Owen Mansel-Chan
ff8bb2b1f8
Merge pull request #16760 from owen-mc/java/reverse-dns-separate-threat-model-kind
...
Java: make a separate threat model kind for reverse DNS sources
2024-07-23 10:08:52 +01:00
Owen Mansel-Chan
2a5144d9d9
Improve tests for reverse DNS sources
2024-07-20 21:40:02 +01:00
Ed Minnix
ad4bca9975
Fix provenance in tests
2024-07-18 18:18:24 -04:00
Ed Minnix
0990a370c7
Convert QL classes for Lastaflute to MaD
2024-07-18 17:41:06 -04:00
Ed Minnix
9713551448
Missing QLDoc
2024-07-18 17:41:05 -04:00
Ed Minnix
4fa45bb81c
Change note
2024-07-18 17:41:03 -04:00
Ed Minnix
62944ee473
Add tests for lastaflute framework
2024-07-18 17:41:02 -04:00
Ed Minnix
3bd330423d
Add some models for the org.lastaflute.web library
...
Methods annotated `@Execute` are handlers for URLs. Therefore, the
parameters of the methods annotated with the
`org.lastaflute.web.Execute` annotation are likely either URL parameters
or forms.
2024-07-18 17:41:00 -04:00
Chris Smowton
c1853e04f5
Merge pull request #17013 from smowton/smowton/admin/maven-enforcer-test
...
Java: Add test for autobuild with maven-enforcer
2024-07-18 12:51:06 +01:00
Chris Smowton
1abe0d0f6d
Add test for autobuild with maven-enforcer
2024-07-18 11:16:46 +01:00
Owen Mansel-Chan
e6c1ff573a
Merge branch 'main' into max-schaefer-patch-1
2024-07-18 10:39:42 +01:00
github-actions[bot]
ca42eac589
Add changed framework coverage reports
2024-07-18 00:17:53 +00:00
Jami
39f0288e09
Merge pull request #16964 from jcogs33/jcogs33/add-toByteArray-summaries
...
Java: add `IOUtils.toByteArray` summaries
2024-07-16 17:03:30 -04:00
Owen Mansel-Chan
e2356d9820
Merge pull request #16914 from owen-mc/java/android-app-detection
...
Java: Improve Android app detection
2024-07-16 21:52:43 +01:00
Jami Cogswell
f90df85722
Java: update provenance numbers in tests again
2024-07-16 11:55:46 -04:00
Jami
a73170df49
Merge branch 'main' into jcogs33/add-toByteArray-summaries
2024-07-16 10:46:36 -04:00
Ian Lynagh
91dd99d7a6
Kotlin: Fixes for 2.0.20-Beta2
2024-07-16 15:07:34 +01:00
Ian Lynagh
06cc74f3aa
Kotlin: Switch from 2.0.20-Beta1 to -Beta2
2024-07-16 15:07:33 +01:00
Ian Lynagh
adaeb01906
Kotlin: Update deps to 2.0.20-Beta2
2024-07-16 15:07:33 +01:00
Ian Lynagh
64ebfc6297
Kotlin: Add 2.0.20-Beta1
2024-07-16 15:07:32 +01:00
Ian Lynagh
eb0bcdd9b2
Kotlin: Add 2.0.20-Beta1 deps
2024-07-16 15:07:32 +01:00
Ian Lynagh
777cc357ee
Kotlin: Support 2.0.20
2024-07-16 15:07:30 +01:00
Owen Mansel-Chan
db6cd1877c
Accept suggested QLDoc fix
...
Co-authored-by: Chris Smowton <smowton@github.com >
2024-07-16 12:24:42 +01:00
Anders Schack-Mulligen
37d78249e7
Java: Update provenance ids.
2024-07-16 11:11:54 +02:00
Anders Schack-Mulligen
2bfd65f145
Java: update expected output
2024-07-16 11:11:54 +02:00
Anders Schack-Mulligen
b2f57b4b48
Java: Update expected output.
2024-07-16 11:11:53 +02:00
Anders Schack-Mulligen
938f46b888
Java: Remove superfluous clone models.
2024-07-16 11:11:53 +02:00
Anders Schack-Mulligen
dc64a08467
Java: Update test expectations for Object.clone().
2024-07-16 11:11:52 +02:00
Anders Schack-Mulligen
12d6875cc4
Java: Replace the MaD Object.clone() models with a non-aliasing value step.
2024-07-16 11:11:50 +02:00
Jami Cogswell
8f6d4be256
Java: update tests
2024-07-15 14:33:40 -04:00
Jami
b70a4c839c
Merge branch 'main' into jcogs33/add-toByteArray-summaries
2024-07-15 12:35:05 -04:00
Jami Cogswell
7f34dd1e0a
Java: update change note
2024-07-15 12:15:02 -04:00
Jami Cogswell
cd82ada239
Java: add manual models for all overloads of IOUtils.toByteArray
2024-07-15 12:12:31 -04:00
Anders Schack-Mulligen
da5abc8321
Dataflow: Replace MakeSets with QlBuiltins::InternSets.
2024-07-15 13:35:57 +02:00
Ian Lynagh
a951718f2e
Merge pull request #16955 from igfoo/igfoo/kotlin-ga
...
Kotlin: Kotlin support is now out of beta, and generally available
2024-07-15 11:30:20 +01:00
github-actions[bot]
7fc95b8eff
Add changed framework coverage reports
2024-07-14 00:20:23 +00:00
Owen Mansel-Chan
b7a5252cb0
Refactor inAndroidApplication
2024-07-13 07:35:02 +01:00
Owen Mansel-Chan
8dcef8223f
Tweak change note
2024-07-13 07:31:18 +01:00
Jami Cogswell
6b497da15f
Java: fix line number changes in tests
2024-07-11 15:33:09 -04:00
Jami Cogswell
ab9a6faaf3
Java: add change note
2024-07-11 15:10:11 -04:00
Jami Cogswell
77a8ba934c
Java: add path-injection sink for hudson.FilePath.exists()
2024-07-11 15:03:40 -04:00
Jami Cogswell
744a1a9b72
Java: fix line number changes in tests
2024-07-11 14:07:23 -04:00
Jami Cogswell
5cf05ec863
Java: add change note
2024-07-11 13:40:50 -04:00
Jami Cogswell
4a1497f367
Java: add IOUtils.toByteArray(InputStream) summary
2024-07-11 13:33:08 -04:00
Ian Lynagh
5c97a5f667
Kotlin: Kotlin support is now out of beta, and generally available
2024-07-11 16:11:40 +01:00
Max Schaefer
d5d0cf5d90
Java: Tag java/non-https-url with CWE-345
2024-07-11 13:37:09 +01:00
Ian Lynagh
311799c798
Merge pull request #16899 from igfoo/igfoo/semmle_dist
...
Java/Kotlin: Remove legacy $SEMMLE_DIST support
2024-07-11 12:48:53 +01:00
Angela P Wen
80bd361607
Merge pull request #16926 from github/post-release-prep/codeql-cli-2.18.0
...
Post-release preparation for codeql-cli-2.18.0
2024-07-08 16:51:16 +02:00
Owen Mansel-Chan
b83147fa44
Add links on threat models to change note
2024-07-08 15:39:27 +01:00
Owen Mansel-Chan
8241d0b7ef
Update QLDoc for ReverseDnsUserInput
2024-07-08 15:33:39 +01:00