Joe Farebrother
cf8db4e425
Update instances of experimental concept to the main one, and anotate missing experimental test results.
2024-04-24 14:05:39 +01:00
Joe Farebrother
daa31b5bb7
Add documentation
2024-04-24 14:05:38 +01:00
Joe Farebrother
8636a50190
Fix qldoc + remove deprecation from experimental concepts (as they are still used in another experimental query)
2024-04-24 14:05:38 +01:00
Joe Farebrother
fa28d94363
Added a sanitizer for replacing newlines.
2024-04-24 14:05:38 +01:00
Joe Farebrother
dbbc944f32
Correct spelling
2024-04-24 14:05:38 +01:00
Joe Farebrother
a88ad62c00
Implemented sinks for bulk header updates, and added corresponding tests.
2024-04-24 14:05:38 +01:00
Joe Farebrother
3e9341ff8a
Model class instantiation for werkzueg headers
2024-04-24 14:05:37 +01:00
Joe Farebrother
b9984beb16
Add test cases
2024-04-24 14:05:37 +01:00
Joe Farebrother
68d90918cf
Add to header write concept a specification of whether the name or value arg allows newlines.
...
Ported sink defenitions from Flask and Werzeug from experimental to main.
Removed experimental sink definitions for Django, as neither name nor value are vulnerable.
2024-04-24 14:05:37 +01:00
Joe Farebrother
25ffcb2fde
Split into customizations file
2024-04-24 14:05:37 +01:00
Joe Farebrother
6021d9238c
Move headers injection query and concept from experimental to main
2024-04-24 14:05:37 +01:00
Tamás Vajk
3b44b131b9
Merge pull request #16311 from tamasvajk/fix/resx
...
C#: Do not download `Microsoft.CodeAnalysis.ResxSourceGenerator` when…
2024-04-24 13:49:55 +02:00
Tamás Vajk
84ea3a9a2c
Merge pull request #16310 from tamasvajk/buildless/nuget_versions
...
C#: Add integration test with multiple versions of the same nuget pac…
2024-04-24 13:33:27 +02:00
Owen Mansel-Chan
f828f8ea65
Merge pull request #16250 from owen-mc/go/rename-untrusted-flow-source
...
Go: Rename `UntrustedFlowSource` to `RemoteFlowSource` to match other language libraries
2024-04-24 11:37:00 +01:00
Tamas Vajk
88e67715a1
C#: Do not download Microsoft.CodeAnalysis.ResxSourceGenerator when there are no resx files to process
2024-04-24 11:53:29 +02:00
Tamas Vajk
53eb753346
C#: Add integration test with multiple versions of the same nuget package
2024-04-24 11:50:43 +02:00
Mathias Vorreiter Pedersen
037114b336
Merge pull request #16309 from geoffw0/newtests
...
C++: Add test cases
2024-04-24 10:06:51 +01:00
Nick Rolfe
af72c0848e
Merge pull request #16306 from github/nickrolfe/js-sensitive
...
JS: do fewer regexp matches in SensitiveActions
2024-04-24 09:49:44 +01:00
Tamás Vajk
de58ee5a22
Merge pull request #16225 from tamasvajk/buildless/resx
...
C#: Add resource generator
2024-04-24 10:10:45 +02:00
Tom Hvitved
a1a93c7331
Merge pull request #16304 from hvitved/csharp/fix-bad-join
...
C#: Fix a bad join
2024-04-24 08:11:25 +02:00
Owen Mansel-Chan
0311888fd4
Update change note
...
Co-authored-by: Michael B. Gale <mbg@github.com >
2024-04-23 19:07:02 +01:00
Geoffrey White
57a53891e9
C++: Effect of recent QL changes.
2024-04-23 18:12:05 +01:00
Geoffrey White
b6703bc25c
C++: Add test cases inspired by QA results differences.
2024-04-23 18:06:12 +01:00
Nick Rolfe
003d208574
JS: do fewer regexp matches in SensitiveActions
2024-04-23 15:31:38 +01:00
Tom Hvitved
d8d7688f88
C#: Fix another bad join
2024-04-23 15:39:59 +02:00
Mathias Vorreiter Pedersen
3592e76269
Merge pull request #16302 from MathiasVP/fieldflowbranchlimit-follow-up-1
...
