Tony Torralba
46b30453e3
Merge pull request #13386 from github/java/update-mad-decls-after-triage-2023-06-06T14-38-29
...
Java: Update MaD Declarations after Triage
2023-06-07 12:33:26 +02:00
Tony Torralba
416d3d587d
Accept test changes
...
An uncovered test case is now correctly covered
2023-06-07 10:33:17 +02:00
Tony Torralba
60725e9580
Update java/ql/lib/ext/org.springframework.core.io.model.yml
2023-06-07 09:07:22 +02:00
Tony Torralba
2f12ae2e0d
Update java/ql/lib/ext/okhttp3.model.yml
2023-06-07 08:57:12 +02:00
github-actions[bot]
a14e7fa694
Add changed framework coverage reports
2023-06-07 00:16:58 +00:00
Stephan Brandauer
b31131d33a
Merge pull request #13344 from github/java/update-mad-decls-after-triage-2023-06-01T12-58-13
...
Java: Update MaD Declarations after Triage
2023-06-06 17:08:50 +02:00
Stephan Brandauer
75cbcdd72e
Update MaD Declarations after Triage
2023-06-06 16:38:31 +02:00
Tony Torralba
49c6ea27a0
Merge pull request #13379 from atorralba/atorralba/kotlin/use-with-flow
...
Kotlin: Add flow through kotlin.io.use and kotlin.with
2023-06-06 13:44:14 +02:00
Taus
f4fd908f7f
Java: Comment out sinks for which no query exists
2023-06-06 13:01:59 +02:00
Ian Lynagh
f690d150b0
Merge pull request #13373 from igfoo/igfoo/kotlin-loc
...
Java/Kotlin: Split lines of code by language
2023-06-06 11:49:18 +01:00
Tony Torralba
1d8ca88aca
Add change note
2023-06-06 11:25:07 +02:00
Tony Torralba
72af634575
Kotlin: Add flow through use and with
2023-06-06 11:22:16 +02:00
Nick Rolfe
6c5c338e6b
Merge pull request #13348 from github/nickrolfe/java-location-tostring
...
Java: avoid call to `Location.toString()`
2023-06-06 09:55:42 +01:00
Taus
7ad860fc98
Java: Update MaD declarations after triage
...
Co-authored-by: Stephan Brandauer <kaeluka@github.com >
2023-06-05 18:00:40 +02:00
Ian Lynagh
e49b278d61
Java/Kotlin: Add a changenote for the lines-of-code changes.
2023-06-05 16:33:12 +01:00
Ian Lynagh
a4a7ad8f99
Java/Kotlin: Split lines of code by language
...
We were giving the sum of all lines for both languages, but labelling it
as "Total lines of Java code in the database", which was confusing.
Now we give separate sums for Kotlin and Java lines.
2023-06-05 13:57:47 +01:00
Jami
64830809a6
Merge pull request #13228 from jcogs33/jcogs33/deprecated-sink-error-message
...
Java: add error message for outdated sink kinds in `getInvalidModelKind`
2023-06-02 13:44:18 -04:00
Jeroen Ketema
5f64354a70
Merge pull request #13353 from jketema/expecation
...
Fix typo in spelling of expectation
2023-06-02 12:29:49 +02:00
Jeroen Ketema
7b17b92aca
Fix typo in spelling of expectation
2023-06-02 10:36:11 +02:00
github-actions[bot]
ef7e9a674c
Add changed framework coverage reports
2023-06-02 00:16:55 +00:00
Jami
1a82e21fdb
Merge pull request #13136 from jcogs33/jcogs33/revamp-java-source-kinds
...
