4978 Commits

Author	SHA1	Message	Date
Anders Schack-Mulligen	25336df302	Merge pull request #8873 from atorralba/atorralba/android-startactivity-flowstep ... Java: Add flow step from startActivity to getIntent	2022-05-11 11:08:08 +02:00
Tony Torralba	43b425d0e4	Merge pull request #9002 from atorralba/atorralba/https-urls-improvs ... Java: Add OkHttp and Retrofit models	2022-05-11 10:48:08 +02:00
Anders Schack-Mulligen	f24364d951	Merge pull request #9045 from hvitved/dataflow/subpaths-perf-take2 ... Data flow: Speedup `subpaths` predicate (take 2)	2022-05-09 15:39:11 +02:00
Michael Nebel	9a45949e8c	Merge pull request #9044 from michaelnebel/csharp/flowsummariestest ... C#: Flow summaries test should print, whether a summary is generated or not.	2022-05-09 10:06:19 +02:00
Michael Nebel	1401e7ddb3	Merge pull request #8855 from michaelnebel/csharp/singlereadstore ... C#: Only allow two read and two store steps in model capturing.	2022-05-09 10:05:53 +02:00
Michael Nebel	83aa65ff53	C#/Java: Remove redudandant QL comment in CaptureModel.	2022-05-09 07:36:41 +02:00
Michael Nebel	76fd424795	C#: Turn isAutogenerated predicate into a predicate without result.	2022-05-09 07:30:06 +02:00
Mathias Vorreiter Pedersen	176e40f139	Merge pull request #9052 from github/post-release-prep/codeql-cli-2.9.1 ... Post-release preparation for codeql-cli-2.9.1	2022-05-06 13:15:17 +01:00
github-actions[bot]	1a25457178	Post-release preparation for codeql-cli-2.9.1	2022-05-05 19:05:50 +00:00
Tony Torralba	ca2959cf37	Merge pull request #8537 from atorralba/atorralba/unsafe_android_access_improvs ... Java: Improvements to UnsafeAndroidAccess	2022-05-05 16:46:54 +02:00
Tom Hvitved	d9d5372f28	Data flow: Sync files	2022-05-05 13:36:26 +02:00
Michael Nebel	2dc35c123a	Java/Ruby: Sync files.	2022-05-05 13:08:55 +02:00
Tom Hvitved	66a9759329	Merge pull request #8870 from hvitved/dataflow/expect-content ... Data flow: Introduce `expectsContent`	2022-05-05 09:01:40 +02:00
Tom Hvitved	8e33653d25	Merge pull request #9017 from hvitved/dataflow/subpaths-perf ... Data flow: Speedup `subpaths` predicate	2022-05-04 16:37:52 +02:00
Tom Hvitved	9cb63c0a5e	Data flow: Sync files	2022-05-04 14:49:26 +02:00
Tony Torralba	2d3b15f936	Add more taint models	2022-05-04 12:32:59 +02:00
Michael Nebel	5f1a176a02	Java: Sync CaptureModels implementation to only allow at most two reads and two stores.	2022-05-04 12:29:57 +02:00
Tony Torralba	8601137602	Fix bad join order by moving WebViewRef::getAnAccess from callsites into predicates	2022-05-04 11:58:47 +02:00
Tony Torralba	3b1210eacb	Update java/ql/lib/semmle/code/java/security/UnsafeAndroidAccess.qll ... Co-authored-by: Chris Smowton <smowton@github.com>	2022-05-04 10:53:31 +02:00
Tony Torralba	192017635a	Update java/ql/src/change-notes/2022-03-24-unsafe-android-access-improvements.md ... Co-authored-by: Chris Smowton <smowton@github.com>	2022-05-04 10:53:31 +02:00
Tony Torralba	49259a6575	Remove everything related to WebView CSV models ... This reverts commit c6c72eb.	2022-05-04 10:53:31 +02:00
Tony Torralba	dce11f3984	Removed unnecessary imports	2022-05-04 10:53:30 +02:00
