Napalys Klicius
|
93d9ae73b7
|
Updated change note
|
2025-09-17 10:19:52 +02:00 |
|
Napalys Klicius
|
e5f02852e1
|
Added modeling of rds v2 and v3 for sql injections
|
2025-09-17 10:19:22 +02:00 |
|
Napalys Klicius
|
5b5c17100c
|
Added test cases for client-rds-data for sql injections
|
2025-09-17 10:19:10 +02:00 |
|
Napalys Klicius
|
0e6bac73a7
|
Added modeling of athena v2 and v3 for sql injections
|
2025-09-17 10:18:58 +02:00 |
|
Napalys Klicius
|
af97b0edc2
|
Added test cases for athena v2 and v3 for sql injections
|
2025-09-17 10:16:38 +02:00 |
|
Napalys Klicius
|
ee1af432fe
|
Added modeling of client-s3 v2 and v3
|
2025-09-17 10:16:25 +02:00 |
|
Napalys Klicius
|
5e6118ef3f
|
Added test cases for client-s v2 and v3 sql injection
|
2025-09-17 10:15:43 +02:00 |
|
Napalys Klicius
|
1149617f7b
|
Added change note
|
2025-09-17 10:15:32 +02:00 |
|
Napalys Klicius
|
06ab918985
|
Added modeling for V2 of dynamoDB
|
2025-09-17 10:15:19 +02:00 |
|
Napalys Klicius
|
ae2e8b1292
|
Added modeling of dynamodb v3 for sql injections
|
2025-09-17 10:13:24 +02:00 |
|
Napalys Klicius
|
0a3343a07d
|
Added test cases for v2 and v3 sql injection of dynamodb
|
2025-09-17 10:11:31 +02:00 |
|
Tom Hvitved
|
a7173e0c05
|
Merge pull request #20443 from hvitved/rust/ssa-adjust-write-note
Rust: Adjust SSA write node for (compound) assignments
|
2025-09-17 09:25:50 +02:00 |
|
Asger F
|
7670a2bd77
|
Merge pull request #20375 from asgerf/js/promise-try
JS: Support Promise.try and Array.prototype.with
|
2025-09-16 14:44:07 +02:00 |
|
Jonas Jensen
|
eac8a79d49
|
Merge pull request #20420 from jbj/no-qll-deprecation
Docs: remove 1-year deprecation period for QL libraries
|
2025-09-16 14:18:36 +02:00 |
|
Napalys Klicius
|
97a11de1e3
|
Merge pull request #20435 from Napalys/js/promisification_modeling
JS: Promisification library modeling and enhance flow
|
2025-09-16 14:07:53 +02:00 |
|
Asger F
|
edf79a3730
|
JS: Change note
|
2025-09-16 13:53:31 +02:00 |
|
Michael Nebel
|
6d9e489e7c
|
Merge pull request #20445 from michaelnebel/csharp/fixintegrationtest
C#: Fix failing integration test after new version of `NewtonSoft.JSon` has been released.
|
2025-09-16 13:38:55 +02:00 |
|
Tom Hvitved
|
a2d83274bc
|
Merge pull request #20441 from geoffw0/fixrfquery
Rust: Fix a minor issue with the test for rust/request-forgery
|
2025-09-16 13:22:58 +02:00 |
|
Michael Nebel
|
8fbd720fe5
|
C#: Fix failing integration test after new version of NewtonSoft.JSon has been released.
|
2025-09-16 13:14:23 +02:00 |
|
Napalys Klicius
|
49ccb8ce2b
|
JS: Simplify exist clause to use Promisify::PromisifyAllCall instead of DataFlow::SourceNode
|
2025-09-16 13:13:15 +02:00 |
|
Asger F
|
429c4eac96
|
JS: Add support for Array.prototype.with
Note: This was authored by Copilot
|
2025-09-16 13:06:59 +02:00 |
|
Asger F
|
ee78b7dc96
|
JS: Add support for Promise.try
|
2025-09-16 13:06:57 +02:00 |
|
Tom Hvitved
|
7cac226ad9
|
Rust: Adjust SSA write node for (compound) assignments
|
2025-09-16 13:05:50 +02:00 |
|
Tom Hvitved
|
4e77b1b9b8
|
Rust: Add self-assignment variable test
|
2025-09-16 13:05:48 +02:00 |
|
Asger F
|
45eff3dac8
|
Merge pull request #20399 from asgerf/js/default-interop2
JS: Refactor handling of ambiguous default imports
|
2025-09-16 13:02:22 +02:00 |
|
Asger F
|
78bfdfd931
|
Merge pull request #20390 from asgerf/post-update-consistency
DataFlow: Permit local flow between post-update nodes
|
2025-09-16 13:00:29 +02:00 |
|
Mathias Vorreiter Pedersen
|
fa36d9f84e
|
Merge pull request #20438 from MathiasVP/remove-antijoin-in-shared-guards
Shared: Remove antijoin from `Guards.qll`
|
2025-09-16 10:40:45 +01:00 |
|
Anders Schack-Mulligen
|
0ceb2f3f72
|
Merge pull request #20442 from aschackmull/csharp/default-tostring-enum
C#: Exclude enum types as they don't inherit the default toString.
