Tom Hvitved
|
8e8100fd34
|
Merge pull request #16887 from hvitved/ruby/local-flow-missing-steps
Ruby: Add missing local flow steps
|
2024-07-02 15:43:52 +02:00 |
|
Tom Hvitved
|
19e910e1b5
|
Merge pull request #16801 from hvitved/ruby/element-reference-block
Ruby: Handle element references with blocks
|
2024-07-02 13:08:31 +02:00 |
|
Tom Hvitved
|
7fdc09c17f
|
Ruby: Add missing local flow steps
|
2024-07-01 19:46:40 +02:00 |
|
Arthur Baars
|
b12b33c8f9
|
Merge remote-tracking branch 'upstream/main' into 'rc/3.14'
|
2024-06-28 19:50:35 +02:00 |
|
Tom Hvitved
|
25daaf9d47
|
Ruby: Add change note
|
2024-06-25 10:00:01 +02:00 |
|
github-actions[bot]
|
fd385736e6
|
Post-release preparation for codeql-cli-2.17.6
|
2024-06-25 06:39:45 +00:00 |
|
github-actions[bot]
|
e32a587078
|
Release preparation for version 2.17.6
|
2024-06-24 14:33:10 +00:00 |
|
Anders Schack-Mulligen
|
8c23e21073
|
Dataflow: Cache compatibleTypes.
|
2024-06-24 13:35:48 +02:00 |
|
Tom Hvitved
|
a8758c0160
|
Ruby: Handle element references with blocks
|
2024-06-21 12:04:55 +02:00 |
|
Tom Hvitved
|
d7ce2be040
|
Ruby: Up/downgrade scripts
|
2024-06-21 12:04:53 +02:00 |
|
Tom Hvitved
|
21c9f33419
|
Ruby: Bump tree-sitter-ruby
|
2024-06-21 10:17:59 +02:00 |
|
Tom Hvitved
|
8ea4f85de3
|
Ruby: Rework Sinatra.FilterJumpStep
|
2024-06-21 08:57:59 +02:00 |
|
Tom Hvitved
|
95c764eff6
|
Fix Sinatra test to properly output pathgraph
|
2024-06-21 08:57:19 +02:00 |
|
Alex Ford
|
6c3d90e8a0
|
Merge pull request #16650 from alexrford/rb/routing-improvements
Ruby: ActionDispatch - support `path => target` route format
|
2024-06-18 11:17:05 +01:00 |
|
Joe Farebrother
|
eee7f5a896
|
Use a combined regex for performance
|
2024-06-17 22:21:33 +01:00 |
|
Joe Farebrother
|
90d6f2ece3
|
Factor out nameIndicatesRelevantSensitiveData
|
2024-06-12 15:11:47 +01:00 |
|
Tom Hvitved
|
605fe54a06
|
Ruby: Remove two Cartesian products
|
2024-06-12 15:11:43 +01:00 |
|
Joe Farebrother
|
5f08371f19
|
Add change note
|
2024-06-12 15:11:39 +01:00 |
|
Joe Farebrother
|
07f03be8cc
|
Add unit tests
|
2024-06-12 15:11:35 +01:00 |
|
Joe Farebrother
|
b0c03f6d68
|
Allow implicit read steps on sinks
|
2024-06-12 15:11:32 +01:00 |
|
Joe Farebrother
|
8b51ee8fe8
|
Use additional sensitive data heuristics in CleartextSources
|
2024-06-12 15:11:27 +01:00 |
|
Arthur Baars
|
4ee80653e2
|
Merge pull request #16471 from Sim4n6/ruby-UBV
Ruby: Add some method calls as a Source
|
2024-06-12 12:42:08 +02:00 |
|
github-actions[bot]
|
8a25081a0e
|
Post-release preparation for codeql-cli-2.17.5
|
2024-06-10 15:33:08 +00:00 |
|
github-actions[bot]
|
877bfa2468
|
Release preparation for version 2.17.5
|
2024-06-10 13:40:39 +00:00 |
|
Sim4n6
|
7c0ce6486b
|
Rerun the test learn
|
2024-06-10 12:21:10 +01:00 |
|
Anders Schack-Mulligen
|
5d51b5b97b
|
Ruby: Add support for pretty-printed provenace in tests. Convert one test.