Tony Torralba	f5e72e6e33	Remove getUnderlyingExpr	2022-05-04 10:53:30 +02:00
Tony Torralba	7ba5a032ce	Add tests and stubs for the new sources and flow steps	2022-05-04 10:53:30 +02:00
Tony Torralba	b678467e9d	Move things around	2022-05-04 10:53:30 +02:00
Tony Torralba	d68311e26d	Consider implicit this accesses in WebViewRef	2022-05-04 10:53:30 +02:00
Tony Torralba	51dfebf4c9	Apply suggestions from code review ... Co-authored-by: Chris Smowton <smowton@github.com>	2022-05-04 10:53:29 +02:00
Tony Torralba	b9859fe165	Add change note	2022-05-04 10:53:29 +02:00
Tony Torralba	91bdb4299f	Improvements to UnsafeAndroidAccess	2022-05-04 10:53:29 +02:00
Tony Torralba	b876431950	Merge pull request #8706 from luchua-bc/java/unsafe-get-resource ... Java: CWE-552 Add sources and sinks to to detect unsafe getResource calls in Java EE applications	2022-05-04 10:12:28 +02:00
Tom Hvitved	74e99302d6	Address review comments	2022-05-04 09:57:59 +02:00
Tom Hvitved	da72ba46d4	Data flow: Add stub expectsContent for all languages	2022-05-04 09:57:59 +02:00
Tom Hvitved	6e2e8440eb	Data flow: Sync files	2022-05-04 09:57:59 +02:00
Joe Farebrother	f65f833b11	Merge pull request #9020 from joefarebrother/predictable-seed ... Java: Add CWE-377 tag to java/predictable-seed	2022-05-03 15:13:58 +01:00
Tony Torralba	02822c6284	Merge pull request #9013 from atorralba/atorralba/private-externalflow-imports ... Java: Make more ExternalFlow imports private	2022-05-03 16:02:09 +02:00
Tony Torralba	cf55f180c4	Add change note	2022-05-03 15:46:17 +02:00
Tony Torralba	7b3a803d19	Add flow step from startActivity to getIntent	2022-05-03 15:46:17 +02:00
Tony Torralba	9c92454fa7	Merge pull request #8872 from atorralba/atorralba/android-widget-flowstep ... Java: Add Editable.toString flow step	2022-05-03 15:27:52 +02:00
Joe Farebrother	61f13817cf	Add change note	2022-05-03 14:27:47 +01:00
Tony Torralba	fbceb8de57	Update java/ql/lib/semmle/code/java/frameworks/OkHttp.qll ... Co-authored-by: Chris Smowton <smowton@github.com>	2022-05-03 14:40:40 +02:00
Joe Farebrother	f7d0884db1	Java: Add cwe-377 tag to predictable-seed	2022-05-03 12:28:14 +01:00
Tom Hvitved	e9c8f979f9	Data flow: Sync files	2022-05-03 11:46:51 +02:00
Anders Schack-Mulligen	249f771fad	Merge pull request #8952 from cklin/fix-ql-comments-syntax ... Fix syntax errors in QL comments	2022-05-03 11:15:56 +02:00
Tony Torralba	c66e583aea	Make more ExternalFlow imports private	2022-05-03 10:31:29 +02:00
github-actions[bot]	433beaf637	Add changed framework coverage reports	2022-05-03 00:15:34 +00:00
Tony Torralba	de8b5f927b	Adjust test expectations	2022-05-02 16:55:11 +02:00
Tony Torralba	29b430e49b	Make commits private	2022-05-02 16:55:01 +02:00
Anders Schack-Mulligen	86516b157b	Merge pull request #8884 from JLLeitschuh/feat/JLL/additional-file-taint-flow ... Java: Add additional `File` taint value flow models	2022-05-02 16:30:45 +02:00
Tony Torralba	9a35aba465	Add change notes	2022-05-02 15:45:44 +02:00
Tony Torralba	1cf4b60769	Simplify non-https-url query	2022-05-02 15:43:07 +02:00