Mathias Vorreiter Pedersen
11932a54e8
Merge branch 'main' into mathiasvp/replace-ast-with-ir-use-usedataflow
2023-03-15 11:13:49 +00:00
Mathias Vorreiter Pedersen
9bd3347a3c
C++: Remove import.
2023-03-15 10:33:47 +00:00
Mathias Vorreiter Pedersen
623f6ff701
C++: Move things around so that 'getAdditionalFlowIntoCallNodeTerm' is in the same stage as 'DataFlowImplCommon'.
2023-03-15 10:01:47 +00:00
Mathias Vorreiter Pedersen
deb43c21e6
C++: Use local flow instead of GVN to find parameters that are used in switch statements.
2023-03-15 10:00:47 +00:00
Anders Schack-Mulligen
6408d7cbbe
Java: Refactor RsaWithoutOaep.
2023-03-15 10:37:54 +01:00
Anders Schack-Mulligen
b3b5c2c767
Java: Refactor UnsafeContentUriResolution.
2023-03-15 10:32:58 +01:00
Anders Schack-Mulligen
4b814ec71c
Java: Refactor SensitiveCommunication.ql.
2023-03-15 10:32:35 +01:00
Anders Schack-Mulligen
ca8e013618
Java: Refactor FragmentInjection.
2023-03-15 10:23:21 +01:00
Anders Schack-Mulligen
5bd530f570
Java: Refactor IntentUriPermissionManipulation.
2023-03-15 10:13:28 +01:00
Anders Schack-Mulligen
b14b95cd79
Java: Refactor LogInjection
2023-03-15 10:10:02 +01:00
Anders Schack-Mulligen
abf3abdc65
Java: Delete DataFlowForOnActivityResult.
2023-03-15 09:47:21 +01:00
Anders Schack-Mulligen
bea7c43584
Java: Delete DataFlowForSerializability
2023-03-15 09:42:02 +01:00
Anders Schack-Mulligen
e8a7139020
Merge pull request #12476 from aschackmull/java/refactor-dataflow-queries-2
...
Java: Refactor more dataflow queries to the new API
2023-03-15 09:40:32 +01:00
Arthur Baars
fbe9823a42
Merge branch 'main' into henrymercer/polish-diagnostics
2023-03-14 23:42:33 +01:00
Henry Mercer
1454890a58
C#: Add new paragraphs before call to action
2023-03-14 21:52:23 +00:00
Henry Mercer
1394abcf98
JS: Update diagnostics IDs for consistency with rules
2023-03-14 21:44:19 +00:00
Henry Mercer
1f63c5d5e4
JS: Update parse error diagnostic name for consistency
2023-03-14 21:43:32 +00:00
Harry Maclean
604d5f0c71
Merge pull request #12510 from hmac/merge-ruby-extractor
...
Ruby: Merge extractor crates
2023-03-15 09:41:07 +13:00
Harry Maclean
fd43ba0827
Update .github/workflows/ruby-build.yml
...
Co-authored-by: Arthur Baars <aibaars@github.com >
2023-03-15 09:28:53 +13:00
Harry Maclean
6dcc884fe1
Ruby: Small doc change
...
This is primarily to bust the actions cache, to test a change in the
ruby-build workflow.
2023-03-15 08:42:24 +13:00
Harry Maclean
eefc4866ea
Ruby: build query pack in temporary directory
...
This ensures we don't clobber any existing directories in the repo.
2023-03-15 08:20:23 +13:00
Harry Maclean
aaeb8a0aa0
Merge pull request #12493 from hmac/ar-sinks
2023-03-15 07:59:07 +13:00
Geoffrey White
959f93a766
Merge pull request #12520 from geoffw0/basetypefix
...
Swift: Fix result type of NominalType.getABaseType.
2023-03-14 18:23:54 +00:00
Geoffrey White
a391c01d36
Swift: Fix result type of NominalType.getABaseType.
