Gustav Munkby
a293239bd5
Accelerating go-extractor by using 'go list -deps'
...
Resurrect https://github.com/github/codeql-go/pull/554 , but behind an environment variable as to avoid the broken builds noted in https://github.com/github/codeql/issues/9304 , but still allowing some people to opt in to the much faster approach.
2022-11-15 10:30:56 +01:00
Stephan Brandauer
ec3578364e
remove superfluous class in EndpointCharacteristics hierarchy
2022-11-15 10:17:38 +01:00
Gustav Munkby
279ba60eb1
Refactor package path extraction
...
In preparation for pulling all package information at once.
2022-11-15 10:10:39 +01:00
Tom Hvitved
eda028721e
C#: Update all nuget packages
2022-11-15 09:19:33 +01:00
tiferet
9ecff0723c
Fix non-ascii character in docs
2022-11-14 16:34:24 -08:00
tiferet
6b7612fed7
Fix import errors in DebugResultInclusion.ql
2022-11-14 15:33:46 -08:00
tiferet
b47723d607
Delete ExtractEndpointData.
...
Also remove the associated test files.
2022-11-14 14:57:59 -08:00
tiferet
9d7e7735d5
Extract training data:
...
Implement the new query that selects data for training. For now we include clauses that implement logic that is identical to the old queries.
Include a temporary wrapper query that converts the resulting data into the format expected by the endpoint pipeline.
Move the small pieces of `ExtractEndpointData` that are still needed into `ExtractEndpointDataTraining.qll`.
2022-11-14 14:33:08 -08:00
Mauro Baluda
3260c81397
Merge branch 'github:main' into main
2022-11-14 22:59:06 +01:00
Mauro Baluda
5ea03b1ded
Update Hapi.qll
...
Add `server` definitions in plugin registration and plugin dependency declaration
2022-11-14 22:56:06 +01:00
Robert Marsh
5bbdaad0e5
C++: deprecate AST-based GVN
2022-11-14 16:50:39 -05:00
erik-krogh
10fff4e2ef
Merge branch 'main' into rb-redosMod
2022-11-14 21:31:10 +01:00
erik-krogh
b59a9bc95c
use instead of a fixed version number
2022-11-14 21:29:41 +01:00
erik-krogh
a4acea9adf
add change-note
2022-11-14 21:29:41 +01:00
erik-krogh
c029048306
port the Java regex/redos queries to use the shared pack
2022-11-14 21:29:41 +01:00
erik-krogh
d5b066636f
use namespace in PrintAst.qll to avoid conflict with Top
2022-11-14 21:29:41 +01:00
erik-krogh
b737bdbca0
add a Java implementation of RegexTreeViewSig
2022-11-14 21:29:41 +01:00
erik-krogh
20254dfc08
move existing regex-tree into a module
2022-11-14 21:29:41 +01:00
erik-krogh
af1470de07
add codeql/regex as a dependency
2022-11-14 21:29:41 +01:00
Ed Minnix
2fb9536847
Java: documentation cleanup for WebView file access query
2022-11-14 15:14:09 -05:00
Ed Minnix
7a0544d80e
Java: test files for WebView file access query
2022-11-14 15:11:15 -05:00
Erik Krogh Kristensen
d2857006cf
Merge pull request #11247 from erik-krogh/py-redosMod
...
Python: use the shared regex pack
2022-11-14 21:10:43 +01:00
Ed Minnix
73d6360eee
Java: add setAllowFileAccess to CrossOriginAccessMethod in WebView.qll
...
Local file access is enabled using the `WebSettings#setAllowFileAccess`
method.
2022-11-14 15:07:46 -05:00
Ed Minnix
89411a1db2
Fix alert message style
2022-11-14 14:41:06 -05:00
Ed Minnix
1132572620
Java: add test cases for setJavaScriptEnabled query
2022-11-14 14:33:12 -05:00
Tiferet Gazit
855eddab80
Merge pull request #11174 from github/tiferet/non-sink-endpoint-characteristics
...
