Commit Graph

7856 Commits

Author SHA1 Message Date
Raul Garcia
97bfc5dad7 Update csharp/ql/src/Security Features/CWE-327/InsecureSQLConnectionInitializerGood.cs
Co-authored-by: Mathias Vorreiter Pedersen <mathiasvp@github.com>
2024-10-22 09:20:19 -07:00
Raul Garcia
8b9139f18b Update csharp/ql/src/Security Features/CWE-327/InsecureSQLConnectionInitializerBad.cs
Co-authored-by: Mathias Vorreiter Pedersen <mathiasvp@github.com>
2024-10-22 09:20:12 -07:00
Raul Garcia
0662013ef5 Update csharp/ql/src/Security Features/CWE-327/InsecureSQLConnection.ql
Co-authored-by: Mathias Vorreiter Pedersen <mathiasvp@github.com>
2024-10-22 09:20:01 -07:00
REDMOND\brodes
e0ee60f3dd Updated expected file. 2024-10-10 13:31:53 -04:00
Raul Garcia
c1f7422f0e Fixing test cases 2024-10-09 16:53:33 -07:00
Raul Garcia
a179fa021f Fixing Test cases 2024-10-09 14:44:48 -07:00
REDMOND\brodes
b95b275136 qlref's were incorrect. 2024-10-09 13:55:28 -04:00
Raul Garcia
64aca2632b Fixing a false positive in cs/insecure-sql-connection, and adding a new query to remediate a false negative 2024-10-03 18:37:33 -07:00
Mathias Vorreiter Pedersen
758196ed8d C#: Accept test changes. 2024-10-01 12:40:49 +01:00
Mathias Vorreiter Pedersen
89bdcfb53d C#: Allow 'StartsWith' and 'EndsWith' to be barriers when the path is normalized. 2024-10-01 12:34:40 +01:00
Mathias Vorreiter Pedersen
9457e5305e C#: Add a flow state to represent whether the path is normalized. 2024-10-01 12:33:04 +01:00
Mathias Vorreiter Pedersen
864bde242f C#: Add a FP testcase. 2024-10-01 12:26:58 +01:00
Dilan Bhalla
14ce258807 2.19.0 upgrade 2024-09-18 14:28:42 -07:00
Dilan
f63c2b071d Merge tag 'codeql-cli/latest'
Compatible with the latest released version of the CodeQL CLI
2024-09-12 14:59:27 +00:00
github-actions[bot]
91537cdf9a Release preparation for version 2.18.4 2024-09-09 16:08:48 +00:00
Tamas Vajk
d4947cc1a2 C#: Add change note for build-mode:none GA 2024-09-04 11:13:31 +02:00
Dilan Bhalla
db7c90d3dd 2.18.3 upgrade 2024-09-03 00:02:09 -07:00
Henry Mercer
3d8c402b6f C#: Add spaces around em dash in changelog note 2024-08-27 18:51:40 +01:00
github-actions[bot]
0db6379602 Release preparation for version 2.18.3 2024-08-27 17:50:22 +00:00
Henry Mercer
0f44cd3f62 Revert "Release preparation for version 2.18.3" 2024-08-27 18:19:25 +01:00
Henry Mercer
e0013eec1b Merge pull request #17294 from github/codeql-cli-2.18.3
Merge `codeql-cli-2.18.3` back into `rc/3.15`
2024-08-27 10:46:05 +01:00
Tom Hvitved
ea6092ad3f Revert "C#: Add support for flow through side-effects on static fields"
This reverts commit 1bcac50db1.
2024-08-23 14:10:56 +02:00
github-actions[bot]
0724fd7ce2 Post-release preparation for codeql-cli-2.18.3 2024-08-21 18:25:54 +00:00
Henry Mercer
c4d37ebec7 C#: Add spaces around em dash in changelog note 2024-08-21 18:17:51 +01:00
github-actions[bot]
17cd9624fb Release preparation for version 2.18.3 2024-08-21 17:13:52 +00:00
Tamás Vajk
b91ad04e6a Merge pull request #17257 from tamasvajk/buildless/temp-locations
C#: Change random temp folder names to hash values
2024-08-21 11:39:40 +02:00
Tamás Vajk
b6255571d8 Merge pull request #17253 from tamasvajk/impr/add-retry-logic-to-file-download
C#: Add retry logic to file (nuget.exe, dotnet-install.sh) downloads
2024-08-21 11:39:14 +02:00
Tamas Vajk
73674e72e6 Use cancallation token in download stream copying 2024-08-20 16:51:32 +02:00
Tamas Vajk
658326d7f2 Work around some instability on Windows 2024-08-20 16:42:49 +02:00
Anders Schack-Mulligen
993bfee096 Merge pull request #17259 from aschackmull/dataflow/remove-srcsink-grouping
Dataflow: Remove src/sink grouping feature
2024-08-20 14:42:33 +02:00
Tamas Vajk
07a5c20309 Fix/add doc comments 2024-08-20 14:35:31 +02:00
Tamas Vajk
a0dc20caef Fix hashed value on Windows 2024-08-20 14:33:33 +02:00
Tamas Vajk
0037ad406d C#: Adjust buildless source generator folders 2024-08-20 13:43:10 +02:00
Tamas Vajk
79bd81fa12 C#: Adjust buildless package restore folders and tests 2024-08-20 12:12:23 +02:00
Anders Schack-Mulligen
8470e91c16 Legacy Dataflow: Sync. 2024-08-20 10:07:57 +02:00
Tamas Vajk
9d7314febb C#: Change random temp folder names to hash values 2024-08-19 15:56:56 +02:00
Tamas Vajk
8b6c293b5c C#: Add retry logic to file (nuget.exe, dotnet-install.sh) downloads 2024-08-19 12:19:51 +02:00
github-actions[bot]
9279bebf07 Add changed framework coverage reports 2024-08-19 00:19:04 +00:00
Rasmus Wriedt Larsen
7a446231b6 C#: Accept benign test changes 2024-08-15 16:20:00 +02:00
Rasmus Wriedt Larsen
ebafe65ac2 C#: Fixup test expectations from using stdin 2024-08-15 15:45:20 +02:00
Rasmus Wriedt Larsen
43b61dd2aa C#: Support stdin in LocalFlowSource 2024-08-15 15:45:20 +02:00
Rasmus Wriedt Larsen
7395223410 C#: Model System.Console reads as stdin threat-model 2024-08-15 15:36:28 +02:00
Anders Schack-Mulligen
7d61d9282c Merge pull request #17233 from aschackmull/dataflow/match-summarylabel
Dataflow: Fix missing join on summaryLabel.
2024-08-15 14:55:38 +02:00
Anders Schack-Mulligen
a85f8a2fbd Java/C#: Accept expected changes. 2024-08-15 13:24:31 +02:00
Michael Nebel
4b3cc5bd0e Merge pull request #17219 from michaelnebel/shared/neutralsourcesink
C#/Java: Fix source- and sink callable provenance overlap.
2024-08-15 11:02:18 +02:00
github-actions[bot]
4c0f31d77b Add changed framework coverage reports 2024-08-15 00:18:12 +00:00
Michael Nebel
c8d301ed43 C#: Add change note. 2024-08-14 13:13:29 +02:00
Michael Nebel
d5f8adbfee C#: Update test expected output. 2024-08-14 13:13:27 +02:00
Michael Nebel
4b0427c732 C#: Update .NET 8 runtime models. 2024-08-14 11:24:54 +02:00
Michael Nebel
35ec9db23a C#: Add some manual source neutrals. 2024-08-14 11:24:50 +02:00