9890 Commits

Author	SHA1	Message	Date
aegilops	b6c35dd88c	Added experimental version of Java Command Injection query, to be more sensitive to unusual code constructs	2023-06-16 17:12:53 +01:00
Ian Lynagh	b7e9915151	Merge pull request #13463 from igfoo/igfoo/AccessControlException ... Kotlin: Remove use of AccessControlException	2023-06-15 10:53:28 +01:00
github-actions[bot]	e6160b8e49	Add changed framework coverage reports	2023-06-15 00:18:04 +00:00
Ian Lynagh	0419b6e505	Kotlin: Remove use of AccessControlException ... We were getting warnings about it being deprecated, and it was all dead code anyway.	2023-06-14 17:45:58 +01:00
Tony Torralba	37a62d3021	Merge pull request #13227 from atorralba/atorralba/java/jenkins-generated-models ... Java: Add autogenerated models for frameworks related to Jenkins	2023-06-14 15:59:28 +02:00
Tony Torralba	7c4cdbf0d6	Remove badly generated models	2023-06-14 14:20:16 +02:00
Michael Nebel	afec9b05e9	Merge pull request #13147 from michaelnebel/csharp/entityframeworkrefactor ... C#: Use synthetic global in the EntityFramework code instead of jump steps.	2023-06-14 13:47:56 +02:00
Tony Torralba	182513a981	Merge pull request #13235 from atorralba/atorralba/java/hudson-models ... Java: Add Hudson models	2023-06-14 12:33:18 +02:00
Ian Lynagh	36e8441ed7	Merge pull request #13427 from igfoo/igfoo/references ... Kotlin: Avoid using deprecated APIs	2023-06-14 11:15:35 +01:00
Jean Helie	209f3e26d4	Merge pull request #13239 from github/tausbn/automodel-application-mode ... Java: Add QL support for automodel application mode	2023-06-14 11:42:26 +02:00
Tony Torralba	8bafc22add	Replace open-url sink kinds with request-forgery	2023-06-14 09:59:59 +02:00
Tony Torralba	73d2ab7d66	Add change note	2023-06-14 09:58:30 +02:00
Tony Torralba	686c35e210	Add autogenerated models	2023-06-14 09:58:30 +02:00
Anders Schack-Mulligen	1a4fca334f	Merge pull request #13273 from aschackmull/dataflow/summarynode-refactor ... Dataflow: Refactor FlowSummaryImpl to synthesize nodes independently from DataFlow::Node.	2023-06-14 09:38:36 +02:00
Anders Schack-Mulligen	2d616d494e	C#/Ruby: Add fields as per review comments.	2023-06-13 11:26:30 +02:00
Jeroen Ketema	c3ba206b6a	Merge pull request #13346 from jketema/inline-2 ... Update inline expectation tests to use parameterized module	2023-06-13 10:10:55 +02:00
Anders Schack-Mulligen	eec012d308	Java: Fix test	2023-06-12 13:18:13 +02:00
github-actions[bot]	a628384d83	Add changed framework coverage reports	2023-06-12 00:18:38 +00:00
Ian Lynagh	d3941ae935	Kotlin: Avoid using deprecated APIs	2023-06-09 18:14:09 +01:00
Anders Schack-Mulligen	97b2bdaa9f	Java: Fix types of summary parameter nodes.	2023-06-09 15:39:28 +02:00
Anders Schack-Mulligen	254d60c826	Dataflow: Refactor FlowSummaryImpl to synthesize nodes independently from DataFlow::Node.	2023-06-09 15:27:17 +02:00
Anders Schack-Mulligen	59636c43ca	Dataflow: Rename two private predicates.	2023-06-09 15:27:17 +02:00
Stephan Brandauer	b38bc52019	Java: fix bug in ExcludedFromModeling Characteristic	2023-06-09 14:57:56 +02:00
