tiferet
a4939b91e7
Generalize the definition of a known sink:
...
If the list of reasons includes positive indicators with maximal confidence for this class, it's a known sink for the class.
This negates the need for each query config to define the isKnownSink predicate individually.
2022-11-04 09:30:29 -07:00
tiferet
08bbe596a2
Create the sink ClassificationReasons
...
Write the reasons that indicate that an endpoint is a sink for each sink type.
Also fix import error.
2022-11-04 09:30:29 -07:00
Henry Mercer
3e863a539a
ATM: Fix CodeQL pack workspace references
...
This fixes the
[ATM PR checks](https://github.com/github/codeql/actions/runs/3392995797/jobs/5639827326 )
breaking on main as a result of
https://github.com/github/codeql/pull/11004 .
2022-11-04 14:03:34 +00:00
Henry Mercer
1dc14bcaee
Merge branch 'main' into codeql-ci/js/ml-powered-pack-release-0.3.6
2022-10-25 10:54:08 +01:00
github-actions[bot]
caf3a098c8
JS: Bump version of ML-powered library and query packs to 0.3.7
2022-10-25 09:12:00 +00:00
github-actions[bot]
5d100c8036
JS: Bump patch version of ML-powered library and query packs
2022-10-25 09:00:40 +00:00
Josh Soref
a4beafbe44
spelling: classifier
...
Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com >
2022-10-19 04:27:37 -04:00
Henry Mercer
bfa9765a6d
Merge branch 'main' into codeql-ci/js/ml-powered-pack-release-0.3.5
2022-10-11 19:06:01 +01:00
github-actions[bot]
06bbede92b
JS: Bump version of ML-powered library and query packs to 0.3.6
2022-10-11 17:58:33 +00:00
github-actions[bot]
4e3a6e60b2
JS: Bump patch version of ML-powered library and query packs
2022-10-11 17:48:46 +00:00
github-actions[bot]
67d12cdc7d
JS: Bump patch version of ML-powered library and query packs
2022-09-28 17:14:15 +00:00
Stephan Brandauer
1bb781ad94
Merge branch 'main' into new-atm-features-rebased
2022-09-23 09:55:29 +02:00
Erik Krogh Kristensen
a4cd913aea
Merge pull request #10312 from erik-krogh/fix-caseDiff
...
ensure consistent casing of names
2022-09-19 10:43:12 +02:00
Henry Mercer
bc2de7ed4b
Merge branch 'main' into codeql-ci/js/ml-powered-pack-release-0.3.3
2022-09-13 15:15:56 +01:00
github-actions[bot]
b40def71b9
JS: Bump version of ML-powered library and query packs to 0.3.4
2022-09-13 14:11:16 +00:00
github-actions[bot]
e08e22ac32
JS: Bump patch version of ML-powered library and query packs
2022-09-13 14:06:57 +00:00
erik-krogh
26d8553f6e
ensure consistent casing of names
2022-09-09 10:34:14 +02:00
Erik Krogh Kristensen
5b61db9fd3
refactor miscellaneous expression uses to dataflow nodes
2022-09-05 16:11:55 +02:00
Erik Krogh Kristensen
c5b1588096
update the SQL/NoSQL models to use dataflow nodes
2022-09-05 16:11:54 +02:00
Erik Krogh Kristensen
30d929909c
deprecate RequestExpr and ResponseExpr and use ResponseNode and RequestNode instead
2022-09-05 15:46:25 +02:00
Stephan Brandauer
81d02cc963
optimize performance of a helper-predicate
2022-09-01 16:05:36 +02:00
Stephan Brandauer
cdbab187ca
remove unused code
2022-09-01 16:05:36 +02:00
Stephan Brandauer
f59c48ebb9
autoformatter
2022-09-01 16:05:36 +02:00
Stephan Brandauer
caf39592d4
better documentation
2022-09-01 16:05:36 +02:00
Stephan Brandauer
b9cb60c2cb
Review comments
...
Co-authored-by: Henry Mercer <henrymercer@github.com >
2022-09-01 16:05:36 +02:00
Stephan Brandauer
068a948c05
fix ql-for-ql warnings
2022-09-01 16:05:35 +02:00
Stephan Brandauer
3aa4e29dae
remove obsolete features
2022-09-01 16:05:35 +02:00
Stephan Brandauer
ed75080072
add stringConcatenatedWith feature to help the model learn that string concatenation leaves are usually not sinks
2022-09-01 16:05:35 +02:00
Stephan Brandauer
9468f62620
add assignedToPropName feature to let the model improve number of false positives for XSS query
2022-09-01 16:05:35 +02:00
Stephan Brandauer
db73a62bc2
fix bug in InputArgumentIndex feature
2022-09-01 16:05:34 +02:00
Stephan Brandauer
67500f85ba
performance fixes
2022-09-01 16:05:34 +02:00
Stephan Brandauer
96919eea80
use ? for unknown parameternames
2022-09-01 16:05:34 +02:00
Stephan Brandauer
f8b3c27210
add documentations and rename a feature
2022-09-01 16:05:34 +02:00
Stephan Brandauer
3422bdee92
add functionInterfacesInFile and surroundingFunctionParameters features
2022-09-01 16:05:34 +02:00
Stephan Brandauer
3e860762e7
documentation for calleeImports ATM feature
2022-09-01 16:05:33 +02:00
Stephan Brandauer
93aa279b31
documentation for new feature
2022-09-01 16:05:33 +02:00
Stephan Brandauer
25db666087
ATM: new feature to list all imports in an endpoint's file
2022-09-01 16:05:33 +02:00
Esben Sparre Andreasen
82069cfb75
remove Input_ArgumentIndexAndAccessPathFromCallee
2022-09-01 16:05:33 +02:00
Esben Sparre Andreasen
095beb3c71
add docstring examples
2022-09-01 16:05:32 +02:00
Esben Sparre Andreasen
548f0286f3
address review comments
2022-09-01 16:05:32 +02:00
Esben Sparre Andreasen
5ac608d503
fix semantic merge conflict
2022-09-01 16:05:32 +02:00
Esben Sparre Andreasen
c95ab031ef
rename new features
2022-09-01 16:05:32 +02:00
Esben Sparre Andreasen
6533260614
add more features
2022-09-01 16:05:31 +02:00
Esben Sparre Andreasen
c4c4d288cb
improve feature documentation
2022-09-01 16:05:31 +02:00
Esben Sparre Andreasen
86b2b79b43
improve access path strings
2022-09-01 16:05:31 +02:00
Esben Sparre Andreasen
e0870e0b96
support import in getSimpleAccessPath
2022-09-01 16:05:31 +02:00
Esben Sparre Andreasen
e7de6cb4a7
support await in getSimpleAccessPath
2022-09-01 16:05:30 +02:00
Esben Sparre Andreasen
1db2117be4
avoid using new feautes by default
2022-09-01 16:05:30 +02:00
Esben Sparre Andreasen
f3cdb12dcf
Document EndpointFeatures.qll
2022-09-01 16:05:30 +02:00
Esben Sparre Andreasen
482d169667
add ParameterAccessPathSimpleFromArgumentTraversal
2022-09-01 16:05:29 +02:00
