Tony Torralba
c0135673fa
Fix JsonArray.addAll model
...
Properly test JsonArray.add(String) and JsonArray.addAll(JsonArray) as well
2023-06-07 16:18:32 +02:00
Tony Torralba
35b4c438ff
Fix Gson's JsonArray.add models
...
When the type of the argument isn't JsonElement, the summary must be taint flow instead of value flow
2023-06-07 14:12:20 +02:00
Erik Krogh Kristensen
6ba7f9a238
Merge pull request #13352 from erik-krogh/once-again-deps-not-py-cpp
...
delete old deprecations
2023-06-07 13:00:57 +02:00
Tony Torralba
46b30453e3
Merge pull request #13386 from github/java/update-mad-decls-after-triage-2023-06-06T14-38-29
...
Java: Update MaD Declarations after Triage
2023-06-07 12:33:26 +02:00
Tony Torralba
416d3d587d
Accept test changes
...
An uncovered test case is now correctly covered
2023-06-07 10:33:17 +02:00
Tony Torralba
60725e9580
Update java/ql/lib/ext/org.springframework.core.io.model.yml
2023-06-07 09:07:22 +02:00
Tony Torralba
2f12ae2e0d
Update java/ql/lib/ext/okhttp3.model.yml
2023-06-07 08:57:12 +02:00
github-actions[bot]
a14e7fa694
Add changed framework coverage reports
2023-06-07 00:16:58 +00:00
Stephan Brandauer
b31131d33a
Merge pull request #13344 from github/java/update-mad-decls-after-triage-2023-06-01T12-58-13
...
Java: Update MaD Declarations after Triage
2023-06-06 17:08:50 +02:00
Stephan Brandauer
75cbcdd72e
Update MaD Declarations after Triage
2023-06-06 16:38:31 +02:00
Tony Torralba
49c6ea27a0
Merge pull request #13379 from atorralba/atorralba/kotlin/use-with-flow
...
Kotlin: Add flow through kotlin.io.use and kotlin.with
2023-06-06 13:44:14 +02:00
Taus
f4fd908f7f
Java: Comment out sinks for which no query exists
2023-06-06 13:01:59 +02:00
Ian Lynagh
f690d150b0
Merge pull request #13373 from igfoo/igfoo/kotlin-loc
...
Java/Kotlin: Split lines of code by language
2023-06-06 11:49:18 +01:00
Tony Torralba
1d8ca88aca
Add change note
2023-06-06 11:25:07 +02:00
Tony Torralba
72af634575
Kotlin: Add flow through use and with
2023-06-06 11:22:16 +02:00
Nick Rolfe
6c5c338e6b
Merge pull request #13348 from github/nickrolfe/java-location-tostring
...
Java: avoid call to `Location.toString()`
2023-06-06 09:55:42 +01:00
Taus
7ad860fc98
Java: Update MaD declarations after triage
...
Co-authored-by: Stephan Brandauer <kaeluka@github.com >
2023-06-05 18:00:40 +02:00
Ian Lynagh
e49b278d61
Java/Kotlin: Add a changenote for the lines-of-code changes.
2023-06-05 16:33:12 +01:00
Ian Lynagh
a4a7ad8f99
Java/Kotlin: Split lines of code by language
...
We were giving the sum of all lines for both languages, but labelling it
as "Total lines of Java code in the database", which was confusing.
Now we give separate sums for Kotlin and Java lines.
2023-06-05 13:57:47 +01:00
Jami
64830809a6
Merge pull request #13228 from jcogs33/jcogs33/deprecated-sink-error-message
...
Java: add error message for outdated sink kinds in `getInvalidModelKind`
2023-06-02 13:44:18 -04:00
Jeroen Ketema
5f64354a70
Merge pull request #13353 from jketema/expecation
...
