Mads Navntoft
ede05b54ea
Java: Add change note for Struts 7.x package name support
2026-01-27 13:00:16 +01:00
Mads Navntoft
9a94d0474c
Java: Add support for Struts 7.x package names
...
Updates Struts library to recognize both legacy xwork2 and new struts2
packages:
- StrutsActions.qll: Add org.apache.struts2 alternatives for Action,
Preparable, ActionSupport
- StrutsConventions.qll: Add org.apache.struts2.action.Action
alternative
This maintains backward compatibility for analyzing Struts 2.x-6.x apps
while supporting Struts 7.x which renamed packages from
com.opensymphony.xwork2 to org.apache.struts2.
2026-01-27 12:57:55 +01:00
github-actions[bot]
48475e66af
Post-release preparation for codeql-cli-2.24.0
2026-01-19 15:49:08 +00:00
Nick Rolfe
783676566c
Fix typo in changelog
2026-01-19 15:12:05 +00:00
github-actions[bot]
4142b9c4ce
Release preparation for version 2.24.0
2026-01-19 14:49:14 +00:00
Owen Mansel-Chan
a5d9cb179a
Merge pull request #20930 from owen-mc/java/spring-rest-template-request-forgery-sinks
...
Java: add more Spring RestTemplate request forgery sinks
2026-01-15 14:23:15 +00:00
Owen Mansel-Chan
97e0b4e9fd
Use parameter name to only select correct overloads
2026-01-15 10:36:03 +00:00
Anders Schack-Mulligen
c632e8f188
Merge pull request #20448 from github/alexet/avoid-path-node-java
...
Java: Eliminate pointless use of PathNodes over DataFlow::Node
2026-01-15 10:55:09 +01:00
Mauro Baluda
f71b6c1bfd
Improved models for Supplier arguments
2026-01-14 12:32:42 +01:00
Mauro Baluda
5cef0376a9
Update java/ql/test/query-tests/security/CWE-798/semmle/tests/HardcodedCouchBaseCredentials.java
...
Co-authored-by: Owen Mansel-Chan <62447351+owen-mc@users.noreply.github.com >
2026-01-14 11:50:52 +01:00
Mauro Baluda
9efefa6120
Fix test expectations
2026-01-13 22:46:42 +01:00
Mauro Baluda
29f23ee192
Fix extraction error
2026-01-13 22:33:01 +01:00
Mauro Baluda
4b7662f652
Merge branch 'main' into couchdb
2026-01-13 21:50:44 +01:00
Mauro Baluda
d335f039ef
Improve model for CWE-089
2026-01-13 21:48:43 +01:00
Mauro Baluda
89f0e79ea1
Fix SqlTainted test
2026-01-13 13:55:14 +01:00
Ian Lynagh
63f78e7609
Merge pull request #21156 from igfoo/igfoo/mb
...
Merge rc/3.20 into main
2026-01-13 12:11:37 +00:00
Mauro Baluda
dda042f7df
rename change notes
2026-01-13 13:07:14 +01:00
Anders Schack-Mulligen
9c1351c3fe
Merge pull request #21149 from aschackmull/java/typeflow-partially-unbound
...
Java: Add TypeFlow base case for partially unbound types.
2026-01-13 12:31:38 +01:00
Anders Schack-Mulligen
8b555ca514
Java: Add test.
2026-01-13 11:20:13 +01:00
Ian Lynagh
dcd0a69759
Merge remote-tracking branch 'upstream/main' into igfoo/mb
2026-01-13 01:01:35 +00:00
Anders Schack-Mulligen
8e2d74a7b1
Java: Add TypeFlow base case for partially unbound types.
2026-01-12 12:45:06 +01:00
Mauro Baluda
0464e64469
Merge branch 'github:main' into couchdb
2026-01-09 17:24:01 +01:00
Mauro Baluda
4c8058d97b
Merge branch 'github:main' into couchdb
2026-01-09 17:20:40 +01:00
Chris Smowton
634e9e6c39
Reapply "Change note"
...
