Owen Mansel-Chan
|
6efb21314a
|
Merge pull request #21523 from owen-mc/docs/mad/barriers
Document models-as-data barriers and barrier guards and add change notes
|
2026-04-21 13:49:19 +01:00 |
|
github-actions[bot]
|
a0bab539bb
|
Post-release preparation for codeql-cli-2.25.3
|
2026-04-20 12:40:34 +00:00 |
|
github-actions[bot]
|
c861d99802
|
Release preparation for version 2.25.3
|
2026-04-20 09:27:23 +00:00 |
|
Owen Mansel-Chan
|
8f17b73796
|
Fix link formatting in change notes
|
2026-04-14 15:27:37 +01:00 |
|
Owen Mansel-Chan
|
c86ba38a4e
|
Add change notes
|
2026-04-14 15:27:31 +01:00 |
|
Henry Mercer
|
43c9b95e6f
|
Merge branch 'main' into post-release-prep/codeql-cli-2.25.2
|
2026-04-14 13:56:52 +01:00 |
|
Owen Mansel-Chan
|
7458674470
|
Merge pull request #21584 from owen-mc/shared/update-mad-comments
Shared: update code comments explaining models-as-data format to include barriers and barrier guards
|
2026-04-14 09:30:28 +01:00 |
|
github-actions[bot]
|
242090e0ac
|
Post-release preparation for codeql-cli-2.25.2
|
2026-04-06 13:49:20 +00:00 |
|
github-actions[bot]
|
4fe2f6d2b4
|
Release preparation for version 2.25.2
|
2026-04-06 10:30:38 +00:00 |
|
Óscar San José
|
59eec7ffa2
|
Merge branch 'main' of https://github.com/github/codeql into post-release-prep/codeql-cli-2.25.1
|
2026-03-30 10:51:12 +02:00 |
|
github-actions[bot]
|
ce6e6d5db3
|
Post-release preparation for codeql-cli-2.25.1
|
2026-03-30 08:43:48 +00:00 |
|
Owen Mansel-Chan
|
37aac05964
|
Replace branch with acceptingValue
|
2026-03-27 22:39:10 +00:00 |
|
Owen Mansel-Chan
|
10fddc7b96
|
Add barriers and barrier guards to MaD format explanations
|
2026-03-27 09:47:24 +00:00 |
|
github-actions[bot]
|
fb011842c9
|
Release preparation for version 2.25.1
|
2026-03-25 23:43:06 +00:00 |
|
github-actions[bot]
|
8cf0954796
|
Release preparation for version 2.25.1
|
2026-03-25 08:28:30 +00:00 |
|
Tom Hvitved
|
cc99867969
|
Merge pull request #21511 from hvitved/ruby/empty-stats
Ruby: Use empty DB stats
|
2026-03-24 08:25:43 +01:00 |
|
Tom Hvitved
|
4b364639a2
|
Ruby: Fix join orders following DB stats removal
|
2026-03-20 13:13:38 +01:00 |
|
Tom Hvitved
|
750f1ae8e9
|
Ruby: Use empty DB stats
|
2026-03-19 10:18:42 +01:00 |
|
github-actions[bot]
|
e3dbf5b022
|
Post-release preparation for codeql-cli-2.25.0
|
2026-03-16 16:03:22 +00:00 |
|
github-actions[bot]
|
d6055754b6
|
Release preparation for version 2.25.0
|
2026-03-16 12:15:34 +00:00 |
|
Óscar San José
|
3b9eba2afc
|
Merge branch 'main' of https://github.com/github/codeql into oscarsj/merge-back-rc-3.21
|
2026-03-06 16:20:36 +01:00 |
|
Owen Mansel-Chan
|
c82f75604a
|
Add change notes
|
2026-03-05 10:34:30 +00:00 |
|
Owen Mansel-Chan
|
6001c735ff
|
Ruby: Inline expectation should have space after $
This was a regex-find-replace from `# \$(?! )` (using a negative lookahead) to `# $ `.
