Anders Schack-Mulligen
1f628d0f86
Ruby: Remove reference to SsaInputNode.
2025-02-25 10:01:57 +01:00
Anders Schack-Mulligen
95cbd21a62
Ruby: Accept test change following SSA bugfix.
...
This is a result of the commit "SSA: Fix bug in guards for ssa input
nodes."
2025-02-25 09:59:35 +01:00
Tom Hvitved
b40290683e
Rust: Update some inline expectation comments
2025-02-25 09:34:50 +01:00
Anders Schack-Mulligen
57c4fd6f25
JS: Combine phi reads and ssa input nodes into SynthReadNode class.
2025-02-25 09:23:53 +01:00
Owen Mansel-Chan
74a249597a
Merge pull request #18607 from owen-mc/java/xss-content-type-sanitizer
...
Java: Add XSS Sanitizer for `HttpServletResponse.setContentType` with safe values
2025-02-24 23:39:18 +00:00
Owen Mansel-Chan
0d994c1527
Merge pull request #18831 from owen-mc/go/join-order-fix-2
...
Go: Improve bad join order in guardingCall
2025-02-24 22:16:22 +00:00
Geoffrey White
6437bd692e
Merge pull request #18851 from geoffw0/typo
...
Fix typo in shared DataFlowImplConsistency.qll
2025-02-24 18:45:09 +00:00
Alexander Eyers-Taylor
ddfb16899a
Merge pull request #18828 from alexet/alexet/fix-flakey-join-order
...
CPP: Prevent forced bad join order which is saved by context.
2025-02-24 17:54:16 +00:00
Simon Friis Vindum
6353dbf3f5
Merge branch 'main' into rust-core-std-models
2025-02-24 16:05:08 +01:00
Anders Schack-Mulligen
22b3dc8f43
Ruby: Remove getDefinitionExt references.
2025-02-24 15:25:53 +01:00
Paolo Tranquilli
22074afafb
Merge pull request #18847 from github/redsun82/rust-trait-path
...
Rust: fix `<X as Y>` path extraction
2025-02-24 15:10:41 +01:00
Geoffrey White
24411b61e9
Fix typo.
2025-02-24 13:59:22 +00:00
Anders Schack-Mulligen
7499df43d0
Rust: Remove getDefinitionExt reference.
2025-02-24 14:27:17 +01:00
Anders Schack-Mulligen
0583d85f20
C#: Remove getDefinitionExt references.
2025-02-24 14:22:59 +01:00
Paolo Tranquilli
d8dad7dff0
Merge branch 'main' into redsun82/rust-trait-path
2025-02-24 14:12:53 +01:00
Michael Nebel
e8f86e41f4
C#: Add change note.
2025-02-24 13:58:55 +01:00
Michael Nebel
97f9f0ccc5
C#: Update test expected output.
2025-02-24 13:53:50 +01:00
Michael Nebel
a85131bf0f
C#: Better handling of (value) tuple types in cs/call-to-object-tostring.
2025-02-24 13:53:16 +01:00
Anders Schack-Mulligen
db7ec4a781
Java: Remove getDefinitionExt reference
2025-02-24 13:50:08 +01:00
Michael Nebel
5eb305da93
C#: Add some value tuple examples for cs/call-to-object-tostring and update test expected output.
2025-02-24 13:42:30 +01:00
Jonas Jensen
11a0a9f8af
Java: StaticInitializationVector with postprocess
...
Use the new `postprocess` feature for the test of
`StaticInitializationVector.ql`. This makes it easier to modify and test
this query for diff-informed operation.
2025-02-24 13:33:02 +01:00
Anders Schack-Mulligen
09454f9f14
SSA: Remove unused.
2025-02-24 13:02:03 +01:00
Anders Schack-Mulligen
1af753cd0c
JS: Use shared barrier guard for falsy check.
2025-02-24 13:00:06 +01:00
Anders Schack-Mulligen
782b6cfb9a
SSA: Fix bug in guards for ssa input nodes.
2025-02-24 13:00:06 +01:00
Paolo Tranquilli
8ef2029f3d
Merge pull request #18756 from github/redsun82/rust-config
...
Rust: expose more rust-analyzer config knobs
2025-02-24 12:51:37 +01:00
Paolo Tranquilli
81b6848a9c
Merge pull request #18822 from github/redsun82/rust-lint
...