Non-sink endpoint characteristics
2022-11-14 09:37:25 -08:00
Erik Krogh Kristensen
99636ba344
fix typo
...
Co-authored-by: yoff <lerchedahl@gmail.com >
2022-11-14 17:35:55 +01:00
erik-krogh
324e0e8f90
always sort both by location and by term tostring
2022-11-14 17:33:48 +01:00
Ed Minnix
a7e7334f0f
Java: Documentation cleanup for setJavascriptEnabled
2022-11-14 11:10:43 -05:00
Rasmus Lerchedahl Petersen
4f159371f9
Python: add change notes
2022-11-14 17:01:45 +01:00
Rasmus Lerchedahl Petersen
9c7fee225c
Python: remove redundant override
2022-11-14 16:45:34 +01:00
Rasmus Lerchedahl Petersen
3ee756694f
Python: add missing qldoc
...
also add to ordinary `except`
2022-11-14 16:45:22 +01:00
Ian Lynagh
7bf55c5846
Merge pull request #11251 from igfoo/igfoo/total
...
Kotlin: Add total number of diagnostics to telemetry
2022-11-14 15:09:57 +00:00
Edward Minnix III
55fad8ab23
Java: Fix description of setJavascriptEnabled query
...
Co-authored-by: Tony Torralba <atorralba@users.noreply.github.com >
2022-11-14 10:04:01 -05:00
Edward Minnix III
7e5970f338
Java: Fix typos/formatting in setJavascriptEnabled query
...
Typos and formatting changes.
Co-authored-by: Tony Torralba <atorralba@users.noreply.github.com >
2022-11-14 10:02:20 -05:00
Tony Torralba
5791e8b9a2
Slight renaming
2022-11-14 15:46:44 +01:00
Tony Torralba
07de92cdb6
Move AEXML.qll to avoid nesting
2022-11-14 15:46:44 +01:00
Tony Torralba
f2888dcb1e
Add sinks and tests for the AEXML library.
2022-11-14 15:46:44 +01:00
Tony Torralba
3ef7f3f44d
Merge pull request #11120 from atorralba/atorralba/swift/xxe-query-xmldocument-sinks
...
Swift: Adds XMLDocument sinks to the XXE query
2022-11-14 15:46:02 +01:00
Geoffrey White
3e6eedec30
Swift: Fix test output after merge.
2022-11-14 14:42:56 +00:00
Asger F
2bcf9b86cf
JS: Bump extractor version string
2022-11-14 15:09:50 +01:00
Asger F
5f18484fa9
JS: Change note
2022-11-14 15:09:30 +01:00
Asger F
b028d72d51
JS: Handle DynamicImport in the context of a type
2022-11-14 15:07:59 +01:00
Chris Smowton
61149f297c
Merge pull request #11232 from grddev/patch-1
...
Go: Optimize trap.Writer by buffering gzip writes
2022-11-14 14:01:47 +00:00
Ian Lynagh
fab2d30f38
Kotlin: Make emitDiagnostic private
2022-11-14 13:53:16 +00:00
Ian Lynagh
1e6ef99a50
Merge pull request #11249 from igfoo/igfoo/telem-compilation-info
...
Java/Kotlin: Add compilation info to telemetry
2022-11-14 13:51:35 +00:00
Geoffrey White
5460004223
Merge branch 'main' into HEAD
2022-11-14 13:44:39 +00:00
Tom Hvitved
b242bd6468
Merge pull request #11080 from github/revert-11074-revert-10576-ssa/consistency-queries
...
Revert "Revert "SSA: Turn consistency predicates into `query` predicates""
2022-11-14 14:43:58 +01:00
Ian Lynagh
847ecd1eec
Java/Kotlin: Small refactoring of ExtractorInformation
2022-11-14 13:09:49 +00:00
Nick Rolfe
c80fbff648
Ruby: add changenote for Enumerable#index_by flow summary
2022-11-14 12:47:50 +00:00
