Mathias Vorreiter Pedersen
0adff53afd
Merge pull request #13190 from geoffw0/sharedsensitive
...
Swift: Adopt the shared sensitive data library
2023-06-02 10:36:22 +01:00
Tony Torralba
41bd1ae54e
Merge pull request #13351 from github/workflow/coverage/update
...
Update CSV framework coverage reports
2023-06-02 11:19:04 +02:00
Mathias Vorreiter Pedersen
cc8aac5435
C++: Use the 'shortestDistances' HOP to count indirections instead of manual recursion. This avoids cyclic problems when we have invalid types.
2023-06-02 11:17:08 +02:00
Tony Torralba
ad2f558002
Add Hudson models
...
Includes models-as-data rows, flow sources, and XSS sanitizers.
Tests for models-as-data rows not included.
2023-06-02 11:06:24 +02:00
Michael Nebel
3a3f9a2655
Merge pull request #13298 from michaelnebel/csharp/paramdefaultimplicitconversion
...
C#: Extract default parameter values.
2023-06-02 10:52:24 +02:00
Erik Krogh Kristensen
d7c3ac4830
Merge pull request #13349 from erik-krogh/stopRecLaterAccess
...
JS: stop recursive fromRhs related to getLaterBaseAccess
2023-06-02 10:39:14 +02:00
Jeroen Ketema
7b17b92aca
Fix typo in spelling of expectation
2023-06-02 10:36:11 +02:00
Asger F
77d2799278
Update javascript/ql/lib/semmle/javascript/Regexp.qll
...
Co-authored-by: Erik Krogh Kristensen <erik-krogh@github.com >
2023-06-02 10:33:44 +02:00
Tony Torralba
527fe523a8
Add PathCreation.qll sinks to models-as-data
...
The old PathCreation sinks can't be removed because doing so would cause alert wobble in the path injection queries. See their getReportingNode predicates.
2023-06-02 09:14:35 +02:00
github-actions[bot]
ef7e9a674c
Add changed framework coverage reports
2023-06-02 00:16:55 +00:00
erik-krogh
1b44b59842
add stress test
2023-06-01 23:20:23 +02:00
erik-krogh
8eed1a95f6
stop recursive fromRhs related to getLaterBaseAccess
2023-06-01 23:16:52 +02:00
erik-krogh
97afa5733b
add support for namespaced JSX attributes
2023-06-01 21:52:14 +02:00
erik-krogh
f4b68fb8c3
bump TypeScript to stable version
2023-06-01 21:51:43 +02:00
Jami
84a7b3ca52
Merge pull request #13157 from jcogs33/jcogs33/update-javascript-sink-kinds
...
JS: update MaD sink kinds
2023-06-01 15:04:19 -04:00
Jami
1a82e21fdb
Merge pull request #13136 from jcogs33/jcogs33/revamp-java-source-kinds
...
Java: change `android-widget` MaD source kind to `remote`
2023-06-01 14:18:02 -04:00
Jami
3886ebffa9
Merge branch 'main' into jcogs33/update-javascript-sink-kinds
2023-06-01 14:09:10 -04:00
Jami Cogswell
b8cedfa817
Java: switch 'deprecated' to 'outdated'
2023-06-01 13:30:27 -04:00
Jami Cogswell
d10857fbdb
Java: fix typo blank qldoc
2023-06-01 12:57:06 -04:00
Jami Cogswell
0355b78f13
Java: add deprecation deletion comment
2023-06-01 12:57:06 -04:00
Jami Cogswell
b3d218a503
Java: condense 'replacementKind' code
2023-06-01 12:57:06 -04:00
Jami Cogswell
06c83ee14d
Java: add error message for deprecated sink kinds to 'getInvalidModelKind'
2023-06-01 12:57:05 -04:00
Jami
617107de35
Merge pull request #12916 from jcogs33/jcogs33/revamp-java-sink-kinds
...
