1234@users.noreply.github.com>	2021-09-01 10:45:47 +01:00
Erik Krogh Kristensen	f8d46677b9	add RequestExpr as an alias to NodeJSLib::RequestExpr in Connect.qll	2021-09-01 10:11:05 +02:00
Erik Krogh Kristensen	98d018ce26	remove redundant extends clause ... Co-authored-by: Esben Sparre Andreasen <esbena@github.com>	2021-09-01 10:09:40 +02:00
Chris Smowton	c92b7828cb	Merge pull request #6580 from smowton/smowton/admin/guava-models-mistakes ... Fix minor mistakes in old Guava models	2021-08-31 19:44:23 +01:00
Chris Smowton	a47efc4348	Expression docs: mention multiple sort criteria	2021-08-31 19:18:03 +01:00
Shati Patel	a80a367de4	Merge pull request #6354 from Optixal/docs-js-isuncertain ... JS: Fixed description of `isUncertain()` predicate in CodeQL Language Guides: CodeQL Library for JavaScript	2021-08-31 19:13:40 +01:00
Sauyon Lee	7156dee270	Merge pull request #6521 from sauyon/java/test-gen-improvements ... Java: generate more realistic tests	2021-08-31 10:06:08 -07:00
Chris Smowton	7977d9c253	Fix minor mistakes in old Guava models ... Also add tests for the affected functions	2021-08-31 15:26:09 +01:00
Chris Smowton	b38a23daee	Fix test cases featuring primitive arrays ... Previously we couldn't print the name of types like `byte[]` for example.	2021-08-31 15:12:47 +01:00
Tamas Vajk	b267d26ff8	C#: Fix completely broken type argument extraction in NoMetadataHandleType	2021-08-31 14:34:27 +02:00
Tamas Vajk	d6ae19c87d	C#: Handle non-critical exception in CIL local variable extraction	2021-08-31 14:29:53 +02:00
Erik Krogh Kristensen	28dce6e95a	fix non-monotonic recursion in js/missing-rate-limiting	2021-08-31 14:23:23 +02:00
Erik Krogh Kristensen	83252e5ba2	change note	2021-08-31 14:23:23 +02:00
Erik Krogh Kristensen	cecb6c7bdd	add model for live-server	2021-08-31 14:23:23 +02:00
Erik Krogh Kristensen	b509627113	add tests for connect	2021-08-31 14:23:23 +02:00
Erik Krogh Kristensen	3d6ab81ab8	refactor the tests for connect	2021-08-31 14:23:23 +02:00
Erik Krogh Kristensen	c6399dbdf4	simplify the connect model by reusing NodeJSLib::RouteHandler	2021-08-31 14:23:23 +02:00
Chris Smowton	f94d8c341d	Abbreviate multi-column min	2021-08-31 11:57:49 +01:00
Chris Smowton	510f5abb9a	Add missing qldoc	2021-08-31 11:56:03 +01:00
Chris Smowton	5dddc48e60	autoformat	2021-08-31 11:53:13 +01:00
Tom Hvitved	c8a5397085	Merge pull request #6513 from hvitved/csharp/cfg/shared ... C#: Make CFG library shared esbena/dca-test-build/run/R-1186042660	2021-08-31 11:55:43 +02:00
CodeQL CI	cf9ab83dee	Merge pull request #6498 from bananabr/main ... Approved by asgerf	2021-08-31 08:46:11 +02:00
CodeQL CI	c3e122f5fc	Merge pull request #6569 from erik-krogh/packageJsonModule ... Approved by asgerf	2021-08-31 08:23:45 +02:00
Benjamin Muskalla	09aaa8f78e	Merge pull request #6562 from github/workflow/coverage/update ... Update CSV framework coverage reports	2021-08-30 21:31:02 +02:00
Tom Hvitved	05b45da42f	Merge pull request #6556 from hvitved/csharp/insecure-sql-conn-flow ... C#: Use data flow instead of taint tracking in `InsecureSQLConnection.ql` codeql-cli/v2.6.1	2021-08-30 11:31:22 +02:00
Tom Hvitved	7dbdfeb161	Merge pull request #6548 from hvitved/csharp/dataflow/tests ... C#: Update call-context data-flow tests	2021-08-30 11:30:55 +02:00
Erik Krogh Kristensen	486b283c20	support the "module" field in package.json files	2021-08-30 11:05:32 +02:00
github-actions[bot]	b28e956dd2	Add changed framework coverage reports	2021-08-30 00:08:31 +00:00
Andrew Eisenberg	bf15b18f22	Merge pull request #6565 from github/dbartol/suite-helpers-incomatbility	2021-08-27 12:40:11 -07:00
Sauyon Lee	adcb90aa8c	fixup generateflowtestcase chaneg	2021-08-27 11:25:03 -07:00
Sauyon Lee	23b9028d2c	Correctly determine which support method definitions are required	2021-08-27 11:25:03 -07:00
Sauyon Lee	04e04b3031	Use array allocation syntax	2021-08-27 11:25:03 -07:00
Sauyon Lee	97faeb026f	Fix side of stack that gen method types are used	2021-08-27 11:25:03 -07:00
Sauyon Lee	119de6c60c	Replace type variables before attempting to match to an array generation	2021-08-27 11:25:03 -07:00
Sauyon Lee	9d66761eeb	Consider a callable to ambiguous if it has a varargs parameter	2021-08-27 11:25:02 -07:00
Sauyon Lee	0d174f2daf	Only include support methods and imports from working test cases	2021-08-27 11:25:02 -07:00