Jonas Jensen
118abd40c9
Java: add exclude-from-incremental tag to telemetry queries
...
In the future, this tag should signal to the action that the queries
should be excluded from incremental scans because they are too slow
and/or produce too many results.
The three queries tagged here rely on global data-flow analysis to find
all XSS sinks. All other metric and diagnostic queries are fast enough
for incrementality.
2025-04-02 14:19:45 -07:00
github-actions[bot]
10205cb990
Post-release preparation for codeql-cli-2.21.0
2025-04-01 11:30:43 +00:00
github-actions[bot]
84f6564cc0
Release preparation for version 2.21.0
2025-03-31 17:35:15 +00:00
Tamas Vajk
34e8318797
Rename the CCR query suite to code-quality
2025-03-27 08:36:53 +01:00
Tamás Vajk
b21968c495
Merge pull request #18947 from tamasvajk/tamasvajk/java_empty_method
...
Java: Add new quality query to detect empty methods
2025-03-26 09:33:47 +01:00
Tamás Vajk
a5fd2e923a
Improve query documentation
...
Co-authored-by: mc <42146119+mchammer01@users.noreply.github.com >
2025-03-24 11:03:43 +01:00
Nick Rolfe
361fbba39b
Java: fix comma splice in alert message
2025-03-21 14:23:32 +00:00
mc
1f76793863
Merge branch 'main' into tamasvajk/java_empty_method
2025-03-21 10:01:10 +00:00
Chris Smowton
9a2a13ed55
Merge remote-tracking branch 'origin/main' into smowton/admin/merge-rc317-into-main
2025-03-19 16:01:29 +00:00
github-actions[bot]
51cdeefafb
Post-release preparation for codeql-cli-2.20.7
2025-03-17 13:00:41 +00:00
github-actions[bot]
2d64a618e6
Release preparation for version 2.20.7
2025-03-17 12:15:54 +00:00
Owen Mansel-Chan
7702e9da7d
Address review comments
2025-03-14 11:44:01 +00:00
Tamas Vajk
9662b47464
Move likely test method logic to library
2025-03-14 11:36:15 +01:00
Tamas Vajk
05502bc74e
Change severity and precision
2025-03-14 11:36:14 +01:00
Tamás Vajk
30ff68dc71
Update java/ql/src/Language Abuse/EmptyMethod.md
...
Co-authored-by: Jami <57204504+jcogs33@users.noreply.github.com >
2025-03-14 11:36:14 +01:00
Tamas Vajk
2538ba82cc
Revert message
2025-03-14 11:36:13 +01:00
Tamás Vajk
050ef405c1
Improve query help
...
Co-authored-by: Jami <57204504+jcogs33@users.noreply.github.com >
2025-03-14 11:36:12 +01:00
Tamas Vajk
24f129c12c
Fix typo in QL help
2025-03-14 11:36:12 +01:00
Tamas Vajk
dea081b385
Add quality and cwe tag
2025-03-14 11:36:10 +01:00
Tamas Vajk
3be7044c6e
Fix references in query help file
2025-03-14 11:36:10 +01:00
Tamas Vajk
3d4fcefe70
Do not accept empty default methods
2025-03-14 11:36:09 +01:00
Tamas Vajk
77400778ea
Add change note
2025-03-14 11:36:08 +01:00
Tamas Vajk
3d2a72341b
Improve ql code quality
2025-03-14 11:36:08 +01:00
Tamas Vajk
6512ed9429
Adjust alert message
2025-03-14 11:36:07 +01:00
Tamas Vajk
7476f19b09
Adjust query help
2025-03-14 11:36:06 +01:00
Tamas Vajk
349f48982a
Make query more accepting
2025-03-14 11:36:06 +01:00
Tamas Vajk
a8063e1cd2
Adjust query name
2025-03-14 11:36:03 +01:00
Tamas Vajk
f7f8b47f12
Java: Add initial version of empty method query
2025-03-14 11:36:03 +01:00
Owen Mansel-Chan
6ca9a1ff9a
Add change note
2025-03-13 15:05:32 +00:00
Owen Mansel-Chan
a8e993c942
Fix FP for always-locked fields
2025-03-13 15:03:32 +00:00
Jami
ea9b0462bf
Merge pull request #18793 from jcogs33/jcogs33/java/spring-boot-actuators-promo
...
Java: Promote Spring Boot Actuators query from experimental
2025-03-11 14:42:14 -04:00
Jami
ad63dd946c
Apply suggestions from docs review
...
Co-authored-by: mc <42146119+mchammer01@users.noreply.github.com >
2025-03-10 09:01:04 -04:00
Lukas Abfalterer
32e1589745
Update java/ql/src/change-notes/2025-03-03-fix-improper-intent-verification-query.md
...
Co-authored-by: Edward Minnix III <egregius313@github.com >
2025-03-06 09:57:16 +01:00
Jami Cogswell
0eec951218
Java: update change note to mention removal from Community Packs
2025-03-05 08:55:51 -05:00
Lukas Abfalterer
b4c75d832c
Merge branch 'main' into cwe-925
2025-03-05 14:15:07 +01:00
Lukas Abfalterer
c9b75afc2a
Fix QLL and add change notes with tests
2025-03-05 10:23:35 +01:00
Jami Cogswell
746f022cfa
Java: add 'Spring' prefix to public class names
2025-03-04 10:34:16 -05:00
github-actions[bot]
58f355ae5a
Post-release preparation for codeql-cli-2.20.6
2025-03-03 18:18:15 +00:00
github-actions[bot]
fa850cccb1
Release preparation for version 2.20.6
2025-03-03 17:13:19 +00:00
Lukas Abfalterer
a3749530d6
The query should only report cases when the method is not empty.
2025-03-03 10:20:46 +01:00
Jami Cogswell
b0b95965f6
Java: add change note
2025-03-02 17:13:37 -05:00
Jami Cogswell
fbf7513f37
Java: handle lock state check stored in variable
2025-03-02 17:01:18 -05:00
Owen Mansel-Chan
74a249597a
Merge pull request #18607 from owen-mc/java/xss-content-type-sanitizer
...
Java: Add XSS Sanitizer for `HttpServletResponse.setContentType` with safe values
2025-02-24 23:39:18 +00:00
Jami Cogswell
c2e859c756
Java: add change note
2025-02-24 18:33:45 -05:00
Jami Cogswell
26e396732a
Java: edit qhelp
2025-02-24 18:33:43 -05:00
Jami Cogswell
53cb30dcd0
Java: update metadata, move from CWE-016 to CWE-200
2025-02-24 18:33:41 -05:00
Jami Cogswell
8dfb920e05
Java: refactor QL, move code to libraries
2025-02-24 18:24:48 -05:00
Jami Cogswell
8064e8f1f9
Java: convert tests to inline expectations
2025-02-24 18:24:26 -05:00
Jami Cogswell
5e5bc2afe9
Java: remove experimental files
2025-02-24 18:24:19 -05:00
Jami Cogswell
978834bd9c
Java: remove deprecations
2025-02-24 18:24:14 -05:00
