64886 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
Jami Cogswell	b35f318910	Java: update models	2024-03-27 20:39:34 -04:00
Jami Cogswell	e285cf232c	Java: add resource-related methods as path-injection sinks and as summaries	2024-03-13 22:48:57 -04:00
Jeroen Ketema	67b3670d06	Merge pull request #15901 from jketema/destructors11 ... C++: Introduce re-use expressions in the database scheme	2024-03-13 18:27:28 +01:00
Mathias Vorreiter Pedersen	b638d4d0ba	Merge pull request #15900 from MathiasVP/glib-alloc-and-dealloc ... C++: Add models for `GLib` allocation and deallocation	2024-03-13 15:29:46 +00:00
Erik Krogh Kristensen	bd121b98ae	Merge pull request #15893 from erik-krogh/more-filter-taint ... JS: allow more flow through .filter()	2024-03-13 16:19:28 +01:00
Erik Krogh Kristensen	53502a8662	Merge pull request #15510 from yoff/ts-54 ... JS: Add support for TS 5.4	2024-03-13 14:22:24 +01:00
Jeroen Ketema	8d5eab401d	C++: Introduce re-use expressions in the database scheme	2024-03-13 13:28:27 +01:00
Mathias Vorreiter Pedersen	8d504d8b32	Merge pull request #15899 from jketema/destructors10 ... C++: Add IR tests for the destruction of temporaries	2024-03-13 11:56:04 +00:00
Mathias Vorreiter Pedersen	465c3c18e3	C++: Add change note.	2024-03-13 11:49:26 +00:00
Asger F	c5a02dae2b	Merge pull request #15768 from asgerf/js/amd-pseudo-deps ... JS: Do not treat AMD pseudo-dependencies as imports	2024-03-13 12:49:17 +01:00
Mathias Vorreiter Pedersen	3ea39a2553	C++: Add some query tests.	2024-03-13 11:39:34 +00:00
Mathias Vorreiter Pedersen	bcd36b1994	C++: Recognize glib allocations and deallocations.	2024-03-13 11:39:15 +00:00
Ian Lynagh	adefdfd59f	Merge pull request #15889 from igfoo/igfoo/k2exprs ... Kotlin 2: Accept more changes in the exprs test	2024-03-13 11:34:10 +00:00
erik-krogh	129286aa1c	allow more flow through .filter()	2024-03-13 12:03:00 +01:00
Jeroen Ketema	3ef1ab49ea	C++: Add IR tests for the destruction of temporaries	2024-03-13 12:00:02 +01:00
yoff	b5c0fbb827	Merge pull request #15776 from RasmusWL/tt-consistency ... Python: Add type-tracking consistency query	2024-03-13 11:11:07 +01:00
Tom Hvitved	4085c8ec8f	Merge pull request #15866 from hvitved/ruby/orm-tracking-ap-limit ... Ruby: Lower access path limit to 1 for `OrmTracking`	2024-03-13 10:57:09 +01:00
Harry Maclean	dd5eb982ec	Merge pull request #15524 from hmac/hmac-process-spawn ... Ruby: Add some more command injection sinks	2024-03-13 09:53:10 +00:00
Tony Torralba	2fd2b4c874	Merge pull request #15891 from github/workflow/coverage/update ... Update CSV framework coverage reports	2024-03-13 09:51:22 +01:00
github-actions[bot]	cff2cdb9e4	Add changed framework coverage reports	2024-03-13 00:15:53 +00:00
Edward Minnix III	c190dd21db	Merge pull request #15877 from egregius313/egregius313/csharp/mad/sources/windows-registry ... C#: Add source models for values from the Windows registry	2024-03-12 16:41:42 -04:00
