Ian Lynagh
a423f5f695
Kotlin: Enable java/misnamed-type query
...
We used to get alerts for the class around a local function, a lambda,
or a function reference, which we give name "". Now those are marked as
compiler-generated, and the query ignores compiler-generated types.
2022-11-25 17:11:40 +00:00
Alexander Eyers-Taylor
3c7f7511be
Merge pull request #11418 from alexet/alexet/mockito-class-rename
...
Java: Add new Mockito runner class location.
2022-11-24 17:49:31 +00:00
alexet
e24e3bf13f
Java: Add new Mockito runner class location.
2022-11-24 16:43:57 +00:00
Erik Krogh Kristensen
03737543d4
Merge pull request #11403 from erik-krogh/additional
...
ReDoS: add missing additional keywords
2022-11-24 15:53:51 +01:00
Tony Torralba
adf905d838
Merge pull request #11368 from ka1n4t/main
...
Java: Add binding between annotation and sink-param in MyBatis SQL Injection query
2022-11-24 14:34:57 +01:00
Ian Lynagh
184c903ec7
Merge pull request #11401 from igfoo/igfoo/unused
...
Kotlin: Remove an unused argument
2022-11-24 12:47:50 +00:00
Ian Lynagh
501ea31c25
Merge pull request #11404 from igfoo/igfoo/build_refactor
...
Kotlin build system: Refactor jar-finder
2022-11-24 12:47:34 +00:00
Anders Schack-Mulligen
f2897f5bfc
Merge pull request #11392 from aschackmull/java/adjust-mad-dispatch-priority
...
Java: Adjust the prioritisation between MaD and source dispatch.
2022-11-24 13:10:48 +01:00
Tony Torralba
4bbc1dc734
Update test expectations
2022-11-24 12:34:48 +01:00
Tony Torralba
17218fa663
Formatting
2022-11-24 11:14:16 +01:00
Tony Torralba
443d0f50c1
Apply suggestions from code review
2022-11-24 11:10:07 +01:00
Ian Lynagh
2d92cee26a
Kotlin build system: Refactor jar-finder
...
We were globbing with a * in the filename, but that is not necessary.
2022-11-23 21:43:32 +00:00
Erik Krogh Kristensen
1eec067474
Merge pull request #11294 from erik-krogh/fileDoc
...
QL: improve the "this block-comment should have been a QLDoc"-query
2022-11-23 22:23:36 +01:00
erik-krogh
95f35196e4
add missing additional keywords
2022-11-23 20:45:51 +01:00
Ian Lynagh
5b8b9044a5
Kotlin: Remove an unused argument
2022-11-23 18:47:53 +00:00
Ian Lynagh
d401be1845
Java: Fix typo: ceritificate
2022-11-23 12:12:32 +00:00
Anders Schack-Mulligen
807f87e01f
Java: Adjust the prioritisation between MaD and source dispatch.
2022-11-23 12:56:32 +01:00
ka1n4t
d113fb23c8
Add test case for PR-11368
2022-11-23 11:05:58 +08:00
Tony Torralba
92ee0aa7ae
Merge pull request #11367 from atorralba/atorralba/java/add-bitwise-implicit-intents
...
Java: Consider taint through bitwise operations on PendingIntent flags
2022-11-22 17:08:52 +01:00
Erik Krogh Kristensen
b2267c0e49
Merge pull request #11343 from erik-krogh/redundantAssignment
...
QL: add redundant-assignment query
2022-11-22 13:03:14 +01:00
Tony Torralba
1667fbad88
Add change note
2022-11-22 11:48:21 +01:00
Tony Torralba
43f4dd8bc4
Consider taint through bitwise operations on PendingIntent flags
2022-11-22 11:39:30 +01:00
ka1n4t
ce2ba21240
Add binding between annotation and sink-param
2022-11-22 18:32:14 +08:00
github-actions[bot]
e70eb3a3ee
Add changed framework coverage reports
2022-11-22 00:19:21 +00:00
Jami
8a73675483
Merge pull request #11070 from jcogs33/java-regex-injection
...
Java: Promote regex injection query from experimental
2022-11-21 15:04:26 -05:00
Jami Cogswell
9e2ec9d12f
apply docs review suggestion
2022-11-21 13:39:46 -05:00
Edoardo Pirovano
6c33ddcd47
Merge pull request #11349 from github/edoardo/2.11.4-mergeback
...