|
2025-09-16 11:12:21 +02:00 |
|
Anders Schack-Mulligen
|
57e15b9a91
|
Merge pull request #20367 from aschackmull/shared/controlflow
Shared/Java: Introduce a shared control flow reachability library and replace the Java Nullness implementation.
|
2025-09-16 10:44:44 +02:00 |
|
Anders Schack-Mulligen
|
107d142b24
|
C#: Exclude enum types as they don't inherit the default toString.
|
2025-09-16 10:33:25 +02:00 |
|
Jeroen Ketema
|
6264f46970
|
Merge pull request #20440 from MathiasVP/converted-barrier-in-unbounded-write
C++: Fix barrier in `cpp/unbounded-write`
|
2025-09-16 10:19:21 +02:00 |
|
Geoffrey White
|
61faeef1d3
|
Rust: Pretty print models, so that the MaD IDs aren't reported raw / in continual flux.
|
2025-09-16 09:00:40 +01:00 |
|
Geoffrey White
|
5c33af32e3
|
Rust: Update .expected file.
|
2025-09-16 08:55:49 +01:00 |
|
Asger F
|
65102a073a
|
Merge pull request #19770 from trailofbits/VF/async-package-improvements
Improve data flow in the `async` package
|
2025-09-16 08:55:52 +02:00 |
|
Asger F
|
f587273828
|
Merge pull request #19768 from trailofbits/VF/lodash-group-by
Add lodash GroupBy as taint step
|
2025-09-16 08:55:13 +02:00 |
|
Chris Smowton
|
c375f24598
|
Merge pull request #20423 from smowton/smowton/fix/length-comparison-off-by-one-fp
JS: Recognise that a less-than test is as good as a non-equal test for mitigating off-by-one array access
|
2025-09-15 18:24:45 +01:00 |
|
Napalys Klicius
|
278a1efb4b
|
JS: Add change note
|
2025-09-15 18:21:45 +02:00 |
|
Mathias Vorreiter Pedersen
|
18c96fd7d4
|
Shared: Remove antijoin.
|
2025-09-15 17:12:23 +01:00 |
|
Ian Lynagh
|
9231119b07
|
Merge pull request #20437 from github/igfoo/tweak-release-note
C++: Tweak a release note
|
2025-09-15 16:39:51 +01:00 |
|
Mathias Vorreiter Pedersen
|
a4c845c418
|
C++: Fix barrier in 'cpp/unbounded-write'.
|
2025-09-15 16:34:05 +01:00 |
|
Ian Lynagh
|
cc72314219
|
C++: Tweak a release note
|
2025-09-15 16:26:32 +01:00 |
|
Ian Lynagh
|
7860857b55
|
Merge pull request #20434 from github/igfoo/fix-typo
javascript: Fix spelling error in documentation
|
2025-09-15 16:21:57 +01:00 |
|
Ian Lynagh
|
b797df6ad5
|
Merge pull request #20436 from github/igfoo/fix-typo-substract
Csharp: Fix typo in LeapYear qhelp
|
2025-09-15 16:21:26 +01:00 |
|
Napalys Klicius
|
3a75500f54
|
JS: Add modeling for call-me-maybe
|
2025-09-15 17:15:31 +02:00 |
|
Napalys Klicius
|
0d23ab07db
|
JS: Add data flow modeling for promisified user-defined functions
|
2025-09-15 17:13:13 +02:00 |
|
Napalys Klicius
|
2c6db00cbc
|
JS: Add modeling for util promisify*
|
2025-09-15 17:09:28 +02:00 |
|
Napalys Klicius
|
e002f2088f
|
JS: Add modeling for es6-promisify
|
2025-09-15 17:04:34 +02:00 |
|
Napalys Klicius
|
35c75c00ba
|
JS: Add modeling for @gar/promisify
|
2025-09-15 16:58:11 +02:00 |
|
Napalys Klicius
|
312471e9db
|
JS: Add modeling for @google-cloud/promisify
|
2025-09-15 16:55:27 +02:00 |
|
Napalys Klicius
|
d37425ae3e
|
JS: Treat promisify(obj).member as obj.member
|
2025-09-15 16:51:19 +02:00 |
|