yoff
fe0290fb39
Update supported-versions-compilers.rst
...
List 3.11 as supported for Python
2023-01-23 11:33:32 +01:00
Rasmus Wriedt Larsen
753192bb4d
Merge branch 'main' into call-graph-code
2023-01-23 11:25:02 +01:00
Mathias Vorreiter Pedersen
962b651c44
C++: Fix models.
2023-01-23 10:10:02 +00:00
Alex Ford
3b10a2de11
Merge branch 'main' into rails/render_locals_shared
2023-01-23 10:00:22 +00:00
Alex Ford
55550e7980
Merge pull request #11941 from alexrford/summary-component-tostring-syntheticglobal
...
Add missing toString case for synthetic globals
2023-01-23 10:00:00 +00:00
Erik Krogh Kristensen
1ee9957838
Merge pull request #9807 from erik-krogh/endFilter
...
JS: recognize "-->" as a bad tag filter
2023-01-23 10:06:50 +01:00
Arthur Baars
99148244a4
Merge pull request #11856 from aibaars/update-grammars
...
Update grammars
2023-01-23 09:46:50 +01:00
erik-krogh
dc1bfa3a04
add Fastify and restify to the list of supported frameworks
2023-01-23 09:36:49 +01:00
Michael Nebel
69a42d8b1f
Merge pull request #11931 from michaelnebel/csharp/refactor
...
Remove the Csv postfix of some predicate names.
2023-01-23 09:09:48 +01:00
Michael Nebel
440fe80c14
C#: Update stats.
2023-01-23 09:06:34 +01:00
Harry Maclean
21ce9b448a
Ruby: Attempt to fix performance of AppCandidate
...
`DataFlow::MethodNode.getAReturningNode` is expensive to compute.
Instead we look for rack responses which flow to the `SynthReturnNode`.
Each method has only one of these (vs many "returning" nodes) so it is
a lot faster.
I'm not sure yet whether the results are the same.
2023-01-23 15:25:52 +13:00
Chris Smowton
a2e7b83411
Add additional note to Android tests
2023-01-21 11:57:54 +00:00
Chris Smowton
81e59e9005
Force Gradle tests to run sequentially
...
Otherwise starting multiple Gradle daemons in parallel can fail
2023-01-21 11:57:53 +00:00
Chris Smowton
4197d7bd20
Android tests: use Java 11 under Actions
...
Some runners still default to Java 8 (e.g. windows-2022 and macos-12), so we need to manually pull Java 11 in in such cases.
2023-01-21 11:57:53 +00:00
Chris Smowton
b6df415fe8
Add Android and Kotlin build script tests
...
This adds a single plain Gradle project that uses a modern Kotlin build script (i.e. settings.gradle.kts and no build.gradle.kts), plus basic Android samples exercising the possible permutations of: (old vs. new-style build script, Groovy vs. Kotlin build script, wrapper present vs. absent)
Old vs. new style tests our recognition of different cues that this is likely a Droid project and requires `gradle assemble` not `gradle testClasses` (the example given at https://developer.android.com/studio/build/#top-level changed style as of plugin version ~7.3.0).
Groovy vs. Kotlin build script language checks that the regexes recognising Android dependencies and versions work for both build script kinds.
Wrapper present vs. absent exercises the autobuilder logic that guesses an appropriate Gradle version and sets it up in the event the Gradle wrapper isn't provided.
2023-01-21 11:57:53 +00:00
Mathias Vorreiter Pedersen
e664662df9
Merge pull request #11944 from github/post-release-prep/codeql-cli-2.12.1
...
Post-release preparation for codeql-cli-2.12.1
2023-01-20 21:52:55 +00:00
github-actions[bot]
b62cb6ba84
Post-release preparation for codeql-cli-2.12.1
2023-01-20 19:49:56 +00:00
Arthur Baars
2b9bc3c7e3
Ruby: write errors to json log
2023-01-20 20:11:55 +01:00
Sarita Iyer
f5406570f7
Merge pull request #11817 from github/saritai/docs-contributing-info
...
