aegilops
fc6fba8d06
Fixed CWE tags
2024-07-01 14:25:47 +01:00
aegilops
d1d082982a
More external references
2024-07-01 14:25:29 +01:00
aegilops
f22778960b
Fixed expected test results for Helmet query
2024-06-26 11:31:57 +01:00
aegilops
1ecd72727d
Renamed README to CUSTOMIZING, removed details from qhelp and referenced md doc instead
2024-06-19 17:59:43 +01:00
aegilops
a07639f4f6
Set severity to 7.0, in line with other configuration queries
2024-06-19 17:43:41 +01:00
aegilops
26f1b36736
Fixed formatting
2024-06-19 17:41:58 +01:00
aegilops
252c9e9416
Added data extension to set defaults, updated help, added README to explain customization
2024-06-19 17:27:17 +01:00
Paul Hodgkinson
3a98edb60b
Merge branch 'main' into aegilops/js/insecure-helmet-middleware
2024-06-19 12:53:32 +01:00
aegilops
d142f830da
Change note and changed name of query in .ql file
2024-06-19 12:04:32 +01:00
aegilops
8a3cec4977
Fix formatting for check
2024-06-19 11:38:20 +01:00
Paolo Tranquilli
b7a2ea8981
CI: accept other diagnostic format related test changes
2024-06-19 11:33:50 +02:00
aegilops
de96d3951d
Renamed to helmetProperty everywhere
2024-06-19 10:15:06 +01:00
aegilops
f4691b1919
Changed to more-modern Dataflow libraries
2024-06-19 10:11:06 +01:00
aegilops
81ef255a87
Change to helmetProperty from helmetSetting variable name
2024-06-19 10:09:50 +01:00
aegilops
da9e1e61a4
Moved examples into separate files
2024-06-18 19:50:06 +01:00
Cornelius Riemenschneider
ede0b5bdf4
Merge remote-tracking branch 'origin/main' into criemen/codeql-pack-group
2024-06-13 21:53:31 +02:00
Mathias Vorreiter Pedersen
3351b9547d
Merge branch 'rc/3.14' into rc-3.14-mergeback
2024-06-11 16:21:08 +01:00
Cornelius Riemenschneider
3cf719cb39
pkg.bzl: Significantly restructure codeql_pack rule.
...
This PR introduces a `codeql_pack_rule` that does the heavy lifting
of extracting arch- and common zip files for production dist building.
It also factors out the installer targets for individual packs,
as well as pack groups.
This changes the contract between the internal build system and the pack
definition significantly, which is why an accompanying internal PR is required.
No backwards compatibility layer is provided, as the PR as complex enough as-is.
The individual `codeql_pack` rules are now much simpler,
as they mostly stuff their inputs into a new `_CodeQLPackInfo` provider,
and let the installer and `codeql_pack_group` rules do the heavy lifting.
For working in the external repo with self-contained packs,
the per-pack installer targets are still available.
Internally, we'll only use the new `codeql_pack_group` targets
going forward, both for defining intree-dists and for building
the production zip files.
2024-06-11 13:15:05 +02:00
github-actions[bot]
8a25081a0e
Post-release preparation for codeql-cli-2.17.5
2024-06-10 15:33:08 +00:00
Cornelius Riemenschneider
00319c5010
Upgrade bazel to 7.2.0.
...
This also bumps a bunch of external dependencies.
