Anders Schack-Mulligen
64dd8b9488
Merge branch 'main' into java/refactor-dataflow-queries-1
2023-03-10 12:38:06 +01:00
Anders Schack-Mulligen
159d8e978c
Dataflow: one more autoformat post rebase
2023-03-10 10:04:35 +01:00
Anders Schack-Mulligen
730eae9521
Java: Autoformat
2023-03-10 09:39:41 +01:00
Mathias Vorreiter Pedersen
59402eb754
Merge pull request #12462 from MathiasVP/disable-std-order-in-fwd-flow-stage-1
...
DataFlow: Disable standard order in `Stage1::fwdFlow`
2023-03-09 15:30:05 +00:00
Asger F
6e744093e2
Merge pull request #12398 from github/post-release-prep/codeql-cli-2.12.4
...
Post-release preparation for codeql-cli-2.12.4
2023-03-09 15:38:21 +01:00
Mathias Vorreiter Pedersen
1f77f77153
DataFlow: Sync identical files.
2023-03-09 10:41:15 +00:00
Anders Schack-Mulligen
e7f85673e9
Java: Fix tests and make modules private
2023-03-08 13:35:25 +01:00
Anders Schack-Mulligen
2288eab0fd
Java: Refactor BrokenCryptoAlgorithm, MaybeBrokenCryptoAlgorithm
2023-03-07 13:53:36 +01:00
Anders Schack-Mulligen
50935899fa
Java: Refactor XSS.ql
2023-03-07 13:33:00 +01:00
Anders Schack-Mulligen
d839b4038e
Java: Refactor TaintedPath.ql
2023-03-07 11:53:03 +01:00
Anders Schack-Mulligen
cc75a1a97e
Java: Refactor RequestForgery.ql
2023-03-07 11:39:03 +01:00
Anders Schack-Mulligen
35beadc3bb
Java: Refactor SensitiveInfoLog.ql
2023-03-07 11:31:49 +01:00
Anders Schack-Mulligen
4408482699
Java: Refactor NumericCastTainted, NumericCastTaintedLocal
2023-03-07 10:42:00 +01:00
Anders Schack-Mulligen
d4e6e77200
Java: Refactor StackTraceExposure, XSS.qll
2023-03-07 10:38:00 +01:00
Anders Schack-Mulligen
c4cf2febfb
Java: Refactor ResponseSplitting, ResponseSplittingLocal
2023-03-07 10:37:45 +01:00
Mathias Vorreiter Pedersen
92ad099c1b
DataFlow: Remove bindingsets, remove the call column, and swap parameter and argument columns.
2023-03-06 13:47:59 +00:00
Mathias Vorreiter Pedersen
3bf28cc752
DataFlow: Sync identical files.
2023-03-06 13:46:21 +00:00
Mathias Vorreiter Pedersen
4720e2a30a
Java: Add stub.
2023-03-06 13:44:24 +00:00
Anders Schack-Mulligen
5c7f2ac7f7
Merge pull request #12186 from aschackmull/dataflow/refactor-configuration
...
Data flow: Refactor configuration
2023-03-06 13:38:59 +01:00
Anders Schack-Mulligen
557cb17f4d
Dataflow: Minor perf fix for single config wrapper.
2023-03-06 10:24:33 +01:00
Dave Bartolomeo
e169702165
Merge branch 'main' into post-release-prep/codeql-cli-2.12.4
2023-03-04 09:20:44 -05:00
github-actions[bot]
af61b45785
Post-release preparation for codeql-cli-2.12.4
2023-03-04 14:16:55 +00:00
Chris Smowton
b234bbd119
Accept test changes
2023-03-03 14:46:21 +00:00
github-actions[bot]
462da63970
Release preparation for version 2.12.4
2023-03-03 14:11:51 +00:00
Anders Schack-Mulligen
0addcfa7c5
Dataflow: Fix some perf issues.
2023-03-03 11:45:32 +01:00
Anders Schack-Mulligen
b34f99f716
Dataflow: Add change notes.
2023-03-02 16:01:29 +01:00
github-actions[bot]
3b9de22af9
Add changed framework coverage reports
2023-03-02 00:18:47 +00:00
Tony Torralba
59bd1e5ab1
Merge pull request #12228 from github/java/mad-decls-triage-request-2276
...
Java: Update MaD sink decls after triage
2023-03-01 17:08:38 +01:00
Tony Torralba
0439eb640d
Add tests
2023-03-01 09:49:28 +01:00
Tony Torralba
4e7dbbf5f0
Add stubs
2023-03-01 09:48:33 +01:00
Anders Schack-Mulligen
5469a82efb
Go,Java,Python: Fix some tests.
2023-02-28 14:31:00 +01:00
github-actions[bot]
b6f81fc938
Add changed framework coverage reports
2023-02-28 00:17:14 +00:00
Edward Minnix III
7f607fb46b
Merge pull request #12032 from egregius313/egregius313/promote-hardcoded-jwt-credential
...
Java: Promote Hardcoded JWT credential query
2023-02-27 11:33:53 -05:00
Tony Torralba
db6cb1ffe3
Remove dubious model after investigating it
2023-02-27 14:57:56 +01:00
Ed Minnix
ed1aac1aa5
Remove unneeded example file
2023-02-27 12:16:14 +01:00
Ed Minnix
06a1368e7c
Additional test cases
2023-02-27 12:16:14 +01:00
Ed Minnix
4aec708fac
Add change note
2023-02-27 12:16:14 +01:00
Ed Minnix
6de946ef00
Remove experimental files
2023-02-27 12:16:14 +01:00
Ed Minnix
3ff1a97e38
Add byte[] signatures
2023-02-27 12:16:14 +01:00
Ed Minnix
d71386e001
Add example file for documentation
2023-02-27 12:16:14 +01:00
Ed Minnix
fa6ac063d1
Add com.auth0.jwt.algorithm.Algorithm sinks
...
The HMAC* constructors of the com.auth0.jwt.algorithm.Algorithm class
take a secret as a parameter. Therefore, the arguments should be added
to be checked for hardcoded credentials.
2023-02-27 12:16:14 +01:00
Tony Torralba
c027e10ef7
Add java.net tests
2023-02-27 09:33:16 +01:00
Tony Torralba
4a9f63ea1a
Fix toASCIIString casing
2023-02-27 09:32:42 +01:00
Alvaro Muñoz
f393a3c549
Add toExternalForm
2023-02-24 18:50:31 +01:00
Alvaro Muñoz
f1d765aa27
Missing taintstep for java.net.URL.toURI()
2023-02-24 18:45:52 +01:00
Chris Smowton
eb8a0c1129
Add test for a too-new Kotlin version
2023-02-23 14:53:27 +00:00
Chris Smowton
748387a69f
Merge pull request #11943 from smowton/smowton/admin/java-autobuilder-diagnostic-tests
...
Java: Add tests for autobuilder-detected diagnostics
2023-02-23 09:20:03 +00:00
Michael Nebel
cf659f9a5e
Merge pull request #12261 from michaelnebel/csharpjava/refactorissupported
...
C#/Java: Re-factor the `isSupported` predicate.
2023-02-23 10:06:11 +01:00
Chris Smowton
560a341e87
Fix multiple-candidate-builds message
2023-02-22 17:43:08 +00:00
Chris Smowton
c4640a6a9a
Fix diagnostic markdown links
2023-02-22 17:43:08 +00:00