Anders Schack-Mulligen	1b7bbf6320	Merge pull request #13083 from aschackmull/dataflow/typestrengthen ... Dataflow: Strengthen tracked types.	2023-06-09 13:23:30 +02:00
Jeroen Ketema	49993b023e	Java: Rewrite inline expectation tests to use parameterized module	2023-06-09 10:42:17 +02:00
Tony Torralba	0cef5651e2	Merge pull request #13417 from github/workflow/coverage/update ... Update CSV framework coverage reports	2023-06-09 09:27:03 +02:00
Anders Schack-Mulligen	44b09507ab	Merge pull request #13408 from aschackmull/java/loginjection-perf ... Java: Add more negation context to reduce string ops and improve perf.	2023-06-09 08:44:27 +02:00
Anders Schack-Mulligen	68f1e40370	Java/C#: Add change notes.	2023-06-09 08:37:36 +02:00
Anders Schack-Mulligen	85d6b44d92	Java: Fix test output.	2023-06-09 08:37:36 +02:00
Anders Schack-Mulligen	d230509905	Dataflow: Address review comments.	2023-06-09 08:37:36 +02:00
Anders Schack-Mulligen	95afd551ff	Java: Fix qltest	2023-06-09 08:37:36 +02:00
Anders Schack-Mulligen	4399138c82	Dataflow: Fix QL4QL alert.	2023-06-09 08:37:36 +02:00
Anders Schack-Mulligen	8a584b78ac	Dataflow: Enable type strengthening in partial flow.	2023-06-09 08:37:36 +02:00
Anders Schack-Mulligen	441ccef6c4	Dataflow: Bugfix, use arg type rather than strengthened param type.	2023-06-09 08:37:36 +02:00
Anders Schack-Mulligen	a0a9d30286	Java: Fix qltests.	2023-06-09 08:37:35 +02:00
Anders Schack-Mulligen	4633abe19e	Java: Autoformat	2023-06-09 08:37:35 +02:00
Anders Schack-Mulligen	ad461a87b4	Dataflow: Strengthen tracked types.	2023-06-09 08:37:35 +02:00
Anders Schack-Mulligen	1d87f0793b	Dataflow: Minor refactor.	2023-06-09 08:37:35 +02:00
github-actions[bot]	81b08b4399	Add changed framework coverage reports	2023-06-09 00:18:12 +00:00
Tony Torralba	abb775c616	Merge pull request #13409 from atorralba/atorralba/java/fix-gson-models ... Java: Fix more problems in the Gson models	2023-06-08 17:36:40 +02:00
Tony Torralba	4608481d7b	Java: Fix more problems in the Gson models ... Found during type strengthening work by @aschackmull	2023-06-08 14:53:09 +02:00
Anders Schack-Mulligen	5a2ac1b5ca	Java: Add more negation context to reduce string ops and improve perf.	2023-06-08 14:04:57 +02:00
Anders Schack-Mulligen	dabb4dd643	Java: Improve join-order for FunctionalInterface.	2023-06-08 13:02:54 +02:00
Anders Schack-Mulligen	cc45db7c76	Merge pull request #13394 from atorralba/atorralba/java/fix-gson-jsonarray-models ... Java: Fix Gson's JsonArray.add models	2023-06-08 11:05:40 +02:00
github-actions[bot]	cbbd885e22	Add changed framework coverage reports	2023-06-08 00:17:14 +00:00
Ian Lynagh	1b83aeb25d	Merge pull request #13393 from igfoo/igfoo/remove_explorer ... Kotlin: Remove kotlin-explorer	2023-06-07 16:32:00 +01:00
Ian Lynagh	c4e829f1d4	Merge pull request #13385 from igfoo/igfoo/kotlin_version_relax ... Kotlin: Relax version requirements	2023-06-07 16:31:49 +01:00
Tony Torralba	c0135673fa	Fix JsonArray.addAll model ... Properly test JsonArray.add(String) and JsonArray.addAll(JsonArray) as well	2023-06-07 16:18:32 +02:00
Stephan Brandauer	2921df41da	Java: fix import	2023-06-07 15:22:59 +02:00
Stephan Brandauer	ec3a7e39ad	Java: qldoc style	2023-06-07 14:57:38 +02:00