Tamas Vajk
243c311b3d
Accept unit test changes
2022-12-09 10:29:52 +01:00
Tamas Vajk
81c35c8b27
Adjust PathSanitizer to use fixed $default extension method functionality
2022-12-09 10:29:52 +01:00
Tamas Vajk
f646938d91
Revert "Kotlin: Adjust ExtensionReceiverAccess.toString to not return hard coded this value"
...
This reverts commit 9649a8f64aa47d860d3ce2d005a939df75ee0e41.
2022-12-09 10:29:52 +01:00
Tamas Vajk
ac5219fc7a
Kotlin: Adjust ExtensionReceiverAccess.toString to not return hard coded this value
2022-12-09 10:29:52 +01:00
Tamas Vajk
d93dce0fa9
Kotlin: Fix extension and dispatch parameter order in $default functions
2022-12-09 10:29:51 +01:00
Tamas Vajk
6457e059f5
Kotlin: Fix extraction of $default extension functions
2022-12-09 10:26:44 +01:00
Tamas Vajk
43f23801f5
Kotlin: Add test for extension $default functions
2022-12-09 10:26:44 +01:00
Chris Smowton
cddb5c5e2d
Merge pull request #11616 from smowton/smowton/fix/callable-modality-abstraction
...
Kotlin: extract callable modality
2022-12-09 08:07:57 +00:00
Jami Cogswell
0b2f2a3f88
Java: remove predicates from NegativeSummarizedCallable
2022-12-08 23:46:55 -05:00
Jami Cogswell
2c3adb769b
Java: remove MadModeledCallable class and update predicate names
2022-12-08 23:32:07 -05:00
Jami Cogswell
974c000b65
Java: add bindingset for package
2022-12-08 23:17:53 -05:00
Jami Cogswell
a32ed21480
Java: clean up comments and predicates
2022-12-08 23:09:09 -05:00
Jami Cogswell
ca00e0ab9e
Java: adjust none and all calculations
2022-12-08 22:14:28 -05:00
Jami Cogswell
6248efd394
Java: adjust column names and metric formulas
2022-12-08 21:13:52 -05:00
Jami Cogswell
9e0027cf5b
Java: remove negative models
2022-12-08 20:58:37 -05:00
Jami Cogswell
d558f93972
Java: update DataFlowTargetApi for funcexpr and paramless constructor exclusions
2022-12-08 20:51:40 -05:00
Chris Smowton
1d209d1bcd
Accept modifiers test changes
2022-12-08 22:52:40 +00:00
Jami Cogswell
f48cc9f40e
Java: remove previous uses of isUninteresting
2022-12-08 16:56:43 -05:00
Jami Cogswell
29046e7960
Java: update ExternalApi characteristic predicate to include not isUninteresting
2022-12-08 12:31:46 -05:00
Henry Mercer
d196704a2d
Merge pull request #11574 from github/henrymercer/check-query-ids
...
Add a PR check to ensure query IDs are unique
2022-12-08 15:31:26 +00:00
Chris Smowton
d0a2c1c9b6
Accept test changes
2022-12-08 14:44:43 +00:00
Anders Schack-Mulligen
d157e13318
Java: Switch DispatchFlow to typetracking.
2022-12-08 14:58:44 +01:00
Chris Smowton
85ee4e6ca1
Merge pull request #11578 from retanoj/MybatisSqli
...
Java: Add MyBatis Sql Injection no @Param case
2022-12-08 13:53:44 +00:00
Henry Mercer
3036b15af2
Merge branch 'main' into henrymercer/check-query-ids
2022-12-08 13:05:46 +00:00
Chris Smowton
0d2474bd55
Autoformat
2022-12-08 11:30:53 +00:00
Chris Smowton
49bc524fd0
Merge remote-tracking branch 'origin/rc/3.8' into smowton/admin/merge-rc38-into-main
2022-12-08 11:12:30 +00:00
Jami Cogswell
e9e5f92603
Java: update notModeled for negative numbers
2022-12-07 21:46:52 -05:00
retanoj
0edfc6e01e
greedy matching
2022-12-08 09:23:24 +08:00
Jami Cogswell
aa7e6d7811
Java: add negative numbers
2022-12-07 17:17:35 -05:00
Ian Lynagh
e6c3bcec63
Java/Kotlin: Update the diagnostic severity documentation
2022-12-07 17:14:51 +00:00
Chris Smowton
9f9a51685b
Merge pull request #11510 from smowton/smowton/fix/kotlin-populate-source-class-files
...
Kotlin: stub trap .class files when extracting a class from Kotlin source
2022-12-07 14:33:42 +00:00
Edward Minnix III
170c9af9e8
Merge pull request #11238 from egregius313/egregius313/webview-setjavascriptenabled
...
Java: Query for detecting enabling Javascript in Android WebSettings
2022-12-07 09:31:58 -05:00
retanoj
9cfeaeb18e
Merge branch 'main' into MybatisSqli
2022-12-07 21:19:08 +08:00
Jami
5e694b5983
Merge pull request #11192 from jcogs33/jcogs33/share-key-sizes
...
Share encryption key sizes between Java and Python
2022-12-07 08:08:24 -05:00
Chris Smowton
c526020fd4
Note TODO re: re-enabling suspend function Java interop testing
2022-12-07 11:51:48 +00:00
Chris Smowton
ecbb96ffc1
Remove no-longer-needed diagnostic expectations
2022-12-07 11:50:41 +00:00
Tony Torralba
cabce5fb36
Merge pull request #11549 from mbaluda/mbaluda/insecure-cookie
...
Java: Support interprocedural setting of cookie security
2022-12-07 12:14:46 +01:00
Tony Torralba
321a2f5a73
Merge pull request #11550 from atorralba/atorralba/kotlin/adapt-path-sanitizer
...
Kotlin: Adapt PathSanitizer
2022-12-07 12:08:00 +01:00
Anders Schack-Mulligen
f17f19c821
Java: Switch to qualified imports.
2022-12-07 11:41:32 +01:00
Tony Torralba
6dcc0cc188
Further simplification
2022-12-07 10:50:23 +01:00
Tony Torralba
ccd465d669
Update java/ql/lib/semmle/code/java/security/PathSanitizer.qll
2022-12-07 10:38:33 +01:00
Tony Torralba
2f622ad72c
Refactor by introducing helper predicates
2022-12-07 10:31:54 +01:00
Tony Torralba
85b2642a5e
Extraction discrepancy fixed in kotlinc 1.7.21
2022-12-07 09:57:31 +01:00
Ed Minnix
b6a59f0885
Java: Add support and tests for implicitly exported activity aliases
2022-12-06 23:11:48 -05:00
Ed Minnix
1472335c2e
Abbreviated change note in changelog entry for activity-alias
2022-12-06 23:11:48 -05:00
Ed Minnix
2255b0d96a
Modify getAndroidComponentXmlElement to handle activity-alias
...
Since aliases have both the `name` and `targetActivity` attributes, we
should check all identifying attributes in order to add
`<activity-alias>` elements as dataflow sources.
2022-12-06 23:11:48 -05:00
Ed Minnix
4620db0fe9
Activity alias: formatting changes suggested by Actions
2022-12-06 23:11:48 -05:00
Ed Minnix
ec6c421f91
Added change notes for AndroidManifest.qll
2022-12-06 23:11:48 -05:00
Ed Minnix
f4dbd41036
Test files for Activity Alias
2022-12-06 23:11:48 -05:00
Ed Minnix
4df926e148
Add method for finding aliases to AndroidActivityXmlElement
2022-12-06 23:11:48 -05:00
