Owen Mansel-Chan
f062a8d204
Copy LGTM integration tests over
2023-02-13 11:59:36 +00:00
Owen Mansel-Chan
947a9f12a1
Make DiagnosticsReporting.qll a library
2023-02-13 11:59:36 +00:00
Kasper Svendsen
11204987f1
Reword based on review comments
2023-02-13 12:49:50 +01:00
Michael Nebel
34c6b24882
Merge pull request #12147 from michaelnebel/csharp/relaxedshift
...
C# 11: Test of relaxed shift operator requirements.
2023-02-13 12:48:39 +01:00
Arthur Baars
457a2bb2a2
Merge pull request #12093 from aibaars/oneline-match
...
Ruby: add support for one-line pattern matches
2023-02-13 12:38:28 +01:00
Kasper Svendsen
ac54caac35
Update docs/codeql/ql-language-reference/annotations.rst
...
Co-authored-by: Philip Ginsbach <ginsbach@github.com >
2023-02-13 12:35:08 +01:00
Kasper Svendsen
426425a7ca
Update docs/codeql/ql-language-reference/annotations.rst
...
Co-authored-by: Philip Ginsbach <ginsbach@github.com >
2023-02-13 12:34:50 +01:00
Chris Smowton
0537579b28
Merge pull request #12131 from owen-mc/go/named-type-location
...
Add `hasLocationInfo` for `Type`s
2023-02-13 11:33:50 +00:00
Erik Krogh Kristensen
2f404df17c
Merge pull request #10782 from erik-krogh/rbPoly
...
Ruby: add library input as a source for `rb/polynomial-redos`
2023-02-13 12:26:07 +01:00
erik-krogh
b85bfc8ba6
add HtmlSanitizer as a sanitizer for DOMBasedXss
2023-02-13 11:57:29 +01:00
erik-krogh
c258e44772
add failing test for spurious edge through sanitizer
2023-02-13 11:49:57 +01:00
Erik Krogh Kristensen
26d5fb2412
Merge pull request #11824 from erik-krogh/secondMissAnchor
...
RB: add query detecting validators that use badly anchored regular expressions on library/remote input
2023-02-13 11:26:05 +01:00
Kasper Svendsen
74472d786c
QLDocs: Document inline_late pragma
2023-02-13 10:51:48 +01:00
erik-krogh
634087b417
Merge branch 'main' into rbPoly
2023-02-13 10:46:00 +01:00
Michael Nebel
2ce6d5f920
Java: Update negative models test to not produce a negative summary for interface member.
2023-02-13 10:45:54 +01:00
Rasmus Wriedt Larsen
5235964b07
sync files
2023-02-13 10:44:12 +01:00
Rasmus Wriedt Larsen
b2e79e2948
Python/Ruby/JS Crypto: Add a few algorithms + block modes
...
I have tried to add a few links to support the claim that these
algorithms are strong/safe. It wasn't always super easy, so in some
cases I have ended up just linking to the documentation of the
`cryptography` Python package.
Co-authored-by: REDMOND\brodes <brodes@microsoft.com >
2023-02-13 10:40:47 +01:00
Paolo Tranquilli
f07c598a22
Merge pull request #12164 from github/redsun82/swift-codegen-outside-bazel
...
Swift: make `codegen` run also outside `bazel`
2023-02-13 10:32:20 +01:00
Michael Nebel
80628596dd
Java: Exclude interface members from model generation.
2023-02-13 10:21:32 +01:00
Geoffrey White
124e4ddd4f
Merge pull request #12150 from geoffw0/cfg2
...
Swift: control flow for #available
2023-02-13 09:17:06 +00:00
Tom Hvitved
0b8173e2e7
Ruby: Add another data flow test
2023-02-13 09:50:50 +01:00
Paolo Tranquilli
55aacd6fe9
Merge pull request #12137 from github/redsun82/swift-doc-for-schema-doc
...
