Michael Nebel
|
4568cccd71
|
Java: Add some unit tests for sourceModelKindConfig.
|
2023-08-01 12:56:13 +02:00 |
|
Michael Nebel
|
a9bc23fa3e
|
Java: Add threat model configuration related extensible predicates and some initial tuples.
|
2023-08-01 12:56:13 +02:00 |
|
Alex Ford
|
2b741448f4
|
Merge pull request #13309 from maikypedia/maikypedia/ldap-injection
Ruby: Add LDAP Injection query
|
2023-08-01 10:44:46 +01:00 |
|
Cornelius Riemenschneider
|
41487987b5
|
Merge pull request #13858 from github/criemen-update-bazel
Update bazel to 6.3.1
|
2023-08-01 10:44:36 +02:00 |
|
Mathias Vorreiter Pedersen
|
d111fa7e94
|
Merge pull request #13862 from jketema/ir-test
C++: Add IR test that shows dataflow regression after frontend update
|
2023-08-01 10:06:49 +02:00 |
|
Tony Torralba
|
2b3cab355d
|
Merge pull request #13859 from github/workflow/coverage/update
Update CSV framework coverage reports
|
2023-08-01 09:18:20 +02:00 |
|
Jeroen Ketema
|
ef8d95f87d
|
C++: Add IR test that shows dataflow regression after frontend update
|
2023-08-01 09:01:39 +02:00 |
|
Owen Mansel-Chan
|
5a5e921ee7
|
Merge pull request #13846 from owen-mc/go/better-baselines
Go: Add language-specific baseline configuration
|
2023-08-01 07:14:43 +01:00 |
|
Owen Mansel-Chan
|
a8c64443e8
|
Merge pull request #13645 from porcupineyhairs/goTiming
Go : Improvements to Timing Attacks query
|
2023-08-01 07:10:42 +01:00 |
|
github-actions[bot]
|
b547ae7c2f
|
Add changed framework coverage reports
|
2023-08-01 00:18:36 +00:00 |
|
Cornelius Riemenschneider
|
caf2180bad
|
Update .bazelversion
|
2023-08-01 00:15:53 +02:00 |
|
Felicity Chapman
|
df1e8e263b
|
Merge pull request #13854 from github/11185-add-note
CodeQL library update to use modular API interface - Add note and include in articles
|
2023-07-31 17:22:17 +01:00 |
|
Owen Mansel-Chan
|
d98079d72c
|
Apply suggestions from code review
Co-authored-by: Henry Mercer <henry.mercer@me.com>
|
2023-07-31 16:49:11 +01:00 |
|
Owen Mansel-Chan
|
216911dad9
|
Merge branch 'main' into goTiming
|
2023-07-31 16:15:10 +01:00 |
|
Owen Mansel-Chan
|
3d495bdd43
|
Add new files to CODEQL_TOOLS in Makefile
|
2023-07-31 16:12:52 +01:00 |
|
Owen Mansel-Chan
|
47a536c85d
|
Always output valid JSON containing paths-ignore
|
2023-07-31 16:09:47 +01:00 |
|
Alex Ford
|
af854749d7
|
Ruby: update Ldapinjection test output
|
2023-07-31 16:08:15 +01:00 |
|
Alex Ford
|
f437a6f729
|
Merge branch 'main' into maikypedia/ldap-injection
|
2023-07-31 16:00:41 +01:00 |
|
Alex Ford
|
558238a9be
|
Ruby: update TaintStep test output
|
2023-07-31 16:00:27 +01:00 |
|
Felicity Chapman
|
46f80dc5ca
|
Put back a missing colon to fix the link
|
2023-07-31 15:56:24 +01:00 |
|
Alex Ford
|
f272b0786a
|
Ruby: fix qldoc typo
|
2023-07-31 14:58:05 +01:00 |
|
Alex Ford
|
7f82aba7d4
|
qlformat
|
2023-07-31 14:57:14 +01:00 |
|
Alex Ford
|
2240e4bffb
|
Ruby: fix changenote date format
|
2023-07-31 14:56:53 +01:00 |
|
Felicity Chapman
|
9a334d3300
|
Add shortened link to changelog
|
2023-07-31 14:13:52 +01:00 |
|
Geoffrey White
|
1c64fb16f1
|
Merge pull request #13756 from geoffw0/sources2
Swift: CustomUrlSchemes test enhancements and minor model improvement
|
2023-07-31 12:53:03 +01:00 |
|
Felicity Chapman
|
a0c0da78e9
|
Merge branch 'main' into 11185-add-note
|
2023-07-31 11:54:00 +01:00 |
|
Geoffrey White
|
c4b782407b
|
Merge pull request #13853 from geoffw0/commandinject
Swift: Autoformat experimental query.