|
2026-03-04 12:45:06 +00:00 |
|
github-actions[bot]
|
e152f08468
|
Post-release preparation for codeql-cli-2.24.3
|
2026-03-02 22:51:27 +00:00 |
|
github-actions[bot]
|
7795badd18
|
Release preparation for version 2.24.3
|
2026-03-02 13:23:40 +00:00 |
|
Owen Mansel-Chan
|
12bd709219
|
Merge pull request #21341 from owen-mc/rb/accept-mad-sanitizers
Ruby: Accept MaD sanitizers for queries with MaD sinks and convert some existing sanitizers
|
2026-02-23 11:44:05 +00:00 |
|
Owen Mansel-Chan
|
1bff7a3eb8
|
Add change note
|
2026-02-17 22:29:35 +00:00 |
|
Owen Mansel-Chan
|
eb7f1989c7
|
Reinstate ql model for String#shellescape
|
2026-02-17 22:27:15 +00:00 |
|
Owen Mansel-Chan
|
de5470a85c
|
Add MaD barriers for Shellwords.escape and shellescape
Note that this will only block flow for queries that use the kind `command-injection`.
|
2026-02-17 22:27:13 +00:00 |
|
Owen Mansel-Chan
|
b3681f7a0c
|
Model flow through Shellwords escape and shellescape
|
2026-02-17 22:27:11 +00:00 |
|
Owen Mansel-Chan
|
6294c3b3b8
|
Remove Shellwords sanitizer in ql
Note that some sanitizers had no effect because flow through those functions wasn't modeled.
|
2026-02-17 22:27:10 +00:00 |
|
Owen Mansel-Chan
|
4aee99f0eb
|
Reinstate SQLite3 sanitizer in MaD
|
2026-02-17 22:27:08 +00:00 |
|
Owen Mansel-Chan
|
5df695bec9
|
Move SQLite3 flow model to MaD and remove ql sanitizer
|
2026-02-17 22:27:06 +00:00 |
|
Owen Mansel-Chan
|
d4bb92b038
|
Reinstate Mysql2 sanitizer in MaD
|
2026-02-17 22:27:03 +00:00 |
|
Owen Mansel-Chan
|
3e4f42f8a3
|
Move Mysql2 flow model to MaD and remove ql sanitizer
|
2026-02-17 22:27:01 +00:00 |
|
Owen Mansel-Chan
|
1d7a39a093
|
Change how sql-injection barriers are accepted
|
2026-02-17 22:26:58 +00:00 |
|
Owen Mansel-Chan
|
3dc465f167
|
Accept MaD sanitizers for queries with MaD sinks
|
2026-02-17 12:48:36 +00:00 |
|
github-actions[bot]
|
b5898c5a30
|
Post-release preparation for codeql-cli-2.24.2
|
2026-02-16 17:07:45 +00:00 |
|
github-actions[bot]
|
ef04f927fb
|
Release preparation for version 2.24.2
|
2026-02-16 13:29:25 +00:00 |
|
github-actions[bot]
|
73d06f26cb
|
Post-release preparation for codeql-cli-2.24.1
|
2026-02-02 14:04:26 +00:00 |
|
github-actions[bot]
|
0db542e9f0
|
Release preparation for version 2.24.1
|
2026-02-02 12:09:09 +00:00 |
|
Tom Hvitved
|
b974a84bef
|
Merge pull request #21051 from hvitved/shared/flow-summary-provenance-filtering
Shared: Provenance-based filtering of flow summaries
|
2026-01-26 17:24:34 +01:00 |
|
Tom Hvitved
|
0f6bae0ae1
|
Add change notes
|
2026-01-26 12:40:22 +01:00 |
|
Tom Hvitved
|
c975ae5231
|
Ruby: Adapt to changes in FlowSummaryImpl
|
2026-01-26 12:40:14 +01:00 |
|
yoff
|
d05901ad3f
|
python/javascript/ruby: mark internal predicates
|
2026-01-22 17:30:24 +01:00 |
|
yoff
|
b08c972cc3
|
ruby: Add back sanitizer as MaD model
|
2026-01-22 17:30:24 +01:00 |
|
yoff
|
15980cb1da
|
ruby: remove sanitizer to be replaced by MaD model
|
2026-01-22 17:30:24 +01:00 |
|
yoff
|
3dbfb9fa4b
|
python: add machinery for MaD barriers
and reinstate previously removed barrier
now as a MaD row
|
2026-01-22 17:30:24 +01:00 |
|
Ian Lynagh
|
1fd60c7671
|
Ruby: Add up/downgrade scripts
|
2026-01-20 11:56:16 +00:00 |
|
Ian Lynagh
|
4b9c9e7a5a
|
Ruby: Regenerate dbscheme
|
2026-01-20 11:56:15 +00:00 |
|