This reverts commit 688f10daf1
2026-01-09 13:42:48 +00:00
Chris Smowton
13e0e6c694
Reapply "Add integration test for paths and paths-ignore vs. Java buildless mode"
...
This reverts commit 9db11f73c5
2026-01-09 13:42:43 +00:00
Owen Mansel-Chan
d7acb75f9d
Merge pull request #21055 from owen-mc/java/allow-mad-barriers
...
Java: allow MaD barriers
2026-01-09 10:27:48 +00:00
Owen Mansel-Chan
8c9318b1a0
Minor tweaks to QLDocs
2026-01-09 09:38:10 +00:00
Owen Mansel-Chan
cce6823d3b
Delete experimental models that have been promoted
...
They were promoted in https://github.com/github/codeql/pull/17590
2026-01-08 15:33:59 +00:00
Owen Mansel-Chan
8a80158959
Merge pull request #17590 from Kwstubbs/java-mad-test
...
Java: FileUpload Support MaD
2026-01-08 13:33:55 +00:00
yoff
608fa1a0a3
Merge pull request #20910 from yoff/java/more-thread-safe-initialisers
2026-01-08 13:16:39 +01:00
Chris Smowton
d048d394b4
Merge pull request #21117 from smowton/smowton/admin/revert-java-paths-directives
...
Java: revert filtering of ancillary data extraction
2026-01-07 16:13:21 +00:00
Owen Mansel-Chan
6a3c74c989
Merge pull request #20999 from joefarebrother/java-spring-websocket
...
Java: Add models for spring WebSocketHandler
2026-01-07 13:29:19 +00:00
Chris Smowton
688f10daf1
Revert "Change note"
...
This reverts commit 6fb6923f63
2026-01-07 13:20:17 +00:00
Chris Smowton
9db11f73c5
Revert "Add integration test for paths and paths-ignore vs. Java buildless mode"
...
This reverts commit 102cfd06a7
2026-01-07 13:20:12 +00:00
Owen Mansel-Chan
6c291e1e7f
Add model for handlePongMessage and update test
2026-01-07 11:09:59 +00:00
github-actions[bot]
2cb932cf5d
Post-release preparation for codeql-cli-2.23.9
2026-01-06 15:42:16 +00:00
Owen Mansel-Chan
766e908c79
Accept MaD sanitizers for existing sink kinds
2026-01-06 14:38:27 +00:00
Owen Mansel-Chan
81667d741a
Rename classes for external sanitizers
2026-01-06 14:36:54 +00:00
Chris Smowton
6fb6923f63
Change note
2026-01-06 10:59:06 +00:00
Chris Smowton
102cfd06a7
Add integration test for paths and paths-ignore vs. Java buildless mode
2026-01-06 10:59:04 +00:00
github-actions[bot]
c00663766e
Release preparation for version 2.23.9
2026-01-05 11:57:06 +00:00
Mauro Baluda
1e1fb43534
Update JsonObject put method signatures in YAML
...
Use erased type
2026-01-02 11:55:40 +01:00
Owen Mansel-Chan
bf79b8a792
Merge branch 'main' into java-mad-test
2026-01-01 23:34:45 +00:00
Kevin Stubbings
f73f1a7aa9
Add additional test
2025-12-29 07:09:31 +00:00
Mauro Baluda
cb341609e7
Add change notes for Couchbase sinks
2025-12-24 20:41:11 +01:00
Mauro Baluda
15ee88ee24
SQLi test case
2025-12-24 20:30:21 +01:00
Mauro Baluda
fd78c949d3
Merge branch 'github:main' into couchdb
2025-12-22 20:25:41 +01:00
Mauro Baluda
b22077c371
Hardcoded credentials in CouchBase
2025-12-22 20:22:20 +01:00
yoff
cbc0100675
Apply suggestion from @Copilot
2025-12-16 10:11:05 +01:00
yoff
50e9057db1
java: add change note
2025-12-16 10:11:05 +01:00
