github-actions[bot]
d2130a589b
Release preparation for version 2.23.2
2025-09-29 10:28:45 +00:00
Taus
e592fd60ff
Merge pull request #20495 from github/tausbn/python-fix-unmatchable-dollar-in-lookahead
...
Python: Fix false positive for unmatchable dollar/caret
2025-09-25 15:27:32 +02:00
Joe Farebrother
cb7b1efe81
Update alert message
2025-09-25 09:52:27 +01:00
Joe Farebrother
85f886932d
Update changenote
2025-09-23 15:51:31 +01:00
Joe Farebrother
55fd7c85c6
Update documentation
2025-09-23 15:50:27 +01:00
Joe Farebrother
1208195d8a
Align alert messages across languages.
2025-09-23 15:46:53 +01:00
Joe Farebrother
2cffb21604
Update and fix tests
2025-09-23 15:41:09 +01:00
Joe Farebrother
d28e8004fd
Add sensitive data heuristic
2025-09-23 10:08:08 +01:00
Joe Farebrother
463f79bed2
Merge pull request #20263 from joefarebrother/python-qual-exceptions
...
Python: Modernize the Unreachable Except Block query
2025-09-22 09:42:09 +01:00
Joe Farebrother
6eac6b7258
Rename qhelp file
2025-09-19 17:03:19 +01:00
Taus
95a84ad655
Python: Fix false positive for unmatchable dollar/caret
...
Our previous modelling did not account for the fact that a lookahead can
potentially extend all the way to the end of the input (and similarly,
that a lookbehind can extend all the way to the beginning).
To fix this, I extended `firstPart` and `lastPart` to handle lookbehinds
and lookaheads correctly, and added some test cases (all of which yield
no new results).
Fixes #20429 .
2025-09-19 15:06:46 +00:00
Joe Farebrother
a9a258e743
Add changenote
2025-09-19 15:11:02 +01:00
Joe Farebrother
2e95c2b3c2
Split test cases for insecure cookie queries
2025-09-19 14:41:02 +01:00
Joe Farebrother
04316d306f
Update qhelp
2025-09-19 12:42:30 +01:00
Joe Farebrother
7eabed6594
Split insecure cookies queries into 3 queries
2025-09-18 13:34:10 +01:00
Joe Farebrother
2cd1d2fd2f
Merge pull request #20392 from joefarebrother/python-qual-file-not-closed
...
Python: Improve File Not Closed query to reduce false positives and provide clearer alerts
2025-09-18 09:33:08 +01:00
Joe Farebrother
f3802ec60f
Merge pull request #20217 from joefarebrother/python-qual-signature-mismatch
...
Python: Modernize the Signature Mismatch query
2025-09-17 13:29:33 +01:00
Ian Lynagh
c653d939d9
Merge pull request #20451 from github/post-release-prep/codeql-cli-2.23.1
...
Post-release preparation for codeql-cli-2.23.1
2025-09-17 13:00:14 +01:00
github-actions[bot]
4e8343664f
Post-release preparation for codeql-cli-2.23.1
2025-09-17 10:13:40 +00:00
github-actions[bot]
02a1b1efcb
Release preparation for version 2.23.1
2025-09-16 14:14:42 +00:00
Michael Nebel
a774c65162
Python: Remove py/missing-docstring from code-quality-extended.
2025-09-11 08:41:33 +02:00
Michael Nebel
7c0aa78e39
Python: Add many medium precision queries to the code-quality-extended suite.
2025-09-10 16:06:38 +02:00
Joe Farebrother
f9e094de61
Simplify choosaASignatureMismatchWitness for improved performance
2025-09-09 17:25:48 +01:00
Joe Farebrother
ec40ea800d
Update qldoc
2025-09-09 13:46:52 +01:00
Joe Farebrother
e382f7cd43
Improve check for containment in with statement
2025-09-09 11:26:17 +01:00
Joe Farebrother
eb246f6f71
Performance experiment - add getFunctionFIle for better join order
2025-09-08 09:43:22 +01:00
Joe Farebrother
869b7e09d7
Merge pull request #19932 from joefarebrother/python-qual-init-del-calls
...
Python: Modernize 4 queries for missing/multiple calls to init/del methods
2025-09-08 09:29:38 +01:00
Joe Farebrother
bd3fa7fb21
Switch to dataflow check for guards exceptions
...
This reduces some confusing FPs, though appears to introduce another
2025-09-05 16:03:55 +01:00
Joe Farebrother
71dec0b23e
Fix typos
2025-09-03 11:22:46 +01:00
Joe Farebrother
9fa630faf5
Add comments documenting helper predicates, and add call resolve condition to callMatchesSignature to avoid cartesian product
2025-09-03 11:00:59 +01:00
Joe Farebrother
cd6a151d9b
Add missing predicate + update test output
2025-09-03 09:48:07 +01:00
Joe Farebrother
2dcf3c7c45
Remove erronous private
2025-09-02 22:16:41 +01:00
Arthur Baars
0bb7fdccf6
Merge pull request #20347 from github/post-release-prep/codeql-cli-2.23.0
...
Post-release preparation for codeql-cli-2.23.0
2025-09-02 14:14:03 +02:00
github-actions[bot]
e8a2600a0c
Post-release preparation for codeql-cli-2.23.0
2025-09-02 11:46:23 +00:00
github-actions[bot]
0bfa93828b
Release preparation for version 2.23.0
2025-09-02 11:09:32 +00:00
Michael Nebel
90caded4fe
Apply suggestion from @aschackmull
...
Co-authored-by: Anders Schack-Mulligen <aschackmull@users.noreply.github.com >
2025-09-02 13:08:31 +02:00
Joe Farebrother
318d1cd392
Increase precision in detecting call matches signature
2025-09-02 12:02:08 +01:00
Joe Farebrother
125c6534b7
Use new option name
2025-09-01 23:41:28 +01:00
Joe Farebrother
6587ad435e
Update python/ql/src/Functions/SignatureOverriddenMethod.ql
...
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com >
2025-09-01 16:31:24 +01:00
Joe Farebrother
0a83c11f42
Add changenote.+ fix typo
2025-09-01 16:31:18 +01:00
Joe Farebrother
900a5cd9d7
Update documentation
2025-09-01 16:31:11 +01:00
Joe Farebrother
2bbf24b3ea
Add additional test cases
2025-09-01 16:30:53 +01:00
Joe Farebrother
f429b9038c
Update tests, update alert messages
2025-09-01 16:30:44 +01:00
Joe Farebrother
067c98d3ee
Include conditional alert messages for various cases
2025-09-01 16:30:35 +01:00
Joe Farebrother
4212d1b5b6
Update alert messages and choose one witness
2025-09-01 16:30:26 +01:00
Joe Farebrother
5ba5007076
Modernize signature mismatch
2025-09-01 16:30:17 +01:00
Joe Farebrother
f7097136f1
Rank multiple calls so only the first 2 calls are alerted
2025-09-01 16:23:42 +01:00
Joe Farebrother
8545c7d36f
Fix doc typo
2025-09-01 15:12:52 +01:00
Joe Farebrother
8c9c66c002
Fix typo in example
2025-09-01 15:12:52 +01:00
Joe Farebrother
ba68fe9a0f
Adress review suggestions - cleanups
2025-09-01 15:12:52 +01:00
