Commit Graph

48273 Commits

Author SHA1 Message Date
Asger F
2a57b00a13 JS: Above -> previous section 2023-03-24 14:41:35 +01:00
Asger F
8b7ab28f25 JS: Add "In the next section..." 2023-03-24 14:40:06 +01:00
Asger F
4a418b1f29 Apply suggestion from code review (execa) 2023-03-24 14:37:30 +01:00
Asger F
06c7160916 JS: Extension point -> extensible predicate 2023-03-24 14:29:02 +01:00
Asger F
395a9f0e8c Apply suggestions from code review
Co-authored-by: Ben Ahmady <32935794+subatoi@users.noreply.github.com>
2023-03-24 14:21:39 +01:00
Asger F
ecb46e808c JS: extension point -> extensible predicate 2023-03-13 09:39:05 +01:00
Asger F
c4c0009f8a Apply suggestions from code review
Co-authored-by: Andrew Eisenberg <aeisenberg@github.com>
2023-03-13 09:35:35 +01:00
Asger F
3d5c06b782 Revert "JS: Remove public links to customization docs"
This reverts commit b9b8b8b28a.
2023-03-06 12:46:12 +01:00
Asger F
b9b8b8b28a JS: Remove public links to customization docs 2023-03-03 13:46:15 +01:00
Asger F
e09975f853 JS: Replace 'remote-flow' kind with 'remote' 2023-03-01 13:46:13 +01:00
Asger F
c2a10a3206 JS: Elaborate on comment about window 2022-12-15 12:46:46 +01:00
Asger F
2052ba6fa6 JS: sake of example -> this example 2022-12-15 12:45:53 +01:00
Asger F
fb6a6e550c JS: Factor beta notice into a reusable snippet 2022-12-15 12:42:59 +01:00
Asger F
3f4ecd5fdd JS: Add underscore.forEach example 2022-12-15 12:21:03 +01:00
Asger F
cfdac73948 JS: Add decodeURIComponent example 2022-12-15 12:21:03 +01:00
Asger F
5c14eabb0c JS: Remove broken link to 'sink kinds' section 2022-12-15 12:21:03 +01:00
Asger F
1c3dd93cbe JS: Rename section and remove broken link
It seems Sphinx just isn't capable of rendering these intra-document links.
2022-12-15 11:46:27 +01:00
Asger F
fab798d654 JS: Add some text at the beginning of the reference 2022-12-15 11:45:53 +01:00
Asger F
bbce52535a JS: Add clarification in another customization doc 2022-12-13 15:34:54 +01:00
Asger F
111cabbfc1 JS: Add deprecation notice to page about JSON-based format 2022-12-13 15:34:54 +01:00
Asger F
9ce0c60247 JS: Rephrase link in ToC 2022-12-13 15:34:54 +01:00
Asger F
b3a1d02d8c JS: Add data extension docs 2022-12-13 15:34:54 +01:00
Asger F
bfe9ee3ead Merge pull request #11672 from asgerf/js/extensions
JS: Add data extension sinks
2022-12-13 15:34:11 +01:00
Asger F
6b15839221 JS: Add tests for the examples used in the docs 2022-12-13 11:33:12 +01:00
Asger F
ba1364a4cb JS: Add sinks mentioned in doc
Note that 'sql-injection' was already added
2022-12-13 11:33:12 +01:00
Michael Nebel
b8ef961498 Merge pull request #9415 from JarLob/sockets
Add TCP and UDP socket client taint sources
2022-12-13 10:39:33 +01:00
AlexDenisov
73196fd732 Merge pull request #11669 from github/redsun82/swift-wrapper
Swift: wrap extractor with shell script
2022-12-13 09:46:42 +01:00
Paolo Tranquilli
0dc717fd9c Swift: remove no more needed library path setting in qltest.sh 2022-12-13 09:13:43 +01:00
Paolo Tranquilli
03d7adb303 Swift: wrap extractor with shell script
This is in preparation for the extractor to use shared libraries
packaged alongside it.