C++: `fieldFlowBranchLimit` follow-up (1)
2024-04-23 11:35:49 +01:00
Tom Hvitved
6aa4c5c187
C#: Fix a bad join
2024-04-23 11:47:55 +02:00
Michael B. Gale
fb8ee07b43
Merge pull request #16262 from github/dependabot/go_modules/go/ql/integration-tests/all-platforms/go/two-go-mods-not-nested/src/subdir1/golang.org/x/net-0.23.0
2024-04-23 10:44:54 +01:00
Michael B. Gale
4ccff1a630
Merge pull request #16263 from github/dependabot/go_modules/go/ql/integration-tests/all-platforms/go/ninja-sample/src/golang.org/x/net-0.23.0
2024-04-23 10:44:17 +01:00
Michael B. Gale
4b7160d4b2
Merge pull request #16267 from github/dependabot/go_modules/go/ql/integration-tests/all-platforms/go/go-mod-without-version/src/golang.org/x/net-0.23.0
2024-04-23 10:43:43 +01:00
Michael B. Gale
5cce5008a3
Merge pull request #16264 from github/dependabot/go_modules/go/ql/integration-tests/all-platforms/go/single-go-work-not-in-root/src/modules/subdir2/golang.org/x/net-0.23.0
2024-04-23 10:42:53 +01:00
Michael B. Gale
5b6ce56ca2
Merge pull request #16268 from github/dependabot/go_modules/go/ql/integration-tests/all-platforms/go/single-go-mod-not-in-root/src/subdir/golang.org/x/net-0.23.0
2024-04-23 10:42:24 +01:00
Michael B. Gale
2b81b6c323
Merge pull request #16265 from github/dependabot/go_modules/go/ql/integration-tests/all-platforms/go/mixed-layout/src/module/golang.org/x/net-0.23.0
2024-04-23 10:41:50 +01:00
Mathias Vorreiter Pedersen
a39d8b7c7c
C++: Ensure that each node type gets mapped to an instruction by 'getAnInstruction'.
2024-04-23 09:44:30 +01:00
Mathias Vorreiter Pedersen
553c09ada3
Merge pull request #16301 from MathiasVP/proper-coroutine-cfg-support-2
...
C++: Implement proper coroutine support in IR
2024-04-23 09:19:15 +01:00
Anders Schack-Mulligen
b2f09949df
Merge pull request #15599 from aschackmull/dataflow/fieldflowbranchlimit-v2
...
Dataflow: update fieldFlowBranchLimit semantics
2024-04-23 10:08:05 +02:00
Rasmus Wriedt Larsen
19974f04c9
Merge pull request #16245 from github/tausbn/python-rename-StrConst-to-StringLiteral
...
Python: Rename `StrConst` to `StringLiteral`
2024-04-23 09:35:24 +02:00
Mathias Vorreiter Pedersen
c1755603a8
Update TranslatedExpr.qll
...
Co-authored-by: Jeroen Ketema <93738568+jketema@users.noreply.github.com >
2024-04-23 07:25:25 +01:00
Mathias Vorreiter Pedersen
24cf75a37c
C++: Accept test changes.
2024-04-22 21:38:13 +01:00
Mathias Vorreiter Pedersen
8169e7ce68
C++: Add proper translation of 'co_await' and 'co_yield'.
2024-04-22 21:38:13 +01:00
Mathias Vorreiter Pedersen
8383bc1629
C++: Add getters for the other children of 'co_return' and 'co_yield'.
2024-04-22 21:38:13 +01:00
Jeroen Ketema
35d1a9202b
Merge pull request #16298 from jketema/reuse-val
...
C++: Update expected test results after extractor changes
2024-04-22 21:14:42 +02:00
Mathias Vorreiter Pedersen
799c380e5f
Merge pull request #16255 from MathiasVP/fix-more-fps-in-iterator-to-expired-container
...
Fix more FPs in `cpp/iterator-to-expired-container`
2024-04-22 14:25:51 +01:00
Tamas Vajk
f20812d8ad
Code quality improvement
2024-04-22 15:12:01 +02:00
Tamas Vajk
05f3c64172
Fix code review findings
2024-04-22 14:46:24 +02:00
Taus
81246cd41a
Python: Add missing QLDoc for isUnicode
2024-04-22 12:08:53 +00:00
Taus
bab461ffd1
Python: Add change note
2024-04-22 12:00:09 +00:00
Taus
58eaddf627
Python: Update all .expected files
...
I'm beginning to realise why I didn't do the `toString` overriding way
back when. Thankfully, now that all of our tests are in the same place,
this is actually not a terrible ordeal.
2024-04-22 12:00:09 +00:00
Taus
d51fcd4f2a
Python: Change Str to StringLiteral
...
As far as I can tell, this was the only occurrence of `Str` as a type
throughout the entire library.
2024-04-22 12:00:09 +00:00
Taus
b484aee39e
Python: Autoformat everything
...
Of course, `StringLiteral` being much longer than `StrConst` meant a
bunch of files changed formatting.
2024-04-22 12:00:09 +00:00
