Stephan Brandauer
3eeb6ffec4
Java: automodel extraction docs: spell out positive and negative
2023-10-25 09:05:22 +02:00
Stephan Brandauer
44c87561b3
Java: review suggestion from adityasharad
...
Co-authored-by: Aditya Sharad <6874315+adityasharad@users.noreply.github.com >
2023-10-25 09:00:28 +02:00
Stephan Brandauer
c240c1b3f5
Java: review suggestions from aeisenberg
...
Co-authored-by: Andrew Eisenberg <aeisenberg@github.com >
2023-10-25 08:59:21 +02:00
Stephan Brandauer
e97456f5fc
Java: automodel extraction docs: note on packaging and backwards compatibility
2023-10-24 16:30:59 +02:00
Stephan Brandauer
eb97ce3294
Java: automodel extraction query docs, candidate examples
2023-10-24 13:49:38 +02:00
Stephan Brandauer
bcde466d6c
use of characteristics
2023-10-12 17:22:05 +02:00
Stephan Brandauer
1bbf88f208
Java: basic version of automodel extraction queries
2023-10-12 17:07:46 +02:00
Henry Mercer
1a370bfbbe
Merge pull request #14443 from github/post-release-prep/codeql-cli-2.15.0
...
Post-release preparation for codeql-cli-2.15.0
2023-10-11 17:39:04 +01:00
github-actions[bot]
ae6af17c74
Post-release preparation for codeql-cli-2.15.0
2023-10-11 14:19:20 +00:00
Jean Helie
6260768e6a
update query message to incoude extensibleType
2023-10-11 14:02:24 +02:00
Jean Helie
c41676a21a
update query message to incoude extensibleType
2023-10-11 14:02:12 +02:00
Michael Nebel
5c44f8bbad
Merge pull request #14370 from michaelnebel/java/enablethreatmodels
...
Java: Enable threat models for most Java queries.
2023-10-10 09:25:47 +02:00
Erik Krogh Kristensen
4489e2bf28
Merge pull request #14403 from erik-krogh/dDEps
...
All: delete outdated deprecations
2023-10-09 21:04:55 +02:00
Michael Nebel
cf3a62d201
Java: Address review comments.
2023-10-09 13:06:59 +02:00
Anders Schack-Mulligen
4a0ab4a050
Merge pull request #14402 from Marcono1234/marcono1234/MemberRefExpr-getReceiverExpr
...
Java: Add predicate `MemberRefExpr::getReceiverExpr`
2023-10-09 13:01:36 +02:00
erik-krogh
a7ab9fd93b
add change-notes
2023-10-09 09:43:06 +02:00
erik-krogh
e3e8f3d7c4
Java: delete various outdated deprecations
2023-10-09 09:14:54 +02:00
erik-krogh
0d992a3d1f
delete old deprecated aliases of various regex libraries
2023-10-09 09:14:54 +02:00
erik-krogh
4bc4e0845d
delete the deprecated isBarrierGuard predicate from the shared dataflow library, and its uses
2023-10-07 21:48:49 +02:00
Marcono1234
f3e5045259
Java: Add predicate MemberRefExpr::getReceiverExpr
2023-10-07 14:53:07 +02:00
Marcono1234
2c0dcd3a2d
Java: Adjust ClassInstanceExpr type argument predicates docs
...
The type arguments which these predicates have as result are for the
type of the created instance.
Previously the documentation said "provided to the constructor", which
is misleading / incorrect. Type arguments provided to the constructor
are specified directly after the `new` keyword:
```
class C {
<T> C() {
}
}
new <String> C();
```
And those are not part of the results of these predicates.
2023-10-07 03:43:58 +02:00
Michael Nebel
dca39348ab
Java: Add change note.
2023-10-06 15:09:16 +02:00
Michael Nebel
fb10af9042
Jave: Remove the local threat model from the default configuration.
2023-10-06 14:58:48 +02:00
Cornelius Riemenschneider
d3a1dbc0c7
Merge pull request #14381 from github/criemen/add-bazel-dbschemes
...