2024-06-10 17:03:59 +02:00
github-actions[bot]
877bfa2468
Release preparation for version 2.17.5
2024-06-10 13:40:39 +00:00
aegilops
7ee5655f31
Merge branch 'aegilops/js/insecure-helmet-middleware' of https://github.com/aegilops/codeql into aegilops/js/insecure-helmet-middleware
2024-06-07 15:50:15 +01:00
aegilops
975811ae59
Change layout of qhelp example code
2024-06-07 15:50:06 +01:00
Paul Hodgkinson
43a140e62c
Merge branch 'main' into aegilops/js/insecure-helmet-middleware
2024-06-07 15:46:18 +01:00
aegilops
7136763c37
Formatting
2024-06-07 15:36:39 +01:00
aegilops
465d64a810
Removed br tags
2024-06-07 15:34:45 +01:00
aegilops
29322f5ff0
Merge branch 'aegilops/js/insecure-helmet-middleware' of https://github.com/aegilops/codeql into aegilops/js/insecure-helmet-middleware
2024-06-07 15:32:23 +01:00
aegilops
f5d465f08a
Added data extension to allow setting extra required Helmet features
2024-06-07 15:32:11 +01:00
Anders Schack-Mulligen
0c47203580
Javascript: Add support for pretty-printed provenace in tests.
2024-06-07 11:47:49 +02:00
Asger F
6e0f3df573
Merge pull request #14120 from asgerf/dynamic/typemodel-istypeused
...
Dynamic: add TypeModel.isTypeUsed
2024-06-06 15:31:16 +02:00
Paolo Tranquilli
2d42ea0f2f
Merge pull request #16668 from github/criemen/pkg-js-fixup
...
JS: Use `resources/tools` from external repo, not internal.
2024-06-06 11:50:54 +02:00
Mauro Baluda
0b9bafc9c3
Update AutoBuildTests.java
2024-06-04 21:07:57 +02:00
Mauro Baluda
168cba86c1
Add .xsaccess test data
2024-06-04 20:55:07 +02:00
Mauro Baluda
8791e67789
Add .xsaccess test data
2024-06-04 17:50:08 +02:00
Mauro Baluda
576ee7892d
Add .xsaccess test data
2024-06-04 17:36:05 +02:00
Mauro Baluda
7b3e9b4ec1
Extract .xsaccess files as JSON
2024-06-04 16:28:08 +02:00
Mauro Baluda
73b18129d9
Extract .xsaccess files as JSON
2024-06-04 16:23:05 +02:00
Cornelius Riemenschneider
e8c1e50276
JS: Use resources/tools from external repo, not internal.
...
This was missing in https://github.com/github/codeql/pull/16656 , so we couldn't actually
delete the resources in the internal repo.
2024-06-04 13:54:41 +02:00
Paolo Tranquilli
7b8c11379d
Javascript: use codeql_pack for javascript extractor
2024-06-03 23:14:44 +02:00
Paolo Tranquilli
096a31dbef
Mark all integration tests as legacy
...
This is in preparation for the new integration test framework. Tests
marked thus will be run by the current framework and ignored by the new
one.
2024-05-31 16:04:50 +02:00
github-actions[bot]
906b65d09c
Post-release preparation for codeql-cli-2.17.4
2024-05-28 18:02:25 +00:00
github-actions[bot]
33b4ae8bbb
Release preparation for version 2.17.4
2024-05-28 15:44:32 +00:00
Erik Krogh Kristensen
c743abad54
Merge pull request #14294 from am0o0/amammad-js-CodeInjection_execa
...
JS: provide command execution sinks for execa package
2024-05-24 09:20:19 +02:00
Dave Bartolomeo
613ccaac1d
Add change note to all v1.0.0 packs
2024-05-23 13:01:22 -04:00
erik-krogh
c80f48b23a
Merge branch 'main' into amammad-js-CodeInjection_execa
2024-05-23 08:02:22 +02:00
Dave Bartolomeo
ffe4c8c87b
Update all pack versions to 1.0.0
2024-05-22 13:39:08 -04:00
erik-krogh
a30bac14e9
add change-note
2024-05-21 22:14:39 +02:00
erik-krogh
61c72361cd
move the "isFileTooLarge" earlier in the pipeline, so we're only doing it once
2024-05-21 20:01:24 +02:00
erik-krogh
241f977488
fix that very large TypeScript files would crash the extractor
2024-05-21 19:52:43 +02:00
Paul Hodgkinson
65dfd4c860
Merge branch 'main' into aegilops/js/insecure-helmet-middleware
2024-05-21 14:46:49 +01:00
