Geoffrey White
|
813d166ad7
|
C++: Restore results in cpp/cleartext-storage-database using .
|
2022-09-09 11:03:29 +01:00 |
|
Cornelius Riemenschneider
|
bc7fcaa06f
|
Go: Remove the legacy tracer configuration files.
|
2022-09-09 11:13:01 +02:00 |
|
Tamas Vajk
|
3267d7c96e
|
Kotlin: Add test case with various nested generics
|
2022-09-09 11:09:50 +02:00 |
|
Paolo Tranquilli
|
a8a34addde
|
Merge branch 'main' into redsun82/swift-weak-hashing-phase-1
|
2022-09-09 11:07:41 +02:00 |
|
Michael Nebel
|
15db520a58
|
Merge pull request #10362 from github/workflow/coverage/update
Update CSV framework coverage reports
|
2022-09-09 11:06:09 +02:00 |
|
Paolo Tranquilli
|
6223103bbd
|
Swift: add more testing to WeakSensitiveDataHashing
|
2022-09-09 11:02:08 +02:00 |
|
Paolo Tranquilli
|
fccf07c5bc
|
Swift: tweak qhelp file for WeakSensitiveDataHashing
|
2022-09-09 11:01:24 +02:00 |
|
Paolo Tranquilli
|
c739bbb051
|
Swift: bake in isProbablySafe in SensitiveExpr
Also restructured the code a bit in the weak hashing query.
|
2022-09-09 11:00:02 +02:00 |
|
erik-krogh
|
26d8553f6e
|
ensure consistent casing of names
|
2022-09-09 10:34:14 +02:00 |
|
Tony Torralba
|
1078cf091e
|
Add change notes for all languages
|
2022-09-09 10:28:36 +02:00 |
|
Tony Torralba
|
d748fb5648
|
Fix bad models, add tests for those
|
2022-09-09 10:08:52 +02:00 |
|
Erik Krogh Kristensen
|
9893650f7c
|
Merge pull request #8604 from erik-krogh/httpNode
JS: refactor most library models away from AST nodes
|
2022-09-09 10:04:17 +02:00 |
|
Erik Krogh Kristensen
|
25b988d179
|
Merge pull request #10356 from erik-krogh/selRandom
JS: add taint-step in js/insecure-randomness for selecting a random element
|
2022-09-09 09:59:25 +02:00 |
|
erik-krogh
|
1ec77136ec
|
depend on an explicit version of the typo database
|
2022-09-09 08:37:38 +02:00 |
|
github-actions[bot]
|
ea1cdf90a1
|
Add changed framework coverage reports
|
2022-09-09 00:21:07 +00:00 |
|
Taus
|
5ce60d028d
|
Python: Remove ImportStar import.
Co-authored-by: Rasmus Wriedt Larsen <rasmuswriedtlarsen@gmail.com>
|
2022-09-08 22:01:58 +02:00 |
|
Edward Minnix III
|
83c8e22225
|
Apply suggestions from documentation review
Co-authored-by: Ben Ahmady <32935794+subatoi@users.noreply.github.com>
|
2022-09-08 15:55:00 -04:00 |
|
erik-krogh
|
aee72357b8
|
find a main module in more cases
|
2022-09-08 20:21:31 +02:00 |
|
Tony Torralba
|
6413de6c20
|
Add change note
|
2022-09-08 17:38:26 +02:00 |
|
Tony Torralba
|
fb13e7f307
|
Docs changes
|
2022-09-08 17:38:25 +02:00 |
|
Tony Torralba
|
e311155acd
|
Use InlineExpectationsTest
|
2022-09-08 17:38:25 +02:00 |
|
Tony Torralba
|
b68e6669b8
|
Refactor TemplateInjection libraries
|
2022-09-08 17:38:25 +02:00 |
|
Tony Torralba
|
c9728098ef
|
Generate stubs, adapt tests
|
2022-09-08 17:38:21 +02:00 |
|
Tony Torralba
|
7db1eb98f5
|
Sync files
|
2022-09-08 17:32:03 +02:00 |
|
Tony Torralba
|
1b87167d96
|
Add implicit reads for FlowState sinks and steps
|
2022-09-08 17:26:59 +02:00 |
|
Tony Torralba
|
d5f101d7e6
|
Add implicit read FlowState test
|
2022-09-08 17:19:39 +02:00 |
|
Robert Marsh
|
0feeafd0ac
|
Merge pull request #10339 from MathiasVP/dont-use-get-unique-id-in-range-analysis
C++: Don't use `getUniqueId` in range analysis
|
2022-09-08 11:13:43 -04:00 |
|
Taus
|
366c574308
|
Python: Move import logic into its own module
|
2022-09-08 14:52:08 +00:00 |
|
Ed Minnix
|
59909751ae
|
Change allowBackup tests to use qlref test format
Due to some limitations of comments in XML, it is simpler to implement
the `android:allowBackup` tests using the qlref/expectations test format.
