4116 Commits

Author	SHA1	Message	Date
Owen Mansel-Chan	b4c8390991	Merge pull request #18137 from owen-mc/java/jax-rs-annotation-inheritance ... Java: Update JAX-RS annotation inheritance	2025-01-21 15:26:47 +00:00
Owen Mansel-Chan	6fa18be0cc	Fix QLDocs	2025-01-20 22:07:01 +00:00
github-actions[bot]	fbb7f0a0c6	Post-release preparation for codeql-cli-2.20.2	2025-01-20 21:11:14 +00:00
github-actions[bot]	a0512a50f2	Release preparation for version 2.20.2	2025-01-20 21:11:12 +00:00
Nick Rolfe	6b5974a372	Java: fix stats for databaseMetadata relation	2025-01-20 17:02:25 +00:00
Nick Rolfe	64f33955b5	Java: add databaseMetadata to dbscheme	2025-01-17 15:18:07 +00:00
Chris Smowton	060161cd5e	Add change note	2025-01-14 14:22:27 +00:00
Owen Mansel-Chan	883301938b	Merge pull request #18161 from owen-mc/java/weak-crypto-algo-more-informative ... Java: Make `java/weak-cryptographic-algorithm` give a reason why the algo is insecure	2025-01-13 23:43:04 +00:00
yoff	599411b440	Merge pull request #17787 from yoff/shared/add-location-to-typetracking-nodes ... shared: Add locations to type tracking nodes	2025-01-13 23:06:09 +01:00
Ian Lynagh	6b182c5ebd	Merge pull request #18396 from igfoo/igfoo/path_transformer ... Kotlin: Add CODEQL_PATH_TRANSFORMER support	2025-01-13 15:11:41 +00:00
Tom Hvitved	303b11ec36	Merge pull request #18298 from hvitved/rust/mad-source-sink ... Rust: Add support for MaD sources and sinks with access paths	2025-01-10 11:49:51 +01:00
yoff	b263132ab2	Merge pull request #17998 from yoff/shared/locations-in-range-analysis	2025-01-09 14:05:54 +01:00
yoff	21e7a0e828	Merge branch 'main' into shared/locations-in-range-analysis	2025-01-08 16:40:59 +01:00
Tom Hvitved	868caf948c	Rename {Source,Sink}Node to {Source,Sink}Element	2025-01-08 15:21:43 +01:00
yoff	aca5a51a78	Merge branch 'main' into shared/add-location-to-typetracking-nodes	2025-01-08 12:47:05 +01:00
github-actions[bot]	fb20f6ca63	Post-release preparation for codeql-cli-2.20.1	2025-01-07 22:07:40 +00:00
github-actions[bot]	88b6f1e79a	Release preparation for version 2.20.1	2025-01-07 20:50:36 +00:00
Dave Bartolomeo	72a53c4b23	Revert "Release preparation for version 2.20.1"	2025-01-07 13:32:23 -05:00
github-actions[bot]	fbf9f2fff8	Release preparation for version 2.20.1	2025-01-07 17:20:13 +00:00
Dave Bartolomeo	22e030584c	Revert "Release preparation for version 2.20.1"	2025-01-07 12:14:27 -05:00
Owen Mansel-Chan	7688f46650	Add change note	2025-01-07 17:08:23 +00:00
Owen Mansel-Chan	5959a736ac	Only recommend GCM, and tighten wording	2025-01-07 16:55:10 +00:00
Owen Mansel-Chan	9cc614ac2d	Allow jax-rs path annotation inheritance	2025-01-07 16:44:12 +00:00
github-actions[bot]	a121c5a5d0	Release preparation for version 2.20.1	2025-01-06 18:20:22 +00:00
Tom Hvitved	1b31c90d26	Implement FlowSummaryImpl stubs	2025-01-06 13:26:51 +01:00
Ian Lynagh	78b277b46f	Java/Kotlin: Add a changenote for CODEQL_PATH_TRANSFORMER support.	2025-01-03 16:02:36 +00:00
Michael Nebel	aaf0cd5dee	Merge pull request #17968 from michaelnebel/java/movetestutils ... Move test utilities to the query pack.	2024-12-16 13:41:30 +01:00
