Asger F
a2dd47aeb2
JS: Update test output
...
These files conflicted and have been regenerated.
2024-08-22 14:27:15 +02:00
Asger F
423fd04545
JS: Update new xsjs-specific code to respect TEarlyStageNode
2024-08-22 13:22:35 +02:00
Asger F
c54f5858b1
Merge branch 'main' into js/shared-dataflow-merge-main
2024-08-22 13:22:05 +02:00
Asger F
a1688f6a1a
Merge pull request #17240 from knewbury01/knewbury01/fix-helmetrequiredsetting-model
...
Update JS helmet model structure
2024-08-22 11:59:28 +02:00
Michael Nebel
bd69b96752
Merge pull request #17273 from michaelnebel/csharp/sqlinject
...
C#: ASP.NET Controller is allowed to be abstract.
2024-08-22 11:18:48 +02:00
Asger F
43f54db4db
Merge pull request #17274 from asgerf/java/implicit-pending-intents-implicit-read
...
Java: Reveal false negative in test
2024-08-22 11:00:07 +02:00
Tom Hvitved
d41d7c8246
Merge pull request #17207 from hvitved/csharp/content-set
...
C#: Implement `ContentSet`
2024-08-22 10:55:11 +02:00
Tom Hvitved
a213982b48
Merge pull request #17222 from hvitved/ruby/hash-splat-param-arg-matching
...
Ruby: Rework (hash) splat argument/parameter matching
2024-08-22 10:54:52 +02:00
Asger F
09aca6b47e
Merge pull request #17212 from mbaluda/main
...
Add support for importing NPM modules in XSJS sources
2024-08-22 10:54:33 +02:00
Anders Schack-Mulligen
d97a301fef
Merge pull request #17105 from aschackmull/dataflow/stage6
...
Dataflow: Refactor stage 6 to use shared stage code.
2024-08-22 09:46:49 +02:00
Tom Hvitved
e94fabcc19
Address review comment
2024-08-22 08:27:15 +02:00
Tom Hvitved
cb1b1da422
Ruby: Add another array flow test
2024-08-21 19:06:53 +02:00
Tom Hvitved
b0003c0453
Ruby: Remove two redundant checks
2024-08-21 19:06:29 +02:00
Edward Minnix III
2f3ebfb81f
Merge pull request #17205 from egregius313/egregius313/go/dataflow/models/environment
...
Go: Add models for environment variables
2024-08-21 12:27:33 -04:00
Ed Minnix
c2fa721966
Fix stub
2024-08-21 09:56:42 -04:00
Ed Minnix
6fdff977e5
Fix test cases
2024-08-21 09:47:46 -04:00
Edward Minnix III
2aa3e1f7a2
Alphabetize models
...
Co-authored-by: Owen Mansel-Chan <62447351+owen-mc@users.noreply.github.com >
2024-08-21 09:44:20 -04:00
Edward Minnix III
210ea5be79
Add model from older versions of caarlos0/env
...
Co-authored-by: Owen Mansel-Chan <62447351+owen-mc@users.noreply.github.com >
2024-08-21 09:43:58 -04:00
Edward Minnix III
7ae52425ce
Update package list in change note
2024-08-21 09:43:24 -04:00
Edward Minnix III
318a376a78
Remove ProcAttr models
...
Co-authored-by: Owen Mansel-Chan <62447351+owen-mc@users.noreply.github.com >
2024-08-21 09:43:04 -04:00
Chris Smowton
15989ce213
Merge pull request #14089 from am0o0/amammad-java-JWT
...
Java: JWT decoding without verification
2024-08-21 14:14:08 +01:00
Michael Nebel
7049499e95
C#: Add change-note.
2024-08-21 14:38:55 +02:00
Asger F
3aa32e4aff
Java: use MISSING inline annotation
2024-08-21 13:40:40 +02:00
Asger F
f7ea8a1563
Java: trivial result set re-order
2024-08-21 13:37:38 +02:00
Asger F
5751fc2d3a
Java: Reveal false negative in test
...
One of the sinks was flagged for the wrong reason in the test case.
