Tiferet Gazit
710b215c38
Merge pull request #11263 from github/tiferet/extract-training-data
...
ATM: Extract training data
2022-11-15 12:08:13 -08:00
tiferet
fc078a47fd
Apply suggestion from code review
2022-11-15 11:14:01 -08:00
Tiferet Gazit
092e019de9
Apply suggestions from code review
...
Co-authored-by: Stephan Brandauer <kaeluka@github.com >
2022-11-15 10:48:32 -08:00
Andrew Eisenberg
2ffb4b6480
Merge pull request #11279 from github/aeisenberg/atm-readme
...
Add more information about ATM queries for external users
2022-11-15 10:46:03 -08:00
Andrew Eisenberg
88750a7000
Add more information about ATM queries for external users
2022-11-15 10:17:56 -08:00
AlexDenisov
f069802abb
Merge pull request #11277 from github/redsun82/swift-remove-ipa-from-dbscheme-cpp
...
Swift: remove IPA classes from `cppgen`
2022-11-15 18:34:59 +01:00
AlexDenisov
eb2f1ff559
Merge pull request #11274 from github/redsun82/swift-remove-double-newlines-in-schema
...
Swift: remove double newlines in schema
2022-11-15 18:34:32 +01:00
Erik Krogh Kristensen
6f4fd3ef72
Merge pull request #11175 from erik-krogh/erb
...
JS: extract .erb files as html
2022-11-15 18:21:48 +01:00
Jeroen Ketema
d79c722d95
Merge pull request #11278 from jketema/dataflow-test-typo
...
C++: Fix typo in dataflow test comment
2022-11-15 17:33:06 +01:00
Jeroen Ketema
98176007d8
C++: Fix type in dataflow test comment
2022-11-15 17:18:08 +01:00
erik-krogh
cec5045b52
Merge branch 'main' into erb
2022-11-15 17:16:05 +01:00
Erik Krogh Kristensen
68e513c6a4
Merge pull request #11246 from erik-krogh/java-redosMod
...
Java: use the shared regex pack
2022-11-15 17:12:52 +01:00
Paolo Tranquilli
56b207e41f
Swift: remove IPA classes from cppgen
2022-11-15 17:07:52 +01:00
Tony Torralba
89a8ccb828
Merge pull request #11273 from atorralba/atorralba/swift/string-utf8-step
...
Swift: Add `AdditionalTaintStep`
2022-11-15 16:46:26 +01:00
Tony Torralba
0570610765
Merge pull request #11138 from atorralba/atorralba/swift/xxe-query-aexml-sinks
...
Swift: Add AEXML sinks to XXE query
2022-11-15 16:42:17 +01:00
Erik Krogh Kristensen
f7b5a4d170
Merge pull request #11203 from erik-krogh/shouldBePath
...
C#: update cs/assembly-path-injection cs/hardcoded-key to path-problems
2022-11-15 16:24:05 +01:00
Tony Torralba
8ca004fde1
Add AdditionalTaintStep
2022-11-15 16:14:22 +01:00
Paolo Tranquilli
635391eae8
Swift: autopep8 integration tests
2022-11-15 15:43:05 +01:00
Paolo Tranquilli
c2171c01e1
Swift: remove double newlines in schema
...
While PEP8 mandates those, they look bad in the schema file.
`autopep8` already ignores those, and they were single newlines at some
point until an overeager IDE has "fixed" them at some point without me
realizing.
Also, the pre-commit configuration was updated to take `schema.py` into
account.
2022-11-15 15:00:30 +01:00
Asger F
dc440aaee6
Merge pull request #11255 from asgerf/js/dynamic-import-type-expr
...
JS: Handle DynamicImport in the context of a type
2022-11-15 13:31:08 +01:00
Stephan Brandauer
4b9b35d1c2
Merge pull request #11267 from github/atm/fix-non-sink-characteristics-hierarchy
...
ATM: remove superfluous class in EndpointCharacteristics hierarchy
2022-11-15 12:59:42 +01:00
erik-krogh
dff7b475fb
make the top-level comment in SuperlinearBackTracking.qll a QLDoc
2022-11-15 11:46:44 +01:00
Nick Rolfe
8d854e0a6b
Merge pull request #11252 from github/nickrolfe/active_support_enumerable
...