Fix typo in spelling of expectation
2023-06-02 12:29:49 +02:00
erik-krogh
ac9ede4ec0
add change-notes
2023-06-02 11:58:11 +02:00
erik-krogh
44b6366586
delete old deprecations
2023-06-02 11:58:08 +02:00
Jeroen Ketema
7b17b92aca
Fix typo in spelling of expectation
2023-06-02 10:36:11 +02:00
github-actions[bot]
ef7e9a674c
Add changed framework coverage reports
2023-06-02 00:16:55 +00:00
Jami
1a82e21fdb
Merge pull request #13136 from jcogs33/jcogs33/revamp-java-source-kinds
...
Java: change `android-widget` MaD source kind to `remote`
2023-06-01 14:18:02 -04:00
Jami Cogswell
b8cedfa817
Java: switch 'deprecated' to 'outdated'
2023-06-01 13:30:27 -04:00
Jami Cogswell
d10857fbdb
Java: fix typo blank qldoc
2023-06-01 12:57:06 -04:00
Jami Cogswell
0355b78f13
Java: add deprecation deletion comment
2023-06-01 12:57:06 -04:00
Jami Cogswell
b3d218a503
Java: condense 'replacementKind' code
2023-06-01 12:57:06 -04:00
Jami Cogswell
06c83ee14d
Java: add error message for deprecated sink kinds to 'getInvalidModelKind'
2023-06-01 12:57:05 -04:00
Jami
617107de35
Merge pull request #12916 from jcogs33/jcogs33/revamp-java-sink-kinds
...
Java: revamp MaD sink kinds
2023-06-01 12:48:30 -04:00
Jami Cogswell
de15013715
Java: remove RemoteFlowSources module
2023-06-01 12:25:26 -04:00
Jami Cogswell
5700a6eea4
Java: remove DefaultAndroidWidgetSources class
2023-06-01 12:25:26 -04:00
Jami Cogswell
119b446dbc
Java: add change note
2023-06-01 12:25:26 -04:00
Jami Cogswell
6722892828
Java: switch 'android-widget' source kind to 'remote'
2023-06-01 12:25:25 -04:00
Nick Rolfe
7290e2bfd9
Java: avoid call to Location.toString()
2023-06-01 17:06:34 +01:00
Erik Krogh Kristensen
96a720cfa0
Merge pull request #13285 from erik-krogh/redoshelp
...
ReDoS: fix whitespace in the samples in ReDoS.qhelp
2023-06-01 15:53:58 +02:00
Jami Cogswell
58845eca7c
Java: update recently added 'open-url' sinks to 'request-forgery'
2023-06-01 08:10:44 -04:00
Ian Lynagh
c28af7672d
Merge pull request #13286 from igfoo/igfoo/kotlin-1.9b
...
Kotlin: Support 1.9.0
2023-06-01 13:02:04 +01:00
Jami
10bab71c60
Merge pull request #12249 from jcogs33/jcogs33/add-heuristic-neutral-models
...
Java: add some neutral models discovered with heuristics
2023-06-01 07:51:55 -04:00
Tony Torralba
c1bd04e802
Merge pull request #13332 from atorralba/atorralba/java/gson-serializability
...
Java: Fix GsonDeserializableField
2023-06-01 10:45:32 +02:00
github-actions[bot]
3ef08d5baf
Add changed framework coverage reports
2023-06-01 00:20:17 +00:00
Jami Cogswell
82f208ca7a
Java: add isNeutralSink test case
2023-05-31 17:47:36 -04:00
Jami Cogswell
51f8f98118
Java: update recently added 'sql' sinks
2023-05-31 15:51:07 -04:00
Jami Cogswell
ca8ac0c93f
Java: add comment about request-forgery sinks
2023-05-31 15:51:07 -04:00
Jami Cogswell
9853a66b32
Java: update change note
2023-05-31 15:51:07 -04:00
Jami Cogswell
3e5dc28c0a
Java: update more recently added sinks: path-injection and request-forgery
2023-05-31 15:51:07 -04:00
Jami Cogswell
6bb6802fb8
Java: add change note draft
2023-05-31 15:51:07 -04:00
Jami Cogswell
e28ce959a3
Java: update CaptureSinkModels test case
2023-05-31 15:51:07 -04:00
