2961 Commits

Author	SHA1	Message	Date
github-actions[bot]	648f0e19ec	Post-release preparation for codeql-cli-2.13.0	2023-04-17 15:39:24 +00:00
Mathew Payne	44c1b48f94	Merge branch 'main' into main	2023-04-17 12:40:23 +01:00
Mathew Payne	c77cdcf4c3	Removed the OutputStream models	2023-04-17 11:38:28 +00:00
Tony Torralba	f5702f5c69	Address review comment ... Handle more regex cases that cover line breaks	2023-04-17 09:33:44 +02:00
Tony Torralba	e167d3ce00	Add line break sanitizers	2023-04-17 09:33:44 +02:00
Edward Minnix III	38826c98f1	Merge pull request #12751 from egregius313/egregius313/dataflow-refactor-cleanup ... Java: Finish dataflow refactor	2023-04-14 10:35:11 -04:00
Jeroen Ketema	0c7346707b	Fix minor issues with change notes	2023-04-14 15:37:04 +02:00
github-actions[bot]	075d063370	Release preparation for version 2.13.0	2023-04-14 13:31:30 +00:00
Tony Torralba	f106783c39	SensitiveResultReceiverFlow needs to be public	2023-04-14 09:04:56 +02:00
Ed Minnix	7b56383b52	Make SensitiveResultReceiver modules private	2023-04-13 23:08:46 -04:00
Ed Minnix	0a26916245	Re-Add SensitiveResultReceiverConf as deprecated	2023-04-13 23:06:16 -04:00
Edward Minnix III	77b67cbf2e	Fix typo ... Co-authored-by: Tony Torralba <atorralba@users.noreply.github.com>	2023-04-13 23:06:16 -04:00
Ed Minnix	0fc775027f	Fix SensitiveResultReceiver test case	2023-04-13 23:06:16 -04:00
Ed Minnix	3826b9be6c	Re-add allowImplicitRead	2023-04-13 23:06:16 -04:00
Ed Minnix	74b71ff7e3	Replace allowImplicitRead with default implementation	2023-04-13 23:06:16 -04:00
Ed Minnix	ea54ea47b1	Deprecate sensitiveResultReceiver	2023-04-13 23:06:16 -04:00
Ed Minnix	cd661f1d9f	Refactor SensitiveResultReceiver	2023-04-13 23:06:16 -04:00
Ed Minnix	735a7383c6	Refactor HardcodedCredentialsSourceCall	2023-04-13 23:06:16 -04:00
Alex Eyers-Taylor	c6a482819a	Bump all qlpacks major versions	2023-04-13 19:15:27 +01:00
Jami Cogswell	108b7a38aa	Java: update provenance to hq-manual	2023-04-13 10:24:24 -04:00
Jami Cogswell	4f9c51a02b	Java: update provenance to hq-manual now that 12595 is merged	2023-04-13 10:11:31 -04:00
Jami Cogswell	523feabaa2	Java: switch Netty setUri method from summary to sink; resolve conflicts	2023-04-13 09:16:18 -04:00
Jami Cogswell	6890434d63	Java: add change note	2023-04-13 09:15:02 -04:00
Jami Cogswell	d85bcacf84	Java: update some models, undo temp edits; resolve conflicts	2023-04-13 09:14:52 -04:00
Jami Cogswell	540b8391dc	Java: add more tests	2023-04-13 09:12:55 -04:00
Jami Cogswell	99320857af	Java: change model to summary and update comments	2023-04-13 09:12:55 -04:00
Jami Cogswell	8a6ff95035	Java: remove neutral which will be added in a different PR	2023-04-13 09:12:54 -04:00
Jami Cogswell	4daaf783e1	Java: remove cache ones for now	2023-04-13 09:12:54 -04:00
Jami Cogswell	cd7b79f62b	Java: add tests for org.apache.hc.client5.http.fluent	2023-04-13 09:12:54 -04:00
Jami Cogswell	a9595647c4	Java: fix typo	2023-04-13 09:12:54 -04:00
Jami Cogswell	33afcd75f1	Java: add subtype-related comments, update some empty-string signatures	2023-04-13 09:12:54 -04:00
Jami Cogswell	e89df255e3	Java: add subtype-related comments on org.apache.hc.client5.http.async.methods models	2023-04-13 09:12:54 -04:00
Jami Cogswell	4ab184fc7d	Java: switch HttpHost from sink to summary; resolve conflicts	2023-04-13 09:12:54 -04:00
Jami Cogswell	4ed101fa26	Java: remove some comments	2023-04-13 09:12:54 -04:00
Jami Cogswell	a991f87728	Java: add some host sinks	2023-04-13 09:12:54 -04:00
Jami Cogswell	68fe486c05	Java: remove typo FP, boolean arg is not a sink	2023-04-13 09:12:54 -04:00
Jami Cogswell	60dab3d779	Java: add models from client version 4; resolve conflicts	2023-04-13 09:12:42 -04:00
Jami Cogswell	68391acc98	Java: add models from core version 4; resolve conflict	2023-04-13 09:06:28 -04:00
Jami Cogswell	de4cfc3239	Java: remove typo sink, this api is covered by the model for org.apache.http.client.methods.HttpRequestBase.setURI instead	2023-04-13 09:06:28 -04:00
Jami Cogswell	a3976305ca	Java: add initial ssrf heuristic models for apache httpcomponents version 5	2023-04-13 09:06:28 -04:00
Michael Nebel	52bc43b22b	Merge pull request #12595 from michaelnebel/enhanceprovenance ... Java/C# : Enhance provenance.	2023-04-13 14:27:53 +02:00
Alex Ford	8c46bfd051	Merge pull request #12816 from github/rc/3.9 ... Merge `rc/3.9` into `main`	2023-04-13 12:35:41 +01:00
Tony Torralba	4c6df3fdb9	Merge pull request #12813 from atorralba/atorralba/java/sensitive-expr-fix-and-tests ... Java: Add tests for SensitiveActions and fix getCommonSensitiveInfoRegex	2023-04-13 13:13:37 +02:00
Tony Torralba	d7feaf4098	Merge pull request #12685 from atorralba/atorralba/java/command-injection-mad ... Java: Add command-injection sink kind and refactor command injection queries	2023-04-13 11:38:14 +02:00
Tony Torralba	4f2ffccc20	Improve change note	2023-04-13 11:14:57 +02:00
Tony Torralba	99b0624e8b	Add change note	2023-04-13 10:35:59 +02:00
Tony Torralba	485709a133	Fix getCommonSensitiveInfoRegex	2023-04-13 10:33:03 +02:00
Michael Nebel	169d8d5cf9	Java: All ai-generated models have been manually verified.	2023-04-13 09:21:06 +02:00
Michael Nebel	6593991c13	Java/C#: Update generated models to have provenance df-generated.	2023-04-13 09:21:05 +02:00
Michael Nebel	03482e5e59	Java/C#: Update the internal documentation.	2023-04-13 09:21:05 +02:00