Asger F
b29ee2acde
JS: Remove references to localFieldStep
...
These are tracked in https://github.com/github/codeql-javascript-team/issues/456
2025-01-09 09:39:27 +01:00
Asger F
7766f97232
JS: Remove obsolete TODO
2025-01-09 09:39:26 +01:00
Asger F
8ac08db5c2
JS: Remove TODOs about WithArrayElement not being a taint step
...
This isn't going to become a taint step, the workaround is the permanent solution
2025-01-09 09:39:23 +01:00
Asger F
3cc1525985
JS: Remove obsolete TODOs
2025-01-09 09:19:30 +01:00
Asger F
1997e0a7b6
Merge pull request #18427 from asgerf/jss/change-note
...
JS: Add migration guide and change note
2025-01-09 09:13:16 +01:00
Asger F
10d5d09ad1
JS: Polish taint-tracking section in response to review comment
2025-01-08 14:45:31 +01:00
Asger F
ecccc7ce8c
Update docs/codeql/codeql-language-guides/migrating-javascript-dataflow-queries.rst
...
Co-authored-by: Erik Krogh Kristensen <erik-krogh@github.com >
2025-01-08 12:26:42 +01:00
Asger F
26d85d5ece
Apply suggestions from code review
...
Co-authored-by: Erik Krogh Kristensen <erik-krogh@github.com >
2025-01-08 12:26:18 +01:00
Asger F
b6b93dcead
Merge pull request #18392 from asgerf/jss/deprecate-modules
...
JS: Deprecate some .qll files
2025-01-08 11:10:28 +01:00
Asger F
062391334e
JS: Remove notes about changing API in the future
2025-01-08 09:15:13 +01:00
Asger F
df9b95575e
JS: Add deprecation qldoc to Configuration classes
2025-01-08 09:15:12 +01:00
Asger F
e7d267e5d2
JS: Add migration guide and change note
2025-01-08 09:12:38 +01:00
Asger F
36f0d2f63e
JS: Move VarAccessBarrier outside the deprecated Configuration.qll file
2025-01-08 08:56:53 +01:00
Asger F
c47419e66d
JS: Remove an obsolete TODO comment (this has been fixed)
2025-01-08 08:54:41 +01:00
Asger F
abea019751
Merge pull request #18412 from asgerf/jss/perf-fixes
...
JS: Fix a few perf issues
2025-01-07 11:20:57 +01:00
Asger F
f17cc5af15
JS: Move all hidden node definitions into DataFlowPrivate
2025-01-07 10:44:09 +01:00
Asger F
47cc3c09f5
JS: Deprecate an import
2025-01-07 10:43:40 +01:00
Asger F
0cdda87161
JS: Restrict AP length in prototype-polluting function
2025-01-06 14:33:41 +01:00
Asger F
7ccb476b1b
JS: Restrict AP length in ExceptionXss
2025-01-06 14:28:58 +01:00
Asger F
23d7420cec
JS: Hide default exceptional return node
2025-01-06 14:27:20 +01:00
Asger F
e2af19b946
JS: Restrict "get" step to Map objects
2025-01-06 13:17:32 +01:00
Asger F
4c9f406e34
JS: Exclude some sinks in UnvalidatedDynamicMethodCall
2025-01-06 10:32:11 +01:00
Asger F
25f5ecba25
JS: Deprecate the Configuration.qll file
2025-01-03 11:41:41 +01:00
Asger F
0339bd0f3e
JS: Deprecate forward/backward exploration modules
2025-01-03 11:41:39 +01:00
Asger F
7e4fbe2f14
Merge pull request #18326 from asgerf/js/shared-dataflow-bump
...
JS: Merge 'main' into shared dataflow branch
2025-01-03 11:24:37 +01:00
Asger F
942ba189f7
JS: Minor test output change in nodes/edges
...