|
2024-06-07 11:47:48 +02:00 |
|
Asger F
|
6e0f3df573
|
Merge pull request #14120 from asgerf/dynamic/typemodel-istypeused
Dynamic: add TypeModel.isTypeUsed
|
2024-06-06 15:31:16 +02:00 |
|
Sim4n6
|
dabc33bf66
|
simplify UnicodeBypassValidationQuery code
|
2024-06-05 22:45:49 +01:00 |
|
Sim4n6
|
7dcbbbac91
|
Refactor UnicodeBypassValidationQuery to remove unnecessary code
|
2024-06-05 13:05:34 +01:00 |
|
Tom Hvitved
|
e42de3de6f
|
Ruby: Fix extraction errors
|
2024-06-04 14:54:02 +02:00 |
|
Tom Hvitved
|
ad99158838
|
Ruby: Fix/accept extraction errors
|
2024-06-04 12:55:44 +02:00 |
|
Tom Hvitved
|
858c7cead2
|
Ruby: Add consistency query for extraction errors
|
2024-06-04 12:55:42 +02:00 |
|
Alex Ford
|
1100b75a3c
|
Ruby: handle routes with path/action pairs
|
2024-05-31 15:54:57 +01:00 |
|
Alex Ford
|
0473655752
|
Ruby: actiondispatch add hash arg testcase
|
2024-05-31 15:08:35 +01:00 |
|
Alex Ford
|
22858249f9
|
Ruby: actiondispatch test whitespace changes
|
2024-05-31 15:07:39 +01:00 |
|
Paolo Tranquilli
|
096a31dbef
|
Mark all integration tests as legacy
This is in preparation for the new integration test framework. Tests
marked thus will be run by the current framework and ignored by the new
one.
|
2024-05-31 16:04:50 +02:00 |
|
Alex Ford
|
4644f08195
|
Ruby: Routing.qll - rename call as methodCall
|
2024-05-31 14:45:32 +01:00 |
|
Alex Ford
|
25f9449f53
|
Ruby: Routing.qll - rename method as httpMethod
|
2024-05-31 14:45:26 +01:00 |
|
Alex Ford
|
af9ed21c36
|
Ruby: Routing.qll - rename method as methodCall
|
2024-05-31 14:45:20 +01:00 |
|
github-actions[bot]
|
906b65d09c
|
Post-release preparation for codeql-cli-2.17.4
|
2024-05-28 18:02:25 +00:00 |
|
github-actions[bot]
|
33b4ae8bbb
|
Release preparation for version 2.17.4
|
2024-05-28 15:44:32 +00:00 |
|
Tom Hvitved
|
69fb2bb97c
|
Merge pull request #16597 from hvitved/tree-sitter/empty-location
Tree-sitter: Emit `empty_location` relation to avoid scan
|
2024-05-27 15:19:15 +02:00 |
|
Anders Schack-Mulligen
|
1432519cc2
|
Dataflow: Add totalorder predicates to all languages.
|
2024-05-27 11:01:52 +02:00 |
|
Anders Schack-Mulligen
|
bc8ca1af86
|
Dataflow: Introduce NodeRegions for use in isUnreachableInCall.
|
2024-05-27 11:01:51 +02:00 |
|
Tom Hvitved
|
686879a2a3
|
Ruby: Add up/downgrade scripts
|
2024-05-27 10:39:22 +02:00 |
|
Tom Hvitved
|
94d2e9591d
|
Tree-sitter: Emit empty_location relation to avoid scan
|
2024-05-27 10:39:21 +02:00 |
|
Dave Bartolomeo
|
613ccaac1d
|
Add change note to all v1.0.0 packs
|
2024-05-23 13:01:22 -04:00 |
|
Dave Bartolomeo
|
ffe4c8c87b
|
Update all pack versions to 1.0.0
|
2024-05-22 13:39:08 -04:00 |
|
Anders Schack-Mulligen
|
bbebdfea8d
|
Merge pull request #16511 from aschackmull/dataflow/configuration-provenance
Dataflow: Add provenance for configuration-specific steps.
|
2024-05-22 14:07:10 +02:00 |
|
Alex Ford
|
8119a27540
|
Merge pull request #16185 from alexrford/rb/conditions-arr0
Ruby: ActiveRecord - refine `conditions` argument as an SQLi sink
|
2024-05-22 12:19:10 +01:00 |
|