Add skeleton bazel files for accessing the dbschemes.
2023-10-05 16:53:45 +02:00
Michael Nebel
96f93cefba
UNDO AGAIN: Add local threat models.
2023-10-05 16:16:00 +02:00
Chris Smowton
399fab0c6c
Merge pull request #14322 from smowton/smowton/admin/add-buildless-diagnostic-expectations
...
Add Java buildless diagnostic expectations
2023-10-05 09:02:02 +01:00
Cornelius Riemenschneider
96edc1d349
Add skeleton bazel files for accessing the dbschemes.
2023-10-05 09:00:38 +02:00
Edward Minnix III
8e653d01a8
Merge pull request #14127 from egregius313/egregius313/java/mad/localuserinput
...
Java: Convert implementations of `LocalUserInput` to Models-as-Data
2023-10-04 12:55:44 -04:00
Ed Minnix
e2a14c7616
Add note about results to change note
2023-10-04 11:08:40 -04:00
github-actions[bot]
9fe993bec3
Release preparation for version 2.15.0
2023-10-04 14:15:27 +00:00
Michael Nebel
40e63a63e2
Java: Re-factor most queries and tests to use threat models.
2023-10-04 14:01:58 +02:00
Michael Nebel
f0fb065446
Java: Opt-in the SQL injection query to use threat model flow sources.
2023-10-04 10:51:07 +02:00
Michael Nebel
5fd6dc3b87
Java: Opt-in the XSS query to use threat model flow sources.
2023-10-04 10:48:09 +02:00
Ed Minnix
581d410304
Add change note
2023-10-03 22:29:00 -04:00
Edward Minnix III
a1d3667f1c
Refactor Hudson file methods to MaD
2023-10-03 22:28:59 -04:00
Edward Minnix III
3a75c0fde7
Refactor DatabaseInput to MaD
2023-10-03 22:28:59 -04:00
Edward Minnix III
655470f3da
Refactor EnvInput to MaD
2023-10-03 22:28:47 -04:00
Henry Mercer
da92da2204
Bump minor versions of packs we regularly release
2023-10-03 16:31:23 +01:00
Henry Mercer
f3847b3f51
Merge branch 'main' into henrymercer/rc-3.11-mergeback
2023-10-03 16:30:23 +01:00
Michael Nebel
fcbd301de8
Java: Address review comments.
2023-10-03 10:36:45 +02:00
Michael Nebel
5b949b19f7
Java: Cleanup threat model taxanomy to align with the EDR.
2023-10-03 09:16:39 +02:00
Michael Nebel
5c700afa27
Java: Add some threat model dataflow tests.
2023-10-03 09:16:39 +02:00
Michael Nebel
537965c0e8
Java: Add some testfiles.
2023-10-03 09:16:39 +02:00
Michael Nebel
2055d5492c
Java: Let RemoteFlowSource and LocalUserInput extends SourceNode and fine grain the LocalUserInput threat models.
2023-10-03 09:16:38 +02:00
Michael Nebel
9a112dde66
Java: Introduce a class of dataflow nodes for the threat modeling.
2023-10-03 09:16:38 +02:00
Anders Schack-Mulligen
efb49fcd3e
Merge pull request #14336 from aschackmull/java/switch-rule-stmt-cfg
...
Java: Fix CFG for case rule statements.
2023-09-29 12:02:48 +02:00
Stephan Brandauer
d7beda79ab
Merge pull request #14197 from github/kaeluka/framework-mode-source-candidates
...
Java: Framework mode source candidates
2023-09-28 21:09:54 +02:00
Stephan Brandauer
fdbc553029
Java: Automodel Framework mode: no longer skip non-public methods
2023-09-28 16:17:44 +02:00
Anders Schack-Mulligen
15e1098791
Java: Add change note.
2023-09-28 14:28:24 +02:00
Anders Schack-Mulligen
94556078f1
Java: Add guards logic for SwitchExpr default cases.
2023-09-28 14:21:04 +02:00
