Alex Ford
|
6c3d90e8a0
|
Merge pull request #16650 from alexrford/rb/routing-improvements
Ruby: ActionDispatch - support `path => target` route format
|
2024-06-18 11:17:05 +01:00 |
|
Joe Farebrother
|
eee7f5a896
|
Use a combined regex for performance
|
2024-06-17 22:21:33 +01:00 |
|
Joe Farebrother
|
90d6f2ece3
|
Factor out nameIndicatesRelevantSensitiveData
|
2024-06-12 15:11:47 +01:00 |
|
Tom Hvitved
|
605fe54a06
|
Ruby: Remove two Cartesian products
|
2024-06-12 15:11:43 +01:00 |
|
Joe Farebrother
|
5f08371f19
|
Add change note
|
2024-06-12 15:11:39 +01:00 |
|
Joe Farebrother
|
07f03be8cc
|
Add unit tests
|
2024-06-12 15:11:35 +01:00 |
|
Joe Farebrother
|
b0c03f6d68
|
Allow implicit read steps on sinks
|
2024-06-12 15:11:32 +01:00 |
|
Joe Farebrother
|
8b51ee8fe8
|
Use additional sensitive data heuristics in CleartextSources
|
2024-06-12 15:11:27 +01:00 |
|
Arthur Baars
|
4ee80653e2
|
Merge pull request #16471 from Sim4n6/ruby-UBV
Ruby: Add some method calls as a Source
|
2024-06-12 12:42:08 +02:00 |
|
github-actions[bot]
|
8a25081a0e
|
Post-release preparation for codeql-cli-2.17.5
|
2024-06-10 15:33:08 +00:00 |
|
github-actions[bot]
|
877bfa2468
|
Release preparation for version 2.17.5
|
2024-06-10 13:40:39 +00:00 |
|
Sim4n6
|
7c0ce6486b
|
Rerun the test learn
|
2024-06-10 12:21:10 +01:00 |
|
Anders Schack-Mulligen
|
5d51b5b97b
|
Ruby: Add support for pretty-printed provenace in tests. Convert one test.
|
2024-06-07 11:47:48 +02:00 |
|
Asger F
|
6e0f3df573
|
Merge pull request #14120 from asgerf/dynamic/typemodel-istypeused
Dynamic: add TypeModel.isTypeUsed
|
2024-06-06 15:31:16 +02:00 |
|
Sim4n6
|
dabc33bf66
|
simplify UnicodeBypassValidationQuery code
|
2024-06-05 22:45:49 +01:00 |
|
Sim4n6
|
7dcbbbac91
|
Refactor UnicodeBypassValidationQuery to remove unnecessary code
|
2024-06-05 13:05:34 +01:00 |
|
Tom Hvitved
|
e42de3de6f
|
Ruby: Fix extraction errors
|
2024-06-04 14:54:02 +02:00 |
|
Tom Hvitved
|
ad99158838
|
Ruby: Fix/accept extraction errors
|
2024-06-04 12:55:44 +02:00 |
|
Tom Hvitved
|
858c7cead2
|
Ruby: Add consistency query for extraction errors
|
2024-06-04 12:55:42 +02:00 |
|
Alex Ford
|
1100b75a3c
|
Ruby: handle routes with path/action pairs
|
2024-05-31 15:54:57 +01:00 |
|
Alex Ford
|
0473655752
|
Ruby: actiondispatch add hash arg testcase
|
2024-05-31 15:08:35 +01:00 |
|
Alex Ford
|
22858249f9
|
Ruby: actiondispatch test whitespace changes
|
2024-05-31 15:07:39 +01:00 |
|
Paolo Tranquilli
|
096a31dbef
|
Mark all integration tests as legacy
This is in preparation for the new integration test framework. Tests
marked thus will be run by the current framework and ignored by the new
one.
