Mathias Vorreiter Pedersen
044d94c580
C++: Add change note
2024-01-29 13:47:17 +00:00
Michael Nebel
cda09478c5
C# Update expected test output and remove false positive.
2024-01-29 14:37:25 +01:00
Michael Nebel
63c06b72b1
C#: Chop dataflow of spread into smaller steps and make sure to only propagate element flow for the spread operator.
2024-01-29 14:34:57 +01:00
Michael Nebel
b6f94ea44a
C#: Add example test of field flow via the spread operator, which leads to a false positive.
2024-01-29 14:30:52 +01:00
Rasmus Wriedt Larsen
5867fb3d29
Python: Add change-note
2024-01-29 14:30:20 +01:00
Rasmus Wriedt Larsen
3f0dc2b022
Python: Model the psycopg package
2024-01-29 14:30:20 +01:00
Michael Nebel
cd5f678e1c
C#: Add IntegerCollection class to the CollectionFlow tests and update line numbers in expected test output.
2024-01-29 14:28:05 +01:00
yoff
391ca5d8a6
Merge pull request #15390 from Marcono1234/marcono1234/python-ascii-regex-flag
2024-01-29 14:27:50 +01:00
Tamás Vajk
39b32a9068
Merge pull request #15454 from tamasvajk/standalone/cshtml-default
...
C#: Change asp.net core view generation to be opt out
2024-01-29 13:22:44 +01:00
Tamas Vajk
4dffb3bfdd
Change integration test to specify .net 6.0 as target framework
2024-01-29 12:40:51 +01:00
Mathias Vorreiter Pedersen
a5794509ec
C++: Accept test changes.
2024-01-29 11:33:14 +00:00
Mathias Vorreiter Pedersen
41f44f598a
C++: Explicitly check that a check for EOF isn't present.
2024-01-29 11:33:14 +00:00
Tamas Vajk
f16aa034a2
Code quality improvement
2024-01-29 12:29:01 +01:00
Ian Lynagh
79d9109850
Merge pull request #15428 from igfoo/igfoo/catch_illegal_arg
...
Kotlin: Catch/ignore a IllegalArgumentException exception
2024-01-29 11:27:38 +00:00
Ian Lynagh
76e417c23e
Merge pull request #14940 from igfoo/igfoo/comments
...
Kotlin 2: Comment improvements
2024-01-29 11:27:19 +00:00
Mathias Vorreiter Pedersen
3a66fd7175
C++: Add FP test.
2024-01-29 10:59:38 +00:00
Tamas Vajk
7a8d83e859
C#: Add integration test with asp.net core view generation on dotnet 6
...
Source generators are needed for asp.net core view generation. Dotnet 6 is the first version where we support view generation. This commit adds an integration test for this.
2024-01-29 11:52:55 +01:00
Tamas Vajk
92fec66370
C#: Add integration test for disabled asp.net core view generation
2024-01-29 11:52:55 +01:00
Tamas Vajk
d7de5fcfcb
C#: Change asp.net core view generation to be opt out
2024-01-29 10:52:26 +01:00
Tony Torralba
49d6d3fa0c
Merge pull request #15449 from github/workflow/coverage/update
...
Update CSV framework coverage reports
2024-01-29 10:27:32 +01:00
github-actions[bot]
6d06c9cb7d
Add changed framework coverage reports
2024-01-29 00:16:27 +00:00
Marcono1234
d8fe0f5bb8
Java: Document which assignment type is covered by which class
2024-01-28 19:03:36 +01:00
Maiky
c2c4d9e4d1
` change to <code>
...
Co-authored-by: intrigus-lgtm <60750685+intrigus-lgtm@users.noreply.github.com >
2024-01-27 14:08:55 +01:00
Mathias Vorreiter Pedersen
a391f7802d
C++: Add a test.
2024-01-27 13:08:52 +00:00
maikypedia
d7314a1689
File format
2024-01-27 14:07:36 +01:00
Marcono1234
1ad08efe08
Python: Support a (ASCII) inline regex flag
2024-01-26 22:18:49 +01:00
Ben Rodes
f79846467e
Update cpp/ql/src/Security/CWE/CWE-704/WcharCharConversion.ql
...