2023-03-14 17:36:30 +00:00
Henry Mercer
bc106873c1
C#: Fix casing of "CodeQL Action"
2023-03-14 17:24:30 +00:00
Henry Mercer
7e4f77bfb3
C#: Only serialize the location if it is present
2023-03-14 17:23:00 +00:00
Henry Mercer
a6509c7a37
Ruby: Use rb prefix in diagnostic IDs for consistency with queries
2023-03-14 17:13:50 +00:00
Henry Mercer
769f9051af
Ruby: Serialize severities as lowercase
2023-03-14 17:09:25 +00:00
Henry Mercer
6fbc8261f2
Java: Add a full stop
2023-03-14 17:03:42 +00:00
Henry Mercer
770924455e
Java: Use Dotcom help links
2023-03-14 17:00:48 +00:00
Henry Mercer
ce96f009b7
Java: Capitalise HTTPS
2023-03-14 16:58:24 +00:00
Henry Mercer
819e0dfbf0
Java: Use "relevant" instead of "suspicious"
2023-03-14 16:54:14 +00:00
Henry Mercer
110cb64b7a
Java: Avoid reference to other diagnostics
2023-03-14 16:52:58 +00:00
Henry Mercer
4c329b7b62
Java: Remove "please" in diagnostics
...
Per review from docs team
2023-03-14 16:46:06 +00:00
Anders Schack-Mulligen
30163e4f60
Merge pull request #12515 from aschackmull/java/neutral-dispatch
...
Java: Remove low-confidence dispatch to known neutrals.
2023-03-14 15:35:05 +01:00
Tom Hvitved
c132891669
Merge pull request #12513 from hvitved/dataflow/lambda-flow-no-expects-content
...
Data flow: Exclude `expectsContent` nodes from lambda flow
2023-03-14 15:28:35 +01:00
Asger F
feb7c49006
Merge pull request #12382 from asgerf/js/import-assertion
...
JS: Support import assertions
2023-03-14 14:56:32 +01:00
Ian Lynagh
32e8b130ad
Merge pull request #12501 from tamasvajk/java/javadoc_printast
...
Java: Fix printAST to handle javadoc belonging to multiple elements
2023-03-14 13:42:22 +00:00
Anders Schack-Mulligen
a9d2b936af
Java: Add qldoc.
2023-03-14 14:15:15 +01:00
Asger F
d953ad63fe
Merge pull request #12445 from asgerf/js/react-forward-ref
...
JS: Handle forwardRef in React
2023-03-14 13:21:16 +01:00
Asger F
d74da30fc7
JS: Include trap test for trailing commas
2023-03-14 13:15:12 +01:00
Asger F
8ab3f39b5e
Merge pull request #12423 from asgerf/js/trusted-types-global-flow
...
JS: Track trusted types policy callbacks
2023-03-14 13:09:50 +01:00
Paolo Tranquilli
5ff7a898a6
Merge pull request #12516 from github/redsun82/swift-specialize-generic-decl
...
Swift: make `AnyGenericType::getDecl`'s type more specific
2023-03-14 12:23:02 +01:00
AlexDenisov
decd5c1ae7
Merge pull request #12508 from github/redsun82/swift-deduplication-test
...
Swift: add an initial draft for a deduplication test
2023-03-14 11:56:23 +01:00
Paolo Tranquilli
54b6c6f8f7
Swift: make AnyGenericType::getDecl's type more specific
...
As shown by the extractor's code not needing any change, the DB values
already had that more specific type, which is why the upgrade/downgrade
scripts are actually no-ops.
2023-03-14 11:49:07 +01:00
Anders Schack-Mulligen
dbfc256f40
Java: Remove low-confidence dispatch to known neutrals.
2023-03-14 11:34:07 +01:00
Paolo Tranquilli
91ce88e2d9
Swift: make deduplication test cross-platform
2023-03-14 11:24:03 +01:00
Edward Minnix III
de1ecf943e
Merge pull request #11915 from egregius313/egregius313/arbitrary-apk-installation
...
Java: Arbitrary APK installation
2023-03-14 06:23:51 -04:00
Paolo Tranquilli
cc608f764d
Swift: add missing include
2023-03-14 11:23:33 +01:00
Tony Torralba
dd0723c36b
Merge pull request #12511 from github/workflow/coverage/update
...
Update CSV framework coverage reports
2023-03-14 10:05:32 +01:00