Add CONTRIBUTING.MD file for contributing to docs
2023-01-20 12:41:20 -05:00
Rasmus Wriedt Larsen
25a68c4d71
Python: Include @yoff's suggestion on synthetic *args handling
2023-01-20 16:49:33 +01:00
Rasmus Wriedt Larsen
41ebb4fb55
Python: Add p2 in QLDoc example code for synthetic **kwargs
2023-01-20 16:40:39 +01:00
Rasmus Wriedt Larsen
d9fbe58ad5
Python: Expand starargs_only test
2023-01-20 16:34:59 +01:00
Geoffrey White
f05be77a0b
Swift: Recognize more array sources.
2023-01-20 15:25:00 +00:00
Geoffrey White
7648e8f6a3
Swift: Recognize more sources.
2023-01-20 15:08:12 +00:00
Jean Helie
9e6f9c2705
Merge pull request #11709 from github/jhelie/add-shell-command-injection
...
ATM: add boosted version for `ShellCommandInjectionFromEnvironment` query
2023-01-20 16:03:30 +01:00
Geoffrey White
581c478872
Swift: Model RNCryptor.
2023-01-20 14:50:23 +00:00
Geoffrey White
bb59d055ff
Swift: Add tests for RNCryptor library.
2023-01-20 14:50:21 +00:00
Mathias Vorreiter Pedersen
3059ce3070
Merge pull request #11938 from github/release-prep/2.12.1
...
Release preparation for version 2.12.1
2023-01-20 14:30:42 +00:00
Rasmus Wriedt Larsen
0df3dd68d6
Python: Remove (now) redundant cast
2023-01-20 15:13:02 +01:00
Rasmus Wriedt Larsen
1bd969c219
Merge branch 'main' into call-graph-code
2023-01-20 15:11:49 +01:00
Alex Ford
8ae993185c
Ruby: fix missing docs
2023-01-20 13:40:19 +00:00
Alex Ford
c986ea1070
Ruby: scope local_assigns synthetic globals to both render call and template file
2023-01-20 13:40:19 +00:00
Alex Ford
14c896215c
Ruby: factor out some RenderCall methods into a helper module
2023-01-20 13:40:19 +00:00
Alex Ford
03070c9fd0
Ruby: restrict AccessLocalsKeySummary to method calls against self
2023-01-20 13:40:19 +00:00
Alex Ford
f6516db105
Ruby: correct preservesValue in AccessLocalsKeySummary
2023-01-20 13:40:19 +00:00
Alex Ford
ab72301a4c
Ruby: add a change note for rails render locals dataflow
2023-01-20 13:40:19 +00:00
Alex Ford
8fec4b804f
Ruby: StoredXSS test whitespace change
2023-01-20 13:40:19 +00:00
Alex Ford
fd8dd5e103
Ruby: update StoredXSS test output
2023-01-20 13:40:19 +00:00
Alex Ford
8845157d08
Ruby: slightly limit AccessLocalsKeySummary summarized callables
2023-01-20 13:40:19 +00:00
Alex Ford
b5cc1087fe
Ruby: add LocalAssignsHashSyntheticGlobal#getARenderCall predicate
2023-01-20 13:40:19 +00:00
Alex Ford
022171923c
Ruby: fix some ql for ql alerts
2023-01-20 13:40:19 +00:00
Alex Ford
bea110b598
Ruby: remove blank line in test file
2023-01-20 13:40:19 +00:00
Alex Ford
b78ae1608e
Ruby: remove a fixed TODO
2023-01-20 13:40:19 +00:00
Alex Ford
e5fbc92856
Ruby: generalize rails flow step for accessing render locals hash in view
2023-01-20 13:40:19 +00:00
Alex Ford
e4df1f5a6f
Ruby: add missing toString case for synthetic globals
2023-01-20 13:31:43 +00:00
Jeroen Ketema
cddaa0c8fa
Apply suggestions from code review
2023-01-20 14:10:27 +01:00
Michael Nebel
4d321d6833
C#: Add upgrade and downgrade scripts.
2023-01-20 13:39:41 +01:00
Michael Nebel
6c7c0854d1
C#: Add change note.
2023-01-20 13:39:41 +01:00
Michael Nebel
5a1e96d671
C#: Update string literal test query and expected output.
2023-01-20 13:39:41 +01:00
Michael Nebel
5c5d330704
C#: Add UTF-8 encoded string test case.
2023-01-20 13:39:41 +01:00