We could probably also move the `CODEQL_EXTRACTOR_SWIFT_RUN_UNDER` logic
in it, where it would be simpler and more robust.
2022-12-13 09:07:37 +01:00
yoff
557a5b469f Merge pull request #11555 from pwntester/new_python_cmdi_sinks
Added two new CMDi sinks for python's stdlib
2022-12-13 09:00:34 +01:00
Erik Krogh Kristensen
636d5e341c Merge pull request #11652 from erik-krogh/static-useInstanceOf
Java/C#/GO: Use instanceof in more places
2022-12-12 17:52:04 +01:00
Edward Minnix III
0ebfee8b11 Merge pull request #11241 from egregius313/egregius313/webview-file-access
Java: Query to detect Android Webview file access
2022-12-12 11:12:26 -05:00
Erik Krogh Kristensen
4ff823c36b Merge pull request #11366 from p-/p--ruby-kernel-open-addition
Ruby: Add additional sinks to the `rb/kernel-open` query
2022-12-12 15:56:01 +01:00
erik-krogh
873d3553cd Merge branch 'main' into static-useInstanceOf 2022-12-12 15:36:54 +01:00
Tom Hvitved
912aa461c7 Merge pull request #11654 from hvitved/ruby/stage-collapse
Ruby: Ensure `Node::{toString,getLocation}` are computed in data flow stage
2022-12-12 13:57:47 +01:00
Michael Nebel
0fdf9a42f2 C#: Cleanup and make the last StreamReader model explicit on its input. 2022-12-12 13:21:26 +01:00
JarLob
1d303e0470 C#: Add remote type source kind in model validation. 2022-12-12 12:56:14 +01:00
Jaroslav Lobačevski
340fd8ae4e C#: Add change note. 2022-12-12 12:56:14 +01:00
Jaroslav Lobačevski
204a1d3d06 C#: Add source TCP/UDP source models and StreamReader summary models. 2022-12-12 12:56:14 +01:00
Chris Smowton
2bdc9e80de Merge pull request #11625 from smowton/smowton/admin/autoformat-docs-ql-files
Autoformat docs ql files
2022-12-12 10:37:35 +00:00
Mathias Vorreiter Pedersen
b2fcf87e6a Merge pull request #11638 from jketema/rewrite-tainted-path-v2
C++: Use `FlowSource` in `cpp/path-injection`
2022-12-12 10:08:15 +00:00
Chris Smowton
77004f3e15 Merge pull request #11258 from smowton/smowton/feature/kotlin-annotation-extraction
Kotlin: extract annotations
2022-12-12 09:52:49 +00:00
Michael Nebel
e0f1b38439 Merge pull request #11580 from michaelnebel/renamenegativemodels
C#/Java: Rename Negative Summary Model to Neutral Model
2022-12-12 07:59:06 +01:00
Harry Maclean
6c8896d83f Merge pull request #11337 from hmac/actionmailbox
Ruby: Model ActionMailbox
2022-12-12 10:29:23 +13:00
Tom Hvitved
58549087e0 Ruby: Ensure Node::{toString,getLocation} are computed in data flow stage 2022-12-11 20:37:24 +01:00
Tom Hvitved
367aa35d8c Ruby: Avoid SummarizedCallable::propagatesFlowExt being recursive 2022-12-11 20:37:23 +01:00
erik-krogh
8262fbbfb5 Java/C#/GO: Use instanceof in more places 2022-12-11 18:32:19 +01:00
Jeroen Ketema
beb66d027e C++: Use FlowSource in cpp/path-injection 2022-12-10 20:27:56 +01:00
Jeroen Ketema
d5acd310ce Merge pull request #11644 from jketema/lower-case-flow-source-description
C++: Make all flow source descriptions start with a lower case letter
2022-12-10 20:23:14 +01:00
Mathias Vorreiter Pedersen
bea67abd64 Merge pull request #11643 from jketema/generalize-argv 2022-12-10 16:03:20 +00:00