Jami Cogswell
da58b2afc8
Shared: move shared file to 'shared' folder and add parameterized module for 'getInvalidModelKind'
2023-06-08 20:05:27 -04:00
Asger F
74a9d9fa37
Revert "Ruby: update tree-sitter-ruby"
2023-06-08 15:29:36 +02:00
Asger F
d6741f655d
Ruby: restrict ORM tracking to calls
2023-06-08 14:01:51 +02:00
Alex Ford
22b9ab43c6
Merge pull request #13259 from alexrford/rb/actiondispatch-refactor
...
Ruby: Refactor and slightly expand `ActionDispatch` modelling
2023-06-08 11:08:36 +01:00
Tom Hvitved
cee70883f0
Merge pull request #12964 from hvitved/ruby/remove-synth-returns
...
Ruby: Remove canonical return nodes
2023-06-08 10:07:48 +02:00
Arthur Baars
dcd254adf8
Merge pull request #13399 from aibaars/update-ruby-grammar
...
Ruby: update tree-sitter-ruby
2023-06-07 19:53:33 +02:00
Arthur Baars
0efa212c40
Ruby: update tree-sitter-ruby
2023-06-07 19:27:46 +02:00
Rasmus Lerchedahl Petersen
6ddf1f7eaf
ruby/python: remove predicates from interface
2023-06-07 14:07:08 +02:00
yoff
7ab3cde3aa
Apply suggestions from code review
...
Co-authored-by: Asger F <asgerf@github.com >
2023-06-07 13:54:31 +02:00
Erik Krogh Kristensen
6ba7f9a238
Merge pull request #13352 from erik-krogh/once-again-deps-not-py-cpp
...
delete old deprecations
2023-06-07 13:00:57 +02:00
Tom Hvitved
88c5700c24
Ruby: Use CallGraphConstruction in call graph construction
2023-06-07 09:02:03 +02:00
Tom Hvitved
4bf124bffe
Ruby/Python: Add CallGraphConstruction module for recursive type-tracking based call graph construction
2023-06-07 09:02:03 +02:00
Arthur Baars
7324d1705e
Merge branch 'main' into amammad-ruby-YAMLunsafeLoad
2023-06-06 12:09:06 +02:00
Jami Cogswell
5a23421d9a
Shared: minor updates to comments
2023-06-05 13:46:56 -04:00
Jami Cogswell
9d5972acc2
Shared: update qldocs
2023-06-05 12:18:34 -04:00
Jami Cogswell
3f1dc8e5c7
Shared: add outdated Swift sink kinds
2023-06-05 12:18:34 -04:00
Jami Cogswell
62ac0dc471
Shared: add outdated sink kind msg to 'getInvalidModelKind' for all languages
2023-06-05 12:18:33 -04:00
Jami Cogswell
76f5dca861
Shared: move 'OutdatedSinkKind' to shared file and add outdated JS and C# sink kinds
2023-06-05 12:18:33 -04:00
Jami Cogswell
7b629f5d63
Shared: include 'qltest%' and 'test-%'
2023-06-05 12:18:33 -04:00
Jami Cogswell
254e447923
JS/Python/Ruby: update getInvalidModelKind
2023-06-05 12:18:33 -04:00
Jami Cogswell
7317c29eea
Shared: update kind information
2023-06-05 12:18:33 -04:00
Jami Cogswell
0ab1848b70
JS/Python/Ruby: use 'SharedModelValidation' file
2023-06-05 12:18:33 -04:00
Jami Cogswell
ddb5d92ef8
Shared: add source, summary, and neutral shared valid kinds
2023-06-05 12:18:33 -04:00
Jami Cogswell
869f820fcf
Shared: add 'SharedModelValidation' file as experiment
2023-06-05 12:18:33 -04:00
Jami Cogswell
e24e3a6115
JS/Python/Ruby: add getInvalidModelKind as experiment
2023-06-05 12:18:33 -04:00
Alex Ford
c95cf5ad6f
Merge pull request #13062 from maikypedia/maikypedia/sqli-sink
...
