8654 Commits

Author	SHA1	Message	Date
Tamás Vajk	91b7798be8	Merge pull request #11286 from tamasvajk/kotlin-resource-leak ... Kotlin: Exclude .kt files from resource leak queries	2022-11-16 13:55:12 +01:00
erik-krogh	7331363618	Java: convert some block-comments that could be QLDoc to QLDoc	2022-11-16 13:40:15 +01:00
Anders Schack-Mulligen	94bca4399a	Merge pull request #11183 from aschackmull/dataflow/groupflow ... Dataflow: Introduce support for src/sink grouping in path results.	2022-11-16 12:59:01 +01:00
Tamas Vajk	55dc929a1f	Kotlin: Add test case for confusing overloading query	2022-11-16 11:57:05 +01:00
Joe Farebrother	cc960377ac	Apply suggestion from docs review ... Co-authored-by: Sam Browning <106113886+sabrowning1@users.noreply.github.com>	2022-11-16 10:54:14 +00:00
Joe Farebrother	255123cbf9	Apply suggestions from docs review ... Co-authored-by: Sam Browning <106113886+sabrowning1@users.noreply.github.com>	2022-11-16 10:54:14 +00:00
Joe Farebrother	7ae41ff165	Invert the xml logic to be consistent with the dataflow logic	2022-11-16 10:54:14 +00:00
Joe Farebrother	6d465aaf52	Apply code review suggestions	2022-11-16 10:54:14 +00:00
Joe Farebrother	63f715e650	fix implicit this	2022-11-16 10:54:14 +00:00
Joe Farebrother	dd4e1d0ac3	Add tests and fix issues	2022-11-16 10:54:14 +00:00
Joe Farebrother	10a3b3bd14	Cover cases in which input type is set via code	2022-11-16 10:54:14 +00:00
Joe Farebrother	359d703ded	More precise layout xml handling	2022-11-16 10:54:13 +00:00
Joe Farebrother	f48b57c95a	Apply review suggestions	2022-11-16 10:54:13 +00:00
Joe Farebrother	e6dd3673a1	Fix qldoc	2022-11-16 10:54:13 +00:00
Joe Farebrother	b4216767ad	Add change note	2022-11-16 10:54:13 +00:00
Joe Farebrother	775a5507a6	Add security severity	2022-11-16 10:54:13 +00:00
Joe Farebrother	c085c1f3ad	Fix typos	2022-11-16 10:54:13 +00:00
Joe Farebrother	0bce1894ae	Remove redundant import	2022-11-16 10:54:13 +00:00
Joe Farebrother	92190e5095	Add docs	2022-11-16 10:54:13 +00:00
Joe Farebrother	706858e211	Add test cases; fix the regex used	2022-11-16 10:54:13 +00:00
Joe Farebrother	85fe226256	Add sensitive keyboard cache query	2022-11-16 10:54:13 +00:00
Tamas Vajk	3d21f89f1d	Exclude .kt files from autoboxing query	2022-11-16 11:52:17 +01:00
Tamas Vajk	0d9e28012e	Kotlin: Add FP test cases for autoboxing query	2022-11-16 11:51:36 +01:00
Tamas Vajk	3d11e5bb32	Exclude .kt files from empty block query	2022-11-16 11:47:35 +01:00
Tamas Vajk	c91e20c6b5	Kotlin: Add FP test cases for empty blocks	2022-11-16 11:47:07 +01:00
Joe Farebrother	3ebb7cfa1b	Merge pull request #11269 from joefarebrother/stub-gen-invalid-ids ... Java: Stub generator: Exclude invalid identifiers from generated stubs	2022-11-16 10:26:22 +00:00
Tamas Vajk	307d2d5dc1	Exclude .kt files from resource leak queries	2022-11-16 09:52:39 +01:00
Tamas Vajk	acab8e8632	Kotlin: Add FP test cases for resource leaks	2022-11-16 09:52:13 +01:00
Tamas Vajk	ac85d2eb3e	Exclude .kt files from java/complex-boolean-expression	2022-11-16 09:38:42 +01:00
Tamas Vajk	de833d620e	Kotlin: Add FP test case for unnecessarily complex bool expression	2022-11-16 09:35:18 +01:00
Ed Minnix	38d47d63ec	Java: Add change note for addJavascriptInterface query	2022-11-15 23:40:03 -05:00
Ed Minnix	eb8ef72e47	Java: addJavascriptInterface query test case	2022-11-15 23:28:18 -05:00
Ed Minnix	3b96fefc71	Java: Add Android stubs to options file for CWE-079 test cases	2022-11-15 23:26:49 -05:00
Ed Minnix	013ff79d17	Java: Check the value of parameter in WebView file access query	2022-11-15 13:50:56 -05:00
Ed Minnix	10875568ec	Java: add negative test cases for WebView file access query	2022-11-15 13:50:31 -05:00
Ed Minnix	1d71c38a8f	Java: Fix formatting of WebView file access query	2022-11-15 12:43:20 -05:00
Ed Minnix	694930556b	Java: documentation cleanup	2022-11-15 12:35:57 -05:00
Joe Farebrother	8d9b106be1	Exclude invalid identifiers from generated stubs	2022-11-15 11:19:40 +00:00
erik-krogh	b59a9bc95c	use instead of a fixed version number	2022-11-14 21:29:41 +01:00
erik-krogh	a4acea9adf	add change-note	2022-11-14 21:29:41 +01:00
erik-krogh	c029048306	port the Java regex/redos queries to use the shared pack	2022-11-14 21:29:41 +01:00
erik-krogh	d5b066636f	use namespace in PrintAst.qll to avoid conflict with Top	2022-11-14 21:29:41 +01:00
erik-krogh	b737bdbca0	add a Java implementation of RegexTreeViewSig	2022-11-14 21:29:41 +01:00
erik-krogh	20254dfc08	move existing regex-tree into a module	2022-11-14 21:29:41 +01:00
erik-krogh	af1470de07	add codeql/regex as a dependency	2022-11-14 21:29:41 +01:00
Ed Minnix	2fb9536847	Java: documentation cleanup for WebView file access query	2022-11-14 15:14:09 -05:00
Ed Minnix	7a0544d80e	Java: test files for WebView file access query	2022-11-14 15:11:15 -05:00
Ed Minnix	73d6360eee	Java: add setAllowFileAccess to CrossOriginAccessMethod in WebView.qll ... Local file access is enabled using the `WebSettings#setAllowFileAccess` method.	2022-11-14 15:07:46 -05:00
Ed Minnix	89411a1db2	Fix alert message style	2022-11-14 14:41:06 -05:00
Ed Minnix	1132572620	Java: add test cases for setJavaScriptEnabled query	2022-11-14 14:33:12 -05:00