Michael Nebel	0bfc1b6ea8	Also move the postprocessing queries to the library pack.	2024-12-12 15:03:03 +01:00
Michael Nebel	941b0abbf6	Move modules to the library packs.	2024-12-12 15:03:01 +01:00
Owen Mansel-Chan	8703e21f62	Merge pull request #17996 from owen-mc/java/lightweight-IR-layer-classes ... Java: Make separate classes for different control flow node kinds	2024-12-12 13:36:54 +00:00
Owen Mansel-Chan	8e11789186	Restore asStmt, asExpr and asCall to Node ... It doesn't really make sense to define them in terms of dispatch.	2024-12-12 12:30:01 +00:00
Owen Mansel-Chan	066db766ef	Merge pull request #18153 from owen-mc/java/resttemplate-getforobject ... Java: add SSRF sink model for the third parameter of `RestTemplate.getForObject`	2024-12-11 16:37:35 +00:00
Jami	538dee81b6	Merge pull request #18214 from jcogs33/jcogs33/java/file-getname-path-sanitizer ... Java: add File.getName as a path injection sanitizer	2024-12-11 10:18:02 -05:00
Owen Mansel-Chan	1420bce36a	Move import statement in SpringWebClient.qll	2024-12-11 14:19:24 +00:00
Owen Mansel-Chan	aaa4361120	Rearrange member predicates in ControlFlow::Node ... Put all the ones which might need to be overrridden by subclasses together for ease of reading.	2024-12-11 10:34:18 +00:00
Owen Mansel-Chan	79f4f78fc2	Make separate classes for control flow node kinds ... This puts all the logic of a particular control flow node kind into one place and makes it easier to add new kinds.	2024-12-11 10:34:16 +00:00
Owen Mansel-Chan	3f5886ef7a	Accept another review suggestion	2024-12-10 15:26:17 +00:00
Owen Mansel-Chan	2da9bfb1a6	Finish renaming getCFGNode to getCfgNode	2024-12-10 15:26:16 +00:00
Owen Mansel-Chan	274281f61e	Apply all suggestions from code review ... Co-authored-by: Anders Schack-Mulligen <aschackmull@users.noreply.github.com>	2024-12-10 15:26:14 +00:00
Owen Mansel-Chan	d06dfe0ca3	Add change note	2024-12-10 15:26:13 +00:00
Owen Mansel-Chan	0f3dd6d8f1	Java: IPA the CFG	2024-12-10 15:26:11 +00:00
Jami Cogswell	214da9e9ad	Java: add change note	2024-12-06 19:59:40 -05:00
Owen Mansel-Chan	347fd575a2	Refactor to avoid duplicated logic	2024-12-05 11:15:43 +00:00
Owen Mansel-Chan	b20b7c7572	Remove escaped "{" and "}" before counting placeholders	2024-12-05 10:43:13 +00:00
Anders Schack-Mulligen	4bf63fedc9	Merge pull request #18179 from aschackmull/dataflow/accesspath-notypes ... Dataflow: Remove tracked types from Access Paths, track tainted object type, and tweak type pruning.	2024-12-05 09:58:36 +01:00
Jami Cogswell	121780c55a	Java: add File.getName as a path injection sanitizer	2024-12-04 18:57:51 -05:00
github-actions[bot]	cf71a1525b	Post-release preparation for codeql-cli-2.20.0	2024-12-04 18:36:17 +00:00
github-actions[bot]	96564b7128	Release preparation for version 2.20.0	2024-12-04 16:01:14 +00:00
Henry Mercer	963f084d87	Merge branch 'main' into henrymercer/merge-back-rc-3.16	2024-12-04 13:39:10 +00:00
Anders Schack-Mulligen	03fdceb0fd	Merge pull request #18191 from aschackmull/dataflow/remove-deprecated-lib ... Dataflow: Delete the old configuration-class based api.	2024-12-04 11:31:46 +01:00