Co-authored-by: Geoffrey White <40627776+geoffw0@users.noreply.github.com >
2024-01-26 15:25:08 -05:00
Benjamin Rodes
b7648bcf27
Adding test cases.
2024-01-26 15:19:07 -05:00
Benjamin Rodes
562221f48e
False positive fix.
2024-01-26 13:27:14 -05:00
Geoffrey White
d19ad49313
Merge pull request #15381 from geoffw0/cppfiles
...
C++: Report any extracted file as successfully extracted
2024-01-26 18:18:27 +00:00
Edward Minnix III
4602f8933d
Merge pull request #15292 from egregius313/egregius313/java/dataflow/common-sanitizers/uuid-and-date
...
Java: Add `java.util.UUID` and `java.util.Date` to the `SimpleTypeSanitizer` class
2024-01-26 13:16:18 -05:00
Geoffrey White
b125d2c9ab
Merge branch 'main' into cppfiles
2024-01-26 16:47:48 +00:00
Joe Farebrother
031bd8bd0c
Merge pull request #15281 from joefarebrother/android-sensitive-ui-notif
...
Java: Add query for exposure of sensitive information to android notifiactions
2024-01-26 16:42:55 +00:00
Max Schaefer
73130ec665
Merge pull request #15436 from github/max-schaefer-patch-1
...
Java: Add models for overloads of DatagramPacket constructor
2024-01-26 16:13:11 +00:00
Henry Mercer
452359f20e
Merge pull request #15446 from github/codeql-cli-2.16.1
...
Merge `codeql-cli-2.16.1` back to `main`
2024-01-26 15:52:56 +00:00
Henry Mercer
720d87391d
Merge pull request #15447 from github/henrymercer/2.16.0-mergeback
...
Merge `codeql-cli-2.16.0` back into `codeql-cli-2.16.1`
2024-01-26 15:42:05 +00:00
Tony Torralba
6e550d28af
Update more test expectations
2024-01-26 15:13:07 +01:00
Henry Mercer
6bef1404fd
Merge remote-tracking branch 'origin/codeql-cli-2.16.1' into henrymercer/2.16.0-mergeback
2024-01-26 13:53:13 +00:00
Florin Coada
b24dad6ac3
Merge pull request #15438 from github/changedocs/2.16.1
...
Generate changelog for 2.16.1
2024-01-26 13:46:14 +00:00
Michael Nebel
da4a9b620a
C#: Add change note.
2024-01-26 14:24:27 +01:00
Michael Nebel
13b8d57bff
C#: Add collection flow test cases for collection expressions.
2024-01-26 14:18:16 +01:00
Michael Nebel
168f5b5554
C#: Add dataflow support for collection expressions.
2024-01-26 14:18:16 +01:00
Michael Nebel
8eb89cf0bb
C#: Add test and expected output.
2024-01-26 14:18:16 +01:00
Tony Torralba
b8cb514dc4
Rename the other change note
2024-01-26 12:46:51 +01:00
Tony Torralba
19a6b7858b
Remove reference to PathCreation
...
ZipSlip no longer needs to make this exclusion, since PathCreation arguments are no longer path-injection sinks
2024-01-26 12:45:00 +01:00
Tony Torralba
2a146405ac
Adjust tests
2024-01-26 12:38:32 +01:00
Tamás Vajk
7a50d7a95f
Merge pull request #15437 from tamasvajk/feature/log-verbosity
...
C#: Introduce log verbosity extractor option
2024-01-26 12:33:06 +01:00
Tony Torralba
1d2a51c522
Rename change note
2024-01-26 12:20:47 +01:00
Tony Torralba
19cb7adb6d
Migrate path injection sinks to MaD
...
Deprecate and stop using PathCreation
Path creation sinks are now summaries
2024-01-26 12:19:54 +01:00
Michael Nebel
74cb1ea584
C#: Add QL library expression support for collection expressions.
2024-01-26 11:50:20 +01:00