|
2022-09-08 10:34:17 -04:00 |
|
Ed Minnix
|
e69a8269ad
|
Move CleartextStorage test files into separate dir
Move the files for the CleartextStorage tests into their own directory
to avoid issues with extraction
|
2022-09-08 10:33:05 -04:00 |
|
Mathias Vorreiter Pedersen
|
594c40a375
|
Merge pull request #10355 from MathiasVP/fix-unequalIntegralSsa-standard-order
C++: Avoid bad standard order in range analysis
|
2022-09-08 14:58:44 +01:00 |
|
erik-krogh
|
88f295fbb1
|
make a shared library of the typo database
|
2022-09-08 15:49:43 +02:00 |
|
Tom Hvitved
|
b3653cc3d0
|
Merge pull request #10216 from hvitved/ssa/shared-lib
SSA: Create a new `codeql/shared-ssa` library pack and move implementation there
|
2022-09-08 15:39:29 +02:00 |
|
Tom Hvitved
|
e3948e6683
|
Merge pull request #10354 from hvitved/ruby/convert-flow-test
Ruby: Convert data-flow test to use inline test expectations
|
2022-09-08 15:20:58 +02:00 |
|
erik-krogh
|
a21a4275f3
|
add taint-step in js/insecure-randomness for selecting a random element
|
2022-09-08 15:00:00 +02:00 |
|
Mathias Vorreiter Pedersen
|
f119b50c2f
|
C++: Predicate factoring to prevent a bad standard order.
|
2022-09-08 13:55:27 +01:00 |
|
Ian Lynagh
|
12ca801ecf
|
Merge pull request #10350 from github/release-prep/2.10.5
Release preparation for version 2.10.5
codeql-cli/v2.10.5
|
2022-09-08 13:38:47 +01:00 |
|
Tom Hvitved
|
46127f9f59
|
Ruby: Convert data-flow test to use inline test expectations
|
2022-09-08 14:32:21 +02:00 |
|
Tamas Vajk
|
824ba6ed2a
|
Kotlin: Catch exception thrown by kotlinc
|
2022-09-08 14:09:18 +02:00 |
|
github-actions[bot]
|
a9d80a5a48
|
Release preparation for version 2.10.5
|
2022-09-08 11:35:54 +00:00 |
|
erik-krogh
|
a35fe1ffab
|
Merge branch 'main' into js-followMsg
|
2022-09-08 13:09:15 +02:00 |
|
Taus
|
8b8e74cc9a
|
Merge pull request #10314 from RasmusWL/revert-alert-msgs-change
|
2022-09-08 13:00:47 +02:00 |
|
Asger F
|
df90b99b67
|
Merge pull request #10348 from RasmusWL/ruby-fix
Ruby: Fix ActiveResource HTTP client request modeling
|
2022-09-08 12:59:27 +02:00 |
|
Erik Krogh Kristensen
|
57bf92a70c
|
Merge pull request #10347 from erik-krogh/mermaid
JS: add a markdown step through the `mermaid` library
|
2022-09-08 12:41:58 +02:00 |
|
Rasmus Wriedt Larsen
|
978c165cf4
|
Ruby: Fix ActiveResource HTTP client request modeling
This was a conflict between the merge of
https://github.com/github/codeql/pull/9974 and
https://github.com/github/codeql/pull/10114
|
2022-09-08 12:14:18 +02:00 |
|
Rasmus Wriedt Larsen
|
1d834799a2
|
Merge pull request #10114 from RasmusWL/shared-http-client-request
Ruby/Python: Shared HTTP client request concept
|
2022-09-08 11:58:06 +02:00 |
|
Jeroen Ketema
|
9a923d8239
|
Merge pull request #10311 from jketema/more-builtins
C++: Support more builtin operations
|
2022-09-08 11:55:22 +02:00 |
|
Ian Lynagh
|
b62193d4bf
|
Merge pull request #10333 from igfoo/igfoo/extractStaticInitializer2
Kotlin: Remove a cast from extractStaticInitializer
|
2022-09-08 10:51:36 +01:00 |
|
Tamas Vajk
|
56ef1739a3
|
Kotlin: fix KFunctionX.invoke extraction
|
2022-09-08 10:49:10 +02:00 |
|
Tamas Vajk
|
fdf3488500
|
Kotlin: Add test with extraction error due to missing base class of KFunctionX
|
2022-09-08 10:49:01 +02:00 |
|