Merge `rc/3.8` into `main`
2022-11-21 18:08:27 +00:00
erik-krogh
64707f4f7b
remove redundant assignments
2022-11-21 17:45:05 +01:00
Tony Torralba
e28f1ffe18
Merge pull request #11346 from atorralba/atorralba/java/fix-path-models
...
Java: Fix a couple of taint models for `java.nio.file.Path(s)`
2022-11-21 16:57:00 +01:00
Tony Torralba
5000a14451
Add change note
2022-11-21 15:22:26 +01:00
Tony Torralba
57656d0a7e
Fix a couple of java.nio.file.Path(s) MaD rows
2022-11-21 15:14:02 +01:00
Tony Torralba
aa2c7426ad
Add change note
2022-11-21 11:42:40 +01:00
Tony Torralba
2809c3a77c
Handle disabled Maven repositories
2022-11-21 10:11:57 +01:00
github-actions[bot]
5b14ebf22a
Post-release preparation for codeql-cli-2.11.4
2022-11-18 11:26:00 +00:00
erik-krogh
a4e5d752e1
Java: delete old deprecations
2022-11-17 22:12:50 +01:00
Chris Smowton
cf34dbd276
Kotlin: format string literals like the Java annotaton extractor
...
Java's regular strings are formatted as they appear in source, but we don't easily have this information available in Kotlin. During annotation extraction however it guesses a source rendering because the source is not necessarily available. By formatting to match the annotation extractor, we prepare to ensure consistency with a Java database
when extracting annotations as seen by Kotlin.
2022-11-17 17:28:17 +00:00
Chris Smowton
d45c35a02e
Copyedit the Java src qlpack 0.4.4 release nnotes
2022-11-17 16:57:08 +00:00
Chris Smowton
47f07d83b8
Copyedit Java src qlpack changelog
2022-11-17 16:56:39 +00:00
Chris Smowton
e13eb79f5b
Java: edit 0.4.4 release notes to match the changelog
2022-11-17 16:55:26 +00:00
Chris Smowton
2bd151ba9c
Copyedit Java changelog
2022-11-17 16:54:33 +00:00
Chris Smowton
7c74350d5e
Copyedit Java changelog
2022-11-17 16:51:21 +00:00
github-actions[bot]
e105c13e77
Release preparation for version 2.11.4
2022-11-17 16:40:45 +00:00
Chris Smowton
254a5b0928
Merge pull request #11293 from smowton/smowton/admin/exclude-kotlin-metadata-annotation
...
Java: Remove no-longer-needed expected diagnostics
2022-11-17 11:50:21 +00:00
Tamás Vajk
d8b5a04f97
Merge pull request #11291 from tamasvajk/kotlin-confusing-overload
...
Kotlin: Add test case for confusing overloading query
2022-11-17 11:11:33 +01:00
Tamás Vajk
c92989ca04
Merge pull request #11289 from tamasvajk/kotlin-empty-block
...
Kotlin: Exclude .kt files from empty block query
2022-11-17 11:11:25 +01:00
Chris Smowton
659f86cecf
Merge pull request #11310 from tamasvajk/kotlin-dead-code
...
Kotlin: Exclude .kt files from dead code queries
2022-11-17 10:10:51 +00:00
Chris Smowton
95fdea8b77
Merge pull request #11308 from tamasvajk/kotlin-non-serializable-field
...
Kotlin: Exclude .kt files from non serializable field query
2022-11-17 10:10:05 +00:00
Chris Smowton
11188304a7
Merge pull request #11306 from tamasvajk/kotlin-equals-missing
...
Kotlin: Exclude .kt files from missing `instanceof` in `equals` query
2022-11-17 10:09:35 +00:00
Tamás Vajk
b70a9d172b
Merge pull request #11304 from tamasvajk/kotlin-mut-dep
...
Kotlin: Exclude .kt files from mutual dependency query
2022-11-16 17:02:46 +01:00
Tamás Vajk
ae38d5d8b7
Merge pull request #11303 from tamasvajk/kotlin-one-stmt-line
...
Kotlin: Exclude .kt files from one stmt in line query
2022-11-16 17:02:35 +01:00
