36538 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
Ian Lynagh	75ca116ef9	Kotlin: QLDoc tweaks from intrigus	2022-05-12 14:12:01 +01:00
Anders Schack-Mulligen	e0c74d4390	Merge pull request #9124 from github/workflow/coverage/update ... Update CSV framework coverage reports	2022-05-12 09:06:07 +02:00
Anders Schack-Mulligen	fad7d9ae72	Merge pull request #9120 from igfoo/igfoo/fixes ... Kotlin: Fix some alerts	2022-05-12 08:29:34 +02:00
Erik Krogh Kristensen	6014614a31	Merge pull request #9103 from erik-krogh/nextParam ... JS: add support for typed NextJS route-handlers	2022-05-12 08:18:26 +02:00
github-actions[bot]	acaf4517c0	Add changed framework coverage reports	2022-05-12 00:17:30 +00:00
Chris Smowton	85dc1090fe	Merge pull request #9116 from smowton/smowton/feature/accept-conditional-cookie-security ... Java: tolerate `cookie.setSecure(request.isSecure())`	2022-05-11 21:29:14 +01:00
Tom Hvitved	46ab25b61e	Merge pull request #9098 from aschackmull/dataflow/perf ... Dataflow: Performance fixes	2022-05-11 20:41:48 +02:00
Ian Lynagh	33e17f1665	Kotlin: Fix some alerts	2022-05-11 17:58:50 +01:00
Ian Lynagh	cfde0a1491	Merge pull request #9109 from igfoo/igfoo/kotlin_merge ... Initial Kotlin support	2022-05-11 16:16:22 +01:00
Tony Torralba	5be30209c1	Merge pull request #9036 from luchua-bc/java/hardcoded-jwt-key ... Java: CWE-321 Query to detect hardcoded JWT secret keys	2022-05-11 16:31:34 +02:00
Henry Mercer	6ecc542ca3	Merge pull request #9117 from github/henrymercer/java/tag-telemetry ... Java: Tag telemetry queries with `telemetry`	2022-05-11 15:13:35 +01:00
Henry Mercer	a626078423	Merge pull request #9118 from github/henrymercer/csharp/tag-telemetry ... C#: Tag telemetry queries with `telemetry`	2022-05-11 15:13:29 +01:00
Anders Schack-Mulligen	4884520ee1	Dataflow: Review fix.	2022-05-11 15:40:49 +02:00
Chris Smowton	f7e1f3e1a5	Remove URL fragment from Google search	2022-05-11 14:38:09 +01:00
Tom Hvitved	333780e635	Merge pull request #8898 from hvitved/dataflow/clear-expect-summary-components ... Data flow: Introduce 'with/without content' summary components	2022-05-11 15:16:42 +02:00
Ian Lynagh	c0a755e061	Merge remote-tracking branch 'upstream/main' into igfoo/kotlin_merge ... Resolving conflicts: java/ql/lib/semmle/code/java/Expr.qll	2022-05-11 14:13:09 +01:00
Rasmus Wriedt Larsen	46f309c373	Merge pull request #6360 from jorgectf/jorgectf/python/insecure-cookie ... Python: Add cookie security-related queries	2022-05-11 14:47:11 +02:00
Henry Mercer	b6f1ddcdab	Java: Tag telemetry queries with telemetry ... This will exclude the results of these queries from the summary tables produced by `codeql database analyze` in a future version of the CodeQL CLI.	2022-05-11 13:29:25 +01:00
Henry Mercer	cdd6e0e104	C#: Tag telemetry queries with telemetry ... This will exclude the results of these queries from the summary tables produced by `codeql database analyze` in a future version of the CodeQL CLI.	2022-05-11 13:27:49 +01:00
Rasmus Wriedt Larsen	cff950f5f7	Python: Fix select of py/insecure-cookie	2022-05-11 14:06:30 +02:00
Anders Schack-Mulligen	9a4d86e9b4	Merge pull request #8571 from Marcono1234/marcono1234/statement-expression ... Java: Add `ValueDiscardingExpr`	2022-05-11 13:37:24 +02:00
Rasmus Wriedt Larsen	fc8633cc01	Python: Fix select for py/cookie-injection	2022-05-11 13:18:14 +02:00