The flow into the 'startActivities' sink isn't working properly, but this was not revealed by the test since an alternate, spurious path exists. The spurious path goes through the implicit read at the prior sink and takes a use-use step to the 'startActivities' sink. Swapping the order of the two sinks reveals the false negative.
2024-08-21 13:36:47 +02:00
Michael Nebel
45d4d5138a
C#: Update expected test output.
2024-08-21 13:14:12 +02:00
Michael Nebel
79718f1cd6
C#: Remove requirement that a controller is not allowed to be abstract.
2024-08-21 13:00:15 +02:00
Michael Nebel
75772c5832
C#: Add abstract controller remote flow source example.
2024-08-21 13:00:10 +02:00
Michael Nebel
5d14307ea2
C#: Add a SQL injection test case for ASP.NET.
2024-08-21 12:14:30 +02:00
Owen Mansel-Chan
a1a6fe45f1
Merge pull request #17245 from owen-mc/go/update-frameworks
...
Go: Update frameworks.csv
2024-08-21 10:52:21 +01:00
Tamás Vajk
b91ad04e6a
Merge pull request #17257 from tamasvajk/buildless/temp-locations
...
C#: Change random temp folder names to hash values
2024-08-21 11:39:40 +02:00
Tamás Vajk
b6255571d8
Merge pull request #17253 from tamasvajk/impr/add-retry-logic-to-file-download
...
C#: Add retry logic to file (nuget.exe, dotnet-install.sh) downloads
2024-08-21 11:39:14 +02:00
Anders Schack-Mulligen
525b6f30e3
C++/C#/Java: Accept test changes.
2024-08-21 10:51:28 +02:00
Anders Schack-Mulligen
5fbdd83a23
Dataflow: Rename StagePathNode to PathNode.
2024-08-21 10:51:28 +02:00
Anders Schack-Mulligen
273c0bd121
Dataflow: Delete dead code.
2024-08-21 10:51:28 +02:00
Anders Schack-Mulligen
1787bcb05a
Dataflow: Replace PathNode with Stage implementation.
2024-08-21 10:51:24 +02:00
Anders Schack-Mulligen
74739bedfc
Dataflow: Add Stage 6 instantiation.
2024-08-21 10:44:46 +02:00
Anders Schack-Mulligen
831a66d812
Dataflow: Add getANonHiddenSuccessor to StagePathNodeImpl.
2024-08-21 10:44:45 +02:00
Anders Schack-Mulligen
e594e7283d
Dataflow: Check stateful in/out-barriers in each stage.
2024-08-21 10:44:45 +02:00
Anders Schack-Mulligen
c2b25c7f2b
Dataflow: Check clearsContent on store targets in StagePathGraph.
2024-08-21 10:44:44 +02:00
Anders Schack-Mulligen
b8d0b691da
Dataflow: Introduce sink projection and add successor as member predicate.
2024-08-21 10:44:44 +02:00
Anders Schack-Mulligen
bc1dd45d4f
Dataflow: Make private
2024-08-21 10:44:43 +02:00
Anders Schack-Mulligen
9429e5ccba
Dataflow: Update StagePathNode.toString.
2024-08-21 10:44:43 +02:00
Anders Schack-Mulligen
81a815c343
Dataflow: Add StagePathNode.getState.
2024-08-21 10:44:43 +02:00
Anders Schack-Mulligen
bdcc5e7b67
Dataflow: Refactor getLocation
2024-08-21 10:44:42 +02:00
Anders Schack-Mulligen
bc0ae4cd1e
Dataflow: Replace StagePathNode.getNode with getNodeEx.
2024-08-21 10:44:42 +02:00
Anders Schack-Mulligen
9bd3f3dee0
Dataflow: Rename StagePathNode to StagePathNodeImpl.
2024-08-21 10:44:41 +02:00
Simon Friis Vindum
68dfca49f5
Merge pull request #17269 from paldepind/fix-error-in-test
...
C++: Fix tests and add an actual true negative
2024-08-21 10:21:56 +02:00
Simon Friis Vindum
e4ce003e87
C++: Fix tests and add an actual true negative
2024-08-21 09:44:45 +02:00
Ed Minnix
0eddaa0664
syscall environment variables
2024-08-21 00:36:48 -04:00