I suspect this is due to some fixes in the DeduplicatePathGraph module
2024-12-19 15:25:49 +01:00
Asger F
f8dc7eb25b
JS: Update output from tests that changed on main
2024-12-19 15:25:47 +01:00
Asger F
4a6030c592
JS: Update expected with some absent result sets
2024-12-19 15:25:46 +01:00
Asger F
cd6ebb103e
JS: Make test not assume implicit through for maps
2024-12-19 15:25:45 +01:00
Asger F
dc2f39c399
JS: Add model of Map#groupBy
2024-12-19 15:25:43 +01:00
Asger F
de5e6ddeed
JS: Update with changes in TaintTracking test
2024-12-19 15:25:42 +01:00
Asger F
c204527c08
JS: Update Array test output (new tests added on main)
2024-12-19 15:25:41 +01:00
Asger F
33e8bd5032
JS: Update testUtilities import
2024-12-19 15:25:39 +01:00
Asger F
3acd4814de
Merge branch 'main' into js/shared-dataflow-merge-main
2024-12-19 10:14:38 +01:00
Paolo Tranquilli
b392391138
Merge pull request #18319 from github/redsun82/rust-fetch-ungram
...
Rust: fetch ungram and rust-analyzer code instead of checking it in
2024-12-19 08:16:09 +01:00
Paolo Tranquilli
c4a7abda0a
Bazel: resync 3rd party dependencies and skip buildifier on them
2024-12-18 17:33:39 +01:00
Paolo Tranquilli
d6b8d42936
Bazel: fix 3rdparty update script
2024-12-18 17:20:05 +01:00
Paolo Tranquilli
290a1043b1
Rust: fetch ungram and rust-analyzer code instead of checking it in
...
* The ungram file is now taken from the rust-analyzer dependencies
pulled in by bazel
* the grammar parsing code is not published, so it must be taken
directly from rust-analyzer code. That part should be less prone to be
updated than the ungram file, so it does not necessarily need to be
in sync with the rust-analyzer version is used elsewhere.
* both need some patches. The former is patched during build, the latter
during loading in `MODULE.bazel`.
2024-12-18 16:37:24 +01:00
Arthur Baars
023f48ff1c
Merge pull request #18295 from github/aibaars/update-rust-ungram
...
Rust: update rust-analyzer
2024-12-18 16:01:50 +01:00
Simon Friis Vindum
508c7e6e85
Merge pull request #18314 from paldepind/rust-tuple-ref-patterns
...
Rust: Add read steps for tuple and reference patterns
2024-12-18 14:13:08 +01:00
Asger F
be939dca29
Merge pull request #14350 from asgerf/shared/deduplicate-path-graph
...
Shared: Add DataFlow::DeduplicatePathGraph
2024-12-18 14:04:29 +01:00
Tom Hvitved
00688ebd79
Merge pull request #18312 from hvitved/rust/operator-overloading-test
...
Rust: Add data flow tests for operator overloading
2024-12-18 13:58:39 +01:00
Simon Friis Vindum
09fd27af80
Rust: Add read steps for tuple and reference patterns
2024-12-18 13:22:05 +01:00
Mathias Vorreiter Pedersen
927d359cfa
Merge pull request #18310 from MathiasVP/fix-recursion-through-forex-in-sign-analysis
...
C++: Fix `forex` recursion in sign analysis
2024-12-18 12:19:33 +00:00
Simon Friis Vindum
b5b8af3aa2
Rust: Add data flow tests for borrows
2024-12-18 13:00:38 +01:00
Arthur Baars
a6ec51a951
Rust: update expected output
2024-12-18 13:00:14 +01:00
Arthur Baars
71959f5faa
Rust: address clippy warnings
2024-12-18 13:00:13 +01:00
Tom Hvitved
3a63dbcd5d
Apply suggestions from code review
...
Co-authored-by: Simon Friis Vindum <paldepind@github.com >
2024-12-18 12:46:11 +01:00
Mathias Vorreiter Pedersen
4ffe70dd3b
C++: Respond to review comments.
2024-12-18 11:26:41 +00:00
Simon Friis Vindum
87b9e6001d
Merge pull request #18291 from paldepind/rust-data-flow-models
...
Rust: Data flow improvements to unlock flow in sqlx test
2024-12-18 11:53:26 +01:00
