51797 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
Anders Schack-Mulligen	35beadc3bb	Java: Refactor SensitiveInfoLog.ql	2023-03-07 11:31:49 +01:00
Michael Nebel	40d31120d9	Merge pull request #12264 from michaelnebel/csharp/nugetnet7 ... C#: Stub generator improvements.	2023-03-07 11:30:57 +01:00
Jeroen Ketema	3a4c0a2aae	Merge pull request #12389 from jketema/more-deprecated ... C++: Add `deprecated` to predicates that are deprecated according to the QLDoc	2023-03-07 11:21:43 +01:00
Anders Schack-Mulligen	4408482699	Java: Refactor NumericCastTainted, NumericCastTaintedLocal	2023-03-07 10:42:00 +01:00
Anders Schack-Mulligen	d4e6e77200	Java: Refactor StackTraceExposure, XSS.qll	2023-03-07 10:38:00 +01:00
Anders Schack-Mulligen	c4cf2febfb	Java: Refactor ResponseSplitting, ResponseSplittingLocal	2023-03-07 10:37:45 +01:00
Michael Nebel	af12affc36	C#: Re-generate stubs to update comments.	2023-03-07 10:35:13 +01:00
Asger F	0affd898de	JS: Track trusted type policy callbacks	2023-03-07 10:22:26 +01:00
Michael Nebel	676c352819	C#: Update expected test output.	2023-03-07 10:19:26 +01:00
Michael Nebel	e85b2ebd20	C#: Replace stub member comment with file level comment.	2023-03-07 10:19:26 +01:00
Michael Nebel	c8f7304d9b	C#: Address review comments.	2023-03-07 10:19:25 +01:00
Michael Nebel	e797b5c226	C#: Narrow the set of declarations where we make explicit interface implementations.	2023-03-07 10:19:25 +01:00
Michael Nebel	d8acc7cd17	C#: Stub generator support for explicit interface implementations of explicit conversion operators including test cases.	2023-03-07 10:19:25 +01:00
Michael Nebel	59349ed7c7	C#: Add test cases for static and virtual operators in interfaces and overlapping interface declarations.	2023-03-07 10:19:25 +01:00
Michael Nebel	50570dc3ee	C#: Only add explicit interface implementation to the generated stub if it is unique.	2023-03-07 10:19:25 +01:00
Michael Nebel	5ba59fc9a8	C#: Stub generator support for operators in interfaces and interface implementations.	2023-03-07 10:19:25 +01:00
Michael Nebel	b68e78d908	C#: Stub generator support for static virtual and static abstract interface members.	2023-03-07 10:19:25 +01:00
Michael Nebel	aa4b98bbd5	C#: The stub generator should just format whitespaces.	2023-03-07 10:19:25 +01:00
Jeroen Ketema	9ec479a2a0	C++: Update queries to use DataFlow::ConfigSig	2023-03-07 10:15:11 +01:00
Tom Hvitved	9b02eb729f	Merge pull request #12419 from hvitved/ruby/stored-xss-config-rewrite ... Ruby: Rewrite Stored XSS query to use new data flow interface	2023-03-07 09:46:08 +01:00
Asger F	4f0e17bf97	JS: Add step to a few other queries	2023-03-07 09:39:40 +01:00
Jeroen Ketema	c9bccd9b43	C++: Fix more tests that used deprecated function	2023-03-07 09:01:13 +01:00
Tom Hvitved	b6a709df50	Ruby: Rewrite Stored XSS query to use new data flow interface	2023-03-07 07:23:27 +01:00
Robert Marsh	686f7ccd5a	Swift: add flow for self out of constructors	2023-03-06 20:46:36 +00:00
Robert Marsh	9731989421	Swift: add tests for flow through constructors	2023-03-06 20:39:58 +00:00