|
2024-05-31 16:04:50 +02:00 |
|
Alex Ford
|
4644f08195
|
Ruby: Routing.qll - rename call as methodCall
|
2024-05-31 14:45:32 +01:00 |
|
Alex Ford
|
25f9449f53
|
Ruby: Routing.qll - rename method as httpMethod
|
2024-05-31 14:45:26 +01:00 |
|
Alex Ford
|
af9ed21c36
|
Ruby: Routing.qll - rename method as methodCall
|
2024-05-31 14:45:20 +01:00 |
|
github-actions[bot]
|
906b65d09c
|
Post-release preparation for codeql-cli-2.17.4
|
2024-05-28 18:02:25 +00:00 |
|
github-actions[bot]
|
33b4ae8bbb
|
Release preparation for version 2.17.4
|
2024-05-28 15:44:32 +00:00 |
|
Tom Hvitved
|
69fb2bb97c
|
Merge pull request #16597 from hvitved/tree-sitter/empty-location
Tree-sitter: Emit `empty_location` relation to avoid scan
|
2024-05-27 15:19:15 +02:00 |
|
Anders Schack-Mulligen
|
1432519cc2
|
Dataflow: Add totalorder predicates to all languages.
|
2024-05-27 11:01:52 +02:00 |
|
Anders Schack-Mulligen
|
bc8ca1af86
|
Dataflow: Introduce NodeRegions for use in isUnreachableInCall.
|
2024-05-27 11:01:51 +02:00 |
|
Tom Hvitved
|
686879a2a3
|
Ruby: Add up/downgrade scripts
|
2024-05-27 10:39:22 +02:00 |
|
Tom Hvitved
|
94d2e9591d
|
Tree-sitter: Emit empty_location relation to avoid scan
|
2024-05-27 10:39:21 +02:00 |
|
Dave Bartolomeo
|
613ccaac1d
|
Add change note to all v1.0.0 packs
|
2024-05-23 13:01:22 -04:00 |
|
Dave Bartolomeo
|
ffe4c8c87b
|
Update all pack versions to 1.0.0
|
2024-05-22 13:39:08 -04:00 |
|
Anders Schack-Mulligen
|
bbebdfea8d
|
Merge pull request #16511 from aschackmull/dataflow/configuration-provenance
Dataflow: Add provenance for configuration-specific steps.
|
2024-05-22 14:07:10 +02:00 |
|
Alex Ford
|
8119a27540
|
Merge pull request #16185 from alexrford/rb/conditions-arr0
Ruby: ActiveRecord - refine `conditions` argument as an SQLi sink
|
2024-05-22 12:19:10 +01:00 |
|
Tom Hvitved
|
a006c29a00
|
Merge pull request #16481 from hvitved/treesitter/bump2
Tree-sitter: Bump to 0.22.6
|
2024-05-22 12:53:14 +02:00 |
|
Anders Schack-Mulligen
|
012b861ffb
|
Ruby: Accept qltest .expected file changes.
|
2024-05-22 10:08:59 +02:00 |
|
Anders Schack-Mulligen
|
c4ae18649e
|
Ruby: Accept qltest .expected file changes (interesting).
|
2024-05-22 10:08:59 +02:00 |
|
Tom Hvitved
|
a87ceed361
|
Merge pull request #16394 from hvitved/dataflow/synth-param-ret-node
Data flow: Synthesize parameter return nodes
|
2024-05-21 20:55:14 +02:00 |
|
Chuan-kai Lin
|
8a22e2283c
|
Merge pull request #16424 from github/cklin/ruby-entities-reorder
Ruby: Use entities in reorder directives
|
2024-05-21 07:32:28 -07:00 |
|
Rasmus Wriedt Larsen
|
2451a6d3f6
|
Accept .expected changes
|
2024-05-21 14:47:42 +02:00 |
|
Asger F
|
13d01f1ec4
|
Ruby/Python: add recursion guard
|
2024-05-21 14:40:15 +02:00 |
|
Asger F
|
14c71a351e
|
Sync shared files
|
2024-05-21 14:38:55 +02:00 |
|
Tom Hvitved
|
bf2ae9890f
|
Tree-sitter: Bump to 0.22.6
|
2024-05-21 11:14:06 +02:00 |
|
Joe Farebrother
|
01a6c5e82f
|
Merge pull request #16446 from joefarebrother/shared-sensitive-heuristics
Ruby/Python/JS/Swift: Add category of Private information to shared sensitive data heuristics
|
2024-05-21 09:07:13 +01:00 |
|
am0o0
|
dcadda23cd
|
update expected file
|
2024-05-16 15:15:27 +02:00 |
|
am0o0
|
f06c3fddd9
|
fix qhelp, fix duplicate query id
|
2024-05-16 15:12:31 +02:00 |
|
Alex Ford
|
78dc6502f5
|
Merge branch 'main' into amammad-ruby-bombs
|
2024-05-16 13:53:31 +01:00 |
|