Java: revamp MaD sink kinds
2023-06-01 12:48:30 -04:00
Jami Cogswell
de15013715
Java: remove RemoteFlowSources module
2023-06-01 12:25:26 -04:00
Jami Cogswell
5700a6eea4
Java: remove DefaultAndroidWidgetSources class
2023-06-01 12:25:26 -04:00
Jami Cogswell
119b446dbc
Java: add change note
2023-06-01 12:25:26 -04:00
Jami Cogswell
d035a29b4d
Java: update source kind documentation
2023-06-01 12:25:26 -04:00
Jami Cogswell
6722892828
Java: switch 'android-widget' source kind to 'remote'
2023-06-01 12:25:25 -04:00
Nick Rolfe
7290e2bfd9
Java: avoid call to Location.toString()
2023-06-01 17:06:34 +01:00
Alex Ford
6fa9e13a2e
Ruby: update TaintStep output
2023-06-01 16:27:20 +01:00
Alex Ford
606d601923
qlformat
2023-06-01 16:26:05 +01:00
erik-krogh
9aeba4f31e
changes based on review
2023-06-01 17:24:44 +02:00
Alex Ford
d09f6d318c
Merge branch 'main' into maikypedia/sqli-sink
2023-06-01 15:02:44 +01:00
Alex Ford
40cf09996a
Merge pull request #13066 from maikypedia/maikypedia/sqli-sink-2
...
Ruby: Add Sequel as SQL Injection Sink
2023-06-01 15:01:38 +01:00
Erik Krogh Kristensen
96a720cfa0
Merge pull request #13285 from erik-krogh/redoshelp
...
ReDoS: fix whitespace in the samples in ReDoS.qhelp
2023-06-01 15:53:58 +02:00
Rasmus Lerchedahl Petersen
6755bb32fb
Python: do not add read steps for collections
2023-06-01 15:18:05 +02:00
Alex Ford
7d943c7621
Ruby: update test output
2023-06-01 13:50:32 +01:00
Jami Cogswell
58845eca7c
Java: update recently added 'open-url' sinks to 'request-forgery'
2023-06-01 08:10:44 -04:00
Asger F
baef99995d
JS: Change note
2023-06-01 14:10:11 +02:00
Alex Ford
4794066d3c
Merge branch 'main' into maikypedia/sqli-sink-2
2023-06-01 13:04:54 +01:00
Ian Lynagh
c28af7672d
Merge pull request #13286 from igfoo/igfoo/kotlin-1.9b
...
Kotlin: Support 1.9.0
2023-06-01 13:02:04 +01:00
Jami
10bab71c60
Merge pull request #12249 from jcogs33/jcogs33/add-heuristic-neutral-models
...
Java: add some neutral models discovered with heuristics
2023-06-01 07:51:55 -04:00
Geoffrey White
edfdddb24a
Swift: Tweak and update the qldoc string.
2023-06-01 11:47:05 +01:00
Geoffrey White
d68f602124
Merge branch 'main' into sharedsensitive
2023-06-01 11:11:42 +01:00
Maiky
7579f182ad
Add requested changes
2023-06-01 11:00:35 +02:00
Tony Torralba
c1bd04e802
Merge pull request #13332 from atorralba/atorralba/java/gson-serializability
...
Java: Fix GsonDeserializableField
2023-06-01 10:45:32 +02:00
Tony Torralba
aecaf82405
Merge pull request #13340 from github/workflow/coverage/update
...
Update CSV framework coverage reports
2023-06-01 10:43:32 +02:00
Michael Nebel
9aeb2384f3
C#: Improve LINQ expression based on review comments.
2023-06-01 10:20:54 +02:00
Michael Nebel
d882fe1ea8
C#: Update expected test output.
2023-06-01 09:30:31 +02:00
Michael Nebel
d12dfabf9d
C#: Use synthetic globals instead of jump returns in the EntityFramework implementation.
2023-06-01 09:30:31 +02:00