Edward Minnix III	d54489931c	Merge pull request #15869 from egregius313/egregius313/java/fix/parcelfiledescriptor-open-sink ... Java: Add path-injection sink for `ParcelFileDescriptor::open`	2024-03-12 16:39:20 -04:00
Erik Krogh Kristensen	863e3f79e5	Merge pull request #15731 from erik-krogh/java-url ... Java: More sanitizers for request-forgery	2024-03-12 19:31:52 +01:00
Ian Lynagh	0e94aa0eb5	Kotlin 2: Accept more changes in the exprs test	2024-03-12 16:42:37 +00:00
Ian Lynagh	8d1ee10981	Merge pull request #15876 from igfoo/igfoo/buildless-java-complete ... Java: Accept test changes	2024-03-12 16:12:58 +00:00
Tamás Vajk	be2ce17376	Merge pull request #15881 from tamasvajk/buildless/fix-fallback ... C#: Deduplicate not yet restored package names	2024-03-12 16:08:16 +01:00
erik-krogh	f613823047	add explicit QLDoc that any method named "contains" is matched	2024-03-12 15:25:27 +01:00
erik-krogh	35aae0a981	move changenote to src/	2024-03-12 15:22:57 +01:00
Erik Krogh Kristensen	b53ae77c56	expand change-note ... Co-authored-by: Tony Torralba <atorralba@users.noreply.github.com>	2024-03-12 15:22:17 +01:00
Tamas Vajk	b07b0762f2	Adjust based on code review feedback	2024-03-12 15:07:58 +01:00
erik-krogh	74876ff49b	add change-note	2024-03-12 15:07:36 +01:00
erik-krogh	52f71e4553	small fixes based on review	2024-03-12 15:07:29 +01:00
Ian Lynagh	c2aa334465	Java: Accept test changes	2024-03-12 14:03:02 +00:00
Tom Hvitved	695e728ed5	Ruby: Lower access path limit to 1 for OrmTracking	2024-03-12 14:58:29 +01:00
Tom Hvitved	dddba3228b	Merge pull request #15867 from hvitved/dataflow/ap-limit ... Data flow: Add `ConfigSig::accessPathLimit`	2024-03-12 14:57:51 +01:00
erik-krogh	6be0ed1dc3	narrow the version specifier used for TypeScript	2024-03-12 13:42:58 +01:00
Tom Hvitved	d7790faece	Address review comments	2024-03-12 13:34:55 +01:00
erik-krogh	95a5ec7f27	add test that the new Object.groupBy method has a type	2024-03-12 13:22:11 +01:00
Michael Nebel	50851210ea	Merge pull request #15794 from michaelnebel/csharp/removecil ... C#: Delete the CIL extractor.	2024-03-12 12:48:41 +01:00
Mathias Vorreiter Pedersen	1a42e55095	Merge pull request #15820 from MathiasVP/add-type-confusion-query ... C++: Add a new query for detecting type confusion vulnerabilities	2024-03-12 10:29:22 +00:00
Tom Hvitved	0e0b73a5e6	Address review comment	2024-03-12 11:22:04 +01:00
Michael Nebel	eb62c033aa	C#: Remove the cil extractor option.	2024-03-12 11:12:56 +01:00
Michael Nebel	f59aaf1d75	C#: Add change note.	2024-03-12 11:12:55 +01:00
Michael Nebel	2e5155d1f8	C#: Remove all CIL related tests.	2024-03-12 11:12:55 +01:00
Michael Nebel	af06202241	C#: Cleanup implementation.	2024-03-12 11:12:55 +01:00
Michael Nebel	bf27f203d5	C#: Remove CIL extractor projects.	2024-03-12 11:12:55 +01:00
Tamas Vajk	1633673cc2	C#: Deduplicate not yet restored package names	2024-03-12 09:22:38 +01:00
Ed Minnix	7745c2c2b7	Change note	2024-03-11 17:00:12 -04:00
Ed Minnix	bc745dfd5e	Windows registry sources	2024-03-11 13:55:34 -04:00
erik-krogh	9f410eb2d6	Merge branch 'main' into ts-54	2024-03-11 18:07:52 +01:00