Java: change `android-widget` MaD source kind to `remote`
2023-06-01 14:18:02 -04:00
Jami Cogswell
b8cedfa817
Java: switch 'deprecated' to 'outdated'
2023-06-01 13:30:27 -04:00
Jami Cogswell
d10857fbdb
Java: fix typo blank qldoc
2023-06-01 12:57:06 -04:00
Jami Cogswell
0355b78f13
Java: add deprecation deletion comment
2023-06-01 12:57:06 -04:00
Jami Cogswell
b3d218a503
Java: condense 'replacementKind' code
2023-06-01 12:57:06 -04:00
Jami Cogswell
06c83ee14d
Java: add error message for deprecated sink kinds to 'getInvalidModelKind'
2023-06-01 12:57:05 -04:00
Jami
617107de35
Merge pull request #12916 from jcogs33/jcogs33/revamp-java-sink-kinds
...
Java: revamp MaD sink kinds
2023-06-01 12:48:30 -04:00
Jami Cogswell
de15013715
Java: remove RemoteFlowSources module
2023-06-01 12:25:26 -04:00
Jami Cogswell
5700a6eea4
Java: remove DefaultAndroidWidgetSources class
2023-06-01 12:25:26 -04:00
Jami Cogswell
119b446dbc
Java: add change note
2023-06-01 12:25:26 -04:00
Jami Cogswell
6722892828
Java: switch 'android-widget' source kind to 'remote'
2023-06-01 12:25:25 -04:00
Nick Rolfe
7290e2bfd9
Java: avoid call to Location.toString()
2023-06-01 17:06:34 +01:00
Erik Krogh Kristensen
96a720cfa0
Merge pull request #13285 from erik-krogh/redoshelp
...
ReDoS: fix whitespace in the samples in ReDoS.qhelp
2023-06-01 15:53:58 +02:00
Jami Cogswell
58845eca7c
Java: update recently added 'open-url' sinks to 'request-forgery'
2023-06-01 08:10:44 -04:00
Ian Lynagh
c28af7672d
Merge pull request #13286 from igfoo/igfoo/kotlin-1.9b
...
Kotlin: Support 1.9.0
2023-06-01 13:02:04 +01:00
Jami
10bab71c60
Merge pull request #12249 from jcogs33/jcogs33/add-heuristic-neutral-models
...
Java: add some neutral models discovered with heuristics
2023-06-01 07:51:55 -04:00
Tony Torralba
c1bd04e802
Merge pull request #13332 from atorralba/atorralba/java/gson-serializability
...
Java: Fix GsonDeserializableField
2023-06-01 10:45:32 +02:00
github-actions[bot]
3ef08d5baf
Add changed framework coverage reports
2023-06-01 00:20:17 +00:00
Jami Cogswell
82f208ca7a
Java: add isNeutralSink test case
2023-05-31 17:47:36 -04:00
Jami Cogswell
51f8f98118
Java: update recently added 'sql' sinks
2023-05-31 15:51:07 -04:00
Jami Cogswell
ca8ac0c93f
Java: add comment about request-forgery sinks
2023-05-31 15:51:07 -04:00
Jami Cogswell
9853a66b32
Java: update change note
2023-05-31 15:51:07 -04:00
Jami Cogswell
3e5dc28c0a
Java: update more recently added sinks: path-injection and request-forgery
2023-05-31 15:51:07 -04:00
Jami Cogswell
6bb6802fb8
Java: add change note draft
2023-05-31 15:51:07 -04:00
Jami Cogswell
e28ce959a3
Java: update CaptureSinkModels test case
2023-05-31 15:51:07 -04:00
Jami Cogswell
ad771984f1
Java: update recently added path-injection sinks
2023-05-31 15:51:07 -04:00
Jami Cogswell
36e467e74a
Java: update cwe-sink.csv
2023-05-31 15:51:07 -04:00
Jami Cogswell
5dbb698481
Java: update open/jdbc-url sink kinds to request-forgery
2023-05-31 15:50:31 -04:00
Jami Cogswell
cb10f4976b
Java: update create/read-file sink kinds to path-injection
2023-05-31 15:49:07 -04:00
Jami Cogswell
eb1a8e2189
Java: update write-file sink kind to file-system-store
2023-05-31 15:49:07 -04:00
