Chris Smowton
f0327732ef
Merge pull request #17247 from smowton/smowton/admin/add-spring-component-scan-test
...
Java: add a test exercising Spring component liveness detection
2024-08-20 12:56:26 +01:00
Cornelius Riemenschneider
ff242dc6cf
Merge pull request #17252 from github/criemen/pytest-java
...
kotlin: Move integration tests to pytest
2024-08-20 13:17:22 +02:00
Owen Mansel-Chan
38f4f4c724
Merge pull request #17242 from owen-mc/go/mad/convert-sink-4
...
Go: convert sql-injection and nosql-injection sinks to use models-as-data
2024-08-20 12:01:40 +01:00
Cornelius Riemenschneider
932c07a0f4
Address review.
2024-08-20 11:46:28 +02:00
Geoffrey White
4c5c6c6968
Merge pull request #17148 from geoffw0/hardkey
...
Swift: Additional test cases for swift/hardcoded-key
2024-08-19 17:45:34 +01:00
Chris Smowton
80e03c3c51
Improve ql/doc style
2024-08-19 16:25:06 +01:00
Chris Smowton
27522a2781
Remove redundant imports
2024-08-19 16:23:06 +01:00
Cornelius Riemenschneider
33f87c0c46
Port linux/kotlin tests to pytest.
2024-08-19 11:33:25 +02:00
Cornelius Riemenschneider
ccd90f25ba
Port posix/kotlin tests to pytest.
2024-08-19 11:33:24 +02:00
Cornelius Riemenschneider
c2aff1ea97
Port all-platforms/kotlin tests to pytest.
2024-08-19 11:33:23 +02:00
Asger F
3be219c79d
Merge pull request #17243 from asgerf/js/post-message-source-client-side
...
JS: Classify post-message events as client side taint sources
2024-08-19 11:09:26 +02:00
Cornelius Riemenschneider
ed7f3305d9
Move legacy marker only to java tests.
2024-08-19 10:47:15 +02:00
Geoffrey White
a25d9c7397
Merge pull request #17220 from paldepind/reuse-unbounded-in-tainted-allocation-size
...
C++: Reuse bounded predicate in TaintedAllocationSize query
2024-08-19 09:37:55 +01:00
Cornelius Riemenschneider
2933a3be9c
Merge pull request #17088 from github/criemen/modext-isolation
...
`crate_universe`: Enable modext isolation.
2024-08-19 10:22:55 +02:00
Cornelius Riemenschneider
675e920667
Fix formatting.
2024-08-19 09:00:08 +02:00
Cornelius Riemenschneider
1faad979ad
Address review.
2024-08-19 08:54:56 +02:00
Michael Nebel
ec9f533325
Merge pull request #17248 from github/workflow/coverage/update
...
Update CSV framework coverage reports
2024-08-19 08:26:47 +02:00
Simon Friis Vindum
1665badc83
C++: Add change note for cpp/uncontrolled-allocation-size
2024-08-19 08:23:40 +02:00
Simon Friis Vindum
1959e1929e
C++: Reuse bounded predicate in TaintedAllocationSize query
2024-08-19 08:23:32 +02:00
github-actions[bot]
9279bebf07
Add changed framework coverage reports
2024-08-19 00:19:04 +00:00
Cornelius Riemenschneider
f9bc97b2a1
crate_universe: Enable modext isolation.
...
This should allow us to build our python and ruby
code independently - in particular, we can now do shallow
checkouts of one without the other.
Previously, the modext introduced cross-dependency.
This also reduces the amount of work we do in the
crate universe processing for the other language, even
though it's unused.
This does need renaming the module, as otherwise
the generated paths from rules_rust get too long
for Windows :(
2024-08-18 21:00:30 +02:00
Geoffrey White
b001f47c17
Merge pull request #17211 from paldepind/uncontrolled-allocation-size-docs
...
C++: Update documentation for cpp/uncontrolled-allocation-size to clarify its scope
2024-08-16 16:36:22 +01:00
Chris Smowton
9c0bdbb20a
Java: add a test exercising Spring component liveness detection
...
The existing Spring stubs are expanded sufficiently to support the needed annotations and a few referenced classes and exceptions.
2024-08-16 16:36:08 +01:00
Geoffrey White
e3b9b0a9bd
Merge pull request #17210 from geoffw0/mailto
...