Rust: strengthen linting script
2025-02-24 12:48:29 +01:00
Tom Hvitved
425fa0db09
Merge pull request #18823 from hvitved/rust/path-resolution-more
...
Rust: More path resolution improvements
2025-02-24 12:46:07 +01:00
Geoffrey White
6cb8f65076
Rust: Fix up .expected after merge.
2025-02-24 10:58:19 +00:00
Geoffrey White
fdc76dd06a
Merge branch 'main' into nth
2025-02-24 10:57:45 +00:00
Paolo Tranquilli
1bce783623
Rust: accept test changes for now
2025-02-24 11:30:58 +01:00
Tom Hvitved
7380ec8a55
Address review comments
2025-02-24 11:09:58 +01:00
Florin Coada
fcb470330c
Merge pull request #18833 from github/changedocs/2.20.5
...
Add changelog for CodeQL CLI version 2.20.5
2025-02-24 10:06:34 +00:00
Anders Schack-Mulligen
88fe4faf9d
SSA: Remove nodes that are no longer used.
2025-02-24 11:00:48 +01:00
Anders Schack-Mulligen
09b2aeb53a
SSA: Replace use-use step implementation in data-flow integration.
2025-02-24 10:58:14 +01:00
Paolo Tranquilli
689e7b8440
Rust: fix <X as Y> path extraction
...
This works around a quirk in rust-analyzer's AST generation machinery,
where for an `<X as Y>` path there might be no way to directly get `Y`
from the path segment.
2025-02-24 10:38:15 +01:00
Geoffrey White
08913c551d
Merge pull request #18827 from geoffw0/exectainted
...
C++: Expand qldoc and tests for cpp/command-line-injection
2025-02-24 08:53:49 +00:00
Michael B. Gale
1b2d842b44
Merge pull request #17900 from github/mbg/go/fix/project-files-in-vendor
2025-02-22 10:00:46 +00:00
Owen Mansel-Chan
d9d909a61e
Address review comments
2025-02-22 02:31:08 +00:00
Chris Smowton
32e4c741cc
Merge pull request #18554 from smowton/smowton/admin/test-gbk-xml-extraction
...
Java: Add tests for XML and Java extraction with GBK charset
2025-02-21 17:27:32 +00:00
Owen Mansel-Chan
721b8c4ea6
Merge pull request #18826 from owen-mc/go/join-order-fixes
...
Go: Fix bad join order in `comparesFirstCharacter`
2025-02-21 16:25:15 +00:00
Alex Eyers-Taylor
57e985cc21
CPP: Simplify getClassAndNameImpl
2025-02-21 16:23:45 +00:00
Edward Minnix III
c93fb4cbc9
Merge pull request #18493 from egregius313/egregius313/go/mad/database/mongodb
...
Go: `database` local sources for MongoDB
2025-02-21 09:32:15 -05:00
Anders Schack-Mulligen
4e515bc2f5
JS: Remove reference to isInputInto
2025-02-21 14:48:24 +01:00
Asger F
cd0fd02e74
Rust: Remove 'Source' annotations from same line as Alert
...
Source tags should no longer be used when on the same line as the Alert.
The ones in this file went unnoticed however because *all* of them were on the same line as an Alert, which made the test library ignore all Source tags.
2025-02-21 14:44:48 +01:00
Asger F
cd2c4d5e3a
JS: Use post-processed inline test in MissingCsrfMiddleware
...
This query flags the cookie-parsing middleware in order to consolidate huge numbers of alerts into a single alert, which is more manageable. But simply annotating the cookie-parsing middleware with 'Alert' isn't a very useful, we want to annotate which middlewares are vulnerable.
2025-02-21 14:44:46 +01:00
Asger F
e2fe74ccd6
JS: Add support for RelatedLocation tags
2025-02-21 14:44:45 +01:00
Anders Schack-Mulligen
9acb58e8c2
SSA: Add SsaNode predicates that don't mention DefinitionExt.
2025-02-21 14:43:51 +01:00
Tamas Vajk
24bd9fb7e5
Add queries to C# CCR suite
2025-02-21 14:24:09 +01:00
Simon Friis Vindum
4ef64cdf9f
Merge pull request #18820 from paldepind/rust-fewer-no-match
...
Rust: Remove nonsentical no-match CFG edges
2025-02-21 14:18:23 +01:00
Napalys
3587ba593a
Add change note and added tanstack to supported framework list
2025-02-21 13:47:48 +01:00