Chris Smowton	0044326884	Add change note	2022-05-11 12:06:27 +01:00
Chris Smowton	c17ef42cc7	Insecure cookie query: accept ServletRequest.isSecure(), and allow more than one possible input to a setSecure(...) call.	2022-05-11 11:59:37 +01:00
luchua-bc	f85c01c975	Correct string source	2022-05-11 10:37:22 +00:00
Chris Smowton	1af0e9b619	Servlets.qll: don't use deprecated library visiblity modifier.	2022-05-11 11:31:14 +01:00
Arthur Baars	a47e429945	Merge pull request #8909 from aibaars/tree-sitter-update ... Tree sitter update	2022-05-11 12:02:14 +02:00
Rasmus Wriedt Larsen	add6579385	Merge pull request #9022 from RasmusWL/ruby-fix ... Ruby: Fix `isLocalSourceNode` implementation	2022-05-11 11:52:44 +02:00
Rasmus Wriedt Larsen	27b99c51e9	Python: Add placeholder precision for py/insecure-cookie	2022-05-11 11:36:06 +02:00
Rasmus Wriedt Larsen	a902d3d8f0	Python: Add security-severity for py/insecure-cookie ... Matching the Java query 7d4767a4f5/java/ql/src/Security/CWE/CWE-614/InsecureCookie.ql (L7)	2022-05-11 11:34:16 +02:00
Rasmus Wriedt Larsen	84ad45c665	Python: Fix Django import	2022-05-11 11:33:35 +02:00
Rasmus Wriedt Larsen	d127d2164a	Merge branch 'main' into jorgectf/python/insecure-cookie	2022-05-11 11:13:47 +02:00
Anders Schack-Mulligen	25336df302	Merge pull request #8873 from atorralba/atorralba/android-startactivity-flowstep ... Java: Add flow step from startActivity to getIntent	2022-05-11 11:08:08 +02:00
Anders Schack-Mulligen	c217a1e502	Update java/ql/lib/semmle/code/java/Expr.qll	2022-05-11 11:03:13 +02:00
Tony Torralba	43b425d0e4	Merge pull request #9002 from atorralba/atorralba/https-urls-improvs ... Java: Add OkHttp and Retrofit models	2022-05-11 10:48:08 +02:00
Arthur Baars	907c3db5ca	Address comments ... Co-authored-by: Nick Rolfe <nickrolfe@github.com>	2022-05-11 09:59:42 +02:00
Erik Krogh Kristensen	5e02a76dfd	add support for typed NextJS route-handlers	2022-05-11 09:45:34 +02:00
Cornelius Riemenschneider	506e09ef32	Merge pull request #9105 from github/criemen/dotnet-lua-tracing-config ... C#: Lua tracing config: Use API function.	2022-05-11 09:28:09 +02:00
Erik Krogh Kristensen	872b275bd4	Merge pull request #9110 from erik-krogh/qlPackAll ... QL: add implicit -all to a query pack to match the CodeQL pack resolution	2022-05-10 23:41:26 +02:00
Erik Krogh Kristensen	a5acaeb59c	QL: add implicit -all to a query pack to match the CodeQL pack resolution	2022-05-10 23:25:32 +02:00
Ian Lynagh	b7a0b56e41	Kotlin: Add a this.	2022-05-10 19:51:31 +01:00
Ian Lynagh	8a89251c4f	Kotlin: Tweak dbscheme	2022-05-10 19:51:31 +01:00
Ian Lynagh	3662611b04	Kotlin: Fix compilation_finished upgrade script	2022-05-10 19:51:31 +01:00
Ian Lynagh	b5572422df	Kotlin: Autoformat	2022-05-10 19:51:31 +01:00
Ian Lynagh	8b809459d9	Kotlin: Remove kotlin branch CI test	2022-05-10 19:51:31 +01:00
Ian Lynagh	ab2946cf10	Kotlin: Add release notes	2022-05-10 19:51:31 +01:00
Ian Lynagh	e1d832c2e9	Upgrades: All old diagnostics are generated by the Java extractor	2022-05-10 19:51:31 +01:00
Tamas Vajk	26dfca8010	Add DB upgrade scripts for diagnostics and compilation_finished	2022-05-10 19:51:31 +01:00
Tony Torralba	a5a31db835	Rename AnyEqualsExpr and AnyNotEqualsExpr	2022-05-10 19:51:31 +01:00
Tony Torralba	0e3db78eba	Make GeneratedFileMarker an instance of JavadocElement	2022-05-10 19:51:31 +01:00