Swift: Fix false positives in the swift/cleartext-transmission query
2024-08-16 16:23:09 +01:00
Simon Friis Vindum
5504799d44
Merge branch 'main' into uncontrolled-allocation-size-docs
2024-08-16 16:15:14 +02:00
Anders Schack-Mulligen
3a9610795b
Merge pull request #16808 from JLLeitschuh/patch-8
...
Align Java CommandInjectionRuntimeExec.ql Severity
2024-08-16 15:14:48 +02:00
Asger F
7a7ab457a9
JS: Delete unneeded test code (and shift line numbers)
2024-08-16 14:38:54 +02:00
Asger F
9ee7599aeb
JS: Move AngularJSTemplateUrlSink to ClientSideUrlRedirection query
...
This is not perfect but at least we can be consistent about keeping URLs-that-lead-to-xss in the same query
2024-08-16 14:37:13 +02:00
Asger F
699d3a0a0a
JS: Update a RegExp injection test
...
RegExpInjection does not use client-side sources, but one of its tests was using postMessage events
as the taint source. Updating the test to use a different taint source.
2024-08-16 14:20:34 +02:00
Simon Friis Vindum
07800ea7ef
Merge branch 'main' into uncontrolled-allocation-size-docs
2024-08-16 13:10:08 +02:00
Simon Friis Vindum
5548304432
C++: Grammar improvements to query help text
2024-08-16 13:08:34 +02:00
Owen Mansel-Chan
2d2afb17ad
Convert gocb nosql-injection sinks to MaD
2024-08-16 11:19:15 +01:00
Owen Mansel-Chan
ec9d88b364
Convert mongodb nosql-injection sinks to MaD
2024-08-16 11:19:13 +01:00
Owen Mansel-Chan
86e9f15929
Accept MaD sinks with kind nosql-injection
2024-08-16 11:19:12 +01:00
Owen Mansel-Chan
ced000ae46
Add Argument.getACorrespondingSyntacticArgument
2024-08-16 11:19:09 +01:00
Owen Mansel-Chan
652dd88c36
Convert database/sql/driver sql-injection sinks to MaD
2024-08-16 11:19:06 +01:00
Owen Mansel-Chan
c7859ecebf
Improve SQL tests
...
Separate the tests for Squirrel and database/sql. Add tests for
database/sql/driver.
2024-08-16 11:19:04 +01:00
Owen Mansel-Chan
501bb3eb56
Convert database/sql sql-injection sinks to MaD
2024-08-16 11:19:03 +01:00
Owen Mansel-Chan
ad213579a1
Convert Beego orm sql-injection sinks to MaD
2024-08-16 11:19:01 +01:00
Owen Mansel-Chan
e1bdc7f5a7
Update Beego orm tests
2024-08-16 11:19:00 +01:00
Owen Mansel-Chan
3eb5b2669b
Convert Bun sql-injection sinks to MaD
2024-08-16 11:18:58 +01:00
Owen Mansel-Chan
3b2b7d7d1c
Convert Xorm sql-injection sinks to MaD
2024-08-16 11:18:57 +01:00
Owen Mansel-Chan
ba310417a8
Convert Gorm sql-injection sinks to MaD
2024-08-16 11:18:55 +01:00
Owen Mansel-Chan
7ad63fc3e6
Convert sqlx sql-injection sinks to MaD
2024-08-16 11:18:54 +01:00
Owen Mansel-Chan
db559f75b6
Convert gogf/gf sql-injection sinks to MaD
2024-08-16 11:18:52 +01:00
Owen Mansel-Chan
ce0cb12c29
Upgrade and convert gorqlite sql-injection sinks to MaD
2024-08-16 11:18:51 +01:00
Owen Mansel-Chan
06f86dd22f
Convert squirrel sql-injection sinks to MaD (non-existent methods removed)
...
Various non-existent methods were modeled, and I couldn't find any
evidence that they used to exist. They aren't in the stubs or tests. I
have removed them.
2024-08-16 11:18:49 +01:00
Chris Smowton
f7d8c210e5
Merge pull request #17239 from smowton/smowton/admin/camel-test
...
Java: add test for Apache Camel dead-code analysis
2024-08-16 11:00:30 +01:00
Rasmus Wriedt Larsen
d6af999c2d
Merge pull request #17234 from github/felicitymay-patch-1
...
Update CookieInjection.ql to remove period from @name
2024-08-16 11:26:16 +02:00
Asger F
467256d465
JS: Add change note
2024-08-16 11:06:59 +02:00