|
2023-07-31 11:30:20 +01:00 |
|
Felicity Chapman
|
4d05b742d6
|
Merge branch 'main' into 11185-add-note
|
2023-07-31 10:58:03 +01:00 |
|
Felicity Chapman
|
32da3c3730
|
Add main note and include in articles
|
2023-07-31 10:50:47 +01:00 |
|
Geoffrey White
|
f921076fca
|
Swift: Autoformat.
|
2023-07-31 10:25:25 +01:00 |
|
Tony Torralba
|
5488abc512
|
Merge pull request #13850 from atorralba/atorralba/java/unimportant-generated-models
Java: Remove superfluous generated models
|
2023-07-31 11:25:03 +02:00 |
|
Tony Torralba
|
41f1315da9
|
Merge pull request #13772 from atorralba/atorralba/java/inputstream-wrapper-read-step
Java: Add taint steps for InputStream wrappers
|
2023-07-31 11:12:43 +02:00 |
|
Geoffrey White
|
e534afe634
|
Merge pull request #13726 from maikypedia/maikypedia/swift-command-injection
Swift: Add Command Injection query (CWE-078)
|
2023-07-31 10:06:22 +01:00 |
|
Geoffrey White
|
12f2539d1d
|
Swift: Use flowTo.
|
2023-07-31 10:03:25 +01:00 |
|
Mathias Vorreiter Pedersen
|
2562f8a297
|
Merge pull request #13844 from jketema/forgotten-paren
C++: Add forgotten parentheses in ternary IR test
|
2023-07-31 10:03:06 +02:00 |
|
Tony Torralba
|
3bd4d34a47
|
Java: Remove superfluous generated models
|
2023-07-31 09:48:03 +02:00 |
|
Porcupiney Hairs
|
74e5c15eaa
|
Go : Improvements to Timing Attacks query
|
2023-07-31 06:30:47 +05:30 |
|
Owen Mansel-Chan
|
b5518047fa
|
Go: Add language-specific baseline configuration
|
2023-07-30 21:52:33 +01:00 |
|
Mathias Vorreiter Pedersen
|
4656130dab
|
Merge pull request #13843 from MathiasVP/revert-13792
|
2023-07-30 01:18:00 +02:00 |
|
Jeroen Ketema
|
0bc75ea9b7
|
C++: Add forgotten parentheses in ternary IR test
Without the parentheses, the expressions are parsed as `a ? x : (y = val)`.
|
2023-07-29 18:44:28 +02:00 |
|
Mathias Vorreiter Pedersen
|
fd1949092c
|
C++: Accept test changes.
|
2023-07-29 11:29:06 +02:00 |
|
Mathias Vorreiter Pedersen
|
ce9a14b692
|
Revert "Merge pull request #13792 from MathiasVP/swap-argument-order-in-invalid-ptr-deref"
This reverts commit 1fa6511482, reversing
changes made to 4676ca5a4a.
|
2023-07-29 11:26:41 +02:00 |
|
Stephan Brandauer
|
40eab180cc
|
Merge pull request #13823 from github/kaeluka/support-argument-this-in-frameworkmode-metadata-extraction
Java: Support Argument[this] and parameters of bodiless interface methods in framework mode metadata extraction
|
2023-07-28 17:38:39 +02:00 |
|
Tony Torralba
|
08cba7dc5f
|
Merge pull request #13713 from pwntester/java/struts2_source_taint_inheriting
[Java] Implement field taint inheritance for Struts2 unmarshalled objects
|
2023-07-28 16:46:27 +02:00 |
|
Owen Mansel-Chan
|
a020189895
|
Merge pull request #13822 from owen-mc/dataflow/mergepathgraph3-signature-fix
Dataflow: MergePathGraph3 signature fix
|
2023-07-28 15:15:43 +01:00 |
|
Shati Patel
|
a98ae8941c
|
Merge pull request #13832 from github/shati-patel/docs-indentation
Docs: Fix indentation in tutorial examples
|
2023-07-28 14:07:16 +01:00 |
|
Tony Torralba
|
2dff0ce5b4
|
Merge pull request #13712 from pwntester/java/new_struts2_models
[Java] New models for Struts2 framework
|
2023-07-28 14:31:25 +02:00 |
|
Stephan Brandauer
|
8bf960bd44
|
Java: fix QL-for-QL alert
|
2023-07-28 14:28:47 +02:00 |
|
Stephan Brandauer
|
021eedfdf1
|
Java: format
|
2023-07-28 14:26:34 +02:00 |
|
Stephan Brandauer
|
82fd0e45aa
|
Java: support Argument[this] in NotAModelApiParameter
|
2023-07-28 14:04:53 +02:00 |
|