Ian Lynagh
|
79d9109850
|
Merge pull request #15428 from igfoo/igfoo/catch_illegal_arg
Kotlin: Catch/ignore a IllegalArgumentException exception
|
2024-01-29 11:27:38 +00:00 |
|
Ian Lynagh
|
76e417c23e
|
Merge pull request #14940 from igfoo/igfoo/comments
Kotlin 2: Comment improvements
|
2024-01-29 11:27:19 +00:00 |
|
github-actions[bot]
|
6d06c9cb7d
|
Add changed framework coverage reports
|
2024-01-29 00:16:27 +00:00 |
|
Edward Minnix III
|
4602f8933d
|
Merge pull request #15292 from egregius313/egregius313/java/dataflow/common-sanitizers/uuid-and-date
Java: Add `java.util.UUID` and `java.util.Date` to the `SimpleTypeSanitizer` class
|
2024-01-26 13:16:18 -05:00 |
|
Joe Farebrother
|
031bd8bd0c
|
Merge pull request #15281 from joefarebrother/android-sensitive-ui-notif
Java: Add query for exposure of sensitive information to android notifiactions
|
2024-01-26 16:42:55 +00:00 |
|
Max Schaefer
|
73130ec665
|
Merge pull request #15436 from github/max-schaefer-patch-1
Java: Add models for overloads of DatagramPacket constructor
|
2024-01-26 16:13:11 +00:00 |
|
Henry Mercer
|
452359f20e
|
Merge pull request #15446 from github/codeql-cli-2.16.1
Merge `codeql-cli-2.16.1` back to `main`
|
2024-01-26 15:52:56 +00:00 |
|
Henry Mercer
|
6bef1404fd
|
Merge remote-tracking branch 'origin/codeql-cli-2.16.1' into henrymercer/2.16.0-mergeback
|
2024-01-26 13:53:13 +00:00 |
|
Tony Torralba
|
52d7bd93a5
|
Merge pull request #15420 from github/java/update-mad-decls-after-triage-2024-01-24T10-05-04
Java: Update MaD Declarations after Triage
|
2024-01-26 08:42:49 +01:00 |
|
Tony Torralba
|
d299971086
|
Fix code review mistake
|
2024-01-25 17:42:11 +01:00 |
|
Tony Torralba
|
661c5cf6aa
|
Merge pull request #15409 from erik-krogh/path-java
Java: Improve the QHelp for `java/path-injection`.
|
2024-01-25 17:14:59 +01:00 |
|
Ian Lynagh
|
c0a9c11101
|
Kotlin: Catch/ignore a IllegalArgumentException exception
This works around
https://youtrack.jetbrains.com/issue/KT-63847/K2-IllegalStateException-IrFieldPublicSymbolImpl-for-java.time-Clock.OffsetClock.offset0-is-already-bound
|
2024-01-25 16:04:08 +00:00 |
|
Max Schaefer
|
13f0df3588
|
Add two more models.
|
2024-01-25 15:00:22 +00:00 |
|
Max Schaefer
|
5235291919
|
Add models for overloads of DatagramPacket constructor
|
2024-01-25 14:49:05 +00:00 |
|
Henry Mercer
|
10343dd822
|
Merge pull request #15416 from github/post-release-prep/codeql-cli-2.16.1
Post-release preparation for codeql-cli-2.16.1
|
2024-01-25 14:15:25 +00:00 |
|
Tony Torralba
|
282632c33b
|
Add new snippets as tests
|
2024-01-25 15:11:11 +01:00 |
|
Stephan Brandauer
|
1f9a968774
|
Java: PR discussion
|
2024-01-25 13:59:47 +01:00 |
|
erik-krogh
|
73e3fada44
|
add missing </p>
|
2024-01-25 12:14:10 +01:00 |
|
erik-krogh
|
05a59d2a94
|
apply suggestions from doc review
|
2024-01-25 11:20:46 +01:00 |
|
Stephan Brandauer
|
5d6ee9c0cb
|
Update java/ql/lib/ext/com.fasterxml.jackson.databind.model.yml
Co-authored-by: Tony Torralba <atorralba@users.noreply.github.com>
|
2024-01-25 10:00:56 +01:00 |
|
Chris Smowton
|
ed9abdd9bd
|
Mock Java 8 toolchain so sibling test works on arm runners
|
2024-01-24 16:51:38 +00:00 |
|
Chris Smowton
|
287fb8003d
|
Make all toolchains available to test
|
2024-01-24 16:51:38 +00:00 |
|
Chris Smowton
|
16d30d7335
|