Ruby: add flow summary for Enumerable#index_by
2022-11-15 10:40:42 +00:00
Stephan Brandauer
ec3578364e
remove superfluous class in EndpointCharacteristics hierarchy
2022-11-15 10:17:38 +01:00
tiferet
9ecff0723c
Fix non-ascii character in docs
2022-11-14 16:34:24 -08:00
tiferet
6b7612fed7
Fix import errors in DebugResultInclusion.ql
2022-11-14 15:33:46 -08:00
tiferet
b47723d607
Delete ExtractEndpointData.
...
Also remove the associated test files.
2022-11-14 14:57:59 -08:00
tiferet
9d7e7735d5
Extract training data:
...
Implement the new query that selects data for training. For now we include clauses that implement logic that is identical to the old queries.
Include a temporary wrapper query that converts the resulting data into the format expected by the endpoint pipeline.
Move the small pieces of `ExtractEndpointData` that are still needed into `ExtractEndpointDataTraining.qll`.
2022-11-14 14:33:08 -08:00
erik-krogh
b59a9bc95c
use instead of a fixed version number
2022-11-14 21:29:41 +01:00
erik-krogh
a4acea9adf
add change-note
2022-11-14 21:29:41 +01:00
erik-krogh
c029048306
port the Java regex/redos queries to use the shared pack
2022-11-14 21:29:41 +01:00
erik-krogh
d5b066636f
use namespace in PrintAst.qll to avoid conflict with Top
2022-11-14 21:29:41 +01:00
erik-krogh
b737bdbca0
add a Java implementation of RegexTreeViewSig
2022-11-14 21:29:41 +01:00
erik-krogh
20254dfc08
move existing regex-tree into a module
2022-11-14 21:29:41 +01:00
erik-krogh
af1470de07
add codeql/regex as a dependency
2022-11-14 21:29:41 +01:00
Erik Krogh Kristensen
d2857006cf
Merge pull request #11247 from erik-krogh/py-redosMod
...
Python: use the shared regex pack
2022-11-14 21:10:43 +01:00
Tiferet Gazit
855eddab80
Merge pull request #11174 from github/tiferet/non-sink-endpoint-characteristics
...
Non-sink endpoint characteristics
2022-11-14 09:37:25 -08:00
Erik Krogh Kristensen
99636ba344
fix typo
...
Co-authored-by: yoff <lerchedahl@gmail.com >
2022-11-14 17:35:55 +01:00
erik-krogh
324e0e8f90
always sort both by location and by term tostring
2022-11-14 17:33:48 +01:00
Ian Lynagh
7bf55c5846
Merge pull request #11251 from igfoo/igfoo/total
...
Kotlin: Add total number of diagnostics to telemetry
2022-11-14 15:09:57 +00:00
Tony Torralba
5791e8b9a2
Slight renaming
2022-11-14 15:46:44 +01:00
Tony Torralba
07de92cdb6
Move AEXML.qll to avoid nesting
2022-11-14 15:46:44 +01:00
Tony Torralba
f2888dcb1e
Add sinks and tests for the AEXML library.
2022-11-14 15:46:44 +01:00
Tony Torralba
3ef7f3f44d
Merge pull request #11120 from atorralba/atorralba/swift/xxe-query-xmldocument-sinks
...
Swift: Adds XMLDocument sinks to the XXE query
2022-11-14 15:46:02 +01:00
Asger F
2bcf9b86cf
JS: Bump extractor version string
2022-11-14 15:09:50 +01:00
Asger F
5f18484fa9
JS: Change note
2022-11-14 15:09:30 +01:00
Asger F
b028d72d51
JS: Handle DynamicImport in the context of a type
2022-11-14 15:07:59 +01:00
Chris Smowton
61149f297c
Merge pull request #11232 from grddev/patch-1
...
Go: Optimize trap.Writer by buffering gzip writes
2022-11-14 14:01:47 +00:00
Ian Lynagh
fab2d30f38
Kotlin: Make emitDiagnostic private
2022-11-14 13:53:16 +00:00
Ian Lynagh
1e6ef99a50
Merge pull request #11249 from igfoo/igfoo/telem-compilation-info
...
Java/Kotlin: Add compilation info to telemetry
2022-11-14 13:51:35 +00:00