Arthur Baars	51599b3cae	Address review comments	2023-03-06 18:40:29 +01:00
Geoffrey White	2ed140c696	Swift: Update the pointertypes test.	2023-03-06 17:14:14 +00:00
Mathias Vorreiter Pedersen	ff53e53e8c	Merge pull request #12236 from MathiasVP/language-specific-field-flow-branch-limit-term ... Dataflow: Add a language specific term to `join` and `branch`	2023-03-06 16:59:09 +00:00
Geoffrey White	4d327dbf4f	Swift: The PointerType class isn't used any d any more.	2023-03-06 16:36:41 +00:00
Geoffrey White	61340c4b20	Swift: Permit data flow from generic arguments, rather than just pointers.	2023-03-06 16:34:12 +00:00
Geoffrey White	1e5b904514	Swift: Add test cases for mutating pointers inside containers.	2023-03-06 16:17:39 +00:00
Mathias Vorreiter Pedersen	aa09361a42	Merge pull request #12407 from MathiasVP/fix-internal-system-data-tests	2023-03-06 15:45:25 +00:00
Jeroen Ketema	47930f94e2	Merge remote-tracking branch 'upstream/main' into merge-main	2023-03-06 15:20:39 +01:00
Asger F	d4b4d22378	JS: Step through HTML sanitizers in SQL injection query	2023-03-06 15:10:26 +01:00
Mathias Vorreiter Pedersen	92ad099c1b	DataFlow: Remove bindingsets, remove the call column, and swap parameter and argument columns.	2023-03-06 13:47:59 +00:00
Mathias Vorreiter Pedersen	3bf28cc752	DataFlow: Sync identical files.	2023-03-06 13:46:21 +00:00
Mathias Vorreiter Pedersen	9647b6a3f5	Swift: Add stub.	2023-03-06 13:45:04 +00:00
Mathias Vorreiter Pedersen	e6b6369a21	Ruby: Add stub.	2023-03-06 13:44:59 +00:00
Mathias Vorreiter Pedersen	5ebd50044f	Python: Add stub.	2023-03-06 13:44:24 +00:00
Mathias Vorreiter Pedersen	4720e2a30a	Java: Add stub.	2023-03-06 13:44:24 +00:00
Mathias Vorreiter Pedersen	067abacbb8	Go: Add stub.	2023-03-06 13:44:23 +00:00
Mathias Vorreiter Pedersen	b667e0136f	C#: Add stub.	2023-03-06 13:44:23 +00:00
Mathias Vorreiter Pedersen	05314b48e8	C++: Add stub.	2023-03-06 13:44:23 +00:00
Mathias Vorreiter Pedersen	6e8a2a6375	DataFlow: Add a language-specific predicate for modifying 'branch' and 'join'.	2023-03-06 13:44:19 +00:00
Geoffrey White	56b6441ef5	Merge pull request #12391 from geoffw0/ptrout ... Swift: Permit data flow out through pointer arguments	2023-03-06 13:37:22 +00:00
Anders Schack-Mulligen	5c7f2ac7f7	Merge pull request #12186 from aschackmull/dataflow/refactor-configuration ... Data flow: Refactor configuration	2023-03-06 13:38:59 +01:00
Mathias Vorreiter Pedersen	d2d91cfb29	C++: Accept test changes.	2023-03-06 11:30:40 +00:00
Mathias Vorreiter Pedersen	8836cbae5b	C++: Make sure we use an indirect sink only for the sinks that receive a ... pointer to the data. Also fix a bug where we used 'asExpr' instead of 'asIndirectExpr'.	2023-03-06 11:22:58 +00:00
dependabot[bot]	3538cf89b9	Merge pull request #12404 from github/dependabot/cargo/ql/serde_json-1.0.94	2023-03-06 09:55:33 +00:00
Arthur Baars	d2ab40c184	Merge pull request #12208 from gregxsunday/main ... Add ZipSlip and TarSlip query to ruby	2023-03-06 10:40:06 +01:00