Remove xml and properties tests
|
2024-01-24 16:51:38 +00:00 |
|
Chris Smowton
|
042a3b64bb
|
Use Java 11 to run old Gradle
|
2024-01-24 16:51:38 +00:00 |
|
Chris Smowton
|
b5429f1a50
|
Add test for buildless with sibling projects
|
2024-01-24 16:51:38 +00:00 |
|
Chris Smowton
|
e3ef8aa6f6
|
Adjust test expectations
|
2024-01-24 16:51:37 +00:00 |
|
Chris Smowton
|
96bf47fbd9
|
Remove accidentally-committed actual files
|
2024-01-24 16:51:37 +00:00 |
|
Stephan Brandauer
|
4e63cbc993
|
Merge branch 'main' into java/update-mad-decls-after-triage-2024-01-24T10-05-04
|
2024-01-24 14:55:20 +01:00 |
|
Ian Lynagh
|
67242278ee
|
Merge pull request #15384 from igfoo/igfoo/kt2
Kotlin: Support Kotlin 2.0.0-Beta3
|
2024-01-24 12:47:35 +00:00 |
|
Stephan Brandauer
|
d5bcbcddab
|
Update MaD Declarations after Triage
|
2024-01-24 11:05:07 +01:00 |
|
Ed Minnix
|
ef884fa721
|
Change note
|
2024-01-23 22:35:05 -05:00 |
|
github-actions[bot]
|
465e8d3530
|
Add changed framework coverage reports
|
2024-01-24 00:17:20 +00:00 |
|
github-actions[bot]
|
d0b74c00fe
|
Post-release preparation for codeql-cli-2.16.1
|
2024-01-23 23:02:29 +00:00 |
|
github-actions[bot]
|
7ef611e6dc
|
Release preparation for version 2.16.1
|
2024-01-23 19:45:16 +00:00 |
|
Ed Minnix
|
dca24ded18
|
Add UUID and Date to the list of types in the SimpleTypeSanitizer class
|
2024-01-23 13:36:03 -05:00 |
|
Edward Minnix III
|
3c8b09307d
|
Merge pull request #15291 from egregius313/egregius313/java/dataflow/default-sanitizers
Java: Introduce a common sanitizer type for types which cannot realistically carry taint.
|
2024-01-23 13:28:03 -05:00 |
|
erik-krogh
|
158ff0da0a
|
add a trailing slash to the folder check in the QHelp for java/path-injection
|
2024-01-23 14:46:02 +01:00 |
|
Erik Krogh Kristensen
|
f1d6f56621
|
Merge pull request #15393 from erik-krogh/deps-jan-2024
All: delete outdated deprecations
|
2024-01-23 13:52:38 +01:00 |
|
erik-krogh
|
00dadeb3bf
|
delete the markdown file again
|
2024-01-23 12:57:15 +01:00 |
|
erik-krogh
|
57e0b3cceb
|
iterate on the java/path-injection qhelp
|
2024-01-23 12:56:43 +01:00 |
|
erik-krogh
|
4958c19c67
|
move the examples for the qhelps into an example/ folder
|
2024-01-23 12:56:23 +01:00 |
|
erik-krogh
|
6b66f5cbc5
|
check in the TaintedPath qhelp as markdown to get pretty diffs
|
2024-01-23 12:56:22 +01:00 |
|
Tony Torralba
|
fcd9a5ed71
|
Update java/ql/lib/change-notes/2023-12-21-new-models.md
|
2024-01-23 11:18:12 +01:00 |
|
Joe Farebrother
|
dedba1fc54
|
Address review comments - add barrierIn and fix a model for a PendingIntent sink
|
2024-01-23 09:51:42 +00:00 |
|
Joe Farebrother
|
0acb647e7d
|
Fix tests and add notification sink kind to model verification
|
2024-01-23 09:51:41 +00:00 |
|
Joe Farebrother
|
b23bbf93d4
|
Reorder sink models
|
2024-01-23 09:51:41 +00:00 |
|
Joe Farebrother
|
69faafa194
|
Add change note
|
2024-01-23 09:51:40 +00:00 |
|
Joe Farebrother
|
1190352b67
|
Add qhelp
|
2024-01-23 09:51:40 +00:00 |
|
Joe Farebrother
|
d806fcae3d
|
Remove sink models involving PendingIntent; as they do not carry sensitive data (including from the original intent they were created with)
|
2024-01-23 09:51:39 +00:00 |
|
Joe Farebrother
|
2ca164ce35
|
Generate androidx stubs and correct some models
|
2024-01-23 09:51:39 +00:00 |
|