Swift: add documentation for generated documentation
2023-02-13 09:43:34 +01:00
Paolo Tranquilli
483a87abe9
Swift: make codegen run also outside bazel
2023-02-13 09:39:31 +01:00
Tony Torralba
4fad01a739
Further refactoring
...
Avoid having two taint tracking configurations in the same file
2023-02-13 09:18:05 +01:00
Tony Torralba
f3e0b6e62c
PathGraph shouldn't be imported in a QLL library
2023-02-13 09:18:05 +01:00
Tony Torralba
422eb0d1bb
Add change note
2023-02-13 09:18:05 +01:00
Tony Torralba
5555b5cd19
Add local version of the XXE query
2023-02-13 09:18:05 +01:00
Paolo Tranquilli
542c9218de
Merge branch 'main' into redsun82/swift-doc-for-schema-doc
2023-02-13 09:07:02 +01:00
Tom Hvitved
f7a5a33474
Address review comment
2023-02-13 09:01:15 +01:00
erik-krogh
91393a7bc8
add change-note
2023-02-12 23:28:01 +01:00
erik-krogh
6474cfd4c8
add support for express-ws
2023-02-12 23:25:27 +01:00
Jami Cogswell
ad8849c6b8
Java: fix typo
2023-02-12 16:33:26 -05:00
Jami Cogswell
676e4e8461
Java: add change note
2023-02-12 16:32:31 -05:00
Sim4n6
d7af80136e
Fail tests when missing annotation on sink orfail
2023-02-12 21:27:20 +01:00
Sim4n6
518684b736
Put back the annotation result=BAD
2023-02-12 21:26:12 +01:00
Sim4n6
80d4fb5e33
Organisation TarSlip/UnsafeUnpack into two folders
2023-02-12 10:51:53 +01:00
Jami Cogswell
ce1c814daa
Java: update path-injection query to use new 'read-file' sink kind
2023-02-11 17:10:58 -05:00
Jami Cogswell
c87c3e30c7
Java: update getInvalidModelKind with 'read-file' kind
2023-02-11 17:07:25 -05:00
Owen Mansel-Chan
685b8b4abd
Tests are no longer fooled by type aliases
2023-02-10 22:09:21 +00:00
Owen Mansel-Chan
7042f67375
Refactor code to be simpler
2023-02-10 22:09:20 +00:00
Owen Mansel-Chan
778826b528
Accept test changes
...
Note that
go/ql/test/library-tests/semmle/go/Types/QualifiedNames.expected and
go/ql/test/library-tests/semmle/go/Types/Types.expected gain two lines.
In both cases this is because GenericArray and GenericSignature are
each instantiated twice, so they appear with two different locations.
2023-02-10 22:09:20 +00:00
Owen Mansel-Chan
202c0be303
Add hasLocationInfo for Types
...
It returns a dummy location except for named types with a type
declaration in the source.
2023-02-10 22:09:20 +00:00
Sim4n6
eed19a3e15
Fix autoformatting issues
2023-02-10 21:58:29 +01:00
Geoffrey White
ad85b37585
Swift: Tidy up indenting.
2023-02-10 18:06:56 +00:00
Geoffrey White
d0efbbf5b8
Swift: More path injection models.
2023-02-10 18:02:50 +00:00
Geoffrey White
82f09b8511
Swift: More path injection test cases.
2023-02-10 17:55:06 +00:00
Arthur Baars
ecbd768df4
Ruby: reduce number of diagnostic messages with the status_page flag
...
For now we only report real parse errors and character encoding errors. Warnings about
unexpected or missing nodes in the AST are not reported. These are typically side effects
of earlier parse errors.
2023-02-10 18:53:46 +01:00
Arthur Baars
679f02c274
Address comments
2023-02-10 18:08:30 +01:00
Geoffrey White
8624098318
Swift: sync identical files.
2023-02-10 15:24:57 +00:00
Nora
d55e9d5dac
Merge pull request #12000 from github/nora/update-query-history-actions
...
Rename Query History Actions
2023-02-10 16:18:36 +01:00