Ruby: Add MySQL as SQL Injection Sink
2023-06-02 17:06:35 +01:00
Erik Krogh Kristensen
219ec9d05d
Merge pull request #13127 from erik-krogh/polReDoS
...
ReDoS: revert new superlinear algorithm.
2023-06-02 16:10:24 +02:00
Jeroen Ketema
5f64354a70
Merge pull request #13353 from jketema/expecation
...
Fix typo in spelling of expectation
2023-06-02 12:29:49 +02:00
erik-krogh
ac9ede4ec0
add change-notes
2023-06-02 11:58:11 +02:00
erik-krogh
c3e57382f7
Ruby: fix compilation
2023-06-02 11:58:08 +02:00
erik-krogh
44b6366586
delete old deprecations
2023-06-02 11:58:08 +02:00
Jeroen Ketema
7b17b92aca
Fix typo in spelling of expectation
2023-06-02 10:36:11 +02:00
Alex Ford
6fa9e13a2e
Ruby: update TaintStep output
2023-06-01 16:27:20 +01:00
Alex Ford
606d601923
qlformat
2023-06-01 16:26:05 +01:00
Alex Ford
d09f6d318c
Merge branch 'main' into maikypedia/sqli-sink
2023-06-01 15:02:44 +01:00
Alex Ford
40cf09996a
Merge pull request #13066 from maikypedia/maikypedia/sqli-sink-2
...
Ruby: Add Sequel as SQL Injection Sink
2023-06-01 15:01:38 +01:00
Erik Krogh Kristensen
96a720cfa0
Merge pull request #13285 from erik-krogh/redoshelp
...
ReDoS: fix whitespace in the samples in ReDoS.qhelp
2023-06-01 15:53:58 +02:00
Alex Ford
7d943c7621
Ruby: update test output
2023-06-01 13:50:32 +01:00
Alex Ford
4794066d3c
Merge branch 'main' into maikypedia/sqli-sink-2
2023-06-01 13:04:54 +01:00
Maiky
7579f182ad
Add requested changes
2023-06-01 11:00:35 +02:00
Michael Nebel
06b02eb3ce
Sync files.
2023-06-01 09:30:31 +02:00
Maiky
13ce6a6d8e
Update Frameworks.qll
2023-06-01 00:53:01 +02:00
Arthur Baars
c211b704f3
Merge pull request #13272 from github/post-release-prep/codeql-cli-2.13.3
...
Post-release preparation for codeql-cli-2.13.3
2023-05-31 15:33:12 +02:00
Michael Nebel
2266e28583
Merge pull request #13262 from michaelnebel/flowsummary/refactorgetcomponentstack
...
C#: Re-factor getComponent.
2023-05-31 08:22:44 +02:00
Arthur Baars
490d22d123
Merge remote-tracking branch 'upstream/main' into post-release-prep/codeql-cli-2.13.3
2023-05-30 21:31:28 +02:00
Arthur Baars
d91fa2d038
Ruby: add print-cfg query
2023-05-30 17:30:04 +02:00
Rasmus Lerchedahl Petersen
2daa9577bb
ruby/python: implement shared module
...
ruby:
- create new shared file `SummaryTypeTracker.qll`
- move much logic into the module
- instantiate the module
- remove old logic, now provided by module
python:
- clone shared file
- instantiate module
- use (some of the) steps provided by the module
2023-05-30 13:31:24 +02:00
Harry Maclean
e70e3e52dc
Ruby: fix typo in qhelp
2023-05-29 04:05:42 +00:00
Harry Maclean
ca1024e285
Ruby: Reword unsafe deserialization qhelp
2023-05-29 03:46:30 +00:00
Harry Maclean
e515981c81
Ruby: Remove unused examples
2023-05-27 12:01:00 +00:00
