1895 Commits

Author	SHA1	Message	Date
Michael Nebel	bc6f0c1622	Merge pull request #11243 from michaelnebel/java/dataextensions ... Java: Use data extensions for MaD models.	2022-11-29 12:43:26 +01:00
Tom Hvitved	f3dca95958	Merge pull request #11087 from hvitved/dataflow/summary-ctx ... Data flow: Add summary/return context to pruning stages 2-4	2022-11-29 10:36:53 +01:00
Michael Nebel	d7e656a32a	Java: Add change note.	2022-11-28 12:30:36 +01:00
Michael Nebel	74f02cf855	Java: Allow empty package name in model definitions.	2022-11-28 12:30:35 +01:00
Michael Nebel	b96540c937	Java: Convert permissve-dot-regex-query to data extensions.	2022-11-28 12:30:35 +01:00
Michael Nebel	91840c613e	Java: Convert unsafe-url-forward to data extensions.	2022-11-28 12:30:35 +01:00
Michael Nebel	aed5ee4edc	Java: Convert thread-resource-abuse to data extensions.	2022-11-28 12:30:35 +01:00
Michael Nebel	07578f11d4	Java: Convert hardcoded-jwt-key models to data extensions.	2022-11-28 12:30:35 +01:00
Michael Nebel	ab12b6cc2b	Java: Convert android-web-resource-response to data extensions.	2022-11-28 12:30:35 +01:00
Michael Nebel	5c15ad412c	Java: Convert log4j-injection to data extensions.	2022-11-28 12:30:35 +01:00
Michael Nebel	665d40dc4b	Java: Convert file-path-injection to data extensions.	2022-11-28 12:30:35 +01:00
Michael Nebel	b61f515af2	Jave: Make support for query specific models.	2022-11-28 12:30:35 +01:00
Michael Nebel	805430983c	Java: Convert commons-io to data extensions.	2022-11-28 12:30:35 +01:00
Michael Nebel	b3a3b676ba	Java: Remove manual models from QL code.	2022-11-28 12:30:34 +01:00
Michael Nebel	f4e1867d28	Java: Define extensible predicates to at least be empty.	2022-11-28 12:30:34 +01:00
Michael Nebel	0abeb831c7	Java: Move summaryModel predicate, which constructs a CSV row to the testcode where it is used.	2022-11-28 12:30:34 +01:00
Michael Nebel	663d091776	Java: Invert dependencies and use the extensible predicates.	2022-11-28 12:30:34 +01:00
Michael Nebel	9cb5ff1cdc	Java: Add data extensions for all manual models.	2022-11-28 12:30:34 +01:00
Michael Nebel	8e25cac653	Java: Add extensible predicates.	2022-11-28 12:30:34 +01:00
Michael Nebel	7b6f202f23	Java: Renaming.	2022-11-28 12:30:34 +01:00
Michael Nebel	63e2206d16	Java: Prepare QL pack for data extensions.	2022-11-28 12:30:34 +01:00
Michael Nebel	a8ee878356	Java: Add bi-directional import of FragmentInjection.	2022-11-28 12:30:33 +01:00
Michael Nebel	663112576a	Java: Update commons-io models.	2022-11-28 12:30:33 +01:00
Tom Hvitved	cde05e1190	Data flow: Sync files	2022-11-28 12:11:38 +01:00
Alexander Eyers-Taylor	3c7f7511be	Merge pull request #11418 from alexet/alexet/mockito-class-rename ... Java: Add new Mockito runner class location.	2022-11-24 17:49:31 +00:00
alexet	e24e3bf13f	Java: Add new Mockito runner class location.	2022-11-24 16:43:57 +00:00
Erik Krogh Kristensen	03737543d4	Merge pull request #11403 from erik-krogh/additional ... ReDoS: add missing additional keywords	2022-11-24 15:53:51 +01:00
Anders Schack-Mulligen	f2897f5bfc	Merge pull request #11392 from aschackmull/java/adjust-mad-dispatch-priority ... Java: Adjust the prioritisation between MaD and source dispatch.	2022-11-24 13:10:48 +01:00
Erik Krogh Kristensen	1eec067474	Merge pull request #11294 from erik-krogh/fileDoc ... QL: improve the "this block-comment should have been a QLDoc"-query	2022-11-23 22:23:36 +01:00
erik-krogh	95f35196e4	add missing additional keywords	2022-11-23 20:45:51 +01:00
Anders Schack-Mulligen	807f87e01f	Java: Adjust the prioritisation between MaD and source dispatch.	2022-11-23 12:56:32 +01:00
Tony Torralba	92ee0aa7ae	Merge pull request #11367 from atorralba/atorralba/java/add-bitwise-implicit-intents ... Java: Consider taint through bitwise operations on PendingIntent flags	2022-11-22 17:08:52 +01:00
Erik Krogh Kristensen	b2267c0e49	Merge pull request #11343 from erik-krogh/redundantAssignment ... QL: add redundant-assignment query	2022-11-22 13:03:14 +01:00
Tony Torralba	43f4dd8bc4	Consider taint through bitwise operations on PendingIntent flags	2022-11-22 11:39:30 +01:00
Jami	8a73675483	Merge pull request #11070 from jcogs33/java-regex-injection ... Java: Promote regex injection query from experimental	2022-11-21 15:04:26 -05:00
Edoardo Pirovano	6c33ddcd47	Merge pull request #11349 from github/edoardo/2.11.4-mergeback ... Merge `rc/3.8` into `main`	2022-11-21 18:08:27 +00:00
erik-krogh	64707f4f7b	remove redundant assignments	2022-11-21 17:45:05 +01:00
Tony Torralba	e28f1ffe18	Merge pull request #11346 from atorralba/atorralba/java/fix-path-models ... Java: Fix a couple of taint models for `java.nio.file.Path(s)`	2022-11-21 16:57:00 +01:00
Tony Torralba	5000a14451	Add change note	2022-11-21 15:22:26 +01:00
Tony Torralba	57656d0a7e	Fix a couple of java.nio.file.Path(s) MaD rows	2022-11-21 15:14:02 +01:00
Tony Torralba	2809c3a77c	Handle disabled Maven repositories	2022-11-21 10:11:57 +01:00
Tom Hvitved	99e70e9a50	Data flow: Sync files	2022-11-20 10:19:23 +01:00
github-actions[bot]	5b14ebf22a	Post-release preparation for codeql-cli-2.11.4	2022-11-18 11:26:00 +00:00
erik-krogh	a4e5d752e1	Java: delete old deprecations	2022-11-17 22:12:50 +01:00
Chris Smowton	e13eb79f5b	Java: edit 0.4.4 release notes to match the changelog	2022-11-17 16:55:26 +00:00
Chris Smowton	2bd151ba9c	Copyedit Java changelog	2022-11-17 16:54:33 +00:00
Chris Smowton	7c74350d5e	Copyedit Java changelog	2022-11-17 16:51:21 +00:00
github-actions[bot]	e105c13e77	Release preparation for version 2.11.4	2022-11-17 16:40:45 +00:00
Joe Farebrother	d6c5132f39	Merge pull request #10684 from joefarebrother/android-keyboard-cache ... Java: Add query for Sensitive Keyboard Cache	2022-11-16 15:27:44 +00:00
Tamás Vajk	a3ff83595a	Merge pull request #11300 from tamasvajk/kotlin-useless-param-2 ... Kotlin: Exclude .kt files from useless parameter query	2022-11-16 16:22:27 +01:00